Google Spain v AEPD and Mario Costeja González

Google Spain v AEPD and Mario Costeja González
Case name	Google Spain v AEPD and Mario Costeja González
Court	Court of Justice of the European Union
Citation	C‑131/12
Decided	13 May 2014
Judges	Grand Chamber
Nationality	European Union

Google Spain v AEPD and Mario Costeja González Google Spain v AEPD and Mario Costeja González was a landmark decision of the Court of Justice of the European Union interpreting Directive 95/46/EC and establishing the "right to be forgotten" against search engines. The ruling involved parties including Google, the Spanish Government, the Agencia Española de Protección de Datos and an individual plaintiff, leading to extensive debate among jurists from institutions such as the European Commission and commentators at the European Court of Human Rights and Council of Europe.

Background

The case arose against a context of expanding digital platforms like Google Search, the rise of online archives such as La Vanguardia and El País, and evolving privacy regimes across the European Union. Legislative frameworks implicated included Directive 95/46/EC, national statutes like the Spanish Data Protection Act 1999, and international instruments referenced by scholars from Harvard Law School, University of Cambridge, and Yale Law School. Institutional actors such as the Agencia Española de Protección de Datos and the European Data Protection Supervisor engaged in parallel proceedings while civil society groups including Electronic Frontier Foundation, Privacy International, and the Open Rights Group monitored developments.

Case facts

Mario Costeja González, a resident of Barcelona, contested search results produced by Google Spain SL and Google Inc. after a 1998 notice published in La Vanguardia reported on debt-collection proceedings and a forced auction of property. Costeja contacted the Agencia Española de Protección de Datos seeking removal of links to the newspaper archive; the agency issued an order against the Spanish newspaper and later to Google Spain SL, prompting legal challenges that reached national courts including the Audiencia Nacional and ultimately a request for a preliminary ruling to the Court of Justice of the European Union under Article 267 TFEU.

Legal issues and arguments

Key questions referred to the Court of Justice of the European Union concerned whether a search engine operator constituted a "data controller" under Directive 95/46/EC and whether individuals could require de-referencing of links after administrative or judicial remedies. Advocates for Costeja relied on provisions of Directive 95/46/EC, decisions by national data protection authorities like the Commission Nationale de l'Informatique et des Libertés and precedent from tribunals in Germany and France. Google argued for reliance on intermediary protections akin to those in e-Commerce Directive and emphasised the public interest bolstered by jurisprudence from the European Court of Human Rights including cases like Von Hannover v. Germany and Schaefer (note: illustrative of privacy balances).

Judgment and legal reasoning

On 13 May 2014 the Grand Chamber held that operators of search engines are "data controllers" insofar as they process personal data appearing on third-party webpages and determine the purposes and means of processing. The Court of Justice of the European Union interpreted Directive 95/46/EC to permit individuals to request de-referencing in cases where data are "inaccurate, inadequate, irrelevant or excessive" relative to the purposes of processing, invoking principles earlier discussed by the European Commission and the Article 29 Working Party. The judgment weighed rights under Directive 95/46/EC against freedoms protected by the Charter of Fundamental Rights of the European Union, referencing case law from the European Court of Human Rights such as Z v. Finland and balancing privacy with the public interest as outlined in instruments endorsed by Council of Europe committees.

Impact and significance

The ruling catalysed legislative and administrative changes across European Union member states, influenced guidance from the Article 29 Data Protection Working Party and subsequent standards from the European Data Protection Board. Media organisations including The Guardian, Le Monde, Frankfurter Allgemeine Zeitung, and ABC (Spain) reported on implications for archives, while technology firms such as Microsoft, Yahoo!, and DuckDuckGo reassessed search policies. Academic commentary from faculties at Oxford University, London School of Economics, and Stanford Law School debated effects on freedom of expression and access to information, citing comparative law in jurisdictions like Argentina, Canada, and United States. The phrase "right to be forgotten" entered legal and public vocabularies, prompting regulatory dialogues within the European Parliament and between the European Commission and member-state data protection authorities.

Subsequent developments and implementation

Following the judgment, Google launched an online form to process de-referencing requests and implemented national-level removals coordinated through entities in Ireland and Spain. The Article 29 Working Party and later the European Data Protection Board issued guidelines clarifying criteria for balancing rights, while national courts from France to Germany and agencies like the Commission Nationale de l'Informatique et des Libertés provided rulings and orders interpreting scope. The decision fed into the legislative overhaul that produced the General Data Protection Regulation which supplanted parts of Directive 95/46/EC and reshaped compliance obligations for platforms including Google LLC, Facebook, and Twitter, Inc.. Ongoing litigation has reached tribunals such as the Audiencia Nacional (Spain) and panels within the Court of Justice of the European Union on questions of cross-border de-referencing and extraterritorial scope.

Category:Court of Justice of the European Union cases Category:Data protection law Category:Privacy law