Google Appeals French Order For Global 'Right To Be Forgotten' (reuters.com)

An anonymous reader quotes a report from Reuters: Alphabet Inc's Google appealed on Thursday an order from the French data protection authority to remove certain web search results globally in response to a European privacy ruling, escalating a fight on the extra-territorial reach of EU law. In May 2014, the European Court of Justice (ECJ) ruled that people could ask search engines, such as Google and Microsoft's Bing, to remove inadequate or irrelevant information from web results appearing under searches for people's names -- dubbed the "right to be forgotten." Google complied, but it only scrubbed results across its European websites such as Google.de in Germany and Google.fr in France, arguing that to do otherwise would set a dangerous precedent on the territorial reach of national laws. The French regulator, the Commission Nationale de l'Informatique et des Libertes (CNIL), fined Google 100,000 euros ($112,150.00) in March for not delisting more widely, arguing that was the only way to uphold Europeans' right to privacy. The company filed its appeal of the CNIL's order with France's supreme administrative court, the Council of State. "One nation does not make laws for another," said Dave Price, senior product counsel, Google. "Data protection law, in France and around Europe, is explicitly territorial, that is limited to the territory of the country whose law is being applied." Google's Transparency Report indicates the company accepts around 40 percent of requests for the removal of links appearing under search results for people's names.

Comments

US disagrees

[Anonymous Coward]

interestingly the country google is from completely disagrees with googles stance as they regularly make laws and rulings around data beyond its borders

Re: US disagrees

[Anonymous Coward]

Bullshit, bullshit, bullshit. The censorship practice that is commonly called "right to be forgotten" is not mandated by data protection laws. Otherwise there wouldn't need to be a special law about it, and also the original web pages would have to be censored, not just the search results. TFA contradicts you in that it speaks of information that is "inadequate or irrelevant", not of personal data that would fall under data protection.

If you agree with the EU's cynical interpretation of "Libertés", what about other jurisdictions? Shouldn't Iran's and China's rules about what is deemed inadequate or irrelevant also be respected worldwide? If not why not?

Re: US disagrees

[locofungus]

The censorship practice that is commonly called "right to be forgotten" is not mandated by data protection laws.

I am not a lawyer and I don't understand all the nuances around this but actually, in Europe, this is (apparently) mandated.

*Any* collection of personal information into a database is covered by data protection laws. *Any* european citizen can request a report of all the information held on them (subject to some exclusions that probably wouldn't apply to google) for a capped fee. *Any* citizen can request that incorrect information is corrected (again there are some exceptions where it's only necessary to note that the citizen disputes the item) and *any* citizen can request that any information held on them should be deleted unless it's continuing holding is necessary (for example, billing information for a continuing subscription, necessary regulatory regulations regarding data retention etc)

This is complicated by the fact that the highest European court did give a ruling that some of these regulations don't apply to search engines (a ruling that I approve of). Prior to that ruling it could have been argued that google was breaking the law just by building its search database as it should have obtained explicit permission from each person to collect any information on them at all.

Eventually this will get pushed up to the highest courts in Europe and they will clarify what the current law actually means with regards to search engines.

After that there will probably still be arguments about what is right and wrong but pretty much the only way it will change is if the EU states can get together and agree a European wide change to the law (For this particular type of treaty I don't know if it would be majority or unanimity that would be required.)

It should also be noted that many of the requirements of data protection laws in Europe come from treaty but the individual laws are set at a national level - i.e. the treaty says what must be allowed or prohibited but the individual nations are responsible for writing laws into their books that enforce the treaty. So sometimes a national law might gold plate a european treaty - so the EU courts might find that the French law is legal in EU land but not required or they might find that the French law is illegally overbroad and will have to change or, indeed, they might find that French law is deficient in failing to protect some right.

The British government (of all persuasions) is a great fan of gold plating EU regulations, either in rhetoric when they want to beat on Europe or in law when they want an excuse to pass some new draconian legislation. "Europe made us do it" when what they mean is "Europe required us to change the law but didn't require this law which is a superset of what Europe required"