03/02/2020
CURIA - Documents
In the light of the explanations relating to Article 8 of the Charter, which, according to Article 52(7) of the Charter,
were drawn up as a way of providing guidance in the interpretation of the Charter and to which regard must be
given by the Verfassungsgerichtshof, must [Directive 95/46] and Regulation (EC) No 45/2001 of the European
Parliament and of the Council [of 18 December 2000] on the protection of individuals with regard to the processing
of personal data by the Community institutions and bodies and on the free movement of such data [OJ 2001 L 8,
p. 1] be taken into account, for the purposes of assessing the permissibility of interference, as being of equal
standing to the conditions under Article 8(2) and Article 52(1) of the Charter?
What is the relationship between “Union law”, as referred to in the final sentence of Article 52(3) of the Charter,
and the directives in the field of the law on data protection?
In view of the fact that [Directive 95/26] and Regulation … No 45/2001 contain conditions and restrictions with a
view to safeguarding the fundamental right to data protection under the Charter, must amendments resulting from
subsequent secondary law be taken into account for the purpose of interpreting Article 8 of the Charter?
Having regard to Article 52(4) of the Charter, does it follow from the principle of the preservation of higher levels
of protection in Article 53 of the Charter that the limits applicable under the Charter in relation to permissible
restrictions must be more narrowly circumscribed by secondary law?
Having regard to Article 52(3) of the Charter, the fifth paragraph in the preamble thereto and the explanations in
relation to Article 7 of the Charter, according to which the rights guaranteed in that article correspond to those
guaranteed by Article 8 of the [ECHR], can assistance be derived from the case-law of the European Court of
Human Rights for the purpose of interpreting Article 8 of the Charter such as to influence the interpretation of that
latter article?’
By decision of the President of the Court of 11 June 2013, Cases C‑293/12 and C‑594/12 were joined for the
purposes of the oral procedure and the judgment.
Consideration of the questions referred
The second question, parts (b) to (d), in Case C‑293/12 and the first question in Case C‑594/12
By the second question, parts (b) to (d), in Case C‑293/12 and the first question in Case C‑594/12, which should
be examined together, the referring courts are essentially asking the Court to examine the validity of Directive
2006/24 in the light of Articles 7, 8 and 11 of the Charter.
The relevance of Articles 7, 8 and 11 of the Charter with regard to the question of the validity of Directive 2006/24
It follows from Article 1 and recitals 4, 5, 7 to 11, 21 and 22 of Directive 2006/24 that the main objective of that
directive is to harmonise Member States’ provisions concerning the retention, by providers of publicly available
electronic communications services or of public communications networks, of certain data which are generated or
processed by them, in order to ensure that the data are available for the purpose of the prevention, investigation,
detection and prosecution of serious crime, such as organised crime and terrorism, in compliance with the rights
laid down in Articles 7 and 8 of the Charter.
The obligation, under Article 3 of Directive 2006/24, on providers of publicly available electronic communications
services or of public communications networks to retain the data listed in Article 5 of the directive for the purpose
of making them accessible, if necessary, to the competent national authorities raises questions relating to respect
for private life and communications under Article 7 of the Charter, the protection of personal data under Article 8 of
the Charter and respect for freedom of expression under Article 11 of the Charter.
In that regard, it should be observed that the data which providers of publicly available electronic communications
services or of public communications networks must retain, pursuant to Articles 3 and 5 of Directive 2006/24,
include data necessary to trace and identify the source of a communication and its destination, to identify the date,
time, duration and type of a communication, to identify users’ communication equipment, and to identify the
location of mobile communication equipment, data which consist, inter alia, of the name and address of the
subscriber or registered user, the calling telephone number, the number called and an IP address for Internet
services. Those data make it possible, in particular, to know the identity of the person with whom a subscriber or
registered user has communicated and by what means, and to identify the time of the communication as well as
the place from which that communication took place. They also make it possible to know the frequency of the
communications of the subscriber or registered user with certain persons during a given period.
Those data, taken as a whole, may allow very precise conclusions to be drawn concerning the private lives of the
persons whose data has been retained, such as the habits of everyday life, permanent or temporary places of
residence, daily or other movements, the activities carried out, the social relationships of those persons and the
social environments frequented by them.
In such circumstances, even though, as is apparent from Article 1(2) and Article 5(2) of Directive 2006/24, the
directive does not permit the retention of the content of the communication or of information consulted using an
electronic communications network, it is not inconceivable that the retention of the data in question might have an
effect on the use, by subscribers or registered users, of the means of communication covered by that directive and,
consequently, on their exercise of the freedom of expression guaranteed by Article 11 of the Charter.
The retention of data for the purpose of possible access to them by the competent national authorities, as provided
for by Directive 2006/24, directly and specifically affects private life and, consequently, the rights guaranteed by
Article 7 of the Charter. Furthermore, such a retention of data also falls under Article 8 of the Charter because it
constitutes the processing of personal data within the meaning of that article and, therefore, necessarily has to
satisfy the data protection requirements arising from that article (Cases C‑92/09 and C‑93/09 Volker und Markus
Schecke and Eifert EU:C:2010:662, paragraph 47).
Whereas the references for a preliminary ruling in the present cases raise, in particular, the question of principle as
to whether or not, in the light of Article 7 of the Charter, the data of subscribers and registered users may be
retained, they also concern the question of principle as to whether Directive 2006/24 meets the requirements for
the protection of personal data arising from Article 8 of the Charter.
curia.europa.eu/juris/document/document.jsf?doclang=EN&text=&pageIndex=0&part=1&mode=DOC&docid=150642&occ=first&dir=&cid=99319 (judgment… 7/11