Google and the jurisdictional reach of the Belgian DPA in right to be forgotten cases. Another piece misplaced in the puzzle?

Thank you Nathalie Smuha for first signalling the €600,000.00 fine which the Belgian Data Protection Authority (DPA) issued on Tuesday against Google Belgium, together with a delisting order of uncertain reach (see below) and an order to amend the public’s complaint forms. The decision will eventually be back up here I am assume (at vanished yesterday) however I have copy here.

Nauta Dutilh’s Peter Craddock and Vincent Wellens have very good summary and analysis up already, and I am happy to refer. Let me add a few things of additional note:

  • The one-stop shop principle of the GDPR must now be under severe strain. CNIL v Google already put it to the test and this Belgian decision further questions its operationalisation – without even without for the CJEU to answer the questions of the Brussels Court of Appeal in the Facebook case. At 31, the DPA refers to a letter which Google LLC had sent on 23 June 2020 (a few days therefore after the French decision) to the Irish DPA saying that it would no longer object to national DPAs exercising jurisdiction in right to be forgotten cases. Of note is that in ordinary litigation, deep-pocket claimants seeking mozaik jurisdiction seldom do that because it serves the general interest.
  • Having said that, the Belgian DPA still had to establish jurisdiction against Google Belgium. Here, CJEU Google v Spain, Google v CNIL, and Wirtschaftsakademie led the DPA to take a ‘realistic’ /business plan approach (such as Jääskinen AG in Google Spain) rather than a legally pure approach: at 80 following extensive reference to CJEU authority, and to the effet utile of the GDPR, the DPA holds that it matters little whether the actual processing of the date takes places outside of the EU, by Google employees ex-EU, and that Google Belgium’s activities are supportive only. A Belgian resident’s right to be forgotten has been infringed; a Google entity is available there: that would seem to suffice.
  • That left the issue of the territorial reach of the delisting request. The DPA arguably cuts a few corners on the Google Belgium issue; here, it is simply most vague: at 81 ff it refers to the jurisdictional decision in e-Date Advertising, that for infringement of privacy within Brussels Ia, the courts of the person’s centre of interests are best placed to hear the case in its entirety, holding this should be applied mutatis mutandis in GDPR cases and removal orders. It then holds at 85 that neither Google v CNIL nor Belgian law give it specific power to impose a worldwide delisting order, yet at 91 that an EU-wide delisting order would seem an effective means of redress, to end up in its final order (p.48-49) not identifying a territorial scope for delisting.

I am confused. I suspect I am not the only one.

Geert.

(Handbook of) EU private international law, 2nd ed.2016, chapter 2, Heading 2.2.8.2.5.

 

Swamdi Ramdev v Facebook, Google, Youtube et al at the Delhi High Court: Worldwide removal ordered without much hesitation.

Update 14 November 2019 the judgment is, unsurprisingly, being appealed.

‘The race between technology and the law could be termed as a hare and tortoise race – As technology gallops, the law tries to keep pace.’ (see further below).

Thank you Daphne Keller for flagging CS (OS) 27/2019 Swami Ramdev et al v Facebook et al at the Delhi High Court on 23 October. Defendants are Facebook Inc, Google Inc, YouTube LLC, Twitter etc. The allegation of Plaintiffs is that various defamatory remarks and information including videos, found earlier to have been defamatory (a judgment currently before the Supreme Court without having been stayed), are being disseminated over the Defendants’ platforms.

At 6 Prathiba M Singh J summarises the parties’ position: None of the Defendants have any objection to blocking the URLs and disabling the same, insofar as access in India is concerned. However, all the Defendant platforms have raised objections to removal/blocking/disabling the impugned content on a global basis. On the other hand, the Plaintiffs argued that blocking merely for the Indian territory alone is not sufficient as the content would be accessible through international websites, which can be accessed in India. Thus, according to the Plaintiffs, for the remedy to be effective, a global blocking order ought to be passed.

Particularly in the review of plaintiff’s submission at 8 ff, the parallel is clear with the discussions on the role of intermediaries in Eva Glawischnig-Piesczek v Facebook. Reference of course is also made to Equustek and, at 64, to the CJEU in Google v CNIL. Facebook refers to the material difference between defamation laws across the globe: at 10: ‘Defamation laws differs from jurisdiction to jurisdiction, and therefore, passing of a global disabling order would be contrary to the principle of comity of Courts and would result in conflict of laws.’

At 44 ff Prathiba M Singh J extensively reviews global precedent, and, at 69, to Eva Glawischnig-Piesczek v Facebook. At 88 ff this leads justice Singh

Firstly, to uphold fairly straightforwardly the court’s power to order global delisting given the origin in India of the original act of uploading: ‘The act of uploading vests jurisdiction in the Courts where the uploading takes place. If any information or data has been uploaded from India on to a computer resource which has resulted in residing of the data on the network and global dissemination of the said information or data, then the platforms are liable to remove or disable access to the said information and data from that very computer resource. The removal or disabling cannot be restricted to a part of that resource, serving a geographical location.’

>>>Clearly the authority of the finding (likely to be appealed) may therefore be limited to situations of content uploading from inside the jurisdiction.

Further, at 99, to make an effectiveness argument: ‘it is clear that any order passed by the Court has to be effective. The parties before this Court i.e. the platforms are sufficiently capable to enforce an order of global blocking. Further, it is not disputed that the platforms are subject to in personam jurisdiction of this Court.’

>>>The latter element, again, may limit the authority of the judgment. I am not au fait with the ground for jurisdiction in the case at issue.

Finally, at 91: ‘The race between technology and the law could be termed as a hare and tortoise race – As technology gallops, the law tries to keep pace’. This does not imply the law simply laying down to have its belly rubbed. Exactly my sentiment in my post on the UK AI case.

Geert.

(Handbook of) EU Private International Law, 2nd ed. 2016, Chapter 2, Heading 2.2.8.2, Heading 2.2.8.2.5

 

 

 

%d bloggers like this: