03/02/2020 CG v Facebook Ireland Ltd & Anor [2016] NICA 54 (21 December 2016) order that the first appellant should terminate the Facebook profile page ""Keeping Our Kids Safe from Predators 2"" (“"Predators 2”") and prohibited McCloskey from harassing, pestering or molesting the respondent whether by publishing, distributing or transmitting any information relating to or on the website Facebook.com or otherwise howsoever. [2] The respondent cross appeals on the basis that Facebook should be held liable in respect of the three profile pages and comments on the basis that by its pursuit of economic activity within the United Kingdom by operation of the Facebook social network and through the operation of an office, branch and/or subsidiary it is a data controller under section 5 of the Data Protection Act 1998 (“"the 1998 Act”") in respect of personal data and sensitive personal data processed on the Facebook social network and is in breach of the 1998 Act. McCloskey did not pursue his appeal and accordingly it is dismissed. Both Facebook and the respondent lodged appeals against the level of damages but at the hearing neither pursued that issue. Mr White QC appeared with Mr Hopkins for Facebook and Mr Tomlinson QC appeared with Mr Girvan for the respondent. We are grateful to all counsel for their helpful oral and written submissions. Facebook [3] The corporate structure within which Facebook was established is set out at paragraph 90 of the judgment at first instance: (a) Facebook Ireland Limited is a private limited company incorporated in the Republic of Ireland. (b) Facebook Ireland Limited is wholly owned by Facebook Ireland Holdings which is an unlimited company and does not file accounts. It is not possible to establish from publicly available information details of its trading and intergroup transactions. (c) Facebook Ireland Holdings is owned by Facebook International Holdings II (99%) which is registered in Ireland and by Facebook Cayman Holdings Limited III (1%) which is registered in the Cayman Islands. The Cayman Islands do not levy corporation tax. (d) In 2012 Facebook Ireland Limited paid €770.6m to Facebook Ireland Holdings for the right and licence to utilise the Facebook platform. (e) Facebook Ireland Limited is the data controller with respect to the personal data of users outside the US and Canada. (f) Facebook UK Limited is a private limited company incorporated in the UK. It is wholly owned by Facebook Global Holdings II LLC. It derives all of its income from providing marketing support services to Facebook Ireland Limited. It does not operate, host or control the Facebook service. It has offices in the United Kingdom. (g) A data processing agreement is in place between Facebook Ireland Limited and Facebook UK Limited under which Facebook UK Limited as “"data processor”" processes certain personal data on behalf of Facebook Ireland Limited as “"data controller”" in order to generate advertising revenue in the United Kingdom. [4] Stephens J described the operation of the Facebook website at paragraphs 18-21: “"[18] Facebook is a medium for the dissemination and acquisition of information available to anyone who can access it. Users can disseminate information by establishing independent dedicated pages for a broad range of purposes – for example, the creation of a personal profile or as in this case the pursuit of a campaign. Other Facebook users can access the information on those pages and can then contribute to the page by posting material on it. For someone to post on Facebook they must themselves have a Facebook account. www.bailii.org/nie/cases/NICA/2016/54.html 2/21

Sélectionner le paragraphe cible3