With the automatic exchange of information on tax matters (AEOI) developing into the new international standard, large quantities of information have been or will be subject to cross-border transfer. As a result, data play a significant role in the mechanism. Although the European Union is equipped with various legal sources in data protection, guarantees provided to taxpayers in AEOI legal instruments need to be further developed in order to be consistent with those provided by data protection rules in the European Union. This article analyses taxpayers’ right to data protection by studying the interrelationships between rules in EU Directives regarding administrative administration and those regarding data protection. Moreover, relevant Court of Justice of the European Union (CJEU) case law will be discussed in light of the afore-mentioned rules, highlighting the insufficiencies of prevailing AEOI legislation in ensuring proportionality and taxpayer protection in third countries. Finally, the newly adopted General Data Protection Regulation will be assessed.
Intertax