HURBAIN v. BELGIUM JUDGMENT
2. For processing carried out for journalistic purposes or the purpose of academic
artistic or literary expression, Member States shall provide for exemptions or
derogations ... if they are necessary to reconcile the right to the protection of personal
data with the freedom of expression and information.
...”
70. On 7 July 2020 the European Data Protection Board adopted
Guidelines 5/2019 on the criteria of the Right to be Forgotten in the search
engines cases under the GDPR. The Guidelines observe that the “right to be
forgotten” was especially enacted under Article 17 GDPR to take into account
the right to request delisting established in the CJEU’s Google Spain
judgment (C-131/12). The relevant parts dealing with the processing
necessary for exercising the right to freedom of expression and information
read, in particular, as follows:
“50. The Court [of Justice of the European Union] also distinguished between the
legitimacy that a web publisher can have to disseminate information against the
legitimacy of the search engine provider. The Court recognised that the activity of a
web publisher can be undertaken exclusively for the purposes of journalism, in which
case the web publisher would benefit from the exemptions that Member States could
establish in these cases on the basis of Article 9 of the Directive (currently, Article 85.2
GDPR). In this regard, in the judgment ‘M.L. and W.W. vs Germany’ of June 28th,
2018, the ECHR indicates that the balancing of the interests at issue may lead to
different results depending on the request at stake (distinguishing (i) a request for
erasure brought against the original publisher whose activity is at the heart of what
freedom of expression aims to protect from (ii) a request brought against the search
engine whose first interest is not to publish the original information on the data subject
but notably to enable identifying any available information on this person and thus
establishing his or her profile).
51. Those considerations should be assessed in respect of Article 17 GDPR
complaints as in those decisions, the rights of the data subjects that have requested the
delisting must be weighed with the interests of Internet users to access the information.”
C. Relevant case-law of the CJEU and related guidelines
1. Google Spain SL and Google Inc. v. Agencia Española de Protección
de Datos (AEPD) and Mario Costeja González (judgment of 13 May
2014, C-131/12, EU:C:2014:317)
71. In the case of Google Spain SL and Google Inc. (hereafter
“Google Spain”), the CJEU was called upon to define the extent of the rights
and obligations arising out of Directive 95/46/EC with regard to Internet
search engines. The case originated in a complaint lodged by a Spanish
national with the Spanish Data Protection Agency against a Spanish daily
newspaper and Google. The applicant had complained that when an Internet
user entered his name in Google’s search engine, the list of results displayed
links to two pages of the newspaper mentioning his name in connection with
an auction following attachment proceedings. He had requested the
newspaper either to remove or alter those pages so that the personal data
27