{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-136-17-62017cj0136","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-136-17-62017cj0136)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-13","fingerprint":"ewai:eu:a03983","proof":"sha256:8b80dc4583075e9b0c978d083c9fd738c59217f33590fa4d2b12a19a119e6f8d","jurisdiction":"eu","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","item":{"schema_version":"1.0.0","id":"eu:c-136-17-62017cj0136","jurisdiction":"eu","lang":"en","brand_source":"Source: NovaCopilot","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"sections":[{"title":"62017CJ0136","paragraphs":[]},{"title":"JUDGMENT OF THE COURT (Grand Chamber)","paragraphs":[]},{"title":"24 September 2019 (\n *1\n )","paragraphs":["para_4","para_5","para_6","para_7","para_8","para_9"]},{"title":"ED","paragraphs":["para_11","para_12","para_13","para_14","para_15","para_16","para_17","para_18","para_19","para_20","para_21","para_22","para_23","para_24","para_25","para_26","para_27","para_28","para_29","para_30","para_31","para_32","para_33","para_34","para_35","para_36","para_37","para_38","para_39","para_40","para_41","para_42","para_43","para_44","para_45","para_46","para_47"]},{"title":"Judgment","paragraphs":[]},{"title":"1","paragraphs":["para_50"]},{"title":"2","paragraphs":["para_52"]},{"title":"Legal context","paragraphs":[]},{"title":"EU law","paragraphs":[]},{"title":"Directive 95/46","paragraphs":[]},{"title":"3","paragraphs":["para_57"]},{"title":"4","paragraphs":[]},{"title":"Recitals 33 and 34 of Directive 95/46 state:","paragraphs":["para_60","para_61"]},{"title":"(34)","paragraphs":["para_63"]},{"title":"5","paragraphs":[]},{"title":"Article 2 of Directive 95/46 provides:","paragraphs":["para_66"]},{"title":"(a)","paragraphs":["para_68"]},{"title":"(b)","paragraphs":["para_70","para_71"]},{"title":"(d)","paragraphs":["para_73","para_74"]},{"title":"(h)","paragraphs":["para_76"]},{"title":"6","paragraphs":["para_78","para_79"]},{"title":"(a)","paragraphs":["para_81"]},{"title":"(b)","paragraphs":["para_83"]},{"title":"(c)","paragraphs":["para_85"]},{"title":"(d)","paragraphs":["para_87"]},{"title":"(e)","paragraphs":["para_89"]},{"title":"2.   It shall be for the controller to ensure that paragraph 1 is complied with.’","paragraphs":[]},{"title":"7","paragraphs":["para_92","para_93","para_94"]},{"title":"(f)","paragraphs":["para_96"]},{"title":"8","paragraphs":["para_98","para_99"]},{"title":"2.   Paragraph 1 shall not apply where:","paragraphs":[]},{"title":"(a)","paragraphs":["para_102","para_103"]},{"title":"(e)","paragraphs":["para_105","para_106","para_107","para_108","para_109","para_110"]},{"title":"9","paragraphs":["para_112","para_113"]},{"title":"10","paragraphs":[]},{"title":"Article 12 of Directive 95/46, headed ‘Right of access’, provides:","paragraphs":["para_116","para_117"]},{"title":"(b)","paragraphs":["para_119","para_120"]},{"title":"11","paragraphs":[]},{"title":"Article 14 of Directive 95/46, headed ‘The data subject’s right to object’, provides:","paragraphs":["para_123"]},{"title":"(a)","paragraphs":["para_125","para_126"]},{"title":"12","paragraphs":[]},{"title":"Article 28 of Directive 95/46, headed ‘Supervisory authority’, reads as follows:","paragraphs":["para_129","para_130"]},{"title":"3.   Each authority shall in particular be endowed with:","paragraphs":["para_132","para_133","para_134","para_135","para_136","para_137","para_138","para_139","para_140","para_141","para_142"]},{"title":"Regulation (EU) 2016/679","paragraphs":[]},{"title":"13","paragraphs":["para_145"]},{"title":"14","paragraphs":[]},{"title":"Recitals 1, 4, 51, 52 and 65 of Regulation 2016/679 state:","paragraphs":["para_148","para_149","para_150"]},{"title":"(4)","paragraphs":["para_152","para_153"]},{"title":"(51)","paragraphs":["para_155"]},{"title":"(52)","paragraphs":["para_157","para_158"]},{"title":"(65)","paragraphs":["para_160"]},{"title":"15","paragraphs":["para_162"]},{"title":"16","paragraphs":["para_164","para_165","para_166"]},{"title":"(c)","paragraphs":["para_168"]},{"title":"(d)","paragraphs":["para_170"]},{"title":"(e)","paragraphs":["para_172"]},{"title":"17","paragraphs":["para_174","para_175"]},{"title":"2.   Paragraph 1 shall not apply if one of the following applies:","paragraphs":[]},{"title":"(a)","paragraphs":["para_178","para_179"]},{"title":"(e)","paragraphs":["para_181","para_182"]},{"title":"(g)","paragraphs":["para_184","para_185"]},{"title":"18","paragraphs":["para_187","para_188"]},{"title":"19","paragraphs":["para_190","para_191"]},{"title":"(a)","paragraphs":["para_193"]},{"title":"(b)","paragraphs":["para_195"]},{"title":"(c)","paragraphs":["para_197"]},{"title":"(d)","paragraphs":["para_199"]},{"title":"(e)","paragraphs":["para_201"]},{"title":"(f)","paragraphs":["para_203","para_204"]},{"title":"3.   Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:","paragraphs":[]},{"title":"(a)","paragraphs":["para_207","para_208"]},{"title":"20","paragraphs":[]},{"title":"Article 21 of Regulation 2016/679, headed ‘Right to object’, provides in paragraph 1:","paragraphs":["para_211"]},{"title":"21","paragraphs":["para_213","para_214","para_215","para_216"]},{"title":"French law","paragraphs":[]},{"title":"22","paragraphs":["para_219"]},{"title":"23","paragraphs":["para_221"]},{"title":"The disputes in the main proceedings and the questions referred for a preliminary ruling","paragraphs":[]},{"title":"24","paragraphs":["para_224"]},{"title":"25","paragraphs":["para_226"]},{"title":"26","paragraphs":["para_228"]},{"title":"27","paragraphs":["para_230"]},{"title":"28","paragraphs":["para_232"]},{"title":"29","paragraphs":["para_234"]},{"title":"30","paragraphs":["para_236"]},{"title":"31","paragraphs":["para_238","para_239","para_240"]},{"title":"(2)","paragraphs":[]},{"title":"If Question 1 should be answered in the affirmative:","paragraphs":["para_243","para_244","para_245","para_246","para_247","para_248"]},{"title":"(3)","paragraphs":[]},{"title":"If Question 1 should be answered in the negative:","paragraphs":["para_251","para_252","para_253","para_254","para_255","para_256","para_257","para_258","para_259","para_260","para_261"]},{"title":"(4)","paragraphs":[]},{"title":"Irrespective of the answer to be given to Question 1:","paragraphs":["para_264","para_265","para_266","para_267","para_268","para_269","para_270","para_271"]},{"title":"Consideration of the questions referred","paragraphs":[]},{"title":"32","paragraphs":["para_274"]},{"title":"33","paragraphs":["para_276"]},{"title":"Question 1","paragraphs":[]},{"title":"34","paragraphs":["para_279"]},{"title":"35","paragraphs":["para_281"]},{"title":"36","paragraphs":["para_283"]},{"title":"37","paragraphs":["para_285"]},{"title":"38","paragraphs":["para_287"]},{"title":"39","paragraphs":["para_289"]},{"title":"40","paragraphs":["para_291"]},{"title":"41","paragraphs":["para_293"]},{"title":"42","paragraphs":["para_295"]},{"title":"43","paragraphs":["para_297"]},{"title":"44","paragraphs":["para_299"]},{"title":"45","paragraphs":["para_301"]},{"title":"46","paragraphs":["para_303"]},{"title":"47","paragraphs":["para_305"]},{"title":"48","paragraphs":["para_307"]},{"title":"Question 2","paragraphs":[]},{"title":"49","paragraphs":["para_310","para_311","para_312","para_313","para_314","para_315","para_316"]},{"title":"50","paragraphs":["para_318"]},{"title":"51","paragraphs":["para_320"]},{"title":"52","paragraphs":["para_322"]},{"title":"53","paragraphs":["para_324"]},{"title":"54","paragraphs":["para_326"]},{"title":"55","paragraphs":["para_328"]},{"title":"56","paragraphs":["para_330"]},{"title":"57","paragraphs":["para_332"]},{"title":"58","paragraphs":["para_334"]},{"title":"59","paragraphs":["para_336"]},{"title":"60","paragraphs":["para_338"]},{"title":"61","paragraphs":["para_340"]},{"title":"62","paragraphs":["para_342"]},{"title":"63","paragraphs":["para_344"]},{"title":"64","paragraphs":["para_346"]},{"title":"65","paragraphs":["para_348"]},{"title":"66","paragraphs":["para_350"]},{"title":"67","paragraphs":["para_352"]},{"title":"68","paragraphs":["para_354"]},{"title":"69","paragraphs":[]},{"title":"It follows from all the above considerations that the answer to Question 2 is as follows:","paragraphs":["para_357","para_358","para_359","para_360","para_361","para_362"]},{"title":"Question 3","paragraphs":[]},{"title":"70","paragraphs":["para_365"]},{"title":"Question 4","paragraphs":[]},{"title":"71","paragraphs":["para_368","para_369","para_370","para_371","para_372"]},{"title":"72","paragraphs":["para_374"]},{"title":"73","paragraphs":["para_376"]},{"title":"74","paragraphs":["para_378"]},{"title":"75","paragraphs":["para_380"]},{"title":"76","paragraphs":["para_382"]},{"title":"77","paragraphs":["para_384"]},{"title":"78","paragraphs":["para_386"]},{"title":"79","paragraphs":["para_388","para_389","para_390","para_391","para_392"]},{"title":"Costs","paragraphs":[]},{"title":"80","paragraphs":["para_395"]},{"title":"On those grounds, the Court (Grand Chamber) hereby rules:","paragraphs":["para_397","para_398","para_399","para_400","para_401","para_402","para_403"]},{"title":"The provisions of Directive 95/46 must be interpreted as meaning that","paragraphs":["para_405","para_406","para_407","para_408","para_409","para_410"]}],"paragraphs":[{"text":"62017CJ0136","paragraph_id":"para_1"},{"text":"JUDGMENT OF THE COURT (Grand Chamber)","paragraph_id":"para_2"},{"text":"24 September 2019 (\n *1\n )","paragraph_id":"para_3"},{"text":"(Reference for a preliminary ruling — Personal data — Protection of individuals with regard to the processing of personal data contained on websites — Directive 95/46/EC — Regulation (EU) 2016/679 — Search engines on the internet — Processing of data appearing on websites — Special categories of dat …","paragraph_id":"para_4"},{"text":"In Case C‑136/17,","paragraph_id":"para_5"},{"text":"REQUEST for a preliminary ruling under Article 267 TFEU from the Conseil d’État (Council of State, France), made by decision of 24 February 2017, received at the Court on 15 March 2017, in the proceedings","paragraph_id":"para_6"},{"text":"GC,","paragraph_id":"para_7"},{"text":"AF,","paragraph_id":"para_8"},{"text":"BH,","paragraph_id":"para_9"},{"text":"ED","paragraph_id":"para_10"},{"text":"v","paragraph_id":"para_11"},{"text":"Commission nationale de l’informatique et des libertés (CNIL),","paragraph_id":"para_12"},{"text":"interveners:","paragraph_id":"para_13"},{"text":"Premier ministre,","paragraph_id":"para_14"},{"text":"Google LLC , successor to Google Inc.,","paragraph_id":"para_15"},{"text":"THE COURT (Grand Chamber),","paragraph_id":"para_16"},{"text":"composed of K. Lenaerts, President, A. Arabadjiev, A. Prechal, T. von Danwitz, C. Toader and F. Biltgen, Presidents of Chambers, M. Ilešič (Rapporteur), L. Bay Larsen, M. Safjan, D. Šváby, C.G. Fernlund, C. Vajda and S. Rodin, Judges,","paragraph_id":"para_17"},{"text":"Advocate General: M. Szpunar,","paragraph_id":"para_18"},{"text":"Registrar: V. Giacobbo-Peyronnel, administrator,","paragraph_id":"para_19"},{"text":"having regard to the written procedure and further to the hearing on 11 September 2018,","paragraph_id":"para_20"},{"text":"after considering the observations submitted on behalf of:","paragraph_id":"para_21"},{"text":"–","paragraph_id":"para_22"},{"text":"AF, by himself,","paragraph_id":"para_23"},{"text":"–","paragraph_id":"para_24"},{"text":"BH, by L. Boré, avocat,","paragraph_id":"para_25"},{"text":"–","paragraph_id":"para_26"},{"text":"Commission nationale de l’informatique et des libertés (CNIL), by I. Falque-Pierrotin, J. Lessi and G. Le Grand, acting as Agents,","paragraph_id":"para_27"},{"text":"–","paragraph_id":"para_28"},{"text":"Google LLC, by P. Spinosi, Y. Pelosi and W. Maxwell, avocats,","paragraph_id":"para_29"},{"text":"–","paragraph_id":"para_30"},{"text":"the French Government, by D. Colas, R. Coesme, E. de Moustier and S. Ghiandoni, acting as Agents,","paragraph_id":"para_31"},{"text":"–","paragraph_id":"para_32"},{"text":"Ireland, by M. Browne, G. Hodge, J. Quaney and A. Joyce, acting as Agents, and M. Gray, Barrister-at-Law,","paragraph_id":"para_33"},{"text":"–","paragraph_id":"para_34"},{"text":"the Greek Government, by E.-M. Mamouna, G. Papadaki, E. Zisi and S. Papaioannou, acting as Agents,","paragraph_id":"para_35"},{"text":"–","paragraph_id":"para_36"},{"text":"the Italian Government, by G. Palmieri, acting as Agent, and F. De Luca and P. Gentili, avvocati dello Stato,","paragraph_id":"para_37"},{"text":"–","paragraph_id":"para_38"},{"text":"the Austrian Government, by G. Eberhard and G. Kunnert, acting as Agents,","paragraph_id":"para_39"},{"text":"–","paragraph_id":"para_40"},{"text":"the Polish Government, by B. Majczyna, M. Pawlicka and J. Sawicka, acting as Agents,","paragraph_id":"para_41"},{"text":"–","paragraph_id":"para_42"},{"text":"the United Kingdom Government, by S. Brandon, acting as Agent, and C. Knight, Barrister,","paragraph_id":"para_43"},{"text":"–","paragraph_id":"para_44"},{"text":"the European Commission, by A. Buchet, H. Kranenborg and D. Nardi, acting as Agents,","paragraph_id":"para_45"},{"text":"after hearing the Opinion of the Advocate General at the sitting on 10 January 2019,","paragraph_id":"para_46"},{"text":"gives the following","paragraph_id":"para_47"},{"text":"Judgment","paragraph_id":"para_48"},{"text":"1","paragraph_id":"para_49"},{"text":"This request for a preliminary ruling concerns the interpretation of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ( OJ 1995 L 281, p. 31 ).","paragraph_id":"para_50"},{"text":"2","paragraph_id":"para_51"},{"text":"The request has been made in proceedings between GC, AF, BH and ED and the Commission nationale de l’informatique et des libertés (French Data Protection Authority, France) (‘the CNIL’) concerning four decisions of the CNIL refusing to serve formal notice on Google Inc., now Google LLC, to de-reference various links appearing in the lists of results displayed following searches of their names and leading to web pages published by third parties.","paragraph_id":"para_52"},{"text":"Legal context","paragraph_id":"para_53"},{"text":"EU law","paragraph_id":"para_54"},{"text":"Directive 95/46","paragraph_id":"para_55"},{"text":"3","paragraph_id":"para_56"},{"text":"The object of Directive 95/46, in accordance with Article 1(1), is to protect the fundamental rights and freedoms of natural persons, and in particular their right to privacy with respect to the processing of personal data, and to eliminate obstacles to the free flow of personal data.","paragraph_id":"para_57"},{"text":"4","paragraph_id":"para_58"},{"text":"Recitals 33 and 34 of Directive 95/46 state:","paragraph_id":"para_59"},{"text":"‘(33)","paragraph_id":"para_60"},{"text":"Whereas data which are capable by their nature of infringing fundamental freedoms or privacy should not be processed unless the data subject gives his explicit consent; whereas, however, derogations from this prohibition must be explicitly provided for in respect of specific needs …","paragraph_id":"para_61"},{"text":"(34)","paragraph_id":"para_62"},{"text":"Whereas Member States must also be authorised, when justified by grounds of important public interest, to derogate from the prohibition on processing sensitive categories of data …; whereas it is incumbent on them, however, to provide specific and suitable safeguards so as to protect the fundamental rights and the privacy of individuals;’","paragraph_id":"para_63"},{"text":"5","paragraph_id":"para_64"},{"text":"Article 2 of Directive 95/46 provides:","paragraph_id":"para_65"},{"text":"‘For the purposes of this Directive:","paragraph_id":"para_66"},{"text":"(a)","paragraph_id":"para_67"},{"text":"“personal data” shall mean any information relating to an identified or identifiable natural person (“data subject”); …","paragraph_id":"para_68"},{"text":"(b)","paragraph_id":"para_69"},{"text":"“processing of personal data” (“processing”) shall mean any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction;","paragraph_id":"para_70"},{"text":"…","paragraph_id":"para_71"},{"text":"(d)","paragraph_id":"para_72"},{"text":"“controller” shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; …","paragraph_id":"para_73"},{"text":"…","paragraph_id":"para_74"},{"text":"(h)","paragraph_id":"para_75"},{"text":"“the data subject’s consent” shall mean any freely given specific and informed indication of his wishes by which the data subject signifies his agreement to personal data relating to him being processed.’","paragraph_id":"para_76"},{"text":"6","paragraph_id":"para_77"},{"text":"In Chapter II, Section I of Directive 95/46, headed ‘Principles relating to data quality’, Article 6 reads as follows:","paragraph_id":"para_78"},{"text":"‘1.   Member States shall provide that personal data must be:","paragraph_id":"para_79"},{"text":"(a)","paragraph_id":"para_80"},{"text":"processed fairly and lawfully;","paragraph_id":"para_81"},{"text":"(b)","paragraph_id":"para_82"},{"text":"collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes. …","paragraph_id":"para_83"},{"text":"(c)","paragraph_id":"para_84"},{"text":"adequate, relevant and not excessive in relation to the purposes for which they are collected and/or further processed;","paragraph_id":"para_85"},{"text":"(d)","paragraph_id":"para_86"},{"text":"accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that data which are inaccurate or incomplete, having regard to the purposes for which they were collected or for which they are further processed, are erased or rectified;","paragraph_id":"para_87"},{"text":"(e)","paragraph_id":"para_88"},{"text":"kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data were collected or for which they are further processed. Member States shall lay down appropriate safeguards for personal data stored for longer periods for historical, statistical or scientific use.","paragraph_id":"para_89"},{"text":"2.   It shall be for the controller to ensure that paragraph 1 is complied with.’","paragraph_id":"para_90"},{"text":"7","paragraph_id":"para_91"},{"text":"In Chapter II, Section II of Directive 95/46, headed ‘Criteria for making data processing legitimate’, Article 7 provides:","paragraph_id":"para_92"},{"text":"‘Member States shall provide that personal data may be processed only if:","paragraph_id":"para_93"},{"text":"…","paragraph_id":"para_94"},{"text":"(f)","paragraph_id":"para_95"},{"text":"processing is necessary for the purposes of the legitimate interests pursued by the controller or by the third party or parties to whom the data are disclosed, except where such interests are overridden by the interests for fundamental rights and freedoms of the data subject which require protection under Article 1(1).’","paragraph_id":"para_96"},{"text":"8","paragraph_id":"para_97"},{"text":"Articles 8 and 9 of Directive 95/46 appear in Chapter II, Section III, headed ‘Special categories of processing’. Article 8, headed ‘The processing of special categories of data’, provides:","paragraph_id":"para_98"},{"text":"‘1.   Member States shall prohibit the processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life.","paragraph_id":"para_99"},{"text":"2.   Paragraph 1 shall not apply where:","paragraph_id":"para_100"},{"text":"(a)","paragraph_id":"para_101"},{"text":"the data subject has given his explicit consent to the processing of those data, except where the laws of the Member State provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject’s giving his consent; or","paragraph_id":"para_102"},{"text":"…","paragraph_id":"para_103"},{"text":"(e)","paragraph_id":"para_104"},{"text":"the processing relates to data which are manifestly made public by the data subject or is necessary for the establishment, exercise or defence of legal claims.","paragraph_id":"para_105"},{"text":"…","paragraph_id":"para_106"},{"text":"4.   Subject to the provision of suitable safeguards, Member States may, for reasons of substantial public interest, lay down exemptions in addition to those laid down in paragraph 2 either by national law or by decision of the supervisory authority.","paragraph_id":"para_107"},{"text":"5.   Processing of data relating to offences, criminal convictions or security measures may be carried out only under the control of official authority, or if suitable specific safeguards are provided under national law, subject to derogations which may be granted by the Member State under national provisions providing suitable specific safeguards. However, a complete register of criminal convictions may be kept only under the control of official authority.","paragraph_id":"para_108"},{"text":"Member States may provide that data relating to administrative sanctions or judgments in civil cases shall also be processed under the control of official authority.","paragraph_id":"para_109"},{"text":"…’","paragraph_id":"para_110"},{"text":"9","paragraph_id":"para_111"},{"text":"Article 9 of Directive 95/46, headed ‘Processing of personal data and freedom of expression’, states:","paragraph_id":"para_112"},{"text":"‘Member States shall provide for exemptions or derogations from the provisions of this Chapter, Chapter IV and Chapter VI for the processing of personal data carried out solely for journalistic purposes or the purpose of artistic or literary expression only if they are necessary to reconcile the right to privacy with the rules governing freedom of expression.’","paragraph_id":"para_113"},{"text":"10","paragraph_id":"para_114"},{"text":"Article 12 of Directive 95/46, headed ‘Right of access’, provides:","paragraph_id":"para_115"},{"text":"‘Member States shall guarantee every data subject the right to obtain from the controller:","paragraph_id":"para_116"},{"text":"…","paragraph_id":"para_117"},{"text":"(b)","paragraph_id":"para_118"},{"text":"as appropriate the rectification, erasure or blocking of data the processing of which does not comply with the provisions of this Directive, in particular because of the incomplete or inaccurate nature of the data;","paragraph_id":"para_119"},{"text":"…’","paragraph_id":"para_120"},{"text":"11","paragraph_id":"para_121"},{"text":"Article 14 of Directive 95/46, headed ‘The data subject’s right to object’, provides:","paragraph_id":"para_122"},{"text":"‘Member States shall grant the data subject the right:","paragraph_id":"para_123"},{"text":"(a)","paragraph_id":"para_124"},{"text":"at least in the cases referred to in Article 7(e) and (f), to object at any time on compelling legitimate grounds relating to his particular situation to the processing of data relating to him, save where otherwise provided by national legislation. Where there is a justified objection, the processing instigated by the controller may no longer involve those data;","paragraph_id":"para_125"},{"text":"…’","paragraph_id":"para_126"},{"text":"12","paragraph_id":"para_127"},{"text":"Article 28 of Directive 95/46, headed ‘Supervisory authority’, reads as follows:","paragraph_id":"para_128"},{"text":"‘1.   Each Member State shall provide that one or more public authorities are responsible for monitoring the application within its territory of the provisions adopted by the Member States pursuant to this Directive.","paragraph_id":"para_129"},{"text":"…","paragraph_id":"para_130"},{"text":"3.   Each authority shall in particular be endowed with:","paragraph_id":"para_131"},{"text":"–","paragraph_id":"para_132"},{"text":"investigative powers, such as powers of access to data forming the subject matter of processing operations and powers to collect all the information necessary for the performance of its supervisory duties,","paragraph_id":"para_133"},{"text":"–","paragraph_id":"para_134"},{"text":"effective powers of intervention, such as, for example, that … of ordering the blocking, erasure or destruction of data, of imposing a temporary or definitive ban on processing …","paragraph_id":"para_135"},{"text":"– …","paragraph_id":"para_136"},{"text":"Decisions by the supervisory authority which give rise to complaints may be appealed against through the courts.","paragraph_id":"para_137"},{"text":"4.   Each supervisory authority shall hear claims lodged by any person, or by an association representing that person, concerning the protection of his rights and freedoms in regard to the processing of personal data. The person concerned shall be informed of the outcome of the claim.","paragraph_id":"para_138"},{"text":"…","paragraph_id":"para_139"},{"text":"6.   Each supervisory authority is competent, whatever the national law applicable to the processing in question, to exercise, on the territory of its own Member State, the powers conferred on it in accordance with paragraph 3. Each authority may be requested to exercise its powers by an authority of another Member State.","paragraph_id":"para_140"},{"text":"The supervisory authorities shall cooperate with one another to the extent necessary for the performance of their duties, in particular by exchanging all useful information.","paragraph_id":"para_141"},{"text":"…’","paragraph_id":"para_142"},{"text":"Regulation (EU) 2016/679","paragraph_id":"para_143"},{"text":"13","paragraph_id":"para_144"},{"text":"Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 (General Data Protection Regulation) ( OJ 2016 L 119, p. 1 …","paragraph_id":"para_145"},{"text":"14","paragraph_id":"para_146"},{"text":"Recitals 1, 4, 51, 52 and 65 of Regulation 2016/679 state:","paragraph_id":"para_147"},{"text":"‘(1)","paragraph_id":"para_148"},{"text":"The protection of natural persons in relation to the processing of personal data is a fundamental right. Article 8(1) of the Charter of Fundamental Rights of the European Union (the “Charter”) and Article 16(1) of the Treaty on the Functioning of the European Union (TFEU) provide that everyone has the right to the protection of personal data concerning him or her.","paragraph_id":"para_149"},{"text":"…","paragraph_id":"para_150"},{"text":"(4)","paragraph_id":"para_151"},{"text":"The processing of personal data should be designed to serve mankind. The right to the protection of personal data is not an absolute right; it must be considered in relation to its function in society and be balanced against other fundamental rights, in accordance with the principle of proportionali …","paragraph_id":"para_152"},{"text":"…","paragraph_id":"para_153"},{"text":"(51)","paragraph_id":"para_154"},{"text":"Personal data which are, by their nature, particularly sensitive in relation to fundamental rights and freedoms merit specific protection as the context of their processing could create significant risks to the fundamental rights and freedoms. …","paragraph_id":"para_155"},{"text":"(52)","paragraph_id":"para_156"},{"text":"Derogating from the prohibition on processing special categories of personal data should also be allowed when provided for in Union or Member State law and subject to suitable safeguards, so as to protect personal data and other fundamental rights …","paragraph_id":"para_157"},{"text":"…","paragraph_id":"para_158"},{"text":"(65)","paragraph_id":"para_159"},{"text":"A data subject should have … a “right to be forgotten” where the retention of such data infringes this Regulation or Union or Member State law to which the controller is subject. … However, the further retention of the personal data should be lawful where it is necessary, for exercising the right of freedom of expression and information …’","paragraph_id":"para_160"},{"text":"15","paragraph_id":"para_161"},{"text":"Article 4(11) of Regulation 2016/679 defines ‘consent’ as ‘any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her’.","paragraph_id":"para_162"},{"text":"16","paragraph_id":"para_163"},{"text":"Article 5 of Regulation 2016/679, headed ‘Principles relating to processing of personal data’, provides in paragraph 1(c) to (e):","paragraph_id":"para_164"},{"text":"‘Personal data shall be:","paragraph_id":"para_165"},{"text":"…","paragraph_id":"para_166"},{"text":"(c)","paragraph_id":"para_167"},{"text":"adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimisation”);","paragraph_id":"para_168"},{"text":"(d)","paragraph_id":"para_169"},{"text":"accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (“accuracy”);","paragraph_id":"para_170"},{"text":"(e)","paragraph_id":"para_171"},{"text":"kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; … (“storage limitation”).’","paragraph_id":"para_172"},{"text":"17","paragraph_id":"para_173"},{"text":"Article 9 of Regulation 2016/679, headed ‘Processing of special categories of personal data’, provides:","paragraph_id":"para_174"},{"text":"‘1.   Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation shall be prohibited.","paragraph_id":"para_175"},{"text":"2.   Paragraph 1 shall not apply if one of the following applies:","paragraph_id":"para_176"},{"text":"(a)","paragraph_id":"para_177"},{"text":"the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject;","paragraph_id":"para_178"},{"text":"…","paragraph_id":"para_179"},{"text":"(e)","paragraph_id":"para_180"},{"text":"processing relates to personal data which are manifestly made public by the data subject;","paragraph_id":"para_181"},{"text":"…","paragraph_id":"para_182"},{"text":"(g)","paragraph_id":"para_183"},{"text":"processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject;","paragraph_id":"para_184"},{"text":"…’","paragraph_id":"para_185"},{"text":"18","paragraph_id":"para_186"},{"text":"Article 10 of Regulation 2016/679, headed ‘Processing of personal data relating to criminal convictions and offences’, provides:","paragraph_id":"para_187"},{"text":"‘Processing of personal data relating to criminal convictions and offences or related security measures based on Article 6(1) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the control of official authority.’","paragraph_id":"para_188"},{"text":"19","paragraph_id":"para_189"},{"text":"Article 17 of Regulation 2016/679, headed ‘Right to erasure (“right to be forgotten”)’, reads as follows:","paragraph_id":"para_190"},{"text":"‘1.   The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:","paragraph_id":"para_191"},{"text":"(a)","paragraph_id":"para_192"},{"text":"the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;","paragraph_id":"para_193"},{"text":"(b)","paragraph_id":"para_194"},{"text":"the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;","paragraph_id":"para_195"},{"text":"(c)","paragraph_id":"para_196"},{"text":"the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);","paragraph_id":"para_197"},{"text":"(d)","paragraph_id":"para_198"},{"text":"the personal data have been unlawfully processed;","paragraph_id":"para_199"},{"text":"(e)","paragraph_id":"para_200"},{"text":"the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;","paragraph_id":"para_201"},{"text":"(f)","paragraph_id":"para_202"},{"text":"the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).","paragraph_id":"para_203"},{"text":"2.   Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.","paragraph_id":"para_204"},{"text":"3.   Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:","paragraph_id":"para_205"},{"text":"(a)","paragraph_id":"para_206"},{"text":"for exercising the right of freedom of expression and information;","paragraph_id":"para_207"},{"text":"…’","paragraph_id":"para_208"},{"text":"20","paragraph_id":"para_209"},{"text":"Article 21 of Regulation 2016/679, headed ‘Right to object’, provides in paragraph 1:","paragraph_id":"para_210"},{"text":"‘The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer …","paragraph_id":"para_211"},{"text":"21","paragraph_id":"para_212"},{"text":"Article 85 of Regulation 2016/679, headed ‘Processing and freedom of expression and information’, provides:","paragraph_id":"para_213"},{"text":"‘1.   Member States shall by law reconcile the right to the protection of personal data pursuant to this Regulation with the right to freedom of expression and information, including processing for journalistic purposes and the purposes of academic, artistic or literary expression.","paragraph_id":"para_214"},{"text":"2.   For processing carried out for journalistic purposes or the purpose of academic artistic or literary expression, Member States shall provide for exemptions or derogations from Chapter II (principles), Chapter III (rights of the data subject), Chapter IV (controller and processor), Chapter V (tr …","paragraph_id":"para_215"},{"text":"…’","paragraph_id":"para_216"},{"text":"French law","paragraph_id":"para_217"},{"text":"22","paragraph_id":"para_218"},{"text":"Directive 95/46 was implemented in French law by Loi No 78-17, du 6 janvier 1978, relative à l’informatique, aux fichiers et aux libertés (Law No 78-17 of 6 January 1978 on information technology, data files and civil liberties), in the version applicable to the facts of the main proceedings.","paragraph_id":"para_219"},{"text":"23","paragraph_id":"para_220"},{"text":"Article 11 of that law states that, among its functions, the CNIL is to ensure that the processing of personal data is carried out in accordance with the provisions of that law, and that, on that basis, it is to receive claims, petitions and complaints relating to the processing of personal data and is to inform their authors of their outcome.","paragraph_id":"para_221"},{"text":"The disputes in the main proceedings and the questions referred for a preliminary ruling","paragraph_id":"para_222"},{"text":"24","paragraph_id":"para_223"},{"text":"GC, AF, BH and ED each requested Google to de-reference, in the list of results displayed by the search engine operated by Google in response to searches against their names, various links leading to web pages published by third parties; Google, however, refused to do this.","paragraph_id":"para_224"},{"text":"25","paragraph_id":"para_225"},{"text":"More particularly, GC requested the de-referencing of a link leading to a satirical photomontage placed online pseudonymously on 18 February 2011 on YouTube, depicting her alongside the mayor of a municipality whom she served as head of cabinet and explicitly referring to an intimate relationship be …","paragraph_id":"para_226"},{"text":"26","paragraph_id":"para_227"},{"text":"AF requested de-referencing of links leading to an article in the daily newspaper Libération of 9 September 2008, reproduced on the site of the Centre contre les manipulations mentales (Centre against mental manipulation) (CCMM) (France), concerning the suicide of a member of the Church of Scientolo …","paragraph_id":"para_228"},{"text":"27","paragraph_id":"para_229"},{"text":"BH requested the de-referencing of links leading to articles, mainly in the press, concerning the judicial investigation opened in June 1995 into the funding of the Parti républicain (PR), in which he was questioned with a number of businessmen and political personalities. The proceedings against hi …","paragraph_id":"para_230"},{"text":"28","paragraph_id":"para_231"},{"text":"ED requested the de-referencing of links leading to two articles published in Nice Matin and Le Figaro reporting the criminal hearing during which he was sentenced to 7 years’ imprisonment and an additional penalty of 10 years’ social and judicial supervision for sexual assaults on children under the age of 15. One of the accounts of the court proceedings also mentions several intimate details relating to ED that were revealed at the hearing.","paragraph_id":"para_232"},{"text":"29","paragraph_id":"para_233"},{"text":"Following the rejections by Google of their requests for de-referencing, the applicants in the main proceedings brought complaints before the CNIL, seeking for Google to be ordered to de-reference the links in question. By letters dated 24 April 2015, 28 August 2015, 21 March 2016 and 9 May 2016 respectively, the president of the CNIL informed them that the procedures on their complaints had been closed.","paragraph_id":"para_234"},{"text":"30","paragraph_id":"para_235"},{"text":"The applicants in the main proceedings thereupon made applications to the referring court, the Conseil d’État (Council of State, France), against those refusals of the CNIL to serve formal notice on Google to carry out the de-referencing requested. The applications were joined by the referring court.","paragraph_id":"para_236"},{"text":"31","paragraph_id":"para_237"},{"text":"Finding that the applications raised several serious difficulties of interpretation of Directive 95/46, the Conseil d’État (Council of State) decided to stay the proceedings and to refer the following questions to the Court of Justice for a preliminary ruling:","paragraph_id":"para_238"},{"text":"‘(1)","paragraph_id":"para_239"},{"text":"Having regard to the specific responsibilities, powers and capabilities of the operator of a search engine, does the prohibition imposed on other controllers of processing data caught by Article 8(1) and (5) of Directive 95/46, subject to the exceptions laid down there, also apply to this operator as the controller of processing by means of that search engine?","paragraph_id":"para_240"},{"text":"(2)","paragraph_id":"para_241"},{"text":"If Question 1 should be answered in the affirmative:","paragraph_id":"para_242"},{"text":"[(a)]","paragraph_id":"para_243"},{"text":"Must Article 8(1) and (5) of Directive 95/46 be interpreted as meaning that the prohibition so imposed on the operator of a search engine of processing data covered by those provisions, subject to the exceptions laid down by that directive, would require the operator to grant as a matter of course the requests for de-referencing in relation to links to web pages concerning such data?","paragraph_id":"para_244"},{"text":"[(b)]","paragraph_id":"para_245"},{"text":"From that perspective, how must the exceptions laid down in Article 8(2)(a) and (e) of Directive 95/46 be interpreted, when they apply to the operator of a search engine, in the light of its specific responsibilities, powers and capabilities? In particular, may such an operator refuse a request for …","paragraph_id":"para_246"},{"text":"[(c)]","paragraph_id":"para_247"},{"text":"Similarly, when the links subject to the request for de-referencing lead to processing of personal data carried out solely for journalistic purposes or for those of artistic or literary expression, on which basis, in accordance with Article 9 of Directive 95/46, data within the categories mentioned …","paragraph_id":"para_248"},{"text":"(3)","paragraph_id":"para_249"},{"text":"If Question 1 should be answered in the negative:","paragraph_id":"para_250"},{"text":"[(a)]","paragraph_id":"para_251"},{"text":"Which specific requirements of Directive 95/46 must be met by the operator of a search engine, in view of its responsibilities, powers and capabilities?","paragraph_id":"para_252"},{"text":"[(b)]","paragraph_id":"para_253"},{"text":"When the operator establishes that the web pages at the end of the links subject to the request for de-referencing comprise data whose publication on those pages is unlawful, must the provisions of Directive 95/46 be interpreted as:","paragraph_id":"para_254"},{"text":"–","paragraph_id":"para_255"},{"text":"requiring the operator of a search engine to remove those links from the list of results displayed following a search made on the basis of the name of the person making the request; or","paragraph_id":"para_256"},{"text":"–","paragraph_id":"para_257"},{"text":"meaning only that it is to take that factor into consideration in assessing the merits of the request for de-referencing, or","paragraph_id":"para_258"},{"text":"–","paragraph_id":"para_259"},{"text":"meaning that this factor has no bearing on the assessment it is to make?","paragraph_id":"para_260"},{"text":"Furthermore, if that factor is not irrelevant, how is the lawfulness of the publication on web pages of the data at issue which stem from processing falling outside the territorial scope of Directive 95/46 and, accordingly, of the national laws implementing it to be assessed?","paragraph_id":"para_261"},{"text":"(4)","paragraph_id":"para_262"},{"text":"Irrespective of the answer to be given to Question 1:","paragraph_id":"para_263"},{"text":"[(a)]","paragraph_id":"para_264"},{"text":"whether or not publication of the personal data on the web page at the end of the link at issue is lawful, must the provisions of Directive 95/46 be interpreted as:","paragraph_id":"para_265"},{"text":"–","paragraph_id":"para_266"},{"text":"requiring the operator of a search engine, when the person making the request establishes that the data in question have become incomplete or inaccurate, or are no longer up to date, to grant the corresponding request for de-referencing;","paragraph_id":"para_267"},{"text":"–","paragraph_id":"para_268"},{"text":"more specifically, requiring the operator of a search engine, when the person making the request shows that, having regard to the conduct of the legal proceedings, the information relating to an earlier stage of those proceedings is no longer consistent with the current reality of his situation, to de-reference the links to web pages comprising such information?","paragraph_id":"para_269"},{"text":"[(b)]","paragraph_id":"para_270"},{"text":"Must Article 8(5) of Directive 95/46 be interpreted as meaning that information relating to the investigation of an individual or reporting a trial and the resulting conviction and sentencing constitutes data relating to offences and to criminal convictions? More generally, does a web page comprising data referring to the convictions of or legal proceedings involving a natural person fall within the ambit of those provisions?’","paragraph_id":"para_271"},{"text":"Consideration of the questions referred","paragraph_id":"para_272"},{"text":"32","paragraph_id":"para_273"},{"text":"The questions referred concern the interpretation of Directive 95/46, which was applicable at the time when the request for a preliminary ruling was submitted. That directive was repealed with effect from 25 May 2018, from which date Regulation 2016/679 applies.","paragraph_id":"para_274"},{"text":"33","paragraph_id":"para_275"},{"text":"The Court will consider the questions referred from the point of view of Directive 95/46, while also taking Regulation 2016/679 into account in its analysis of them, in order to ensure that its answers will in any event be of use to the referring court.","paragraph_id":"para_276"},{"text":"Question 1","paragraph_id":"para_277"},{"text":"34","paragraph_id":"para_278"},{"text":"By its first question, the referring court essentially asks whether the provisions of Article 8(1) and (5) of Directive 95/46 must be interpreted as meaning that the prohibition or restrictions relating to the processing of special categories of personal data, mentioned in those provisions, apply al …","paragraph_id":"para_279"},{"text":"35","paragraph_id":"para_280"},{"text":"It must be recalled, first, that the activity of a search engine consisting in finding information published or placed on the internet by third parties, indexing it automatically, storing it temporarily and, finally, making it available to internet users according to a particular order of preference …","paragraph_id":"para_281"},{"text":"36","paragraph_id":"para_282"},{"text":"The processing of personal data in the context of the activity of a search engine can be distinguished from and is additional to that carried out by publishers of websites, consisting in loading those data on an internet page, and that activity plays a decisive role in the overall dissemination of t …","paragraph_id":"para_283"},{"text":"37","paragraph_id":"para_284"},{"text":"Consequently, in so far as the activity of a search engine is liable to affect significantly, and additionally compared with that of the publishers of websites, the fundamental rights to privacy and to the protection of personal data, the operator of the search engine as the person determining the p …","paragraph_id":"para_285"},{"text":"38","paragraph_id":"para_286"},{"text":"The first question referred aims to determine whether, in the context of his responsibilities, powers and capabilities, the operator of a search engine must also comply with the requirements laid down by Directive 95/46 with respect to the special categories of personal data mentioned in Article 8(1 …","paragraph_id":"para_287"},{"text":"39","paragraph_id":"para_288"},{"text":"As regards the special categories of data, Article 8(1) of Directive 95/46 provides that the Member States are to prohibit the processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, and the processing of data concerning health or sex life. Certain exceptions to and derogations from that prohibition are provided for inter alia in Article 8(2) of the directive.","paragraph_id":"para_289"},{"text":"40","paragraph_id":"para_290"},{"text":"Article 8(5) of Directive 95/46 states that the processing of data relating to offences, criminal convictions or security measures may be carried out only under the control of official authority, or if suitable specific safeguards are provided under national law, subject to derogations which may be …","paragraph_id":"para_291"},{"text":"41","paragraph_id":"para_292"},{"text":"The content of Article 8(1) and (5) of Directive 95/46 was taken over, with some changes, in Article 9(1) and Article 10 of Regulation 2016/679.","paragraph_id":"para_293"},{"text":"42","paragraph_id":"para_294"},{"text":"It must be stated, first, that it is apparent from the wording of those provisions of Directive 95/46 and Regulation 2016/679 that the prohibition and restrictions laid down by them apply, subject to the exceptions provided for by the directive and the regulation, to every kind of processing of the special categories of data referred to in those provisions and to all controllers carrying out such processing.","paragraph_id":"para_295"},{"text":"43","paragraph_id":"para_296"},{"text":"Next, no other provision of that directive or that regulation provides for a general derogation from that prohibition or those restrictions for processing such as that carried out in the context of the activity of a search engine. On the contrary, as already pointed out in paragraph 37 above, it fol …","paragraph_id":"para_297"},{"text":"44","paragraph_id":"para_298"},{"text":"Finally, an interpretation of Article 8(1) and (5) of Directive 95/46 or Article 9(1) and Article 10 of Regulation 2016/679 that excluded a priori and generally the activity of a search engine from the specific requirements laid down by those provisions for processing relating to the special categor …","paragraph_id":"para_299"},{"text":"45","paragraph_id":"para_300"},{"text":"While, contrary to the submissions of Google in particular, the specific features of the processing carried out by the operator of a search engine in connection with the activity of the search engine cannot thus justify the operator being exempted from compliance with Article 8(1) and (5) of Directi …","paragraph_id":"para_301"},{"text":"46","paragraph_id":"para_302"},{"text":"It must be observed in this respect that, as the European Commission emphasises, the operator of a search engine is responsible not because personal data referred to in those provisions appear on a web page published by a third party but because of the referencing of that page and in particular the …","paragraph_id":"para_303"},{"text":"47","paragraph_id":"para_304"},{"text":"In those circumstances, having regard to the responsibilities, powers and capabilities of the operator of a search engine as the controller of the processing carried out in connection with the activity of the search engine, the prohibitions and restrictions in Article 8(1) and (5) of Directive 95/46 …","paragraph_id":"para_305"},{"text":"48","paragraph_id":"para_306"},{"text":"It follows from the above that the answer to Question 1 is that the provisions of Article 8(1) and (5) of Directive 95/46 must be interpreted as meaning that the prohibition or restrictions relating to the processing of special categories of personal data, mentioned in those provisions, apply also, …","paragraph_id":"para_307"},{"text":"Question 2","paragraph_id":"para_308"},{"text":"49","paragraph_id":"para_309"},{"text":"By its second question, which consists of three parts, the referring court essentially asks","paragraph_id":"para_310"},{"text":"–","paragraph_id":"para_311"},{"text":"whether the provisions of Article 8(1) and (5) of Directive 95/46 must be interpreted as meaning that the operator of a search engine is required by those provisions, subject to the exceptions provided for by the directive, to accede to requests for de-referencing in relation to links to web pages containing personal data falling within the special categories referred to by those provisions;","paragraph_id":"para_312"},{"text":"–","paragraph_id":"para_313"},{"text":"whether Article 8(2)(a) and (e) of Directive 95/46 must be interpreted as meaning that, pursuant to that article, such an operator may refuse to accede to a request for de-referencing if he establishes that the links at issue lead to content comprising personal data falling within the special categories referred to in Article 8(1) but whose processing is covered by one of the exceptions laid down in Article 8(2)(a) and (e) of the directive; and","paragraph_id":"para_314"},{"text":"–","paragraph_id":"para_315"},{"text":"whether the provisions of Directive 95/46 must be interpreted as meaning that the operator of a search engine may also refuse to accede to a request for de-referencing on the ground that the links whose de-referencing is requested lead to web pages on which the personal data falling within the speci …","paragraph_id":"para_316"},{"text":"50","paragraph_id":"para_317"},{"text":"It should be noted, as a preliminary point, that in the context of Directive 95/46 requests for de-referencing such as those at issue in the main proceedings have their basis in particular in Article 12(b) of the directive, under which the Member States are to guarantee data subjects the right to obtain from the controller the erasure of data whose processing does not comply with the directive.","paragraph_id":"para_318"},{"text":"51","paragraph_id":"para_319"},{"text":"Moreover, in accordance with Article 14(a) of Directive 95/46, the Member States are to grant the data subject the right, at least in the cases referred to in Article 7(e) and (f) of the directive, to object at any time on compelling legitimate grounds relating to his or her particular situation to the processing of data relating to him or her, save where otherwise provided by national legislation.","paragraph_id":"para_320"},{"text":"52","paragraph_id":"para_321"},{"text":"In this respect, it must be recalled that the Court has held that Article 12(b) and Article 14(a) of Directive 95/46 must be interpreted as meaning that, in order to comply with the rights laid down in those provisions and in so far as the conditions laid down by those provisions are in fact satisfi …","paragraph_id":"para_322"},{"text":"53","paragraph_id":"para_323"},{"text":"The Court has also held that, when appraising the conditions for the application of those provisions, it should inter alia be examined whether the data subject has a right that the information in question relating to him or her personally should, at the present point in time, no longer be linked to …","paragraph_id":"para_324"},{"text":"54","paragraph_id":"para_325"},{"text":"With respect to Regulation 2016/679, the EU legislature laid down, in Article 17 of the regulation, a provision specifically governing the ‘right to erasure’, also called the ‘right to be forgotten’ in the heading of that article.","paragraph_id":"para_326"},{"text":"55","paragraph_id":"para_327"},{"text":"In accordance with Article 17(1) of the regulation, the data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller has the obligation to erase those data without undue delay where one of the grounds set out in th …","paragraph_id":"para_328"},{"text":"56","paragraph_id":"para_329"},{"text":"However, Article 17(3) of Regulation 2016/679 states that Article 17(1) of the regulation is not to apply to the extent that the processing is necessary on one of the grounds set out in Article 17(3). Among those grounds is, in Article 17(3)(a) of the regulation, the exercise of the right of freedom of expression and information.","paragraph_id":"para_330"},{"text":"57","paragraph_id":"para_331"},{"text":"The circumstance that Article 17(3)(a) of Regulation 2016/679 now expressly provides that the data subject’s right to erasure is excluded where the processing is necessary for the exercise of the right of information, guaranteed by Article 11 of the Charter, is an expression of the fact that the rig …","paragraph_id":"para_332"},{"text":"58","paragraph_id":"para_333"},{"text":"In that context, it should be recalled that Article 52(1) of the Charter accepts that limitations may be imposed on the exercise of rights such as those set forth in Articles 7 and 8 of the Charter, as long as the limitations are provided for by law, respect the essence of those rights and freedoms …","paragraph_id":"para_334"},{"text":"59","paragraph_id":"para_335"},{"text":"Regulation 2016/679, in particular Article 17(3)(a), thus expressly lays down the requirement to strike a balance between the fundamental rights to privacy and protection of personal data guaranteed by Articles 7 and 8 of the Charter, on the one hand, and the fundamental right of freedom of information guaranteed by Article 11 of the Charter, on the other.","paragraph_id":"para_336"},{"text":"60","paragraph_id":"para_337"},{"text":"It is in the light of those considerations that an examination must be made of the conditions in which the operator of a search engine is required to accede to a request for de-referencing and thus to delete from the list of results displayed following a search on the basis of the data subject’s name the link to a web page on which there are personal data falling within the special categories in Article 8(1) and (5) of Directive 95/46.","paragraph_id":"para_338"},{"text":"61","paragraph_id":"para_339"},{"text":"It must be stated, to begin with, that the processing by the operator of a search engine of the special categories of data referred to in Article 8(1) of Directive 95/46 is capable in principle of being covered by the exceptions in Article 8(2)(a) and (e), mentioned by the referring court, which pro …","paragraph_id":"para_340"},{"text":"62","paragraph_id":"para_341"},{"text":"With respect to the exception in Article 8(2)(a) of Directive 95/46 and Article 9(2)(a) of Regulation 2016/679, it follows from the definition of ‘consent’ in Article 2(h) of that directive and Article 4(11) of that regulation that the consent must be ‘specific’ and must therefore relate specificall …","paragraph_id":"para_342"},{"text":"63","paragraph_id":"para_343"},{"text":"By contrast, the circumstance, referred to in Article 8(2)(e) of Directive 95/46 and Article 9(2)(e) of Regulation 2016/679, that the data in question are manifestly made public by the data subject is intended to apply, as has been observed by all those who have made submissions on the point, both to the operator of the search engine and to the publisher of the web page concerned.","paragraph_id":"para_344"},{"text":"64","paragraph_id":"para_345"},{"text":"Consequently, in such a case, despite the presence on the web page referenced of personal data falling within the special categories in Article 8(1) of Directive 95/46 and Article 9(1) of Regulation 2016/679, the processing of those data by the operator of the search engine in connection with its ac …","paragraph_id":"para_346"},{"text":"65","paragraph_id":"para_347"},{"text":"However, even in that case, the data subject may, pursuant to Article 14(a) of Directive 95/46 or Article 17(1)(c) and Article 21(1) of Regulation 2016/679, have the right to de-referencing of the link in question on grounds relating to his or her particular situation.","paragraph_id":"para_348"},{"text":"66","paragraph_id":"para_349"},{"text":"In any event, when the operator of a search engine receives a request for de-referencing, he must ascertain, having regard to the reasons of substantial public interest referred to in Article 8(4) of Directive 95/46 or Article 9(2)(g) of Regulation 2016/679 and in compliance with the conditions laid …","paragraph_id":"para_350"},{"text":"67","paragraph_id":"para_351"},{"text":"Furthermore, where the processing relates to the special categories of data mentioned in Article 8(1) and (5) of Directive 95/46 or Article 9(1) and Article 10 of Regulation 2016/679, the interference with the data subject’s fundamental rights to privacy and protection of personal data is, as observed in paragraph 44 above, liable to be particularly serious because of the sensitivity of those data.","paragraph_id":"para_352"},{"text":"68","paragraph_id":"para_353"},{"text":"Consequently, where the operator of a search engine receives a request for de-referencing relating to a link to a web page on which such sensitive data are published, the operator must, on the basis of all the relevant factors of the particular case and taking into account the seriousness of the int …","paragraph_id":"para_354"},{"text":"69","paragraph_id":"para_355"},{"text":"It follows from all the above considerations that the answer to Question 2 is as follows:","paragraph_id":"para_356"},{"text":"–","paragraph_id":"para_357"},{"text":"The provisions of Article 8(1) and (5) of Directive 95/46 must be interpreted as meaning that the operator of a search engine is in principle required by those provisions, subject to the exceptions provided for by the directive, to accede to requests for de-referencing in relation to links to web pages containing personal data falling within the special categories referred to by those provisions.","paragraph_id":"para_358"},{"text":"–","paragraph_id":"para_359"},{"text":"Article 8(2)(e) of Directive 95/46 must be interpreted as meaning that, pursuant to that article, such an operator may refuse to accede to a request for de-referencing if he establishes that the links at issue lead to content comprising personal data falling within the special categories referred to …","paragraph_id":"para_360"},{"text":"–","paragraph_id":"para_361"},{"text":"The provisions of Directive 95/46 must be interpreted as meaning that, where the operator of a search engine has received a request for de-referencing relating to a link to a web page on which personal data falling within the special categories referred to in Article 8(1) or (5) of Directive 95/46 a …","paragraph_id":"para_362"},{"text":"Question 3","paragraph_id":"para_363"},{"text":"70","paragraph_id":"para_364"},{"text":"As this question is asked only in the event that Question 1 is answered in the negative, there is no need to answer it, given the affirmative answer to Question 1.","paragraph_id":"para_365"},{"text":"Question 4","paragraph_id":"para_366"},{"text":"71","paragraph_id":"para_367"},{"text":"By its fourth question, the referring court essentially asks whether the provisions of Directive 95/46 must be interpreted as meaning that","paragraph_id":"para_368"},{"text":"–","paragraph_id":"para_369"},{"text":"first, information relating to legal proceedings brought against an individual and, as the case may be, information relating to an ensuing conviction are data relating to ‘offences’ and ‘criminal convictions’ within the meaning of Article 8(5) of Directive 95/46, and","paragraph_id":"para_370"},{"text":"–","paragraph_id":"para_371"},{"text":"second, the operator of a search engine is required to accede to a request for de-referencing relating to links to web pages displaying such information, where the information relates to an earlier stage of the legal proceedings in question and, having regard to the progress of the proceedings, no longer corresponds to the current situation?","paragraph_id":"para_372"},{"text":"72","paragraph_id":"para_373"},{"text":"In this respect, it must be stated, as the Advocate General observed in point 100 of his Opinion and as submitted inter alia by the French Government, Ireland, the Italian and Polish Governments and the Commission, that information concerning legal proceedings brought against an individual, such as …","paragraph_id":"para_374"},{"text":"73","paragraph_id":"para_375"},{"text":"Consequently, by including in the list of results displayed following a search carried out on the basis of the data subject’s name links to web pages on which such data are published, the operator of a search engine carries out a processing of those data which, in accordance with the first subparagr …","paragraph_id":"para_376"},{"text":"74","paragraph_id":"para_377"},{"text":"As regards those other conditions of lawfulness, it must be recalled that it follows from the requirements laid down in Article 6(1)(c) to (e) of Directive 95/46, now repeated in Article 5(1)(c) to (e) of Regulation 2016/679, that even initially lawful processing of accurate data may over time becom …","paragraph_id":"para_378"},{"text":"75","paragraph_id":"para_379"},{"text":"However, as stated in paragraph 66 above, even if the processing of data referred to in Article 8(5) of Directive 95/46 and Article 10 of Regulation 2016/679 does not correspond to the restrictions laid down by those provisions or the other conditions of lawfulness, such as those laid down in Articl …","paragraph_id":"para_380"},{"text":"76","paragraph_id":"para_381"},{"text":"In this respect, it must be recalled that it follows from the case-law of the European Court of Human Rights that applications brought by individuals for the prohibition under Article 8 of the European Convention for the Protection of Human Rights and Fundamental Freedoms, signed at Rome on 4 Novemb …","paragraph_id":"para_382"},{"text":"77","paragraph_id":"para_383"},{"text":"It is thus for the operator of a search engine to assess, in the context of a request for de-referencing relating to links to web pages on which information is published relating to criminal proceedings brought against the data subject, concerning an earlier stage of the proceedings and no longer co …","paragraph_id":"para_384"},{"text":"78","paragraph_id":"para_385"},{"text":"It must, however, be added that, even if the operator of a search engine were to find that that is not the case because the inclusion of the link in question is strictly necessary for reconciling the data subject’s rights to privacy and protection of personal data with the freedom of information of …","paragraph_id":"para_386"},{"text":"79","paragraph_id":"para_387"},{"text":"Having regard to the above considerations, the answer to Question 4 is that the provisions of Directive 95/46 must be interpreted as meaning that","paragraph_id":"para_388"},{"text":"–","paragraph_id":"para_389"},{"text":"first, information relating to legal proceedings brought against an individual and, as the case may be, information relating to an ensuing conviction are data relating to ‘offences’ and ‘criminal convictions’ within the meaning of Article 8(5) of Directive 95/46, and","paragraph_id":"para_390"},{"text":"–","paragraph_id":"para_391"},{"text":"second, the operator of a search engine is required to accede to a request for de-referencing relating to links to web pages displaying such information, where the information relates to an earlier stage of the legal proceedings in question and, having regard to the progress of the proceedings, no l …","paragraph_id":"para_392"},{"text":"Costs","paragraph_id":"para_393"},{"text":"80","paragraph_id":"para_394"},{"text":"Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the national court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.","paragraph_id":"para_395"},{"text":"On those grounds, the Court (Grand Chamber) hereby rules:","paragraph_id":"para_396"},{"text":"1.","paragraph_id":"para_397"},{"text":"The provisions of Article 8(1) and (5) of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data must be interpreted as meaning that the prohibition or r …","paragraph_id":"para_398"},{"text":"2.","paragraph_id":"para_399"},{"text":"The provisions of Article 8(1) and (5) of Directive 95/46 must be interpreted as meaning that the operator of a search engine is in principle required by those provisions, subject to the exceptions provided for by the directive, to accede to requests for de-referencing in relation to links to web pages containing personal data falling within the special categories referred to by those provisions.","paragraph_id":"para_400"},{"text":"Article 8(2)(e) of Directive 95/46 must be interpreted as meaning that, pursuant to that article, such an operator may refuse to accede to a request for de-referencing if he establishes that the links at issue lead to content comprising personal data falling within the special categories referred to …","paragraph_id":"para_401"},{"text":"The provisions of Directive 95/46 must be interpreted as meaning that, where the operator of a search engine has received a request for de-referencing relating to a link to a web page on which personal data falling within the special categories referred to in Article 8(1) or (5) of Directive 95/46 a …","paragraph_id":"para_402"},{"text":"3.","paragraph_id":"para_403"},{"text":"The provisions of Directive 95/46 must be interpreted as meaning that","paragraph_id":"para_404"},{"text":"–","paragraph_id":"para_405"},{"text":"first, information relating to legal proceedings brought against an individual and, as the case may be, information relating to an ensuing conviction are data relating to ‘offences’ and ‘criminal convictions’ within the meaning of Article 8(5) of Directive 95/46, and","paragraph_id":"para_406"},{"text":"–","paragraph_id":"para_407"},{"text":"second, the operator of a search engine is required to accede to a request for de-referencing relating to links to web pages displaying such information, where the information relates to an earlier stage of the legal proceedings in question and, having regard to the progress of the proceedings, no l …","paragraph_id":"para_408"},{"text":"[Signatures]","paragraph_id":"para_409"},{"text":"(\n *1\n ) Language of the case: French.","paragraph_id":"para_410"}],"word_count":11540,"cites":["C-131/12","C-92/09","C-93/09"],"sha256":"e5afd729b9a776564c7eeae1990d886b6dfb5bdb3570cb8e82ad29cdc28a669d","source_url":"https://publications.europa.eu/resource/celex/62017CJ0136.ENG.xhtml.ECR_62017CJ0136_EN_01.html","fetched_at":"2026-10-02T19:17:56.968+00:00","canonical":"https://legal.exploreworldai.com/ai/judgments/eu/c-136-17-62017cj0136","risk_graph":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-136-17-62017cj0136","relations_graph":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-136-17-62017cj0136","changes":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes","agent":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-136-17-62017cj0136"},"hash":"sha256:8b80dc4583075e9b0c978d083c9fd738c59217f33590fa4d2b12a19a119e6f8d","version":"legal-2026-10-13","expires":"2026-10-14T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-13+legal-2026-10-13+2026-10-13T20:30:42","content_hash":"sha256:8b80dc4583075e9b0c978d083c9fd738c59217f33590fa4d2b12a19a119e6f8d","revalidate_after":"2026-10-13T22:12:33.776Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-136-17-62017cj0136","follow":[{"rel":"risk","href":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-136-17-62017cj0136"},{"rel":"relations","href":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-136-17-62017cj0136"},{"rel":"agent","href":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-136-17-62017cj0136"},{"rel":"obligations","href":"https://legal.exploreworldai.com/api/public/v1/obligation-chain"},{"rel":"changes","href":"https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu"}],"disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"withheld":{"item.cited_by":1},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"public","access_view":"public","citation":{"citation_url":"https://legal.exploreworldai.com/eu/praxis/c-136-17-62017cj0136","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-2c3cb89c7e5519865f5a975ea2b45b3c","response_hash":"sha256:8b80dc4583075e9b0c978d083c9fd738c59217f33590fa4d2b12a19a119e6f8d"}},"freshness":{"freshness_class":"stable","as_of":"2026-11-03T05:31:22.647Z","valid_for":604800,"recheck":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu%3Ac-136-17-62017cj0136","note":"Oföränderligt objekt med hash. Får cachas länge.","tokens":24796}}