We solve your legal problems. Read our legal advice guides & instruct the best lawyer for you.

SEARCH THE SITE

Unlock Legal Advice

free-legal-advice-online


Warning: file_put_contents(): Only 0 of 74 bytes written, possibly out of free disk space in /home/unlockt8/public_html/libraries/src/Filesystem/File.php on line 459

Warning: file_put_contents(): Only 0 of 77 bytes written, possibly out of free disk space in /home/unlockt8/public_html/libraries/src/Filesystem/File.php on line 459

Warning: file_put_contents(): Only 0 of 204 bytes written, possibly out of free disk space in /home/unlockt8/public_html/libraries/src/Filesystem/File.php on line 459

Warning: file_put_contents(): Only 0 of 292 bytes written, possibly out of free disk space in /home/unlockt8/public_html/libraries/src/Filesystem/File.php on line 459

Warning: file_put_contents(): Only 0 of 395 bytes written, possibly out of free disk space in /home/unlockt8/public_html/libraries/src/Filesystem/File.php on line 459

The Right to Be Forgotten Online - Top 7 FAQs

There has been increasing concern regarding the volume of information stored on the internet and the type of data referenced in search engines, particularly when it relates to information of a personal nature. These concerns culminated in a landmark case at the Court of Justice of the European Union in May 2014, resulting in the recognition of a ‘right to be forgotten’.

right-to-be-forgotten-guide-EU

The right to be forgotten helps ordinary people to remove information about themselves from the internet, provided the informations meets the necessary criteria laid down in the rules. The onus is on search engines such as Google, Bing and Yahoo to remove the data. While some see the ruling as a triumph in the protection of people’s personal data, others believe the decision is tantamount to censorship, depending which side of the debate is listened to.

What Will This Guide Cover?

  • What the right to be forgotten means within the context of internet usage and data protection
  • What online information the right applies to
  • An overview of the judgment recognising a right to be forgotten in the EU
  • Why someone may wish to exercise their right to be forgotten
  • How search engines must respond to a request to remove information
  • Criticisms of the right to be forgotten
  • The future of the right to be forgotten

What Questions Does This Guide Answer?

  1. What is the right to be forgotten?
  2. What led to the right to be forgotten?
  3. What did the European Court of Justice decide?
  4. Can personal information be removed from search engines?
  5. Who would want the right to be forgotten?
  6. How is the right to be forgotten being dealt with in the UK?
  7. What is the European Data Protection Regulation?

What Is the Right to Be Forgotten?

The right to be forgotten is part of a wider attempt from within the European Union (EU) to place a limit on the information that is available on the internet, in an attempt to safeguard the privacy rights of individuals living within the EU. It is a component of the European Data Protection Directive that was adopted in 1995. The European Commission has also introduced a draft regulation that will develop the right to be forgotten more broadly within EU law, and will supersede the directive.  

What Led to the Right to Be Forgotten?

The right to be forgotten arose as a result of a case decision made by the Court of Justice of the European Union (CJEU). A Spanish citizen, Mr Gonzalez, complained against a local newspaper, Google Inc and its subsidiary, Google Spain, that information available from Google’s search engine was causing him difficulties. Information was displayed on Google’s search engine about his home being repossessed some ten years earlier, owing to financial difficulties that had now been settled for some time. Mr Gonzalez argued that the availability of this information was damaging his reputation, and breaching data protection regulations. He argued that Google should remove this information from its search results.  

Google disagreed with Mr Gonzalez that they should remove the information relating to him, and defended their position on three grounds:

  • Google, as an organisation, is incorporated in California, USA.  As a result, only Californian state and U.S. federal laws apply to it. EU law and Spanish law are irrelevant (because Spain is a member of the EU, European laws are effectively Spanish laws).
  • While Google acknowledged that information on Mr Gonzalez was being collected, stored and available for inspection, it was not in control of any of this. It argued that it would have to be in control of the process before it could be held responsible.
  • Google argued that if any court imposed on them the responsibility of controlling what information is gathered, stored etc. then this would have a negative impact on protecting individuals’ fundamental rights.

What Did the CJEU Decide?

The CJEU looked at the arguments made by Google and also looked at the terms of the data protection directive, and gave what has been described by many as a very ambitious ruling. To decide whether Google’s arguments were in line with European laws, it had to consider three things:

  • Was Google Exempt From Spanish and EU Law?

The court rejected Google’s argument that it was exempt from EU law and the terms of the data protection directive. It said that Google Spain was a subsidiary body of Google Inc, and because activities were being organised in Spain, it was subject to both Spanish and European law.

  • Was Google a ‘Controller’ of Information’?

To answer this question, the court paid special attention to the European rules. The court had to find out two things:

  • Could the activities of Google be classified as the ‘processing of personal data’ under the directive?
    • After reviewing the terms of the directive, the court ruled that the activities of search engines in finding information placed on the internet, indexing it, storing it and making it available to internet users in an order of preference when that information contains personal details of an individual must be ‘processing of personal data’ under the directive.
  • If the answer was yes, would Google be deemed to be a ‘controller’ of this data under the directive?
    • Having agreed that Google was processing personal information, the court had to decide on whether it was a controller of that information. Under the directive, a controller is ‘the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data’. The court said that Google was the search engine being used, and its search results were structured in a particular way.  The point the court was making was that Google was not obliged to do any of this, and so could not be anything but a controller under EU law.

Google was deemed to be a controller of personal data.

  • Would Imposing Responsibility for Information Available About Individuals Infringe Fundamental Freedoms?

The court took into account the fundamental rights laid down in European law, for example, freedom of expression, but it was very clear in its decision. The court said if it did not hold Google responsible in this case – and, by extension, search engines more generally – then it would violate a fundamental right in the right to privacy. The court said that individuals would have the right to ask search engines to remove links available on their search engines that contained personal information about them. The court also said that the right to be forgotten was subject to limitations. Primarily, only information that is inaccurate, inadequate, irrelevant or excessive for the purpose of processing information could be removed. Furthermore, the court held that this right was not absolute, and would have to be balanced alongside other fundamental rights, for example, the right to freedom of expression. The court made very clear that this would have to be dealt with on a case-by-case basis.

Can Personal Information Be Removed From Search Engines?

If someone finds information about themselves on a search engine then they can approach the search engine and ask for it to be removed from the search results (under the current rules, information will not be erased from the internet, but it will not appear in the search results generated by the search engine).      

However, as mentioned above, the information must fall within one of the categories laid down by the CJEU before it will be removed from search results. It will not always be immediately apparent whether information should be withdrawn from a search engine index of results, even if inaccuracy or irrelevance is demonstrated. Search engines will, as the ECJ said, have to look at the matter carefully.

The situation can become slightly more complicated if the individual requesting information to be withdrawn from search results is prominent in the public eye. Politicians, actors and those whose lives are very ‘public’ may struggle to have information removed.  Moreover, the European authorities (particularly the European Commission) have made it very clear that the right to be forgotten does not grant individuals a right to have information about them removed from history.

Who Would Want the Right to Be Forgotten?

The right to be forgotten can sound quite strange, and many might wonder why anyone would want to be forgotten. The reality is that many people would like certain aspects of their lives that have found their way onto the internet (for example through newspapers, social media or video logs) to be removed from public view and forgotten about.

A number of different groups of people would find the right to be forgotten quite useful.  

  • Prospective Job Candidates

When considering the suitability of candidates, many employers conduct general searches on search engines for evidence of someone’s good or bad character.

Search results may not always be in the prospective employee’s favour. For example, a person may have had some ‘fun times’ at university that have been documented on the internet. This is unlikely to be the image a job candidate would want to show a future employer, and so they may attempt to have this kind of information ‘forgotten’.

  • Politicians

People working in the public sphere, for example, politicians, try to portray a professional and trustworthy image. While it is hoped that the details available online about them are a true representation, often, historical comments from their less experienced days tend to resurface. This can cause irreparable damage to a career.  

This is not the type of information politicians would like voters to judge them on, which is why it may, in their opinion, be removed from view.

  • Individuals With Convictions

Serious crimes are often heavily reported on. Punishments allocated to parties who are found guilty of these crimes are also often reported on. It is not uncommon to read a newspaper article or an online article detailing an individual who has been convicted for a crime, and the accompanying punishment.  

While crimes may have been committed many years ago, related articles published online will continue to exist. If a person’s name is typed into a search engine then this may be all that is required to bring up the details of their past. People who bear convictions would obviously prefer that this information is not available to the public.  

How Is the Right to Be Forgotten Being Dealt With in the UK?

The decision of the judges of the CJEU to recognise the existence of a right to be forgotten has received a mixed response in the UK.  

Everything mentioned, so far, is based around the terms of the European Data Protection Directive, which is broadly speaking a piece of European law. The ruling of the CJEU, however, provided more substance on what the terms of the directive and any implementing national legislation of EU member states must do, to be in line with European law.  

Search engine operators, including the likes of Yahoo, Microsoft and Google, that operate in the UK and Europe did not welcome the ruling. It meant that, to avoid breaching European law, they would have to operate a procedure where individuals could contact them about a particular piece of information available on their search engines. Provided that the individual met with certain criteria then the search engine would need to remove that information from its search results.

Many operators have now designed a procedure for answering right to be forgotten claims from people who would prefer certain pieces of information not to be available in search results. However, search engine operators have voiced concern over the number of requests they receive and the time required to process each one on a case-by-case basis.

Political circles in the UK also voiced concerns over the ruling of the CJEU.  Following the judgement, the House of Lords Home Affairs, Health and Education EU Sub-Committee criticised the ruling as ‘unworkable’. The committee was critical of the idea of search engines as commercial bodies, deciding on what information should be removed from search results on the internet. The committee also stated that it believed that information which is obtained lawfully and is accurate should not be removed from search results simply because individuals would rather it was not in the public eye. The committee has called for the European Data Protection Regulation, due to come into force in 2015, not to define search engines as controllers of information, removing their responsibility to deal with requests for the removal of information.

Ultimately, the ruling has been followed, despite concerns from multiple parties. The UK Information Commissioner defended the ruling of the CJEU on the issue of the right to be forgotten but called for clarity on what was actually being discussed. He, amongst others, has stated that information may be removed from search engine results, but the information will still exist on the internet – it simply will not show up on a search. Many in the UK and the EU have attempted to remind parties that the so-called right to be forgotten will not amount to a deletion from history.  

What Is the European Data Protection Regulation?

It was mentioned earlier that the right to be forgotten is being developed in a new regulation that is due to come into force in 2015. The draft European Data Protection Regulation detailed a ‘right to be forgotten and erasure’, however, following the concerns voiced over the right to be forgotten, it now provides for a more general ‘right of erasure’, which requires that controllers of information – which still includes search engines – on request from an individual, remove personal information that is held by them from their index or bank of information. However, this removal of information will only be granted if the availability of this information contravenes the rights and freedoms of individuals recognised by the EU.  

Many have expressed concerns that this piece of legislation will contravene freedom of expression, and allow for what some may deem to be important information to simply disappear. Despite these and other concerns, the alterations made to the substance of the draft regulation have been fairly minimal. The regulation represents a very apt example of the constant struggle to balance the right to freedom of expression and the availability of information on the one hand, and an individual’s right to privacy on the other.  

Key Points

  • Under EU law, EU citizens have the right to control their personal data, which includes the right to be forgotten
  • The right to be forgotten is an individual’s right to request internet search engines remove search results that directly relate to them
  • Only information that is inaccurate, inadequate, irrelevant or excessive for the purpose of processing information can be removed
  • The right to be forgotten does not grant individuals a right to have information about them removed from history - information may be removed from search engine results, but it will still exist on the internet
  • It will not always be immediately apparent whether information should be withdrawn from search engine results, even if inaccuracy or irrelevance is demonstrated.

Nothing in this guide is intended to constitute legal advice and you are strongly advised to seek independent advice on matters that affect you.

Like this? Why not share.

Jurisdiction

Europe

Last Updated

Sunday, 08 February 2015

Categories

Family Law

Share