Category: Data protection and digital governance

Will Deliveroo and Uber be captured by the proposed EU platform Regulation? You’d better watch out…

By Pieter van Cleynenbreugel

Online platforms have become major economic players over the past decade. It is not surprising, therefore, that their business practices have captured the European Union’s attention. This attention resulted in a 2018 proposal for a Regulation on transparency and equity in relationships with online platforms, a political agreement on which has been reached between the Commission, Council and European Parliament on 13 February 2019 (see for the press release, http://europa.eu/rapid/press-release_IP-19-1168_en.htm). It is very likely that this Regulation will be adopted before the European Parliament elections of this year. Even though it may seem premature to comment on the Regulation’s content in an in-depth way (the final negotiations and fine-tuning are still in progress at this time), this contribution would like to flag an important gap that has seemingly withstood scrutiny so far. That gap concerns the fact that the proposed Regulation apparently – seemingly unintentionally – would not apply to ‘underlying service-attached intermediation activities’ offered by platforms such as Uber and Deliveroo. This is most surprising, as the Commission clearly wants them to fall within the scope of that Regulation (according to its press release mentioned above, the new instrument is to apply to ‘the entire online platform economy’ if and when adopted). This contribution uncovers that gap and proposes a way to close it. Continue reading →

European Data Protection and Freedom of Expression After Buivids: An Increasingly Significant Tension

By David Erdos

On 14 February the Court of Justice of the EU (CJEU) handed down its decision in Buivids, a case which pitted an amateur individual online publisher against the Latvian Data Protection Authority (DPA).  This important case raises fundamental questions concerning the scope of European data protection, the ambit of the personal/household exemption, the legal definition of journalism and the role of data protection as regards to this and also related academic, artistic and literary expression.  The Court’s answers to these questions highlight the close and tense interface between European data protection and freedom of expression.  At the same time, they provide only relatively limited insight as to how the serious tension between data protection, special expression and freedom of expression more broadly should be resolved.  What they do suggest, however, is that not only national legislators but also courts and regulators have active and important roles toplay within this space.  The full implications of this, as well as further guidance on how to balance data protection and special expression, should be provided in the forthcoming case of Stunt which will require the Court to consider whether national courts should disapply the ban on pre-publication injunctions against special expression processing which is set out in UK data protection legislation.  In addition, Grand Chamber CJEU judgments on internet search engines and data protection are awaited both in relation to sensitive data and the geographical reach of any remedy here.  In sum, slowly but surely, an albeit messy corpus of European jurisprudence on data protection and freedom of expression is in the process of gestation. Continue reading →

Neues aus dem Elfenbeinturm: January 2019

Conference “La coopération opérationnelle en droit pénal de l’Union européenne”

University of Nantes, 1 February 2019. Deadline for registration: 25 January 2019.

Workshop “Re-conceptualizing Authority and Legitimacy in the EU: New Architectures and Procedures to Reconnect the Union with its Citizens”

LUISS Guido Carli, 1 February 2019. Deadline for registration: 28 January 2019.

Conference “EU Law, Trade Agreements, and Dispute Resolution Mechanisms: Contemporary Challenges”

King’s College London, 21-22 March 2019. Deadline for abstract submissions: 10 February 2019.

Conference “Exit! Il recesso dai trattati multilaterali”

University of Milan, 1 April 2019. Deadline for abstract submissions: 11 February 2019.

Conference “The fight against impunity in EU law”

University of Turin, 14-15 February 2019.

Conference “Constitutional Challenges in the Algorithmic Society”

EUI/University of Florence, 9-11 May 2019. Deadline for abstract submissions: 15 February 2019.

Doctoral Workshop/Seminar “The Rule of Law”

University of Milan, 4-5 July 2019. Deadline for abstract submissions: 10 March 2019.

The Pilatus Bank scandal: time to reconsider banking supervision, anti-money laundering and whistle-blower’s protection in the EU

By Dimitrios Kafteranis

On Monday 23 April 2018, the European Commission released its proposal on the protection of persons reporting on breaches of Union law. The proposal of the European Commission comes after pressure of the European Parliament and other organisations calling for a coherent protection of whistle-blowers at the EU level. This pressure results partially from different scandals that were revealed by whistle-blowers such as Panama Papers or the case of the Pilatus Bank in Malta. The Commission’s proposal aims to set common minimum standards to protect whistle-blowers when they report breaches of EU law. It has several legal bases and covers a wide-range of EU areas such as consumer protection, financial services and the protection of privacy and data. The reporting procedure follows the ‘classic’ three-tier model for whistle-blowing, that is reporting firstly internally, then to the designated authorities and as a last solution to the public. The text is innovative in the sense that it proposes a wide definition of the whistle-blower ranging from trainees to ex-employees. The European Commission regards whistle-blowing as an enforcement tool for the prevention, detection and prosecution of illegalities affecting EU law.

For the future, it is compelling to pursue the negotiations between the two co-legislators of the EU (European Parliament and Council) in order to follow the challenges on the question of whistle-blowing at the national and European level. These negotiations could take many years. This post aims to introduce the reader to the proposal for a Directive on the protection of whistle-blowers by cross-referring to the case of the Pilatus Bank where a journalist and a whistle-blower are involved. The purpose is to highlight that there is a need for an EU Directive on the protection of whistle-blowers and to demonstrate that the proposed EU Directive would have better protected the Pilatus Bank whistle-blower. Furthermore, this contribution will demonstrate the problematic nature of money laundering and banking supervision at the EU level. Following the creation of the Banking Union, the interconnectivity of banks is a fact and a problem in one country can create a domino effect to the others. For example, the Pilatus Bank scandal does not only concern Malta but the European banking system as a whole. Continue reading →

The European Commission’s E-evidence Proposal: Toward an EU-wide Obligation for Service Providers to Cooperate with Law Enforcement?

By Vanessa Franssen

On 17 April 2018 the European Commission published its long awaited legislative proposal on e-evidence. This proposal – which actually consists of two strongly interconnected proposals, a Proposal for a Regulation on European Production and Preservation Orders for electronic evidence in criminal matters (‘Proposed Regulation’) and a Proposal for a directive laying down harmonised rules on the appointment of legal representatives for the purpose of gathering evidence in criminal proceedings (‘Proposed Directive’) – is probably the first one in the field of criminal justice cooperation that the Council of the EU urged the Commission to put forward. Indeed, while the Member States are usually quite reluctant to give up sovereignty and to accept EU approximating rules in the field of criminal law, a number of Member States strongly pushed for a legislative intervention by the EU.

This is not entirely surprising: due to the increased use of all kinds of online services and information and communication technologies (ICTs), police and judicial authorities are confronted on a daily basis with the problem to collect electronic evidence, as the data they are looking for are often processed, transmitted and/or stored by foreign service providers, including big global technology companies such as Google, Facebook, Microsoft or Amazon. To compel a foreign person to cooperate in a criminal investigation is not obvious – the enforcement jurisdiction of police and judicial authorities is, in principle, limited to their own national territory.

This post will present the highlights of the double e-evidence proposal that is on the table and the first reactions to the proposals, at a moment where the institutional negotiations are picking up speed. Continue reading →

Reconsidering the blanket-data-retention-taboo, for human rights’ sake?

Belgian Constitutional Court offers CJEU chance to explain its puzzling Tele2 Sverige AB-decision

By Frank Verbruggen, Sofie Royer, and Helena Severijns

Compulsory retention, by ICT-providers, of all non-content user and traffic data, to ensure that that data will be available for subsequent use by law enforcement or intelligence, has been a controversial issue in the EU for several years now. On 19 July 2018 the Belgian Constitutional Court requested a preliminary ruling from the CJEU. Basically, it asks the EU Court to further clarify its earlier case law. The Belgian constitutional judges indicate that they find some aspects of the CJEU’s previous decisions puzzling and they also offer a new angle by explicitly linking the matter to the positive obligations of member states under the European Convention on Human Rights. The implied suggestion seems that the CJEU did not give those obligations enough weight when it found blanket data retention obligations disproportionate.   Continue reading →

A FRAGMENTATION OF EU/ECHR LAW ON MASS SURVEILLANCE: INITIAL THOUGHTS ON THE BIG BROTHER WATCH JUDGMENT

By Theodore Christakis

Last week, the European Court of Human Rights (ECtHR) issued an important, highly anticipated judgment, condemning the United Kingdom for its mass surveillance program.

Following Edward Snowden’s revelations regarding the United States-United Kingdom intelligence surveillance and intelligence sharing programme, 16 organizations and individuals (including the NGO Big Brother Watch) filed an application against the United Kingdom before the ECtHR. The 212page-long judgment published on September 13, 2018 is rich and deals with a great variety of important issues. Several among them are directly linked to some major legal questions examined in the past by the Court of Justice of the European Union (CJEU) or currently pending before it – not to mention the ongoing debate about whether the EU-US data transfer agreement known as Privacy Shield provides an “adequate level of protection”. The objective of this piece is to provide some first thoughts focusing on the strategic place of this judgment in the European legal landscape. Continue reading →

Another Turn of the Screw? The ‘Facebook Fanpages’ judgment

By Orla Lynskey

Introduction

The data protection practices of social networking giant Facebook have been the subject of much regulatory and public scrutiny in recent months, from the Cambridge Analytica saga to the allegation that Facebook’s consent mechanism is not GDPR-compliant and its terms of service constitute an abuse of dominance. The recent judgment of the Grand Chamber of the CJEU is therefore likely to add to Facebook’s data protection woes, by increasing the pressure on it to reconsider the data processing practices that underpin its business model. Continue reading →

Neues aus dem Elfenbeinturm: April 2018

Conference “Sovereigns and citizens in the Brexit bargain: Do rights count?” (Prof. Takis Tridimas)

Université de Liège, Amphithéâtre Portalis, 23 April 2018 (15:30-16:30).

Summer School “Parliamentary Accountability and New Technologies: Transparency, Privacy and Security Challenges”

LUISS Guido Carli University, Rome, 9-20 July 2018. Deadline for applications: 29 April 2018.

Call for papers: Edited Volume “Legal Impact Assessment of Brexit”

Deadline for submissions: 9 May 2018.

Workshop “The International Legality of Economic Activities in Occupied Territories”

T.M.C. Asser Institute, The Hague, 17 October 2018. Deadline for abstract submissions: 15 May 2018.

Conference “Procedural rights in criminal proceedings in the EU”

Universities of Utrecht, Leiden and Maastricht, 13-14 September 2018. Deadline for applications: 15 May 2018.

Conference “Human Rights Laws at a Crossroads: What Directions after Brexit?”

University of Leicester, 25 May 2018. (Free) registration necessary.

Workshop “Constitutional Protection of Minorities – Comparing Concepts, Models and Experiences in Asia and in Europe”

University of Trento, 4-5 May 2018. Registration necessary.

Summer School “Comparing Constitutional Adjudication – Islam in Constitutional Adjudication in Europe”

Dimaro, Italy, 30 July-3 August 2018. Deadline for applications: 26 April 2018.

Seminar “The Western Sahara Campaign Case”

Queen Mary University of London, 3 May 2018. Registration necessary.

Neues aus dem Elfenbeinturm: January 2018

Call for papers: Workshop “Information Sharing and European Agencies: Novel Frontiers”

European University Institute, 23 May 2018. Deadline for submissions: 15 February 2018.

Call for Papers: “Challenges to EU Law and Governance in the Member States”

European University Institute, 8 June 2018. Deadline for submissions: 18 February.

Call for papers: Special Issue “Revisiting WTO’s Role in Global Governance”

Trade, Law and Development. Deadline for submissions: 28 February 2018.

Call for Papers: PhD Colloquium “Regulating New Technologies in Uncertain Times”

Tilburg University, 14 June 2018. Deadline for submissions: 28 February 2018.

Call for Papers: “Geography and Legal Culture on the International Bench”

Leiden University, The Hague Campus, 17-18 May 2018. Deadline for submissions: 28 February 2018.

PNR Agreements between Fundamental Rights and National Security: Opinion 1/15

By Arianna Vedaschi and Chiara Graziani

On July 26, 2017, the European Court of Justice (ECJ) issued Opinion 1/15 (the Opinion of the Advocate General on this case had been discussed previously in this blog, part I and part II) pursuant to Article 218(11) TFEU on the draft agreement between Canada and the European Union (EU) dealing with the Transfer of Passenger Name Record (PNR) data from the EU to Canada. The draft agreement was referred to the ECJ by the European Parliament (EP) on January 30, 2015. The envisaged agreement would regulate the exchange and processing of PNR data – which reveals passengers’ personal information, itinerary, travel preferences and habits – between the EU and Canada. The adoption of the agreement is crucial because, according to Article 25 of Directive 95/46/EC as interpreted in the Schrems decision (commented here), the transfer of data to a third country (discussed here) is possible only if such country ensures an “adequate level of protection.” This standard can be testified by an “adequacy decision” of the European Commission or, alternatively, by international commitments in place between non-EU countries and the EU – as the one examined by the ECJ in this Opinion.

Not surprisingly, the leitmotiv of the Court’s Opinion is the challenging balance between liberty and security. Maintaining a realistic perspective, the Court considered mass surveillance tolerable at least in theory, because it is a necessary and useful tool for the prevention of terrorism. Yet, it insisted that there should be very strict rules as to the concrete implementation of such surveillance. For this reason, it found some provisions of the draft agreement incompatible with Articles 7 (privacy) and 8 (data protection), in conjunction with Article 52 (principle of proportionality) of the Charter of Fundamental Rights of the European Union (CFREU).

As a result, the agreement cannot be adopted in the current form and the EU institutions will have to renegotiate it with Canada. For sure, this renegotiation will prove to be challenging. Nevertheless, as the analysis below will show, the Luxembourg judges, by addressing particularly technical issues of the agreement, provided a detailed set of guidelines that, if respected, would ideally preserve fundamental rights – in this case, the right to privacy and to data protection – without undermining public security. Through a smooth and refined reasoning, the Court’s decision indeed suggests potential solutions to amend the draft agreement in a way that is compliant with the CFREU and, ultimately, the rule of law. Continue reading →

Third country law in the CJEU’s data protection judgments

By Christopher Kuner

Introduction

Much discussion of foreign law in the work of the Court of Justice of the European Union (CJEU) has focused on how it deals with the rules, principles, and traditions of the EU member states. However, in its data protection judgments a different type of situation involving foreign law is increasingly arising, namely cases where the Court needs to evaluate the law of third countries in order to answer questions of EU law.

This is illustrated by its judgment in Schrems (Case C-362/14; previously discussed on this blog, as well as here), and by Opinion 1/15 (also discussed on this blog, part I and part II), a case currently before the CJEU in which the judgment is scheduled to be issued on 26 July. While these two cases deal with data protection law, the questions they raise are also relevant for other areas of EU law where issues of third country law may arise. The way the Court deals with third country law in the context of its data protection judgments illustrates how interpretation of EU law sometimes involves the evaluation of foreign legal systems, despite the Court’s reluctance to admit this. Continue reading →

Neues aus dem Elfenbeinturm: July 2017

Brussels Summer School on EU competition law

Brussels, 4-9 September 2017. (Paid) registration required.

Conference « Metamorphosis of the European Economic Constitution »

University of Luxembourg, 21-22 September 2017. Registration required.

Conference « Protecting European Union Values: Breaches of Article 2 TEU and Their Consequences »

University of Warsaw, 14-15 September 2017. (Free) registration required.

Seminar : « The EU FTAs : Do you really want to know ? A dialogue on transparency »

King’s College London, 14 July 2017. (Free) registration required.

Call for papers : Special issue on European Law

Utrecht Journal of International and European Law. Deadline for submissions : 25 August 2017.

Call for papers : Comparative Constitutional Law and Administrative Law Quarterly

Deadline for submissions : 1 September 2017.

Call for papers: European Data Protection Law Review 2017 Young Scholars Award

Deadline for submissions: 15 October 2017.

A link too far: CJEU rules that sale equals communication and streaming from unlawful sources is illegal (C-527/15, Filmspeler)

By Bernd Justin Jütte

 In its judgment on 26 April the CJEU extends the scope of the right of communication to the public under Article 3 of the Information Society Directive (Directive 2001/29/EC), which grants a right holder the exclusive right to communicate a work or a related right to the public, to cover the sale of devices which contain pre-installed software that provides its users with links to unlawful streaming content. It further found that viewing such content is not privileged by the exception of Article 5(1) for temporary reproduction of the same directive, thereby rendering the provision as well as the streaming of unlawful content illegal, and thus increasing the circle of persons who can be held liable. Continue reading →

Neues aus dem Elfenbeinturm: May 2017

Conference on the Legitimacy of Unseen Actors in International Adjudication

The Hague, 26-27 October 2017. Deadline for abstract submissions: 31 May 2017.

Call for applications: Summer School „Fundamental Rights and EU Trade Agreements”

University Centre of Bertinoro, 25-30 June 2017. Deadline for applications: 15 June 2017.

Conference “Freedom under Pressure – Data protection and privacy, the freedom of movement in the EU and property protection”

Ghent University, 7-8 December 2017. Deadline for abstract submissions: 15 June 2017.

Workshop “Resolving the Tensions between EU Trade and Non-Trade Objectives: Actors, Norms, and Processes”

Utrecht University, 10 November 2017. Deadline for abstract submissions: 1 July 2017.

Conference “Constitutionalism in a Plural World”

University of Porto, 22-23 November 2017. Deadline for abstract submissions: 15 July 2017.

Call for Papers for the Irish Journal of European Law Volume 2017 on Brexit

Deadline for submissions: 28 July 2017.

Neues aus dem Elfenbeinturm: February 2017

Workshop Series “Current Issues in EU External Relations”

University of Luxembourg, 31 March/19 May/29 May 2017. Deadline for proposal submissions: 6 March 2017.

Conference “Comparative Public Law in Europe – Opportunities and Challenges”

University of Essex, 14 March 2017. Deadline for (free) registration: 10 March 2017.

Radboud Economic Law International Conference “Digital Markets in the EU”

Radboud University, 9 June 2017. Deadline for abstract submissions: 24 March 2017.

Summer Schools “Venice Academy of Human Rights – Economic, Social and Cultural Rights as an Answer to Rising Inequalities” and  “Venice School of Human Rights – Human Rights as Our Responsibility”

EIUC Venice, 3-12 July and 9-17 June 2017, respectively. Deadline for applications: 19/27 April 2017.

Tele2 Sverige AB and Watson et al: Continuity and Radical Change

By Orla Lynskey

Introduction

The CJEU delivered its judgment in Tele2 Sverige AB and Watson on 21 December 2016. The Court had been asked by a Swedish and British court respectively to consider the scope and effect of its previous judgment in Digital Rights Ireland (discussed here). The judgment reflects continuity in so far as it follows in the line of this, and earlier judgments taking a strong stance on data protection and privacy. Yet, the degree of protection it offers these rights over competing interests, notably security, is radical. In particular, the Court unequivocally states that legislation providing for general and indiscriminate data retention is incompatible with the E-Privacy Directive, as read in light of the relevant EU Charter rights. While the judgment was delivered in the context of the E-Privacy Directive, the Court’s reasoning could equally apply to other EU secondary legislation or programmes interpreted in light of the Charter. This judgment will be a game-changer for state surveillance in Europe and while it offered an early Christmas gift to privacy campaigners, it is likely to receive a very mixed reaction from EU Member States as such. While national data retention legislation has been annulled across multiple Member States (Bulgaria, Czech Republic, Cyprus, Germany and Romania), this annulment has been based on an assessment of the proportionality of the relevant measures rather than on a finding that blanket retention is per se unlawful. For those familiar with the facts and findings, skip straight to the comment below. Continue reading →

Neues aus dem Elfenbeinturm: December 2016

Conference « EU Civil Procedure Law and Third Countries: Which Way Forward? »

University of Kiel, 2-3 February 2017. Deadline for abstract submissions : 19 December 2016.

Workshop « International Law in a Dark Time »

University of Helsinki, 22-23 May 2017. Deadline for abstract submissions : 30 December 2017.

Conference « EU Policy on International Investments : Uncertainties, Challenges, and Opportunities »

University of Zaragoza, 20-21 March 2017. Deadline for proposal submissions : 31 December 2017.

IntLawGrrls! 10th Birthday Conference

University of Georgia Law School, 3 March 2017. Deadline for abstract submissions : 1 January 2017.

Workshop « New Challenges for European Solidarity »

University of Cambridge, 9-10 March 2017. Deadline for abstract submissions : 13 January 2017.

Call for papers Jean Monnet Seminar « The EU and Trust in the Online Environment »

Inter University Center, Dubrovnik, 23-29 April 2017. Deadline for abstract submissions : 31 January 2017.

ESIL Annual Conference 2017 : Global Public Goods , Global Commons, and Fundamental Values : The Responses of International Law

University of Naples, 7-9 September 2017. Deadline for abstract submissions : 31 January 2017.

Call for submissions : Trade, Law and Development Special Issue on Recent Regionalism

Deadline for submissions : 15 February 2017.

Call for papers : « Human Dignity and the Constitutional Crisis in Europe : Humanity, Democracy, Social Europe »

European University Institute, Florence, 15-16 June 2017. Deadline for abstract submissions : 28 February 2017.

European Environmental Law Forum 2017 Conference : « Sustainable Management of Natural Resources – Legal Approaches and Instruments »

Copenhagen, 30 August – 1 September 2017. Deadline for abstract submissions : 17 March 2017.

Opinion 1/15: AG Mengozzi looking for a new balance in data protection (part II)

By Maxime Lassalle

The AG’s proportionality test

After these general considerations, the AG starts his proportionality test. In the opinion nine points are considered separately (para. 210). From this analysis, three main elements deserve to be emphasized. Continue reading →

Opinion 1/15: AG Mengozzi looking for a new balance in data protection (part I)

By Maxime Lassalle

On 8 September 2016, Advocate General (AG) Mengozzi delivered his much awaited opinion on the agreement between Canada and the European Union on the transfer and processing of Passenger Name Record (PNR). It follows the European Parliament’s resolution seeking an Opinion from the Court of Justice of the European Union (CJEU) on the compatibility of the agreement with the Treaties. Even though the opinion concludes that the agreement has many loopholes, it could disappoint those who were expecting a strong condemnation of PNR schemes as such.

This blogpost intends to present the context of this procedure and the main elements of the AG’s opinion before analysing them. The question of the appropriate legal basis for the agreement, also raised by the Parliament, will not be addressed. However, before turning to the AG’s opinion, we need to briefly sketch the background of the proposed agreement. Continue reading →