HURBAIN v. BELGIUM JUDGMENT 2. For processing carried out for journalistic purposes or the purpose of academic artistic or literary expression, Member States shall provide for exemptions or derogations ... if they are necessary to reconcile the right to the protection of personal data with the freedom of expression and information. ...” 70. On 7 July 2020 the European Data Protection Board adopted Guidelines 5/2019 on the criteria of the Right to be Forgotten in the search engines cases under the GDPR. The Guidelines observe that the “right to be forgotten” was especially enacted under Article 17 GDPR to take into account the right to request delisting established in the CJEU’s Google Spain judgment (C-131/12). The relevant parts dealing with the processing necessary for exercising the right to freedom of expression and information read, in particular, as follows: “50. The Court [of Justice of the European Union] also distinguished between the legitimacy that a web publisher can have to disseminate information against the legitimacy of the search engine provider. The Court recognised that the activity of a web publisher can be undertaken exclusively for the purposes of journalism, in which case the web publisher would benefit from the exemptions that Member States could establish in these cases on the basis of Article 9 of the Directive (currently, Article 85.2 GDPR). In this regard, in the judgment ‘M.L. and W.W. vs Germany’ of June 28th, 2018, the ECHR indicates that the balancing of the interests at issue may lead to different results depending on the request at stake (distinguishing (i) a request for erasure brought against the original publisher whose activity is at the heart of what freedom of expression aims to protect from (ii) a request brought against the search engine whose first interest is not to publish the original information on the data subject but notably to enable identifying any available information on this person and thus establishing his or her profile). 51. Those considerations should be assessed in respect of Article 17 GDPR complaints as in those decisions, the rights of the data subjects that have requested the delisting must be weighed with the interests of Internet users to access the information.” C. Relevant case-law of the CJEU and related guidelines 1. Google Spain SL and Google Inc. v. Agencia Española de Protección de Datos (AEPD) and Mario Costeja González (judgment of 13 May 2014, C-131/12, EU:C:2014:317) 71. In the case of Google Spain SL and Google Inc. (hereafter “Google Spain”), the CJEU was called upon to define the extent of the rights and obligations arising out of Directive 95/46/EC with regard to Internet search engines. The case originated in a complaint lodged by a Spanish national with the Spanish Data Protection Agency against a Spanish daily newspaper and Google. The applicant had complained that when an Internet user entered his name in Google’s search engine, the list of results displayed links to two pages of the newspaper mentioning his name in connection with an auction following attachment proceedings. He had requested the newspaper either to remove or alter those pages so that the personal data 27

Seleccionar párrafo de destino3