the challenged decision was rendered, Data Protection Directive 95/46/EC was in force. This directive obliged Member States to protect the right to privacy of natural persons with respect to the processing of personal data. On 25 May 2018, the directive was replaced with the General Data Protection Regulation (Regulation [EU] 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, OJ L 119 of 4 May 2016, p. 1; hereinafter: GDPR). In Art. 17, the General Data Protection Regulation contains a right to erasure, which is also referred to as the “right to be forgotten” in brackets. II. Statements concerning the constitutional complaint were submitted by the Federal Government, the Federal Court of Justice (Bundesgerichtshof), the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für den Datenschutz und die Informationsfreiheit), the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgische Beauftragte für Datenschutz und Informationsfreiheit) and Google LLC as the defendant as well as the NDR broadcasting corporation. […] 19 20-28 B. The constitutional complaint is admissible. 29 I. […] 30-31 II. The complainant has standing to bring a constitutional complaint. It is true that the fundamental rights of the Basic Law are not applicable in this case given that the legal dispute in the initial proceedings concerns a matter that is fully harmonised under EU law. However, the complainant can invoke the fundamental rights of the Charter of Fundamental Rights of the European Union. In the constellation under review here, the application of the Charter falls within the jurisdiction of the Federal Constitutional Court. 32 1. As the legal provisions applicable to this legal dispute are fully harmonised under EU law, the Charter of Fundamental Rights of the European Union (hereinafter: the Charter) is in principle the sole standard of review in this case. 33 a) The complainant’s claim for dereferencing pursued in the ordinary court proceedings is governed by data protection law, which is comprehensively harmonised under EU law. This holds true with regard to both the law that was applicable at the time of 34 5/36

Select target paragraph3