Google Appeals French Order For Global 'Right To Be Forgotten' (reuters.com)
An anonymous reader quotes a report from Reuters: Alphabet Inc's Google appealed on Thursday an order from the French data protection authority to remove certain web search results globally in response to a European privacy ruling, escalating a fight on the extra-territorial reach of EU law. In May 2014, the European Court of Justice (ECJ) ruled that people could ask search engines, such as Google and Microsoft's Bing, to remove inadequate or irrelevant information from web results appearing under searches for people's names -- dubbed the "right to be forgotten." Google complied, but it only scrubbed results across its European websites such as Google.de in Germany and Google.fr in France, arguing that to do otherwise would set a dangerous precedent on the territorial reach of national laws. The French regulator, the Commission Nationale de l'Informatique et des Libertes (CNIL), fined Google 100,000 euros ($112,150.00) in March for not delisting more widely, arguing that was the only way to uphold Europeans' right to privacy. The company filed its appeal of the CNIL's order with France's supreme administrative court, the Council of State. "One nation does not make laws for another," said Dave Price, senior product counsel, Google. "Data protection law, in France and around Europe, is explicitly territorial, that is limited to the territory of the country whose law is being applied." Google's Transparency Report indicates the company accepts around 40 percent of requests for the removal of links appearing under search results for people's names.
interestingly the country google is from completely disagrees with googles stance as they regularly make laws and rulings around data beyond its borders
It seems like countries are increasingly demanding that corporations follow their laws globally. It's inevitable that we'll increasingly have laws in two countries that are mutually exclusive, but those countries will want their laws followed globally. A corporation doing business in those two countries has no choice but to either leave at least one country or break the law in at least one of the countries. What do you do in that situation?
The "right to be forgotten" involves the removal of personal information. However, what happens if a French citizen requests they be forgotten by Google while US investigators are looking into that same person on suspicion of terrorism and have a court order demanding preservation of the data? Which set of laws do you obey?
The premise of the question is simple. But the consequences and answers are anything but simple.
The letter from the authorities to Google that complained about Google not complying with the court order specifically used the example that users in France searching on Google.com instead of Google.fr get a result where the right to be forgotten is not implemented.
Google is trying to call .com a global only search result, but that is disingenuous, both they and all others already do geo-fencing and geo-tailoring on what is served through a "global" .com domain.
One nation does not make laws for another, except warmongering USA.
Wrong. Italy routinely makes laws that are meant to be valid all throughout the universe. They just lack the firepower to enforce them.
Screw you, troll. This doesn't involve US laws. It involves a multinational company headquartered in the US that's not following EU laws. Lots of countries try to extend their laws beyond their borders, and in some cases it makes sense. Sometimes it doesn't. The new EU data protection directive is much more aggressive in extending the rules beyond EU borders.
Let's say a US citizen travels to Canada and is injured from staying at a hotel in Canada. Because it's a multinational hotel chain with a presence in the US and the injured person is a US resident, they would potentially sue for damages in US courts. The case will be heard in the US, but the US court will interpret Canadian law in its ruling. Why? Because the hotel has no obligation to follow US laws in Canada, even when the guest is a US citizen. In this case, Canadian laws effectively extend beyond the border in the sense that they are what the US court ends up interpreting. In fact, sometimes US laws actually require that US courts interpret foreign laws.
"If this right was limited to some extensions, it could be easily circumvented: in order to find the delisted result, it would be sufficient to search on another extension (e.g. searching in France using google.com) , "
https://www.cnil.fr/fr/node/15814
Are corporations so big they can play off one jurisdiction against another to do whatever they want?
TTIP, is the trade agreement that lets corporations sue governments in a kangaroo court (of corporate lawyers) to remove laws. If that passes than Google could demand EU remove the "right to be forgotten" law, and it would be a few corporate lawyers hearing things in secret who would decide.
The root of this problem is the death of privacy. Especially amusing as the chief killers of personal privacy are most prominently self-proclaimed "conservatives" trying to conserve the profits of large companies. They profit by treating us a mindless sheep following the carrots of our personal interests and even strengths.
If our personal information was OUR property, then we should be entitled to store it where WE want to keep it, even if that was a place that the google could not conveniently copy. The legal default should be NO ownership of other people's personal information. The only exception I can think of is where several people are involved, in which case each of them should properly have a copy of the transaction AMONG themselves.
If you start from that perspective, then the entire situation looks very different. If owning another person's personal information without their permission was a crime, then you don't have to create a bizarre right to be forgotten (which is fundamentally impossible because you have to remember what to forget) and you can just go after the criminal who is publicizing your STOLEN personal information.
So what is the chance of fixing the problem? ZERO. The google profits are just fine the way things are and they are NOT going to allow any major changes.
Remember, "All your attention are belong to us [the google]."
P.S. I'm aware of the sticks of negative personal information, but it is quite obvious and gets plenty of discussion. The carrots are actually more dangerous.
Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
The consequence of this will probably be that european countries will prohibit exporting data which might fall under its privacy laws, as it won't be able to enforce those laws on data outside its territory. I'd also be somewhat amused if they'd have the idea to "license" the data and revoke the license if the data is used in a way contradicting local laws (i.e. "you don't own the data you gather in this country, we just grant you a license to use it under certain conditions for a potentially limited amount of time").
Dear Google,
How about you stop hiding behind the laws and your highly paid lawyers and actually do something that's right for a change?
You know, 'Do no evil'. Yes it was always a bullshit slogan, and you've been doing evil ever since the beginning, but here's your chance to stop acting like a complete asshole and recognise when you've gone to far, whether or not the letter of the law in your favourite jurisdiction says otherwise.
So, Google, how about you clean up your act, and be the good guys for a change?
Sincerely,
The Rest of the Fucking Internet.
...it becomes an American company again?
I sure wish they took the same view come tax time.
EU is making laws for Google, not for other countries. If you want to keep operating there, play by their rules.
Because the US is working on enacting laws that will allow search warrants for computer crimes to be executed globally. Seems like that's pretty much the same thing...
Yes, it's complicated. As it is always when several people share something in common. Those server logs are traces of interactions you (well, your Web server) had with others, and as such "belong" to you as they belong to your peer. Conceptually, there is a corresponding entry in a "client log" (browser cache, whatever) at the other side.
If you squint, this is an old problem: my garden (I wish I had one, but let's pretend :) shares a common border with my neighbour's. If I like, say, a bit of chaos and let the weeds grow, my neighbor might be miffed that seeds are blown over and mess up her orderly array of tomatos and zucchini. A classical conflict of interests, which will have to be resolved in some way. In spite of millenia of experience with that, we haven't really reached a point where we could be satisfied with how we resolve those conflicts; sometimes the process is messy and painful.
What's new is the fast globalization process we are seeing. Coupled with the radical economy of scale we are witnessing (which more or less leads to a "winner takes all" situation and begets huge behemoths, and highly asymmetrical "business" relationships). That's a recipe for trouble.
So I don't really know which one to side with: whereas CNIL's position seems authoritarian (and a bit pathetic), and I wouldn't like state actors who I don't know much about messing with my search results (disclosure: my preferred search engine is *not* Google), I'm a bit relieved to see Google hitting some snags in its unhindered expansion.
If every single country can pass law and applied to all. There would be nothing left of internet search engine. The next step of the law would be applied to all internet and not just search engine. Imagine newspaper or magazine would require to remove article.
What's stopping MPAA and RIAA buy off a country to pass law to regulate internet?
If this law stands Google needs to pull out of France
*Sarcasm*
So Google never heard of GeoIP
A company that sells targeted adds, can not even guess where you are connecting from
That is called contempt of court in anglo-saxon juridictions
The law is NOT being enforced externally at all. Nobody on the ECJ is going to give Google any grief if they ignore a request by me to be forgotten - I'm not a European citizen and my country does not have such a right.
But Google has to comply with the laws of the countries it operates in, in so far as it concerns data about people from those countries. By Google's reasoning, if you kidnap somebody and take them to a country where kidnapping is legal - you cannot be prosecuted ? Their right not to be kidnapped dissappeared after you took them to a country that doesn't recognize it ? Of course not. They are still citizens from a country where that is a right - and their government still has a duty to protect that right, even if they are not currently within it's borders.
I see no reasonable reason why a person's data should be any different.
Unicode killed the ASCII-art *
Ha! America doesn't like being told what to do by the EU but thinks the UK should be subjected to rule by the unelected EU overlords.
I demand that this failure to get first post be forgotten.
systemd is Roko's Basilisk.
If Alphabet wins.. they are saying that "information" taken from one nation and stored in another deserves no protection once outside it's boarders.
Assange couldn't be prosecuted if this prevails (yes, I know that it's only a secret grand jury at the moment) because https://wikileaks.com/ is physically outside of the US and US laws don't apply? In that case wikileaks would only need to install a region filter to demonstrate "token" compliance. Now, if he was somehow kidnapped and found himself on US soil he would be in trouble.
Lets hope in this case the mega corporation wins... which could be a limited victory for everybody.
it's been rainy here by the Beach
Almost half of the items in my /. feed are related to Google. That's a bit much.
Does the same law apply to books? Do we go and hunt down books that recorded the events of people and throw them away? Or is search an easy target because they just have to email a request..
The protection information receives outside its borders is determined by jurisdiction and international agreements. There are agreements on copyrights and extradition. There is no general law or principle about "protection of information". Furthermore, Google search results don't "take information", they merely link to a source in whatever country the information resides in.
Assange can be prosecuted in the US if he violated a US law, and if his offense is an extraditable offense under a treaty with a nation that he happens to reside in, then that nation would extradite him.
The biggest problem with censorship is that at its fundamental level, it is an attempt to control what people will know or believe, (since what information they are being allowed to access in the first place is controlled), and is an attempt to try and legislate what kinds of things people are even allowed to *THINK* about.
Nobody, no agency, no authority, no government, absolutely no power absolutely anywhere has any right to decide what any other human being should be allowed to think. Period.
While it certainly may suck if somebody makes an unfair decision about you because you did something spectacularly stupid or wrong a long time ago when that person is too narrow minded to consider how much time has actually elapsed since it occurred, but in the end that decision is still on them. Unfair shit happens to everybody in this world... heck, half of the people in this world are starving to death, and somebody living in a privileged nation thinks its unfair that an employer won't hire them because of some stupid shit that went down over a decade ago? It doesn't fucking matter whose fault it is when bad stuff happens to any us, it is still that person's individual responsibility to deal with it... and to continue to be the best person that they know how to be, and blaming past mistakes or blaming the fact that other people might not forgive us for them to justify why we aren't being better is just acting like a fucking crybaby. People who do so need to grow the hell up, act like adults, and and take responsibility for their OWN lives in the here and the now, instead of letting what people might believe about them dictate what choices they make.
(huff, puff, huff, puff, huff, puff.. Well, that turned into more of a rant than I first thought it would).
File under 'M' for 'Manic ranting'
Since google.com is a service that is available in France, then it is also under French regulations
If google only want to apply the constraint on google.fr , ok , then they have to deactivated access to google.com
This is not censorship, people, this is only personal data protection.
We didn't whip the ass of dictatorship to let anything but the first amendment set the rules of the digital high seas, any more than we let local thugs send out pirate ships to international waters to harass trade there.
From the halls of Montezuma
To the shores of Normandeeeeeeee
We will fight our country's battles
On the land or in the tubes!
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
"The right to be forgotten" desperately needs a name change, since what it technically means is so radically different from what it plainly says or describes through its words. Its advocates should start calling it the "right to not be mentioned" or something like that, so that people can clearly see that it's merely about limiting speech rather than thought.
"Believe me!" -- Donald Trump
You don't have a right to be forgotten, isn't this related to free speech? What prevents punditry from being translated to slander? This should fall in the same category as that. Public figures deserve to be made fun of and private figures deserve to not be harrassed. Every individual is in charge of their own destiny.
France doesn't have jurisdiction over Google in the US; all they have jurisdiction over is Google's French subsidiary.
So, in effect, France is trying to fine Google France for actions committed by the owner of Google France outside of France. If France wants to set that precedent, they are welcome to it; I suspect it will strongly discourage future investment in France and French companies.
Play by who's rules where? Companies like Google dodge tax all over the world equally, that doesn't magically mean they need to obey only the laws of the country in which they pay tax.
EU is making laws for Google, not for other countries. If you want to keep operating there, play by their rules.
EU is making laws full stop. What laws the EU makes should have no effect on an American company doing business in Australia for example.
EU is making laws full stop. What laws the EU makes should have no effect on an American company doing business in Australia for example.
And this law has no effect on an American company doing business in Australia. Absolutely none. It is about what search results Google are serving up within EU.
Almost fully agree with you. (your reference about links excludes knowledge of cache data provided by Time Machine)
We just appear to have problems with conceding jurisdiction as frequently as we claim it. There is a reason why the US has never agreed to fully support the ICC, the 1% who benefit from the immunity, and layered delays to prosecution will never be held accountable.
How long (based on treaties, international law, etc.. ) do cases like "megaupload.com" take to wind through the courts?
"Google search results don't "take information", they merely link to a source in whatever country the information resides in."
Isn't that what "time machine" does? It makes a copy of information and keeps it along with the original url. I just read an opinion where "time machine" cache information would be admissible as evidence in a wide variety of situations.
If Google doesn't want to follow EU's laws, then it shouldn't operate in EU. If an American company is doing business only in Australia, what exactly can the EU do to it?
Since Google does operate in EU by choice, and takes advantage of tax laws in foreign countries while doing it, its argument is insincere.
Think about your argument in relation to copyright infringement, or arms and tech sales, or business with countries on the state sponsor of terror list. The US does this all the time.