Lindqvist (C-101/01): Can a Personal Web Page Be a Household Activity?
No. The EU Court of Justice held that the household exemption covers only activities in a person’s private or family life. Publishing personal data online, where an indefinite number of people can read them, falls outside it.
Case Summary
| Court | Court of Justice of the European Union (full court) |
|---|---|
| Case | C-101/01, Criminal proceedings against Bodil Lindqvist |
| Decided | 6 November 2003 |
| Referred by | Göta hovrätt (Göta Court of Appeal), Sweden |
| Law applied | Directive 95/46/EC, Article 3(2); the same exemption wording is now in Art. 2(2)(c) GDPR |
| Penalty at first instance | Fine of SEK 4.000, plus SEK 300 to a Swedish crime-victims fund |
Background
Bodil Lindqvist worked as a maintenance worker and, alongside that, as a catechist in the parish of Alseda in Sweden. At the end of 1998, as part of a computing course, she built web pages at home to help parishioners preparing for confirmation. At her request, the Swedish Church’s website linked to them (judgment, para. 12).
The pages described her and 18 colleagues, sometimes by full name, together with their jobs, hobbies, family circumstances and phone numbers. One entry said a colleague had injured her foot and was working half-time on medical grounds. She had not told her colleagues or asked for their consent, and she took the pages down as soon as she learned some of them objected (paras. 13 to 14).
She was prosecuted under the Swedish data protection act and fined SEK 4.000 by the Eksjö District Court. On appeal, the Göta Court of Appeal asked the EU Court of Justice whether the Directive applied at all (paras. 15 to 18).
The Court’s Reasoning on the Household Exemption
The Court read the exemption through the examples the legislator gave, namely correspondence and address records, and concluded that it covers only activities carried out in the course of private or family life. Putting personal data on the internet so that anyone can access them is the opposite of that (para. 47).
Two other findings still matter today. The injured-foot remark counted as health data, a special category now governed by Art. 9 GDPR (para. 51). And uploading a page to a host in the EU was not a transfer to every third country that could view it (para. 71), a point relevant to how Art. 44 GDPR is read for ordinary web publishing.
Timeline
Amber marks the decisive decision or ruling.
| Date | Event |
|---|---|
| Bodil Lindqvist publishes the pages from her home computer as part of a computing course | |
| After her conviction and fine by the Eksjö District Court, the Göta Court of Appeal refers seven questions to the CJEU | |
| Oral hearing before the Court of Justice | |
| Advocate General Tizzano delivers his Opinion | |
| The Court rules that online publication is not covered by the household exemption |
Why This Case Still Matters
Lindqvist was the Court of Justice’s first interpretation of the Data Protection Directive (Mondaq). Its audience test in paragraph 47 became the starting point for every later household-exemption case: the Court relied on it again in Jehovan todistajat (para. 42) and Buivids (para. 43), and the EDPB cites it in its video-device guidelines.
The Court’s test turned on audience: private or family life versus an indefinite public. Sharing the same information through a closed channel for the confirmation group, asking colleagues before naming them, and leaving out the health detail are the levers the reasoning highlights. The Court also stressed that any penalty must stay proportionate to the breach, including how long it lasted and how much the data mattered to the people concerned (paras. 88 to 89).
Frequently Asked Questions
What did the Court decide in Lindqvist about the household exemption?
It held that the exemption covers only activities carried out in the course of private or family life. Publishing personal data on the internet, so that they are accessible to an indefinite number of people, is clearly not such an activity (judgment, para. 47).
Was mentioning a colleague’s injured foot really health data?
Yes. The Court said data concerning health must be interpreted widely, covering all physical and mental aspects of a person’s health. A note that someone injured her foot and worked half-time on medical grounds qualified (para. 51). Under GDPR, this is special-category data governed by Article 9.
Did putting the pages online count as a transfer of data outside the EU?
No. The Court held that loading personal data onto a web page hosted in an EU Member State is not a transfer to a third country, even though people outside the EU can view it (para. 71).
What penalty did Bodil Lindqvist receive?
The Eksjö District Court fined her SEK 4.000 and ordered her to pay SEK 300 to a Swedish crime-victims fund (paras. 16 to 17). The Court of Justice added that any sanction must respect the principle of proportionality (para. 88).
Does Lindqvist still apply under GDPR?
Yes. The Directive excluded processing by a natural person in the course of a purely personal or household activity, the same wording now used in Article 2(2)(c) GDPR. The Court relied on Lindqvist again in 2018 and 2019, and the EDPB cites it in its guidelines on video devices.
Publishing staff or volunteer details on your organisation’s site? Team pages, member directories and volunteer rotas are exactly where Lindqvist-type questions come up. A data protection officer can review what you publish and who can see it.
Sources
- CJEU, Case C-101/01 Lindqvist, judgment of 6 November 2003 (ECLI:EU:C:2003:596)
- Full judgment text, Lindqvist (C-101/01)
- Mondaq, The First ECJ Interpretation of the Data Privacy Directive (December 2003)
- EDPB, Guidelines 3/2019 on processing of personal data through video devices (version 2.0)
- Regulation (EU) 2016/679 (GDPR), Recital 18 and Article 2(2)(c): official text