Skip to main content

Opinion: Google privacy ruling could change how we all use the Internet

By Paul Bernal, Data protection expert, Special to CNN
May 14, 2014 -- Updated 1043 GMT (1843 HKT)
STORY HIGHLIGHTS
  • Europe's top court said Google is responsible for data it links to
  • A data protection expert says the court ruled in favor of privacy and individual rights
  • For Google, this result creates a headache, and potentially huge costs, Paul Bernal writes

Editor's note: Paul Bernal is a lecturer in Information Technology, Intellectual Property and Media Law at the University of East Anglia Law School, and a specialist in data privacy issues. He is a blogger and the author of the recently published Internet Privacy Rights -- rights to protect autonomy. The opinions expressed in this commentary are solely his.

(CNN) -- In a decision that goes strongly against Google, Europe's highest court has ruled search engine operators are responsible for the processing they carry out of personal data which appear on web pages published by third parties -- and that a form of the contentious "right to be forgotten" already exists.

The European Court of Justice's ruling looks like a strong decision in favor of privacy and individual rights, and against the business models of search engines and certain aspects of freedom of speech.

Paul Bernal
Paul Bernal

It means, for example, that if a web page can be found by searching for a person's name the search engine is responsible for the contents of that page.

In certain circumstances, the search engine operator will be required to remove the search results and links to that page.

Google can be expected to be very unhappy about this ruling indeed, particularly given that last year's Advocate-General's opinion suggested the reverse, and the court generally follows such guidance.

What is the right to be forgotten?

One of the perennial problems on the Internet is the idea that whatever appears is there forever.

Stories that appear discreditable -- whether they are true or not, whether they are up to date or not, whether they tell the whole story or not -- can always be found and brought to the public attention.

The "right to be forgotten" is the idea that we have the right to wipe the slate clean, to remove out-dated stories such as spent convictions from the record.
Paul Bernal

The "right to be forgotten" is the idea that we have the right to wipe the slate clean, to remove outdated stories such as spent convictions from the record.

There have been versions of this right in a number of European countries -- France, Italy, Spain and Germany, for example -- for some time, but for the most part in pre-Internet forms, designed to stop newspapers republishing out-dated stories.

The Internet has changed things so much that some suggest the law needs to catch up.

For most people, Google is the main way people find information -- so if you can prevent Google from providing links to a story, to a great extent you prevent people from reading that story.

Many cases have been brought against Google -- more than 200 in Spain alone -- demanding that links to stories be removed.

The particular one that is the subject of the court's ruling concerned a real estate auction of property belonging to a man who at the time had social security debts.

It was a story from 1998, but still discoverable via Google, and despite the fact proceedings relating to the debts had been resolved many years before.

Google's Gmail: 10 years of dominance
Google Street Mapper goes off-road

The man successfully sued both Google Spain and Google Inc. in the Spanish courts but Google appealed, and it is on that appeal that today's ruling was made.

Bars banning Google Glass

The ruling covered three issues.

Firstly, it looked at territory issues, delving into issues such as the ability for Google to be sued, as Google Inc, who operates the search engine and where the data is processed.

Secondly, it looked at whether Google be treated as though it controls the data on pages reachable through its search engine -- or whether it is a kind of neutral intermediary.

Thirdly, it considered if current law provides for a right to be forgotten that is enforceable on search engines.

On all three issues, the court effectively ruled against Google.

If a search engine's business is established in a state, then regardless of where the data itself was actually processed, data protection law applies.

In effect, if Google looks to make money in Spain, the search engine itself is subject to local data protection laws.

On the data processing issue, the court ruled that Google was responsible as controller and on the third issue, that this responsibility implied that Google would have to remove links and results where appropriate.

Specifically, the court ruled that individuals' fundamental rights "override, as a rule, not only the economic interest of the search engine but also the interest of the general public in finding that information upon a search relating to the data subject's name."

This, essentially, is a right to be forgotten.

For Google, this result creates a headache, and potentially huge costs.
Paul Bernal

What happens next?

For Google, this result creates a headache, and potentially huge costs. It could open the door to a floodgate of actions, each of which will need resolution. Google will no longer be able to claim immunity.

The ruling also needs to be seen in the context of the reform of the data protection regime in Europe.

The Data Protection Directive dates back to 1995, before Google was even founded -- and a new Data Protection Regulation has been going through the tortuous processes through which EU law is formed for the last few years.

It appears close to completion -- it passed through the European Parliament in March this year -- and includes a formalization of a right to be forgotten.

The story is not over, however, and it is not clear how this ruling will feed into the last stages of the debate.

That a form of right to be forgotten is deemed to already exist in the current law could bolster the campaign of those who wish for a full "right to be forgotten" in the new regime.

The potential chilling effect of the ruling could make those who oppose the right redouble their already considerable lobbying efforts to have the right removed from the new regulation, thus rendering this ruling irrelevant.

As it is, however, the court has made a ruling that could have a huge impact on how search engines operate, and how we all use the Internet.

Read more: Europe's top court supports 'right to be forgotten'
Read more: Google Glass users fight privacy fears
Opinion: Google, let users opt in on privacy setting

The opinions expressed in this commentary are solely those of Paul Bernal.

ADVERTISEMENT
Part of complete coverage on
August 18, 2014 -- Updated 1236 GMT (2036 HKT)
Europe's deteriorating relationship with Russia has hit the region's growth, even before new food sanctions begin to bite.
July 16, 2014 -- Updated 1634 GMT (0034 HKT)
With cyberattacks on the rise and here to stay, it's a modern-day challenge for people and businesses to get smarter about preventing them.
August 14, 2014 -- Updated 1324 GMT (2124 HKT)
Airstrikes, rebels seizing control of oil fields, plus a severe refugee crisis are a recipe for market panic. So why are Iraq oil prices stable?
July 20, 2014 -- Updated 1524 GMT (2324 HKT)
Evidence points to pro-Russian separatists as perpetrators of the attack and Vladimir Putin is facing uncomfortable questions, David Clark writes.
August 5, 2014 -- Updated 1440 GMT (2240 HKT)
The biggest Ebola outbreak in history is taking its toll in Western Africa, hitting some of West Africa's most vulnerable economies.
July 3, 2014 -- Updated 0902 GMT (1702 HKT)
Macau has overtaken Switzerland in the wealth stakes, being named the world's fourth richest territory by the World Bank.
July 18, 2014 -- Updated 1447 GMT (2247 HKT)
Saudi Arabian Bateel brand is best known for its delectable dates but it now has more than a dozen cafes and a new bakery in the works.
July 17, 2014 -- Updated 1100 GMT (1900 HKT)
A British nanotech company has created what it says is the world's darkest material. It is so dark the human eye can't discern its shape and form.
July 16, 2014 -- Updated 1602 GMT (0002 HKT)
Jibo robot is designed to be an organizer, educator and assist family members. CNN's Maggie Lake met him and says she was impressed with his skills.
July 18, 2014 -- Updated 2109 GMT (0509 HKT)
American burger joints have sprung up all over London, but how to know which ones are best? CNN's Jim Boulden investigates.
June 18, 2014 -- Updated 1222 GMT (2022 HKT)
Sandwiched in between Iraq and Syria, Jordan's destiny seems to be one of a constant struggle for survival. John Defterios explains.
June 18, 2014 -- Updated 1502 GMT (2302 HKT)
At the last football World Cup, it was all about 3D. This time around, it's nothing less than 4K.
July 16, 2014 -- Updated 1058 GMT (1858 HKT)
Bob Mazzer has photographed inside London's Tube network for 40 years. He's captured history.
July 18, 2014 -- Updated 1712 GMT (0112 HKT)
Exotic animals are becoming a profitable business opportunity for Nicaraguan entrepreneurs. CNN's Rafael Romo reports.
June 13, 2014 -- Updated 1529 GMT (2329 HKT)
Iraq produces 3.3 million barrels per day and has the world's fourth-largest oil reserves. But the current crisis is putting all this in danger.
June 18, 2014 -- Updated 1222 GMT (2022 HKT)
Sandwiched in between Iraq and Syria, Jordan's destiny seems to be one of a constant struggle for survival. John Defterios explains.
June 16, 2014 -- Updated 1314 GMT (2114 HKT)
The gas standoff between Russia and Ukraine could have a knock-on effect on Europe. Explore this map to find out why is the EU nervous.
July 16, 2014 -- Updated 1058 GMT (1858 HKT)
Bob Mazzer has photographed inside London's Tube network for 40 years. He's captured history.
June 17, 2014 -- Updated 1206 GMT (2006 HKT)
The UK capital promotes its tech stars and shows it can compete with Silicon Valley. Here are five companies that pitch to make it big.
ADVERTISEMENT