03/02/2020
CURIA - Documents
In the light of the foregoing considerations, it is appropriate, for the purposes of answering the second question,
parts (b) to (d), in Case C‑293/12 and the first question in Case C‑594/12, to examine the validity of the directive
in the light of Articles 7 and 8 of the Charter.
Interference with the rights laid down in Articles 7 and 8 of the Charter
By requiring the retention of the data listed in Article 5(1) of Directive 2006/24 and by allowing the competent
national authorities to access those data, Directive 2006/24, as the Advocate General has pointed out, in particular,
in paragraphs 39 and 40 of his Opinion, derogates from the system of protection of the right to privacy established
by Directives 95/46 and 2002/58 with regard to the processing of personal data in the electronic communications
sector, directives which provided for the confidentiality of communications and of traffic data as well as the
obligation to erase or make those data anonymous where they are no longer needed for the purpose of the
transmission of a communication, unless they are necessary for billing purposes and only for as long as so
necessary.
To establish the existence of an interference with the fundamental right to privacy, it does not matter whether the
information on the private lives concerned is sensitive or whether the persons concerned have been inconvenienced
in any way (see, to that effect, Cases C‑465/00, C‑138/01 and C‑139/01 Österreichischer Rundfunk and Others
EU:C:2003:294, paragraph 75).
As a result, the obligation imposed by Articles 3 and 6 of Directive 2006/24 on providers of publicly available
electronic communications services or of public communications networks to retain, for a certain period, data
relating to a person’s private life and to his communications, such as those referred to in Article 5 of the directive,
constitutes in itself an interference with the rights guaranteed by Article 7 of the Charter.
Furthermore, the access of the competent national authorities to the data constitutes a further interference with
that fundamental right (see, as regards Article 8 of the ECHR, Eur. Court H.R., Leander v. Sweden, 26 March 1987,
§ 48, Series A no 116; Rotaru v. Romania [GC], no. 28341/95, § 46, ECHR 2000-V; and Weber and Saravia v.
Germany (dec.), no. 54934/00, § 79, ECHR 2006-XI). Accordingly, Articles 4 and 8 of Directive 2006/24 laying
down rules relating to the access of the competent national authorities to the data also constitute an interference
with the rights guaranteed by Article 7 of the Charter.
Likewise, Directive 2006/24 constitutes an interference with the fundamental right to the protection of personal
data guaranteed by Article 8 of the Charter because it provides for the processing of personal data.
It must be stated that the interference caused by Directive 2006/24 with the fundamental rights laid down in
Articles 7 and 8 of the Charter is, as the Advocate General has also pointed out, in particular, in paragraphs 77 and
80 of his Opinion, wide-ranging, and it must be considered to be particularly serious. Furthermore, as the Advocate
General has pointed out in paragraphs 52 and 72 of his Opinion, the fact that data are retained and subsequently
used without the subscriber or registered user being informed is likely to generate in the minds of the persons
concerned the feeling that their private lives are the subject of constant surveillance.
Justification of the interference with the rights guaranteed by Articles 7 and 8 of the Charter
Article 52(1) of the Charter provides that any limitation on the exercise of the rights and freedoms laid down by
the Charter must be provided for by law, respect their essence and, subject to the principle of proportionality,
limitations may be made to those rights and freedoms only if they are necessary and genuinely meet objectives of
general interest recognised by the Union or the need to protect the rights and freedoms of others.
So far as concerns the essence of the fundamental right to privacy and the other rights laid down in Article 7 of the
Charter, it must be held that, even though the retention of data required by Directive 2006/24 constitutes a
particularly serious interference with those rights, it is not such as to adversely affect the essence of those rights
given that, as follows from Article 1(2) of the directive, the directive does not permit the acquisition of knowledge
of the content of the electronic communications as such.
Nor is that retention of data such as to adversely affect the essence of the fundamental right to the protection of
personal data enshrined in Article 8 of the Charter, because Article 7 of Directive 2006/24 provides, in relation to
data protection and data security, that, without prejudice to the provisions adopted pursuant to Directives 95/46
and 2002/58, certain principles of data protection and data security must be respected by providers of publicly
available electronic communications services or of public communications networks. According to those principles,
Member States are to ensure that appropriate technical and organisational measures are adopted against accidental
or unlawful destruction, accidental loss or alteration of the data.
As regards the question of whether that interference satisfies an objective of general interest, it should be
observed that, whilst Directive 2006/24 aims to harmonise Member States’ provisions concerning the obligations of
those providers with respect to the retention of certain data which are generated or processed by them, the
material objective of that directive is, as follows from Article 1(1) thereof, to ensure that the data are available for
the purpose of the investigation, detection and prosecution of serious crime, as defined by each Member State in its
national law. The material objective of that directive is, therefore, to contribute to the fight against serious crime
and thus, ultimately, to public security.
It is apparent from the case-law of the Court that the fight against international terrorism in order to maintain
international peace and security constitutes an objective of general interest (see, to that effect, Cases C‑402/05 P
and C‑415/05 P Kadi and Al Barakaat International Foundation v Council and Commission EU:C:2008:461,
paragraph 363, and Cases C‑539/10 P and C‑550/10 P Al-Aqsa v Council EU:C:2012:711, paragraph 130). The
same is true of the fight against serious crime in order to ensure public security (see, to that effect, Case C‑145/09
Tsakouridis EU:C:2010:708, paragraphs 46 and 47). Furthermore, it should be noted, in this respect, that Article 6
of the Charter lays down the right of any person not only to liberty, but also to security.
In this respect, it is apparent from recital 7 in the preamble to Directive 2006/24 that, because of the significant
growth in the possibilities afforded by electronic communications, the Justice and Home Affairs Council of
19 December 2002 concluded that data relating to the use of electronic communications are particularly important
curia.europa.eu/juris/document/document.jsf?doclang=EN&text=&pageIndex=0&part=1&mode=DOC&docid=150642&occ=first&dir=&cid=99319 (judgment… 8/11