HURBAIN v. BELGIUM JUDGMENT
Commission on Data Processing and Civil Liberties (CNIL) concerning four
decisions of the CNIL refusing to serve formal notice on Google Inc. to delist
various links appearing in the lists of results displayed following searches
based on their names. The links led to web pages published by third parties
containing, among other things, a satirical photomontage placed online
pseudonymously and depicting a female politician, as well as a number of
articles referring respectively to the position held by one of the applicants as
public relations officer of the Church of Scientology, the judicial
investigation into a male politician and the conviction of one of the applicants
for sexually assaulting children. The Conseil d’État put several questions to
the CJEU concerning the interpretation of the rules under European Union
(EU) law, seeking to establish in particular whether, regard being had to the
specific responsibilities, powers and capabilities of the operators of search
engines, the prohibition imposed on other controllers on processing certain
special categories of data (relating, for instance, to political opinions,
religious or philosophical beliefs, or sexual life) also applied to such
operators.
82. After reiterating the findings made in its Google Spain judgment (see
paragraphs 72-73 above), the CJEU emphasised that the GDPR, which had
entered into force in the meantime, and in particular Article 17(3)(a) thereof,
expressly required that a balance be struck between the fundamental rights to
privacy and protection of personal data guaranteed by Articles 7 and 8 of the
Charter on the one hand, and the fundamental right to freedom of information
guaranteed by Article 11 of the Charter on the other.
83. The CJEU added that where the operator of a search engine received
a request for delisting relating to a link to a web page on which sensitive data
were published, the operator was required to ascertain, on the basis of all the
relevant factors of the particular case and taking into account the seriousness
of the interference with the data subject’s fundamental rights to privacy and
protection of personal data, whether the inclusion of that link in the list of
results displayed following a search on the basis of the data subject’s name
was strictly necessary for protecting the freedom of information of Internet
users potentially interested in accessing that web page by means of such a
search.
84. Lastly, with regard to web pages containing data concerning criminal
proceedings brought against a specific individual, the CJEU referred to this
Court’s judgment in M.L. and W.W. v. Germany (nos. 60798/10
and 65599/10, 28 June 2018), from which it inferred the following:
“77. It is thus for the operator of a search engine to assess, in the context of a request
for de-referencing relating to links to web pages on which information is published
relating to criminal proceedings brought against the data subject, concerning an earlier
stage of the proceedings and no longer corresponding to the current situation, whether,
in the light of all the circumstances of the case, such as, in particular, the nature and
seriousness of the offence in question, the progress and the outcome of the proceedings,
the time elapsed, the part played by the data subject in public life and his past conduct,
33