SlideShare a Scribd company logo
1 of 3
Download to read offline
www.curia.europa.eu
Press and Information
Court of Justice of the European Union
PRESS RELEASE No 70/14
Luxembourg, 13 May 2014
Judgment in Case C-131/12
Google Spain SL, Google Inc. v Agencia Española de Protección de Datos,
Mario Costeja González
An internet search engine operator is responsible for the processing that it carries
out of personal data which appear on web pages published by third parties
Thus, if, following a search made on the basis of a person’s name, the list of results displays a link
to a web page which contains information on the person in question, that data subject may
approach the operator directly and, where the operator does not grant his request, bring the matter
before the competent authorities in order to obtain, under certain conditions, the removal of that
link from the list of results
An EU directive1
has the objective of protecting the fundamental rights and freedoms of natural
persons (in particular the right to privacy) when personal data are processed, while removing
obstacles to the free flow of such data.
In 2010 Mario Costeja González, a Spanish national, lodged with the Agencia Española de
Protección de Datos (Spanish Data Protection Agency, the AEPD) a complaint against La
Vanguardia Ediciones SL (the publisher of a daily newspaper with a large circulation in Spain, in
particular in Catalonia) and against Google Spain and Google Inc. Mr Costeja González contended
that, when an internet user entered his name in the search engine of the Google group (‘Google
Search’), the list of results would display links to two pages of La Vanguardia’s newspaper, of
January and March 1998. Those pages in particular contained an announcement for a real-estate
auction organised following attachment proceedings for the recovery of social security debts owed
by Mr Costeja González.
With that complaint, Mr Costeja González requested, first, that La Vanguardia be required either to
remove or alter the pages in question (so that the personal data relating to him no longer
appeared) or to use certain tools made available by search engines in order to protect the data.
Second, he requested that Google Spain or Google Inc. be required to remove or conceal the
personal data relating to him so that the data no longer appeared in the search results and in the
links to La Vanguardia. In this context, Mr Costeja González stated that the attachment
proceedings concerning him had been fully resolved for a number of years and that reference to
them was now entirely irrelevant.
The AEPD rejected the complaint against La Vanguardia, taking the view that the information in
question had been lawfully published by it. On the other hand, the complaint was upheld as
regards Google Spain and Google Inc. The AEPD requested those two companies to take the
necessary measures to withdraw the data from their index and to render access to the data
impossible in the future. Google Spain and Google Inc. brought two actions before the Audiencia
Nacional (National High Court, Spain), claiming that the AEPD’s decision should be annulled. It is
in this context that the Spanish court referred a series of questions to the Court of Justice.
In today’s judgment, the Court of Justice finds, first of all, that by searching automatically,
constantly and systematically for information published on the internet, the operator of a search
engine ‘collects’ data within the meaning of the directive. The Court considers, furthermore, that
the operator, within the framework of its indexing programmes, ‘retrieves’, ‘records’ and ‘organises’
1
Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals
with regard to the processing of personal data and on the free movement of such data (OJ 1995 L 281, p. 31).
www.curia.europa.eu
the data in question, which it then ‘stores’ on its servers and, as the case may be, ‘discloses’ and
‘makes available’ to its users in the form of lists of results. Those operations, which are referred to
expressly and unconditionally in the directive, must be classified as ‘processing’, regardless of the
fact that the operator of the search engine carries them out without distinction in respect of
information other than the personal data. The Court also points out that the operations referred to
by the directive must be classified as processing even where they exclusively concern material that
has already been published as it stands in the media. A general derogation from the application of
the directive in such a case would have the consequence of largely depriving the directive of its
effect.
The Court further holds that the operator of the search engine is the ‘controller’ in respect of that
processing, within the meaning of the directive, given that it is the operator which determines the
purposes and means of the processing. The Court observes in this regard that, inasmuch as the
activity of a search engine is additional to that of publishers of websites and is liable to affect
significantly the fundamental rights to privacy and to the protection of personal data, the operator of
the search engine must ensure, within the framework of its responsibilities, powers and
capabilities, that its activity complies with the directive’s requirements. This is the only way that the
guarantees laid down by the directive will be able to have full effect and that effective and complete
protection of data subjects (in particular of their privacy) may actually be achieved.
As regards the directive’s territorial scope, the Court observes that Google Spain is a subsidiary of
Google Inc. on Spanish territory and, therefore, an ‘establishment’ within the meaning of the
directive. The Court rejects the argument that the processing of personal data by Google Search is
not carried out in the context of the activities of that establishment in Spain. The Court holds, in this
regard, that where such data are processed for the purposes of a search engine operated by an
undertaking which, although it has its seat in a non-member State, has an establishment in a
Member State, the processing is carried out ‘in the context of the activities’ of that establishment,
within the meaning of the directive, if the establishment is intended to promote and sell, in the
Member State in question, advertising space offered by the search engine in order to make the
service offered by the engine profitable.
So far as concerns, next, the extent of the responsibility of the operator of the search engine, the
Court holds that the operator is, in certain circumstances, obliged to remove links to web pages
that are published by third parties and contain information relating to a person from the list of
results displayed following a search made on the basis of that person’s name. The Court makes it
clear that such an obligation may also exist in a case where that name or information is not erased
beforehand or simultaneously from those web pages, and even, as the case may be, when its
publication in itself on those pages is lawful.
The Court points out in this context that processing of personal data carried out by such an
operator enables any internet user, when he makes a search on the basis of an individual’s name,
to obtain, through the list of results, a structured overview of the information relating to that
individual on the internet. The Court observes, furthermore, that this information potentially
concerns a vast number of aspects of his private life and that, without the search engine, the
information could not have been interconnected or could have been only with great difficulty.
Internet users may thereby establish a more or less detailed profile of the person searched against.
Furthermore, the effect of the interference with the person’s rights is heightened on account of the
important role played by the internet and search engines in modern society, which render the
information contained in such lists of results ubiquitous. In the light of its potential seriousness,
such interference cannot, according to the Court, be justified by merely the economic interest
which the operator of the engine has in the data processing.
However, inasmuch as the removal of links from the list of results could, depending on the
information at issue, have effects upon the legitimate interest of internet users potentially interested
in having access to that information, the Court holds that a fair balance should be sought in
particular between that interest and the data subject’s fundamental rights, in particular the right to
privacy and the right to protection of personal data. The Court observes in this regard that, whilst it
is true that the data subject’s rights also override, as a general rule, that interest of internet users,
www.curia.europa.eu
this balance may however depend, in specific cases, on the nature of the information in question
and its sensitivity for the data subject’s private life and on the interest of the public in having that
information, an interest which may vary, in particular, according to the role played by the data
subject in public life.
Finally, in response to the question whether the directive enables the data subject to request that
links to web pages be removed from such a list of results on the grounds that he wishes the
information appearing on those pages relating to him personally to be ‘forgotten’ after a certain
time, the Court holds that, if it is found, following a request by the data subject, that the inclusion of
those links in the list is, at this point in time, incompatible with the directive, the links and
information in the list of results must be erased. The Court observes in this regard that even initially
lawful processing of accurate data may, in the course of time, become incompatible with the
directive where, having regard to all the circumstances of the case, the data appear to be
inadequate, irrelevant or no longer relevant, or excessive in relation to the purposes for which they
were processed and in the light of the time that has elapsed. The Court adds that, when appraising
such a request made by the data subject in order to oppose the processing carried out by the
operator of a search engine, it should in particular be examined whether the data subject has a
right that the information in question relating to him personally should, at this point in time, no
longer be linked to his name by a list of results that is displayed following a search made on the
basis of his name. If that is the case, the links to web pages containing that information must be
removed from that list of results, unless there are particular reasons, such as the role played by the
data subject in public life, justifying a preponderant interest of the public in having access to the
information when such a search is made.
The Court points out that the data subject may address such a request directly to the operator of
the search engine (the controller) which must then duly examine its merits. Where the controller
does not grant the request, the data subject may bring the matter before the supervisory authority
or the judicial authority so that it carries out the necessary checks and orders the controller to take
specific measures accordingly.
NOTE: A reference for a preliminary ruling allows the courts and tribunals of the Member States, in disputes
which have been brought before them, to refer questions to the Court of Justice about the interpretation of
European Union law or the validity of a European Union act. The Court of Justice does not decide the
dispute itself. It is for the national court or tribunal to dispose of the case in accordance with the Court’s
decision, which is similarly binding on other national courts or tribunals before which a similar issue is raised.
Unofficial document for media use, not binding on the Court of Justice.
The full text of the judgment is published on the CURIA website on the day of delivery.
Press contact: Christopher Fretwell  (+352) 4303 3355
Pictures of the delivery of the judgment are available from "Europe by Satellite"  (+32) 2 2964106

More Related Content

What's hot

General data protection regulation GDPR
General data protection regulation GDPRGeneral data protection regulation GDPR
General data protection regulation GDPRAfraAlZadjali
 
Bulletin - US-EU Data Privacy Safe Harbor Program Invalidated
Bulletin - US-EU Data Privacy Safe Harbor Program InvalidatedBulletin - US-EU Data Privacy Safe Harbor Program Invalidated
Bulletin - US-EU Data Privacy Safe Harbor Program InvalidatedCohenGrigsby
 
2019 07-01 consultation draftguidelinesoutsourcingcloudserviceproviders
2019 07-01 consultation draftguidelinesoutsourcingcloudserviceproviders2019 07-01 consultation draftguidelinesoutsourcingcloudserviceproviders
2019 07-01 consultation draftguidelinesoutsourcingcloudserviceprovidersJavier Caravantes
 
Legislative and jurisprudential developments in the postal sector in 2011 in ...
Legislative and jurisprudential developments in the postal sector in 2011 in ...Legislative and jurisprudential developments in the postal sector in 2011 in ...
Legislative and jurisprudential developments in the postal sector in 2011 in ...Michal
 
CPSC's Guidelines for voluntary recall notices
CPSC's Guidelines for voluntary recall noticesCPSC's Guidelines for voluntary recall notices
CPSC's Guidelines for voluntary recall noticesAndy Dabydeen
 
Intersection between the activities of two regulators – shall prior actions t...
Intersection between the activities of two regulators – shall prior actions t...Intersection between the activities of two regulators – shall prior actions t...
Intersection between the activities of two regulators – shall prior actions t...Michal
 
Damages for breach of antitrust law. A New Private Enforcement Era?
Damages for breach of antitrust law. A New Private Enforcement Era?Damages for breach of antitrust law. A New Private Enforcement Era?
Damages for breach of antitrust law. A New Private Enforcement Era?Țuca Zbârcea & Asociații
 
Facebook_a privacy defender or a privacy traitor
Facebook_a privacy defender or a privacy traitorFacebook_a privacy defender or a privacy traitor
Facebook_a privacy defender or a privacy traitorAlexia-Nefeli Dumas
 
No Man is an Island: The Battle for Data Privacy
No Man is an Island: The Battle for Data PrivacyNo Man is an Island: The Battle for Data Privacy
No Man is an Island: The Battle for Data PrivacyKate Chan
 
Memorandum on Protection of Personal Data
Memorandum on Protection of Personal DataMemorandum on Protection of Personal Data
Memorandum on Protection of Personal DataMelis Buhan Öncel
 
Cloud4eu - WhitePaper - OnChallengeofAcceptanceofCloudSolutionsinEUPublicSect...
Cloud4eu - WhitePaper - OnChallengeofAcceptanceofCloudSolutionsinEUPublicSect...Cloud4eu - WhitePaper - OnChallengeofAcceptanceofCloudSolutionsinEUPublicSect...
Cloud4eu - WhitePaper - OnChallengeofAcceptanceofCloudSolutionsinEUPublicSect...John Nas
 
Lewis Barbe vs. US - Freedom of Information Act
Lewis Barbe vs. US - Freedom of Information ActLewis Barbe vs. US - Freedom of Information Act
Lewis Barbe vs. US - Freedom of Information ActLewis Barbe
 
UPC Telekabel Wien GmBH v Constantain Film Verleih Gmbh
UPC Telekabel Wien GmBH v Constantain Film Verleih GmbhUPC Telekabel Wien GmBH v Constantain Film Verleih Gmbh
UPC Telekabel Wien GmBH v Constantain Film Verleih GmbhBananaIP Counsels
 
E. rumak, p. sitarek, polish leniency programme
E. rumak, p. sitarek, polish leniency programmeE. rumak, p. sitarek, polish leniency programme
E. rumak, p. sitarek, polish leniency programmeMichal
 

What's hot (18)

General data protection regulation GDPR
General data protection regulation GDPRGeneral data protection regulation GDPR
General data protection regulation GDPR
 
Bulletin - US-EU Data Privacy Safe Harbor Program Invalidated
Bulletin - US-EU Data Privacy Safe Harbor Program InvalidatedBulletin - US-EU Data Privacy Safe Harbor Program Invalidated
Bulletin - US-EU Data Privacy Safe Harbor Program Invalidated
 
20200724 edpb faqoncjeuc31118
20200724 edpb faqoncjeuc3111820200724 edpb faqoncjeuc31118
20200724 edpb faqoncjeuc31118
 
Didier Reynders letter to the EU Parliament
Didier Reynders letter to the EU ParliamentDidier Reynders letter to the EU Parliament
Didier Reynders letter to the EU Parliament
 
2019 07-01 consultation draftguidelinesoutsourcingcloudserviceproviders
2019 07-01 consultation draftguidelinesoutsourcingcloudserviceproviders2019 07-01 consultation draftguidelinesoutsourcingcloudserviceproviders
2019 07-01 consultation draftguidelinesoutsourcingcloudserviceproviders
 
Legislative and jurisprudential developments in the postal sector in 2011 in ...
Legislative and jurisprudential developments in the postal sector in 2011 in ...Legislative and jurisprudential developments in the postal sector in 2011 in ...
Legislative and jurisprudential developments in the postal sector in 2011 in ...
 
CPSC's Guidelines for voluntary recall notices
CPSC's Guidelines for voluntary recall noticesCPSC's Guidelines for voluntary recall notices
CPSC's Guidelines for voluntary recall notices
 
Intersection between the activities of two regulators – shall prior actions t...
Intersection between the activities of two regulators – shall prior actions t...Intersection between the activities of two regulators – shall prior actions t...
Intersection between the activities of two regulators – shall prior actions t...
 
PhDThesis_LaszloSzegedi_5May2016
PhDThesis_LaszloSzegedi_5May2016PhDThesis_LaszloSzegedi_5May2016
PhDThesis_LaszloSzegedi_5May2016
 
Damages for breach of antitrust law. A New Private Enforcement Era?
Damages for breach of antitrust law. A New Private Enforcement Era?Damages for breach of antitrust law. A New Private Enforcement Era?
Damages for breach of antitrust law. A New Private Enforcement Era?
 
Facebook_a privacy defender or a privacy traitor
Facebook_a privacy defender or a privacy traitorFacebook_a privacy defender or a privacy traitor
Facebook_a privacy defender or a privacy traitor
 
No Man is an Island: The Battle for Data Privacy
No Man is an Island: The Battle for Data PrivacyNo Man is an Island: The Battle for Data Privacy
No Man is an Island: The Battle for Data Privacy
 
Memorandum on Protection of Personal Data
Memorandum on Protection of Personal DataMemorandum on Protection of Personal Data
Memorandum on Protection of Personal Data
 
Cloud4eu - WhitePaper - OnChallengeofAcceptanceofCloudSolutionsinEUPublicSect...
Cloud4eu - WhitePaper - OnChallengeofAcceptanceofCloudSolutionsinEUPublicSect...Cloud4eu - WhitePaper - OnChallengeofAcceptanceofCloudSolutionsinEUPublicSect...
Cloud4eu - WhitePaper - OnChallengeofAcceptanceofCloudSolutionsinEUPublicSect...
 
Lewis Barbe vs. US - Freedom of Information Act
Lewis Barbe vs. US - Freedom of Information ActLewis Barbe vs. US - Freedom of Information Act
Lewis Barbe vs. US - Freedom of Information Act
 
UPC Telekabel Wien GmBH v Constantain Film Verleih Gmbh
UPC Telekabel Wien GmBH v Constantain Film Verleih GmbhUPC Telekabel Wien GmBH v Constantain Film Verleih Gmbh
UPC Telekabel Wien GmBH v Constantain Film Verleih Gmbh
 
E. rumak, p. sitarek, polish leniency programme
E. rumak, p. sitarek, polish leniency programmeE. rumak, p. sitarek, polish leniency programme
E. rumak, p. sitarek, polish leniency programme
 
OPINION on the draft Action Plan for the implementation of the Strategy ensur...
OPINION on the draft Action Plan for the implementation of the Strategy ensur...OPINION on the draft Action Plan for the implementation of the Strategy ensur...
OPINION on the draft Action Plan for the implementation of the Strategy ensur...
 

Similar to The Right to Be Forgotten in European Search Results

EU Right to Forget Ruling
EU Right to Forget RulingEU Right to Forget Ruling
EU Right to Forget RulingFatima Ansari
 
The Right To Be Forgotten in the Google Spain Case (case C-131/12): A Clear V...
The Right To Be Forgotten in the Google Spain Case (case C-131/12): A Clear V...The Right To Be Forgotten in the Google Spain Case (case C-131/12): A Clear V...
The Right To Be Forgotten in the Google Spain Case (case C-131/12): A Clear V...ioannis iglezakis
 
EU Guidelines On The Right To Be Forgotten Implementation November 2014
EU Guidelines On The Right To Be Forgotten Implementation November 2014EU Guidelines On The Right To Be Forgotten Implementation November 2014
EU Guidelines On The Right To Be Forgotten Implementation November 2014Krishna De
 
Guidelines on the implementation of the Court of Justice of the European Union
Guidelines on the implementation of the Court of Justice of the European UnionGuidelines on the implementation of the Court of Justice of the European Union
Guidelines on the implementation of the Court of Justice of the European UnionSilesia SEM
 
Factsheet on the "Right to be Forgotten" ruling
Factsheet on the "Right to be Forgotten" rulingFactsheet on the "Right to be Forgotten" ruling
Factsheet on the "Right to be Forgotten" rulingSilesia SEM
 
The right to be forgotten Bill Hannay
The right to be forgotten  Bill HannayThe right to be forgotten  Bill Hannay
The right to be forgotten Bill HannayCharleston Conference
 
Factsheet data protection and Right to be Forgotten
Factsheet data protection and Right to be ForgottenFactsheet data protection and Right to be Forgotten
Factsheet data protection and Right to be ForgottenEdouard Nguyen
 
European Data Protection, the Right to be Forgotten and Search Engines
European Data Protection, the Right to be Forgotten and Search EnginesEuropean Data Protection, the Right to be Forgotten and Search Engines
European Data Protection, the Right to be Forgotten and Search EnginesDavid Erdos
 
New Media Internet Expression and European Data Protection
New Media Internet Expression and European Data ProtectionNew Media Internet Expression and European Data Protection
New Media Internet Expression and European Data ProtectionDavid Erdos
 
GIG Working Paper 03/2017 - Consent
GIG Working Paper 03/2017 - ConsentGIG Working Paper 03/2017 - Consent
GIG Working Paper 03/2017 - ConsentIAB Europe
 
Google Spain and its Aftermath 2014-2023: An EU and UK GDPR Perspective
Google Spain and its Aftermath 2014-2023: An  EU and UK GDPR PerspectiveGoogle Spain and its Aftermath 2014-2023: An  EU and UK GDPR Perspective
Google Spain and its Aftermath 2014-2023: An EU and UK GDPR PerspectiveDavid Erdos
 
Generative AI, Search Engines and GDPR
Generative AI, Search Engines and GDPRGenerative AI, Search Engines and GDPR
Generative AI, Search Engines and GDPRDavid Erdos
 
General data protection regulation - European union
General data protection regulation  - European unionGeneral data protection regulation  - European union
General data protection regulation - European unionRohana K Amarakoon
 
Key Issues on the new General Data Protection Regulation
Key Issues on the new General Data Protection RegulationKey Issues on the new General Data Protection Regulation
Key Issues on the new General Data Protection RegulationOlivier Vandeputte
 

Similar to The Right to Be Forgotten in European Search Results (20)

EU Right to Forget Ruling
EU Right to Forget RulingEU Right to Forget Ruling
EU Right to Forget Ruling
 
The Right To Be Forgotten in the Google Spain Case (case C-131/12): A Clear V...
The Right To Be Forgotten in the Google Spain Case (case C-131/12): A Clear V...The Right To Be Forgotten in the Google Spain Case (case C-131/12): A Clear V...
The Right To Be Forgotten in the Google Spain Case (case C-131/12): A Clear V...
 
EU Guidelines On The Right To Be Forgotten Implementation November 2014
EU Guidelines On The Right To Be Forgotten Implementation November 2014EU Guidelines On The Right To Be Forgotten Implementation November 2014
EU Guidelines On The Right To Be Forgotten Implementation November 2014
 
Guidelines on the implementation of the Court of Justice of the European Union
Guidelines on the implementation of the Court of Justice of the European UnionGuidelines on the implementation of the Court of Justice of the European Union
Guidelines on the implementation of the Court of Justice of the European Union
 
Factsheet on the "Right to be Forgotten" ruling
Factsheet on the "Right to be Forgotten" rulingFactsheet on the "Right to be Forgotten" ruling
Factsheet on the "Right to be Forgotten" ruling
 
The right to be forgotten Bill Hannay
The right to be forgotten  Bill HannayThe right to be forgotten  Bill Hannay
The right to be forgotten Bill Hannay
 
Factsheet data protection and Right to be Forgotten
Factsheet data protection and Right to be ForgottenFactsheet data protection and Right to be Forgotten
Factsheet data protection and Right to be Forgotten
 
Right to be forgotten en
Right to be forgotten enRight to be forgotten en
Right to be forgotten en
 
European Data Protection, the Right to be Forgotten and Search Engines
European Data Protection, the Right to be Forgotten and Search EnginesEuropean Data Protection, the Right to be Forgotten and Search Engines
European Data Protection, the Right to be Forgotten and Search Engines
 
New Media Internet Expression and European Data Protection
New Media Internet Expression and European Data ProtectionNew Media Internet Expression and European Data Protection
New Media Internet Expression and European Data Protection
 
GIG Working Paper 03/2017 - Consent
GIG Working Paper 03/2017 - ConsentGIG Working Paper 03/2017 - Consent
GIG Working Paper 03/2017 - Consent
 
Whitepaper
WhitepaperWhitepaper
Whitepaper
 
Google Spain and its Aftermath 2014-2023: An EU and UK GDPR Perspective
Google Spain and its Aftermath 2014-2023: An  EU and UK GDPR PerspectiveGoogle Spain and its Aftermath 2014-2023: An  EU and UK GDPR Perspective
Google Spain and its Aftermath 2014-2023: An EU and UK GDPR Perspective
 
Right to be Forgotten
Right to be ForgottenRight to be Forgotten
Right to be Forgotten
 
Generative AI, Search Engines and GDPR
Generative AI, Search Engines and GDPRGenerative AI, Search Engines and GDPR
Generative AI, Search Engines and GDPR
 
General data protection regulation - European union
General data protection regulation  - European unionGeneral data protection regulation  - European union
General data protection regulation - European union
 
Key Issues on the new General Data Protection Regulation
Key Issues on the new General Data Protection RegulationKey Issues on the new General Data Protection Regulation
Key Issues on the new General Data Protection Regulation
 
PRESS RELEASE
PRESS RELEASEPRESS RELEASE
PRESS RELEASE
 
[REPORT PREVIEW] GDPR Beyond May 25, 2018
[REPORT PREVIEW] GDPR Beyond May 25, 2018[REPORT PREVIEW] GDPR Beyond May 25, 2018
[REPORT PREVIEW] GDPR Beyond May 25, 2018
 
Esc Rennes gdpr oct 2018
Esc Rennes gdpr oct 2018Esc Rennes gdpr oct 2018
Esc Rennes gdpr oct 2018
 

More from Greg Sterling

Ab 1760 -_amendments
Ab 1760 -_amendmentsAb 1760 -_amendments
Ab 1760 -_amendmentsGreg Sterling
 
Joint ad trade letter to ag becerra re ccpa 1.31.2019
Joint ad trade letter to ag becerra re ccpa 1.31.2019Joint ad trade letter to ag becerra re ccpa 1.31.2019
Joint ad trade letter to ag becerra re ccpa 1.31.2019Greg Sterling
 
Goldman v breitbart_-_opinion
Goldman v breitbart_-_opinionGoldman v breitbart_-_opinion
Goldman v breitbart_-_opinionGreg Sterling
 
Google genericide-cert-petition
Google genericide-cert-petitionGoogle genericide-cert-petition
Google genericide-cert-petitionGreg Sterling
 
Filed copy-first-amended-complaint-baldino-v-google-january-13-2017-1
Filed copy-first-amended-complaint-baldino-v-google-january-13-2017-1Filed copy-first-amended-complaint-baldino-v-google-january-13-2017-1
Filed copy-first-amended-complaint-baldino-v-google-january-13-2017-1Greg Sterling
 
Amazon motion to quash echo-search
Amazon motion to quash echo-searchAmazon motion to quash echo-search
Amazon motion to quash echo-searchGreg Sterling
 
170206 vizio 2017.02.06_complaint
170206 vizio 2017.02.06_complaint170206 vizio 2017.02.06_complaint
170206 vizio 2017.02.06_complaintGreg Sterling
 
1 2016-593-en-f1-1-1
1 2016-593-en-f1-1-11 2016-593-en-f1-1-1
1 2016-593-en-f1-1-1Greg Sterling
 
European Court of Justice Press Release GS Media vs. Sanoma
European Court of Justice Press Release GS Media vs. SanomaEuropean Court of Justice Press Release GS Media vs. Sanoma
European Court of Justice Press Release GS Media vs. SanomaGreg Sterling
 
How google fights piracy 2016
How google fights piracy 2016How google fights piracy 2016
How google fights piracy 2016Greg Sterling
 
Google viacom-kids-cookie-tracking
Google viacom-kids-cookie-trackingGoogle viacom-kids-cookie-tracking
Google viacom-kids-cookie-trackingGreg Sterling
 
FTC Complaint v InMobi
FTC Complaint v InMobiFTC Complaint v InMobi
FTC Complaint v InMobiGreg Sterling
 
E ventures worldwide v. google
E ventures worldwide v. googleE ventures worldwide v. google
E ventures worldwide v. googleGreg Sterling
 
Google search bias letter 2016 01-26(1)-1
Google search bias letter 2016 01-26(1)-1Google search bias letter 2016 01-26(1)-1
Google search bias letter 2016 01-26(1)-1Greg Sterling
 
Brave cease and desist final copy
Brave cease and desist final copy Brave cease and desist final copy
Brave cease and desist final copy Greg Sterling
 
160315lordandtaylcmpt
160315lordandtaylcmpt160315lordandtaylcmpt
160315lordandtaylcmptGreg Sterling
 
Google search bias letter Utah-DC
Google search bias letter Utah-DCGoogle search bias letter Utah-DC
Google search bias letter Utah-DCGreg Sterling
 
Uber Promotions vs Uber Technologies
Uber Promotions vs Uber Technologies Uber Promotions vs Uber Technologies
Uber Promotions vs Uber Technologies Greg Sterling
 

More from Greg Sterling (20)

Ab 1760 -_amendments
Ab 1760 -_amendmentsAb 1760 -_amendments
Ab 1760 -_amendments
 
Joint ad trade letter to ag becerra re ccpa 1.31.2019
Joint ad trade letter to ag becerra re ccpa 1.31.2019Joint ad trade letter to ag becerra re ccpa 1.31.2019
Joint ad trade letter to ag becerra re ccpa 1.31.2019
 
Goldman v breitbart_-_opinion
Goldman v breitbart_-_opinionGoldman v breitbart_-_opinion
Goldman v breitbart_-_opinion
 
Google genericide-cert-petition
Google genericide-cert-petitionGoogle genericide-cert-petition
Google genericide-cert-petition
 
Elliott v. google
Elliott v. googleElliott v. google
Elliott v. google
 
Filed copy-first-amended-complaint-baldino-v-google-january-13-2017-1
Filed copy-first-amended-complaint-baldino-v-google-january-13-2017-1Filed copy-first-amended-complaint-baldino-v-google-january-13-2017-1
Filed copy-first-amended-complaint-baldino-v-google-january-13-2017-1
 
Amazon motion to quash echo-search
Amazon motion to quash echo-searchAmazon motion to quash echo-search
Amazon motion to quash echo-search
 
170206 vizio 2017.02.06_complaint
170206 vizio 2017.02.06_complaint170206 vizio 2017.02.06_complaint
170206 vizio 2017.02.06_complaint
 
1 2016-593-en-f1-1-1
1 2016-593-en-f1-1-11 2016-593-en-f1-1-1
1 2016-593-en-f1-1-1
 
European Court of Justice Press Release GS Media vs. Sanoma
European Court of Justice Press Release GS Media vs. SanomaEuropean Court of Justice Press Release GS Media vs. Sanoma
European Court of Justice Press Release GS Media vs. Sanoma
 
How google fights piracy 2016
How google fights piracy 2016How google fights piracy 2016
How google fights piracy 2016
 
Google viacom-kids-cookie-tracking
Google viacom-kids-cookie-trackingGoogle viacom-kids-cookie-tracking
Google viacom-kids-cookie-tracking
 
FTC Complaint v InMobi
FTC Complaint v InMobiFTC Complaint v InMobi
FTC Complaint v InMobi
 
E ventures worldwide v. google
E ventures worldwide v. googleE ventures worldwide v. google
E ventures worldwide v. google
 
Google search bias letter 2016 01-26(1)-1
Google search bias letter 2016 01-26(1)-1Google search bias letter 2016 01-26(1)-1
Google search bias letter 2016 01-26(1)-1
 
Brave cease and desist final copy
Brave cease and desist final copy Brave cease and desist final copy
Brave cease and desist final copy
 
160315lordandtaylcmpt
160315lordandtaylcmpt160315lordandtaylcmpt
160315lordandtaylcmpt
 
Weiss vs google
Weiss vs googleWeiss vs google
Weiss vs google
 
Google search bias letter Utah-DC
Google search bias letter Utah-DCGoogle search bias letter Utah-DC
Google search bias letter Utah-DC
 
Uber Promotions vs Uber Technologies
Uber Promotions vs Uber Technologies Uber Promotions vs Uber Technologies
Uber Promotions vs Uber Technologies
 

Recently uploaded

Keep Your Finger on the Pulse of Your Building's Performance with IES Live
Keep Your Finger on the Pulse of Your Building's Performance with IES LiveKeep Your Finger on the Pulse of Your Building's Performance with IES Live
Keep Your Finger on the Pulse of Your Building's Performance with IES LiveIES VE
 
EMEA What is ThousandEyes? Webinar
EMEA What is ThousandEyes? WebinarEMEA What is ThousandEyes? Webinar
EMEA What is ThousandEyes? WebinarThousandEyes
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfCheryl Hung
 
Scenario Library et REX Discover industry- and role- based scenarios
Scenario Library et REX Discover industry- and role- based scenariosScenario Library et REX Discover industry- and role- based scenarios
Scenario Library et REX Discover industry- and role- based scenariosErol GIRAUDY
 
Graphene Quantum Dots-Based Composites for Biomedical Applications
Graphene Quantum Dots-Based Composites for  Biomedical ApplicationsGraphene Quantum Dots-Based Composites for  Biomedical Applications
Graphene Quantum Dots-Based Composites for Biomedical Applicationsnooralam814309
 
Design and Modeling for MySQL SCALE 21X Pasadena, CA Mar 2024
Design and Modeling for MySQL SCALE 21X Pasadena, CA Mar 2024Design and Modeling for MySQL SCALE 21X Pasadena, CA Mar 2024
Design and Modeling for MySQL SCALE 21X Pasadena, CA Mar 2024Alkin Tezuysal
 
UiPath Studio Web workshop Series - Day 3
UiPath Studio Web workshop Series - Day 3UiPath Studio Web workshop Series - Day 3
UiPath Studio Web workshop Series - Day 3DianaGray10
 
My key hands-on projects in Quantum, and QAI
My key hands-on projects in Quantum, and QAIMy key hands-on projects in Quantum, and QAI
My key hands-on projects in Quantum, and QAIVijayananda Mohire
 
Emil Eifrem at GraphSummit Copenhagen 2024 - The Art of the Possible.pptx
Emil Eifrem at GraphSummit Copenhagen 2024 - The Art of the Possible.pptxEmil Eifrem at GraphSummit Copenhagen 2024 - The Art of the Possible.pptx
Emil Eifrem at GraphSummit Copenhagen 2024 - The Art of the Possible.pptxNeo4j
 
TrustArc Webinar - How to Live in a Post Third-Party Cookie World
TrustArc Webinar - How to Live in a Post Third-Party Cookie WorldTrustArc Webinar - How to Live in a Post Third-Party Cookie World
TrustArc Webinar - How to Live in a Post Third-Party Cookie WorldTrustArc
 
Explore the UiPath Community and ways you can benefit on your journey to auto...
Explore the UiPath Community and ways you can benefit on your journey to auto...Explore the UiPath Community and ways you can benefit on your journey to auto...
Explore the UiPath Community and ways you can benefit on your journey to auto...DianaGray10
 
AI Workshops at Computers In Libraries 2024
AI Workshops at Computers In Libraries 2024AI Workshops at Computers In Libraries 2024
AI Workshops at Computers In Libraries 2024Brian Pichman
 
Flow Control | Block Size | ST Min | First Frame
Flow Control | Block Size | ST Min | First FrameFlow Control | Block Size | ST Min | First Frame
Flow Control | Block Size | ST Min | First FrameKapil Thakar
 
UiPath Studio Web workshop series - Day 1
UiPath Studio Web workshop series  - Day 1UiPath Studio Web workshop series  - Day 1
UiPath Studio Web workshop series - Day 1DianaGray10
 
How to become a GDSC Lead GDSC MI AOE.pptx
How to become a GDSC Lead GDSC MI AOE.pptxHow to become a GDSC Lead GDSC MI AOE.pptx
How to become a GDSC Lead GDSC MI AOE.pptxKaustubhBhavsar6
 
UiPath Studio Web workshop series - Day 2
UiPath Studio Web workshop series - Day 2UiPath Studio Web workshop series - Day 2
UiPath Studio Web workshop series - Day 2DianaGray10
 
The Zero-ETL Approach: Enhancing Data Agility and Insight
The Zero-ETL Approach: Enhancing Data Agility and InsightThe Zero-ETL Approach: Enhancing Data Agility and Insight
The Zero-ETL Approach: Enhancing Data Agility and InsightSafe Software
 
Planetek Italia Srl - Corporate Profile Brochure
Planetek Italia Srl - Corporate Profile BrochurePlanetek Italia Srl - Corporate Profile Brochure
Planetek Italia Srl - Corporate Profile BrochurePlanetek Italia Srl
 
IT Service Management (ITSM) Best Practices for Advanced Computing
IT Service Management (ITSM) Best Practices for Advanced ComputingIT Service Management (ITSM) Best Practices for Advanced Computing
IT Service Management (ITSM) Best Practices for Advanced ComputingMAGNIntelligence
 
March Patch Tuesday
March Patch TuesdayMarch Patch Tuesday
March Patch TuesdayIvanti
 

Recently uploaded (20)

Keep Your Finger on the Pulse of Your Building's Performance with IES Live
Keep Your Finger on the Pulse of Your Building's Performance with IES LiveKeep Your Finger on the Pulse of Your Building's Performance with IES Live
Keep Your Finger on the Pulse of Your Building's Performance with IES Live
 
EMEA What is ThousandEyes? Webinar
EMEA What is ThousandEyes? WebinarEMEA What is ThousandEyes? Webinar
EMEA What is ThousandEyes? Webinar
 
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdfKey Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
 
Scenario Library et REX Discover industry- and role- based scenarios
Scenario Library et REX Discover industry- and role- based scenariosScenario Library et REX Discover industry- and role- based scenarios
Scenario Library et REX Discover industry- and role- based scenarios
 
Graphene Quantum Dots-Based Composites for Biomedical Applications
Graphene Quantum Dots-Based Composites for  Biomedical ApplicationsGraphene Quantum Dots-Based Composites for  Biomedical Applications
Graphene Quantum Dots-Based Composites for Biomedical Applications
 
Design and Modeling for MySQL SCALE 21X Pasadena, CA Mar 2024
Design and Modeling for MySQL SCALE 21X Pasadena, CA Mar 2024Design and Modeling for MySQL SCALE 21X Pasadena, CA Mar 2024
Design and Modeling for MySQL SCALE 21X Pasadena, CA Mar 2024
 
UiPath Studio Web workshop Series - Day 3
UiPath Studio Web workshop Series - Day 3UiPath Studio Web workshop Series - Day 3
UiPath Studio Web workshop Series - Day 3
 
My key hands-on projects in Quantum, and QAI
My key hands-on projects in Quantum, and QAIMy key hands-on projects in Quantum, and QAI
My key hands-on projects in Quantum, and QAI
 
Emil Eifrem at GraphSummit Copenhagen 2024 - The Art of the Possible.pptx
Emil Eifrem at GraphSummit Copenhagen 2024 - The Art of the Possible.pptxEmil Eifrem at GraphSummit Copenhagen 2024 - The Art of the Possible.pptx
Emil Eifrem at GraphSummit Copenhagen 2024 - The Art of the Possible.pptx
 
TrustArc Webinar - How to Live in a Post Third-Party Cookie World
TrustArc Webinar - How to Live in a Post Third-Party Cookie WorldTrustArc Webinar - How to Live in a Post Third-Party Cookie World
TrustArc Webinar - How to Live in a Post Third-Party Cookie World
 
Explore the UiPath Community and ways you can benefit on your journey to auto...
Explore the UiPath Community and ways you can benefit on your journey to auto...Explore the UiPath Community and ways you can benefit on your journey to auto...
Explore the UiPath Community and ways you can benefit on your journey to auto...
 
AI Workshops at Computers In Libraries 2024
AI Workshops at Computers In Libraries 2024AI Workshops at Computers In Libraries 2024
AI Workshops at Computers In Libraries 2024
 
Flow Control | Block Size | ST Min | First Frame
Flow Control | Block Size | ST Min | First FrameFlow Control | Block Size | ST Min | First Frame
Flow Control | Block Size | ST Min | First Frame
 
UiPath Studio Web workshop series - Day 1
UiPath Studio Web workshop series  - Day 1UiPath Studio Web workshop series  - Day 1
UiPath Studio Web workshop series - Day 1
 
How to become a GDSC Lead GDSC MI AOE.pptx
How to become a GDSC Lead GDSC MI AOE.pptxHow to become a GDSC Lead GDSC MI AOE.pptx
How to become a GDSC Lead GDSC MI AOE.pptx
 
UiPath Studio Web workshop series - Day 2
UiPath Studio Web workshop series - Day 2UiPath Studio Web workshop series - Day 2
UiPath Studio Web workshop series - Day 2
 
The Zero-ETL Approach: Enhancing Data Agility and Insight
The Zero-ETL Approach: Enhancing Data Agility and InsightThe Zero-ETL Approach: Enhancing Data Agility and Insight
The Zero-ETL Approach: Enhancing Data Agility and Insight
 
Planetek Italia Srl - Corporate Profile Brochure
Planetek Italia Srl - Corporate Profile BrochurePlanetek Italia Srl - Corporate Profile Brochure
Planetek Italia Srl - Corporate Profile Brochure
 
IT Service Management (ITSM) Best Practices for Advanced Computing
IT Service Management (ITSM) Best Practices for Advanced ComputingIT Service Management (ITSM) Best Practices for Advanced Computing
IT Service Management (ITSM) Best Practices for Advanced Computing
 
March Patch Tuesday
March Patch TuesdayMarch Patch Tuesday
March Patch Tuesday
 

The Right to Be Forgotten in European Search Results

  • 1. www.curia.europa.eu Press and Information Court of Justice of the European Union PRESS RELEASE No 70/14 Luxembourg, 13 May 2014 Judgment in Case C-131/12 Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González An internet search engine operator is responsible for the processing that it carries out of personal data which appear on web pages published by third parties Thus, if, following a search made on the basis of a person’s name, the list of results displays a link to a web page which contains information on the person in question, that data subject may approach the operator directly and, where the operator does not grant his request, bring the matter before the competent authorities in order to obtain, under certain conditions, the removal of that link from the list of results An EU directive1 has the objective of protecting the fundamental rights and freedoms of natural persons (in particular the right to privacy) when personal data are processed, while removing obstacles to the free flow of such data. In 2010 Mario Costeja González, a Spanish national, lodged with the Agencia Española de Protección de Datos (Spanish Data Protection Agency, the AEPD) a complaint against La Vanguardia Ediciones SL (the publisher of a daily newspaper with a large circulation in Spain, in particular in Catalonia) and against Google Spain and Google Inc. Mr Costeja González contended that, when an internet user entered his name in the search engine of the Google group (‘Google Search’), the list of results would display links to two pages of La Vanguardia’s newspaper, of January and March 1998. Those pages in particular contained an announcement for a real-estate auction organised following attachment proceedings for the recovery of social security debts owed by Mr Costeja González. With that complaint, Mr Costeja González requested, first, that La Vanguardia be required either to remove or alter the pages in question (so that the personal data relating to him no longer appeared) or to use certain tools made available by search engines in order to protect the data. Second, he requested that Google Spain or Google Inc. be required to remove or conceal the personal data relating to him so that the data no longer appeared in the search results and in the links to La Vanguardia. In this context, Mr Costeja González stated that the attachment proceedings concerning him had been fully resolved for a number of years and that reference to them was now entirely irrelevant. The AEPD rejected the complaint against La Vanguardia, taking the view that the information in question had been lawfully published by it. On the other hand, the complaint was upheld as regards Google Spain and Google Inc. The AEPD requested those two companies to take the necessary measures to withdraw the data from their index and to render access to the data impossible in the future. Google Spain and Google Inc. brought two actions before the Audiencia Nacional (National High Court, Spain), claiming that the AEPD’s decision should be annulled. It is in this context that the Spanish court referred a series of questions to the Court of Justice. In today’s judgment, the Court of Justice finds, first of all, that by searching automatically, constantly and systematically for information published on the internet, the operator of a search engine ‘collects’ data within the meaning of the directive. The Court considers, furthermore, that the operator, within the framework of its indexing programmes, ‘retrieves’, ‘records’ and ‘organises’ 1 Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ 1995 L 281, p. 31).
  • 2. www.curia.europa.eu the data in question, which it then ‘stores’ on its servers and, as the case may be, ‘discloses’ and ‘makes available’ to its users in the form of lists of results. Those operations, which are referred to expressly and unconditionally in the directive, must be classified as ‘processing’, regardless of the fact that the operator of the search engine carries them out without distinction in respect of information other than the personal data. The Court also points out that the operations referred to by the directive must be classified as processing even where they exclusively concern material that has already been published as it stands in the media. A general derogation from the application of the directive in such a case would have the consequence of largely depriving the directive of its effect. The Court further holds that the operator of the search engine is the ‘controller’ in respect of that processing, within the meaning of the directive, given that it is the operator which determines the purposes and means of the processing. The Court observes in this regard that, inasmuch as the activity of a search engine is additional to that of publishers of websites and is liable to affect significantly the fundamental rights to privacy and to the protection of personal data, the operator of the search engine must ensure, within the framework of its responsibilities, powers and capabilities, that its activity complies with the directive’s requirements. This is the only way that the guarantees laid down by the directive will be able to have full effect and that effective and complete protection of data subjects (in particular of their privacy) may actually be achieved. As regards the directive’s territorial scope, the Court observes that Google Spain is a subsidiary of Google Inc. on Spanish territory and, therefore, an ‘establishment’ within the meaning of the directive. The Court rejects the argument that the processing of personal data by Google Search is not carried out in the context of the activities of that establishment in Spain. The Court holds, in this regard, that where such data are processed for the purposes of a search engine operated by an undertaking which, although it has its seat in a non-member State, has an establishment in a Member State, the processing is carried out ‘in the context of the activities’ of that establishment, within the meaning of the directive, if the establishment is intended to promote and sell, in the Member State in question, advertising space offered by the search engine in order to make the service offered by the engine profitable. So far as concerns, next, the extent of the responsibility of the operator of the search engine, the Court holds that the operator is, in certain circumstances, obliged to remove links to web pages that are published by third parties and contain information relating to a person from the list of results displayed following a search made on the basis of that person’s name. The Court makes it clear that such an obligation may also exist in a case where that name or information is not erased beforehand or simultaneously from those web pages, and even, as the case may be, when its publication in itself on those pages is lawful. The Court points out in this context that processing of personal data carried out by such an operator enables any internet user, when he makes a search on the basis of an individual’s name, to obtain, through the list of results, a structured overview of the information relating to that individual on the internet. The Court observes, furthermore, that this information potentially concerns a vast number of aspects of his private life and that, without the search engine, the information could not have been interconnected or could have been only with great difficulty. Internet users may thereby establish a more or less detailed profile of the person searched against. Furthermore, the effect of the interference with the person’s rights is heightened on account of the important role played by the internet and search engines in modern society, which render the information contained in such lists of results ubiquitous. In the light of its potential seriousness, such interference cannot, according to the Court, be justified by merely the economic interest which the operator of the engine has in the data processing. However, inasmuch as the removal of links from the list of results could, depending on the information at issue, have effects upon the legitimate interest of internet users potentially interested in having access to that information, the Court holds that a fair balance should be sought in particular between that interest and the data subject’s fundamental rights, in particular the right to privacy and the right to protection of personal data. The Court observes in this regard that, whilst it is true that the data subject’s rights also override, as a general rule, that interest of internet users,
  • 3. www.curia.europa.eu this balance may however depend, in specific cases, on the nature of the information in question and its sensitivity for the data subject’s private life and on the interest of the public in having that information, an interest which may vary, in particular, according to the role played by the data subject in public life. Finally, in response to the question whether the directive enables the data subject to request that links to web pages be removed from such a list of results on the grounds that he wishes the information appearing on those pages relating to him personally to be ‘forgotten’ after a certain time, the Court holds that, if it is found, following a request by the data subject, that the inclusion of those links in the list is, at this point in time, incompatible with the directive, the links and information in the list of results must be erased. The Court observes in this regard that even initially lawful processing of accurate data may, in the course of time, become incompatible with the directive where, having regard to all the circumstances of the case, the data appear to be inadequate, irrelevant or no longer relevant, or excessive in relation to the purposes for which they were processed and in the light of the time that has elapsed. The Court adds that, when appraising such a request made by the data subject in order to oppose the processing carried out by the operator of a search engine, it should in particular be examined whether the data subject has a right that the information in question relating to him personally should, at this point in time, no longer be linked to his name by a list of results that is displayed following a search made on the basis of his name. If that is the case, the links to web pages containing that information must be removed from that list of results, unless there are particular reasons, such as the role played by the data subject in public life, justifying a preponderant interest of the public in having access to the information when such a search is made. The Court points out that the data subject may address such a request directly to the operator of the search engine (the controller) which must then duly examine its merits. Where the controller does not grant the request, the data subject may bring the matter before the supervisory authority or the judicial authority so that it carries out the necessary checks and orders the controller to take specific measures accordingly. NOTE: A reference for a preliminary ruling allows the courts and tribunals of the Member States, in disputes which have been brought before them, to refer questions to the Court of Justice about the interpretation of European Union law or the validity of a European Union act. The Court of Justice does not decide the dispute itself. It is for the national court or tribunal to dispose of the case in accordance with the Court’s decision, which is similarly binding on other national courts or tribunals before which a similar issue is raised. Unofficial document for media use, not binding on the Court of Justice. The full text of the judgment is published on the CURIA website on the day of delivery. Press contact: Christopher Fretwell  (+352) 4303 3355 Pictures of the delivery of the judgment are available from "Europe by Satellite"  (+32) 2 2964106