Sunday

24th Jun 2018

Analysis

GDPR does not (yet) give right to global oblivion

  • If an EU citizen has established that his personal data should be removed, does that also apply to those accessing the internet outside the EU, like in Laos? (Photo: Jon Rawlinson)

EU citizens will see their 'right to be forgotten' online enshrined in EU law on Friday (25 May), but its effectiveness and reach will depend on a case which is still pending in front of the Court of Justice of the EU.

The general data protection regulation (GDPR), which will apply as of Friday, gives EU citizens the right to demand from companies or organisations to have their personal data removed, under certain circumstances.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... our join as a group

But it is not yet clear to what extent the right to have personal data erased or removed from search engine results will apply globally.

"This issue is just now pending in front of the Court of Justice: the reach, the applicability of the decisions by our data protection authorities," said a European Commission official on Wednesday, on condition of anonymity.

"We cannot apply our EU law extraterritorially. … How does it work in such a medium as internet?"

The provision in GDPR follows an earlier ruling by the Luxembourg-based EU court in 2014, which said that search engines had to remove results related to an EU citizen's name if they were "inadequate, irrelevant or no longer relevant".

However, the question is how such a right can be effectively applied in light the global nature of the internet.

The French data protection authority (DPA) was one of the most aggressive DPAs enforcing the right to be forgotten – which has since become known as 'delisting' or 'de-referencing'.

In 2016, it demanded that Google not only delist information from French citizens from the search engine's French version Google.fr, but also from Google.com and other non-French domain names - which, because of the global nature of internet, are available to French users too.

Google disagreed.

Last year, France's highest administrative court, the Council of State asked the Court of Justice of the EU for advice.

It asked if the right to be forgotten also requires a search engine to remove data from its domain services outside the EU.

The Council of State also asked if a company should use geo-blocking to comply with the right to be forgotten.

Geo-blocking is a technique via which a website checks the geographical location of the user requesting a page and blocks users from certain geographical areas.

This approach could lead to removed information still remaining available to users outside the EU.

That might not necessarily be a bad thing.

There is a tension between the right to be forgotten and human rights, in particular freedom of expression and freedom of information.

One unintended consequence of a rigid global application of the right to be forgotten could be a stifling effect on freedom of speech in the rest of the world.

However, geo-blocking is not foolproof and there are ways to circumvent it.

Feature

Nine lines that changed history - at least on the internet

Google has removed 800,000 search results across the EU following complaints from citizens, without the public knowing what has been removed, why it was removed or who complained. We revisit the case that rewrote history online.

GDPR - a global 'gold standard'?

The new EU privacy rules are touted as a global 'gold standard' - but Mexico's former data commissioner warns some nations are far from ready.

New GDPR enforcer says complaints imminent

The European Data Protection Board is a new EU body tasked with enforcing the EU's privacy laws with powers to impose massive fines. Its head Andrea Jelinek told reporters complaints against companies are expected to be immediate.

Are EU data watchdogs staffed for GDPR?

The success of the new general data protection regulation (GDPR) will depend on whether data protection authorities enforce the new rules - which, in turn, will be at least partly determined by how many people they employ.

Eight countries to miss EU data protection deadline

The EU starts enforcing its general data protection regulation on 25 May - but Belgium, Bulgaria, Cyprus, Czech Republic, Greece, Hungary, Lithuania and Slovenia won't be ready. The delay will cause legal uncertainty.

News in Brief

  1. Venice Commission: Hungary should repeal NGO law
  2. Trump threatens to slap 20 percent tariff on EU cars
  3. EU closes deficit procedure against France
  4. Romania's ruling party leader gets jail sentence
  5. EU states defer individual decisions on asylum reforms
  6. Commission opens case on Qatar gas flow
  7. EU adopts posted workers directive
  8. EU leaders to call for 'coordinated plan' on AI

Stakeholders' Highlights

  1. Mission of China to the EUJointly Building Belt and Road Initiative Leads to a Better Future for All
  2. Macedonian Human Rights MovementMHRMI Launches Lawsuits Against Individuals and Countries Involved in Changing Macedonia's Name
  3. IPHRCivil society asks PACE to appoint Rapporteur to probe issue of political prisoners in Azerbaijan
  4. ACCASocial Mobility – How Can We Increase Opportunities Through Training and Education?
  5. Nordic Council of MinistersEnergy Solutions for a Greener Tomorrow
  6. UNICEFWhat Kind of Europe Do Children Want? Unicef & Eurochild Launch Survey on the Europe Kids Want
  7. Nordic Council of MinistersNordic Countries Take a Stand for Climate-Smart Energy Solutions
  8. Mission of China to the EUChina: Work Together for a Better Globalisation
  9. Nordic Council of MinistersNordics Could Be First Carbon-Negative Region in World
  10. European Federation of Allergy and AirwaysLife Is Possible for Patients with Severe Asthma
  11. PKEE - Polish Energy AssociationCommon-Sense Approach Needed for EU Energy Reform
  12. Nordic Council of MinistersNordic Region to Lead in Developing and Rolling Out 5G Network

Latest News

  1. Migration row at centre of EU summit This Week
  2. Merkel's woes cast shadow on EU's future
  3. Europe's tech race - trying to keep pace with US and China
  4. Merkel and Juncker's mini-summit risks fiasco
  5. Greece and creditors proclaim 'end of crisis'
  6. How a US firm pushed for EU €2.1trn pension fund
  7. Commission defends Africa migrant plan ahead of summit
  8. Bavaria hijacks EU migration talks

Join EUobserver

Support quality EU news

Join us