Lisbon: When Portugal’s competition authority stormed the offices of a group of medical-imaging firms and copied thousands of business emails, it assumed the messages were fair game. The Court of Justice has now told regulators across the Union that this assumption no longer holds without a warrant or its equivalent.

In its Grand Chamber judgment of 16 July 2026, the court ruled that business emails count as protected communications under Articles 7 and 8 of the Charter of Fundamental Rights. Investigators who seize them interfere with both the right to private correspondence and the right to personal data, even when the mailbox belongs to a company rather than a private household.

The case sprang from a dawn raid, the surprise inspections that antitrust enforcers use to catch cartels before firms shred the evidence. National authorities have long treated a company server as an open book. The judges disagreed, and drew a firmer line around what officials may grab in the first hours of an investigation.

The ruling does not ban the seizure of business emails outright. It allows a competition authority to copy them without prior judicial sign-off, provided national law builds in strict safeguards and offers effective review after the fact. Companies must be able to challenge the seizure before a judge, and courts must be able to order the deletion of anything taken unlawfully.

That balance matters because dawn raids sit at the heart of European cartel enforcement. Strip investigators of surprise and cases collapse; hand them unlimited reach and privacy evaporates. The court tried to keep the surprise while fencing off the reach, insisting that the intrusion stay proportionate to the suspected wrongdoing.

Lawyers who advise firms under investigation read the judgment as a quiet shift in leverage. In-house counsel can now object when inspectors sweep up entire inboxes, personal folders and messages that have nothing to do with the suspected infringement. Authorities, in turn, will have to explain why each tranche of material fell within the scope of the search.

The decision also lands awkwardly for member states whose procedural rules never anticipated this level of scrutiny. Several national regimes let enforcers keep copied data for months while they sift it. Those timetables and storage practices now face fresh legal doubt, and governments may need to rewrite the rulebooks that govern their competition agencies.

For employees, the practical effect is more concrete. A work account used to send the occasional private note gains a measure of shelter it did not clearly enjoy before. The court treated the mingling of professional and personal life inside a single mailbox as a reason for caution rather than a licence to seize everything.

Enforcement bodies insist they can live with the constraints. They point out that most raids already run under lawyer supervision and produce detailed inventories. Yet the judgment hands defence teams a sharper tool, and the first firms to invoke it will test how far the new protection stretches when a cartel case turns on a single incriminating email.