the challenged decision was rendered, Data Protection Directive 95/46/EC was in
force. This directive obliged Member States to protect the right to privacy of natural
persons with respect to the processing of personal data. On 25 May 2018, the directive was replaced with the General Data Protection Regulation (Regulation [EU]
2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the
free movement of such data, and repealing Directive 95/46/EC, OJ L 119 of 4 May
2016, p. 1; hereinafter: GDPR). In Art. 17, the General Data Protection Regulation
contains a right to erasure, which is also referred to as the “right to be forgotten” in
brackets.
II.
Statements concerning the constitutional complaint were submitted by the Federal
Government, the Federal Court of Justice (Bundesgerichtshof), the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragte für den
Datenschutz und die Informationsfreiheit), the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgische Beauftragte für Datenschutz und
Informationsfreiheit) and Google LLC as the defendant as well as the NDR broadcasting corporation.
[…]
19
20-28
B.
The constitutional complaint is admissible.
29
I.
[…]
30-31
II.
The complainant has standing to bring a constitutional complaint. It is true that the
fundamental rights of the Basic Law are not applicable in this case given that the legal dispute in the initial proceedings concerns a matter that is fully harmonised under
EU law. However, the complainant can invoke the fundamental rights of the Charter
of Fundamental Rights of the European Union. In the constellation under review here,
the application of the Charter falls within the jurisdiction of the Federal Constitutional
Court.
32
1. As the legal provisions applicable to this legal dispute are fully harmonised under
EU law, the Charter of Fundamental Rights of the European Union (hereinafter: the
Charter) is in principle the sole standard of review in this case.
33
a) The complainant’s claim for dereferencing pursued in the ordinary court proceedings is governed by data protection law, which is comprehensively harmonised under
EU law. This holds true with regard to both the law that was applicable at the time of
34
5/36