{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-207-16","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-207-16)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-11","fingerprint":"ewai:eu:20b464","proof":"sha256:d0596b0cc54649d9bf62d0c1ea8cebcf891c28438f403dc3c7b5bbc5b9d985da","jurisdiction":"eu","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","item":{"schema_version":"1.0.0","id":"eu:c-207-16","jurisdiction":"eu","lang":"en","brand_source":"Source: NovaCopilot","brand":{"product":"NovaCopilot","platform":"ExploreWorldAI","infrastructure":"ExploreWorld Legal","infrastructure_url":"legal.exploreworldai.com","legal_entity":"Valkiv Ventures AB","permanent_url":"https://legal.exploreworldai.com/novacopilot","source":"Source: NovaCopilot","powered_by":"Powered by NovaCopilot","license":"https://legal.exploreworldai.com/licensvillkor"},"sections":[{"title":"Front matter","paragraphs":["para_1","para_2","para_3","para_4","para_5","para_6","para_7","para_8","para_9","para_10","para_11","para_12","para_13","para_14","para_15","para_16","para_17","para_18","para_19","para_20","para_21","para_22","para_23","para_24","para_25","para_26","para_27","para_28","para_29","para_30","para_31","para_32","para_33","para_34","para_35","para_36","para_37","para_38","para_39","para_40","para_41"],"kind":"front_matter"},{"title":"Judgment","paragraphs":["para_42","para_43","para_44","para_45","para_46"],"kind":"assessment"},{"title":"Legal context","paragraphs":["para_47"],"kind":"legal_framework"},{"title":"EU law","paragraphs":["para_48"],"kind":"legal_framework"},{"title":"Directive 95/46","paragraphs":["para_49","para_50","para_51","para_52","para_53","para_54","para_55","para_56","para_57","para_58","para_59"],"kind":"legal_framework"},{"title":"Directive 2002/58","paragraphs":["para_60","para_61","para_62","para_63","para_64","para_65","para_66","para_67","para_68","para_69","para_70","para_71","para_72","para_73","para_74","para_75","para_76","para_77","para_78","para_79","para_80","para_81","para_82","para_83","para_84","para_85","para_86","para_87","para_88","para_89","para_90","para_91","para_92","para_93","para_94","para_95","para_96","para_97","para_98","para_99","para_100","para_101","para_102","para_103","para_104","para_105","para_106","para_107"],"kind":"legal_framework"},{"title":"Law 25/2007","paragraphs":["para_108","para_109","para_110","para_111","para_112","para_113"],"kind":"legal_framework"},{"title":"The Criminal Code","paragraphs":["para_114","para_115","para_116","para_117","para_118","para_119","para_120","para_121","para_122","para_123","para_124","para_125","para_126"],"kind":"legal_framework"},{"title":"Code of Criminal Procedure","paragraphs":["para_127","para_128","para_129","para_130","para_131","para_132","para_133","para_134","para_135","para_136","para_137","para_138","para_139","para_140","para_141","para_142","para_143","para_144","para_145"],"kind":"legal_framework"},{"title":"The main proceedings and the questions referred for a preliminary ruling","paragraphs":["para_146","para_147","para_148","para_149","para_150","para_151","para_152","para_153","para_154","para_155","para_156","para_157","para_158","para_159","para_160","para_161","para_162","para_163","para_164","para_165","para_166"],"kind":"facts"},{"title":"Procedure before the Court","paragraphs":["para_167","para_168","para_169"],"kind":"facts"},{"title":"Consideration of the questions referred","paragraphs":["para_170","para_171","para_172"],"kind":"questions"},{"title":"The jurisdiction of the Court","paragraphs":["para_173","para_174","para_175","para_176","para_177","para_178","para_179","para_180","para_181","para_182","para_183","para_184","para_185","para_186","para_187","para_188","para_189","para_190","para_191","para_192","para_193","para_194","para_195","para_196","para_197","para_198","para_199","para_200","para_201","para_202","para_203"],"kind":"questions"},{"title":"Admissibility","paragraphs":["para_204","para_205","para_206","para_207","para_208","para_209","para_210","para_211","para_212"],"kind":"assessment"},{"title":"Substance","paragraphs":["para_213","para_214","para_215","para_216","para_217","para_218","para_219","para_220","para_221","para_222","para_223","para_224","para_225","para_226","para_227","para_228","para_229","para_230","para_231","para_232","para_233","para_234","para_235","para_236","para_237","para_238","para_239","para_240","para_241","para_242","para_243","para_244","para_245"],"kind":"assessment"},{"title":"Costs","paragraphs":["para_246","para_247","para_248"],"kind":"costs"},{"title":"On those grounds, the Court (Grand Chamber) hereby rules:","paragraphs":["para_249","para_250","para_251","para_252"],"kind":"operative"}],"paragraphs":[{"text":"62016CJ0207","paragraph_id":"para_1"},{"text":"JUDGMENT OF THE COURT (Grand Chamber)","paragraph_id":"para_2"},{"text":"2 October 2018 (\n *1\n )","paragraph_id":"para_3"},{"text":"(Reference for a preliminary ruling — Electronic communications — Processing of personal data — Directive 2002/58/EC — Articles 1 and 3 — Scope — Confidentiality of electronic communications — Protection — Article 5 and Article 15(1) — Charter of Fundamental Rights of the European Union — Articles 7 …","paragraph_id":"para_4"},{"text":"In Case C‑207/16,","paragraph_id":"para_5"},{"text":"REQUEST for a preliminary ruling under Article 267 TFEU from the Audiencia Provincial de Tarragona (Provincial Court, Tarragona, Spain), made by decision of 6 April 2016, received at the Court on 14 April 2016, in the proceedings brought by","paragraph_id":"para_6"},{"text":"Ministerio Fiscal,","paragraph_id":"para_7"},{"text":"THE COURT (Grand Chamber),","paragraph_id":"para_8"},{"text":"composed of K. Lenaerts, President, A. Tizzano, Vice-President, R. Silva de Lapuerta, T. von Danwitz (Rapporteur), J.L. da Cruz Vilaça, C.G. Fernlund and C. Vajda, Presidents of Chambers, E. Juhász, A. Borg Barthet, C. Toader, M. Safjan, D. Šváby, M. Berger, E. Jarašiūnas and E. Regan, Judges,","paragraph_id":"para_9"},{"text":"Advocate General: H. Saugmandsgaard Øe,","paragraph_id":"para_10"},{"text":"Registrar: L. Carrasco Marco, Administrator,","paragraph_id":"para_11"},{"text":"having regard to the written procedure and further to the hearing on 29 January 2018,","paragraph_id":"para_12"},{"text":"after considering the observations submitted on behalf of","paragraph_id":"para_13"},{"text":"–","paragraph_id":"para_14"},{"text":"the Ministerio Fiscal, by E. Tejada de la Fuente,","paragraph_id":"para_15"},{"text":"–","paragraph_id":"para_16"},{"text":"the Spanish Government, by M. Sampol Pucurull, acting as Agent,","paragraph_id":"para_17"},{"text":"–","paragraph_id":"para_18"},{"text":"the Czech Government, by M. Smolek, J. Vláčil and A. Brabcová, acting as Agents,","paragraph_id":"para_19"},{"text":"–","paragraph_id":"para_20"},{"text":"the Danish Government, by J. Nymann-Lindegren and M. Wolff, acting as Agents,","paragraph_id":"para_21"},{"text":"–","paragraph_id":"para_22"},{"text":"the Estonian Government, by N. Grünberg, acting as Agent,","paragraph_id":"para_23"},{"text":"–","paragraph_id":"para_24"},{"text":"Ireland, by M. Browne, L. Williams, E. Creedon and A. Joyce, acting as Agents, and by E. Gibson, Barrister-at-Law,","paragraph_id":"para_25"},{"text":"–","paragraph_id":"para_26"},{"text":"the French Government, by D. Colas, E. de Moustier and E. Armoet, acting as Agents,","paragraph_id":"para_27"},{"text":"–","paragraph_id":"para_28"},{"text":"the Latvian Government, by I. Kucina and J. Davidoviča, acting as Agents,","paragraph_id":"para_29"},{"text":"–","paragraph_id":"para_30"},{"text":"the Hungarian Government, by M. Fehér and G. Koós, acting as Agents,","paragraph_id":"para_31"},{"text":"–","paragraph_id":"para_32"},{"text":"the Austrian Government, by C. Pesendorfer, acting as Agent,","paragraph_id":"para_33"},{"text":"–","paragraph_id":"para_34"},{"text":"the Polish Government, by B. Majczyna, D. Lutostańska and J. Sawicka, acting as Agents,","paragraph_id":"para_35"},{"text":"–","paragraph_id":"para_36"},{"text":"the United Kingdom Government, by S. Brandon and C. Brodie, acting as Agents, and by C. Knight, Barrister, and G. Facenna QC,","paragraph_id":"para_37"},{"text":"–","paragraph_id":"para_38"},{"text":"the European Commission, by I. Martínez del Peral, P. Costa de Oliveira, R. Troosters and D. Nardi, acting as Agents,","paragraph_id":"para_39"},{"text":"after hearing the Opinion of the Advocate General at the sitting on 3 May 2018,","paragraph_id":"para_40"},{"text":"gives the following","paragraph_id":"para_41"},{"text":"Judgment","paragraph_id":"para_42"},{"text":"1","paragraph_id":"para_43"},{"text":"This request for a preliminary ruling concerns, in essence, the interpretation of Article 15(1) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Dire …","paragraph_id":"para_44","court_paragraph":1},{"text":"2","paragraph_id":"para_45"},{"text":"The request has been made in proceedings brought by the Ministerio Fiscal (Public Prosecutor’s Office, Spain) against the decision of the Juzgado de Instrucción No 3 de Tarragona (Court of Preliminary Investigation No 3, Tarragona, Spain, ‘the investigating magistrate’) refusing to grant the police access to personal data retained by providers of electronic communications services.","paragraph_id":"para_46","court_paragraph":2},{"text":"Legal context","paragraph_id":"para_47"},{"text":"EU law","paragraph_id":"para_48"},{"text":"Directive 95/46","paragraph_id":"para_49"},{"text":"3","paragraph_id":"para_50"},{"text":"According to Article 2(b) of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ( OJ 1995 L 281, p. 31 ), ‘processing of personal data’ means ‘any op …","paragraph_id":"para_51","court_paragraph":3},{"text":"4","paragraph_id":"para_52"},{"text":"Article 3 of the directive, entitled ‘Scope’, provides as follows:","paragraph_id":"para_53","court_paragraph":4},{"text":"‘1.   This Directive shall apply to the processing of personal data wholly or partly by automatic means, and to the processing otherwise than by automatic means of personal data which form part of a filing system or are intended to form part of a filing system.","paragraph_id":"para_54"},{"text":"2.   This Directive shall not apply to the processing of personal data:","paragraph_id":"para_55"},{"text":"–","paragraph_id":"para_56"},{"text":"in the course of an activity which falls outside the scope of Community law, such as those provided for by Titles V and VI of the Treaty on European Union and in any case to processing operations concerning public security, defence, State security (including the economic well-being of the State when the processing operation relates to State security matters) and the activities of the State in areas of criminal law,","paragraph_id":"para_57"},{"text":"–","paragraph_id":"para_58"},{"text":"by a natural person in the course of a purely personal or household activity.’","paragraph_id":"para_59"},{"text":"Directive 2002/58","paragraph_id":"para_60"},{"text":"5","paragraph_id":"para_61"},{"text":"Recitals 2, 11, 15 and 21 of Directive 2002/58 state:","paragraph_id":"para_62","court_paragraph":5},{"text":"‘(2)","paragraph_id":"para_63"},{"text":"This Directive seeks to respect the fundamental rights and observes the principles recognised in particular by the [Charter]. In particular, this Directive seeks to ensure full respect for the rights set out in Articles 7 and 8 of that Charter.","paragraph_id":"para_64"},{"text":"…","paragraph_id":"para_65"},{"text":"(11)","paragraph_id":"para_66"},{"text":"Like Directive [95/46], this Directive does not address issues of protection of fundamental rights and freedoms related to activities which are not governed by Community law. Therefore it does not alter the existing balance between the individual’s right to privacy and the possibility for Member Sta …","paragraph_id":"para_67"},{"text":"…","paragraph_id":"para_68"},{"text":"(15)","paragraph_id":"para_69"},{"text":"A communication may include any naming, numbering or addressing information provided by the sender of a communication or the user of a connection to carry out the communication. Traffic data may include any translation of this information by the network over which the communication is transmitted for the purpose of carrying out the transmission. …","paragraph_id":"para_70"},{"text":"…","paragraph_id":"para_71"},{"text":"(21)","paragraph_id":"para_72"},{"text":"Measures should be taken to prevent unauthorised access to communications in order to protect the confidentiality of communications, including both the contents and any data related to such communications, by means of public communications networks and publicly available electronic communications services. National legislation in some Member States only prohibits intentional unauthorised access to communications.’","paragraph_id":"para_73"},{"text":"6","paragraph_id":"para_74"},{"text":"Article 1 of Directive 2002/58, entitled ‘Scope and aim’, provides:","paragraph_id":"para_75","court_paragraph":6},{"text":"‘1.   This Directive provides for the harmonisation of the national provisions required to ensure an equivalent level of protection of fundamental rights and freedoms, and in particular the right to privacy and confidentiality, with respect to the processing of personal data in the electronic communication sector and to ensure the free movement of such data and of electronic communication equipment and services in the Community.","paragraph_id":"para_76"},{"text":"2.   The provisions of this Directive particularise and complement Directive [95/46] for the purposes mentioned in paragraph 1. Moreover, they provide for protection of the legitimate interests of subscribers who are legal persons.","paragraph_id":"para_77"},{"text":"3.   This Directive shall not apply to activities which fall outside the scope of the Treaty establishing the European Community, such as those covered by Titles V and VI of the Treaty on European Union, and in any case to activities concerning public security, defence, State security (including the economic well-being of the State when the activities relate to State security matters) and the activities of the State in areas of criminal law.’","paragraph_id":"para_78"},{"text":"7","paragraph_id":"para_79"},{"text":"Article 2 of Directive 2002/58, entitled ‘Definitions’, is worded as follows:","paragraph_id":"para_80","court_paragraph":7},{"text":"‘Save as otherwise provided, the definitions in Directive [95/46] and in Directive 2002/21/EC of the European Parliament and of the Council of 7 March 2002 on a common regulatory framework for electronic communications networks and services (Framework Directive) [( OJ 2002 L 108, p. 33 )] shall apply.","paragraph_id":"para_81"},{"text":"The following definitions shall also apply:","paragraph_id":"para_82"},{"text":"…","paragraph_id":"para_83"},{"text":"(b)","paragraph_id":"para_84"},{"text":"“traffic data” means any data processed for the purpose of the conveyance of a communication on an electronic communications network or for the billing thereof;","paragraph_id":"para_85"},{"text":"(c)","paragraph_id":"para_86"},{"text":"“location data” means any data processed in an electronic communications network or by an electronic communications service, indicating the geographic position of the terminal equipment of a user of a publicly available electronic communications service;","paragraph_id":"para_87"},{"text":"(d)","paragraph_id":"para_88"},{"text":"“communication” means any information exchanged or conveyed between a finite number of parties by means of a publicly available electronic communications service. This does not include any information conveyed as part of a broadcasting service to the public over an electronic communications network except to the extent that the information can be related to the identifiable subscriber or user receiving the information;","paragraph_id":"para_89"},{"text":"…’","paragraph_id":"para_90"},{"text":"8","paragraph_id":"para_91"},{"text":"Article 3 of Directive 2002/58, entitled ‘Services concerned’, provides:","paragraph_id":"para_92","court_paragraph":8},{"text":"‘This Directive shall apply to the processing of personal data in connection with the provision of publicly available electronic communications services in public communications networks in the Community, including public communications networks supporting data collection and identification devices.’","paragraph_id":"para_93"},{"text":"9","paragraph_id":"para_94"},{"text":"Article 5 of Directive 2002/58, entitled ‘Confidentiality of the communications’, is worded as follows:","paragraph_id":"para_95","court_paragraph":9},{"text":"‘1.   Member States shall ensure the confidentiality of communications and the related traffic data by means of a public communications network and publicly available electronic communications services, through national legislation. In particular, they shall prohibit listening, tapping, storage or o …","paragraph_id":"para_96"},{"text":"…","paragraph_id":"para_97"},{"text":"3.   Member States shall ensure that the storing of information, or the gaining of access to information already stored, in the terminal equipment of a subscriber or user is only allowed on condition that the subscriber or user concerned has given his or her consent, having been provided with clear and comprehensive information, in accordance with Directive [95/46], inter alia, about the purposes of the processing. …’","paragraph_id":"para_98"},{"text":"10","paragraph_id":"para_99"},{"text":"Article 6 of Directive 2002/58, entitled ‘Traffic data’, provides:","paragraph_id":"para_100","court_paragraph":10},{"text":"‘1.   Traffic data relating to subscribers and users processed and stored by the provider of a public communications network or publicly available electronic communications service must be erased or made anonymous when it is no longer needed for the purpose of the transmission of a communication without prejudice to paragraphs 2, 3 and 5 of this Article and Article 15(1).","paragraph_id":"para_101"},{"text":"2.   Traffic data necessary for the purposes of subscriber billing and interconnection payments may be processed. Such processing is permissible only up to the end of the period during which the bill may lawfully be challenged or payment pursued.","paragraph_id":"para_102"},{"text":"…’","paragraph_id":"para_103"},{"text":"11","paragraph_id":"para_104"},{"text":"Article 15 of that directive, entitled ‘Application of certain provisions of Directive [95/46]’, provides, in paragraph 1 thereof:","paragraph_id":"para_105","court_paragraph":11},{"text":"‘Member States may adopt legislative measures to restrict the scope of the rights and obligations provided for in Article 5, Article 6, Article 8(1), (2), (3) and (4), and Article 9 of this Directive when such restriction constitutes a necessary, appropriate and proportionate measure within a democr …","paragraph_id":"para_106"},{"text":"Spanish law","paragraph_id":"para_107"},{"text":"Law 25/2007","paragraph_id":"para_108"},{"text":"12","paragraph_id":"para_109"},{"text":"Article 1 of Ley 25/2007 de conservación de datos relativos a las comunicaciones electrónicas y a la redes públicas de comunicaciones (Law 25/2007 on the retention of data relating to electronic communications and to public communication networks) of 18 October 2007 (BOE No 251 of 19 October 2007, p. 42517) provides:","paragraph_id":"para_110","court_paragraph":12},{"text":"‘1.   The purpose of this law is to regulate the obligation of operators to retain the data generated or processed in the context of the supply of electronic communications services or public communication networks, and the obligation to communicate those data to authorised agents whenever they are …","paragraph_id":"para_111"},{"text":"2.   This law shall apply to traffic data and to location data concerning both natural and legal persons, and to related data necessary in order to identify the subscriber or registered user.","paragraph_id":"para_112"},{"text":"…’","paragraph_id":"para_113"},{"text":"The Criminal Code","paragraph_id":"para_114"},{"text":"13","paragraph_id":"para_115"},{"text":"Article 13(1) of Ley Orgánica 10/1995 del Código Penal (Criminal Code) of 23 November 1995 (BOE No 281 of 24 November 1995, p. 33987) is worded as follows:","paragraph_id":"para_116","court_paragraph":13},{"text":"‘Serious offences are those which the law punishes with a serious penalty.’","paragraph_id":"para_117"},{"text":"14","paragraph_id":"para_118"},{"text":"Article 33 of the Criminal Code provides:","paragraph_id":"para_119","court_paragraph":14},{"text":"‘1.   Depending on their nature and duration, penalties shall be classified as serious, less serious and light.","paragraph_id":"para_120"},{"text":"2.   Serious penalties shall be:","paragraph_id":"para_121"},{"text":"(a)","paragraph_id":"para_122"},{"text":"imprisonment for life, subject to review.","paragraph_id":"para_123"},{"text":"(b)","paragraph_id":"para_124"},{"text":"imprisonment for a period of more than five years.","paragraph_id":"para_125"},{"text":"…’","paragraph_id":"para_126"},{"text":"Code of Criminal Procedure","paragraph_id":"para_127"},{"text":"15","paragraph_id":"para_128"},{"text":"After the facts in the main proceedings had taken place, the Ley de Enjuiciamiento Criminal (Code of Criminal Procedure) was amended by Ley Orgánica 13/2015 de modificación de la Ley de Enjuiciamiento Criminal para el fortalecimiento de las garantías procesales y la regulación de las medidas de inve …","paragraph_id":"para_129","court_paragraph":15},{"text":"16","paragraph_id":"para_130"},{"text":"The law entered into force on 6 December 2015. It brings the field of access to telephone and telematic communications data which have been retained by providers of electronic communications services within the purview of the Code of Criminal Procedure.","paragraph_id":"para_131","court_paragraph":16},{"text":"17","paragraph_id":"para_132"},{"text":"Article 579(1) of the Code of Criminal Procedure in the version as amended by Organic Law 13/2015 provides:","paragraph_id":"para_133","court_paragraph":17},{"text":"‘1.   The court may authorise the interception of private postal and telegraphic correspondence, including fax, Burofax and international money orders, which the suspect sends or receives, and also the opening and analysis of such correspondence where there are grounds for thinking that that will permit the discovery or verification of a fact or a factor of relevance for the case, provided that the investigation relates to one of the following offences:","paragraph_id":"para_134"},{"text":"(1)","paragraph_id":"para_135"},{"text":"Intentional offences punishable by a maximum penalty of at least three years’ imprisonment.","paragraph_id":"para_136"},{"text":"(2)","paragraph_id":"para_137"},{"text":"Offences committed in the context of a criminal organisation.","paragraph_id":"para_138"},{"text":"(3)","paragraph_id":"para_139"},{"text":"Terrorism offences.","paragraph_id":"para_140"},{"text":"…’","paragraph_id":"para_141"},{"text":"18","paragraph_id":"para_142"},{"text":"Article 588 ter j of the Code is worded as follows:","paragraph_id":"para_143","court_paragraph":18},{"text":"‘1.   Electronic data retained by service providers or by persons who supply the communication pursuant to the legislation on the retention of electronic communications data, or on their own initiative for commercial or other reasons, and who are connected with communications processes, shall be communicated in order to be taken into account in the context of the proceedings only when authorised by the court.","paragraph_id":"para_144"},{"text":"2.   Where knowledge of those data is essential for the investigation, application must be made to the competent court for authorisation to access the information in the automated archives of the service providers, in particular for the purpose of a cross search or a smart search of the data, provided that the nature of the data of which it is necessary to have knowledge and the reasons justifying the communication of those data are specified.’","paragraph_id":"para_145"},{"text":"The main proceedings and the questions referred for a preliminary ruling","paragraph_id":"para_146"},{"text":"19","paragraph_id":"para_147"},{"text":"Mr Hernandez Sierra lodged a complaint with the police for a robbery, which took place on 16 February 2015, during which he was injured and his wallet and mobile telephone were stolen.","paragraph_id":"para_148","court_paragraph":19},{"text":"20","paragraph_id":"para_149"},{"text":"On 27 February 2015, the police requested the investigating magistrate to order various providers of electronic communications services to provide (i) the telephone numbers that had been activated between 16 February and 27 February 2015 with the International Mobile Equipment Identity code (‘the IM …","paragraph_id":"para_150","court_paragraph":20},{"text":"21","paragraph_id":"para_151"},{"text":"By order of 5 May 2015, the investigating magistrate refused that request. The latter held that the measure requested would not serve to identify the perpetrators of the offence. Moreover, it refused to grant the request on the ground that Law 25/2007 limited the communication of the data retained b …","paragraph_id":"para_152","court_paragraph":21},{"text":"22","paragraph_id":"para_153"},{"text":"The Public Prosecutor’s Office appealed against that order before the referring court, claiming that communication of the data at issue ought to have been allowed by reason of the nature of the facts and pursuant to a judgment of the Tribunal Supremo (Supreme Court, Spain) of 26 July 2010 relating to a similar case.","paragraph_id":"para_154","court_paragraph":22},{"text":"23","paragraph_id":"para_155"},{"text":"The referring court explains that, subsequent to that order, the Spanish legislature amended the Code of Criminal Procedure by adopting Organic Law 13/2015. That legislation, which is relevant to the resolution of the case in the main proceedings, introduced two new alternative criteria for determin …","paragraph_id":"para_156","court_paragraph":23},{"text":"24","paragraph_id":"para_157"},{"text":"In that regard, the referring court considers that, in the main proceedings, Directives 95/46 and 2002/58 establish a link with the Charter. The national legislation at issue in the main proceedings therefore comes within its scope, in accordance with Article 51(1) of the Charter, despite the fact t …","paragraph_id":"para_158","court_paragraph":24},{"text":"25","paragraph_id":"para_159"},{"text":"In that judgment, the Court recognised that the retention and communication of traffic data constitute particularly serious interferences with the rights guaranteed in Articles 7 and 8 of the Charter and established criteria for the assessment of whether the principle of proportionality has been observed, including the seriousness of the offences warranting the retention of data and access thereto for the purposes of an investigation.","paragraph_id":"para_160","court_paragraph":25},{"text":"26","paragraph_id":"para_161"},{"text":"In those circumstances, the Audiencia Provincial de Tarragona (Provincial Court, Tarragona, Spain) decided to stay the proceedings and to refer the following questions to the Court of Justice for a preliminary ruling:","paragraph_id":"para_162","court_paragraph":26},{"text":"‘(1)","paragraph_id":"para_163"},{"text":"Can the sufficient seriousness of offences, as a criterion which justifies interference with the fundamental rights recognised by Articles 7 and 8 of the [Charter], be determined taking into account only the sentence which may be imposed in respect of the offence investigated, or is it also necessary to identify in the criminal conduct particular levels of harm to individual and/or collective legally protected interests?","paragraph_id":"para_164"},{"text":"(2)","paragraph_id":"para_165"},{"text":"If it were in accordance with the constitutional principles of the European Union, used by the Court of Justice in its judgment [of 8 April 2014, Digital Rights Ireland and Others, C‑293/12 and C‑594/12 , EU:C:2014:238 ] as standards for the strict review of [Directive 2002/58], to determine the ser …","paragraph_id":"para_166"},{"text":"Procedure before the Court","paragraph_id":"para_167"},{"text":"27","paragraph_id":"para_168"},{"text":"By decision of the President of the Court of 23 May 2016, the proceedings before the Court were stayed pending delivery of the judgment in Tele2 Sverige and Watson and Others, C‑203/15 and C‑698/15 (judgment of 21 December 2016, EU:C:2016:970 , hereinafter ‘ Tele2 Sverige and Watson and Others ’). F …","paragraph_id":"para_169","court_paragraph":27},{"text":"Consideration of the questions referred","paragraph_id":"para_170"},{"text":"28","paragraph_id":"para_171"},{"text":"The Spanish Government claims that, first, the Court lacks jurisdiction to reply to the request for a preliminary ruling and, secondly, the request is inadmissible.","paragraph_id":"para_172","court_paragraph":28},{"text":"The jurisdiction of the Court","paragraph_id":"para_173"},{"text":"29","paragraph_id":"para_174"},{"text":"In its written observations submitted to the Court, the Spanish Government expressed the view, endorsed by the United Kingdom Government during the hearing, that the Court does not have jurisdiction to answer the question referred for a preliminary ruling, on the ground that, in accordance with the …","paragraph_id":"para_175","court_paragraph":29},{"text":"30","paragraph_id":"para_176"},{"text":"According to the Spanish Government, the Court did, admittedly, rule in Tele2 Sverige and Watson and Others that a legislative measure governing national authorities’ access to data retained by providers of electronic communications services comes within the scope of Directive 2002/58. However, the …","paragraph_id":"para_177","court_paragraph":30},{"text":"31","paragraph_id":"para_178"},{"text":"In order to assess the claim that the Court does not have jurisdiction, it must be observed that Article 1(1) of Directive 2002/58 states that the directive provides for the harmonisation of the national provisions required, inter alia, to ensure an equivalent level of protection of fundamental righ …","paragraph_id":"para_179","court_paragraph":31},{"text":"32","paragraph_id":"para_180"},{"text":"Article 1(3) of Directive 2002/58 excludes from its scope ‘activities of the State’ in specified fields, including the activities of the State in areas of criminal law and in the areas of public security, defence and State security, including the economic well-being of the State when the activities …","paragraph_id":"para_181","court_paragraph":32},{"text":"33","paragraph_id":"para_182"},{"text":"Article 3 of Directive 2002/58 states that the directive is to apply to the processing of personal data in connection with the provision of publicly available electronic communications services in public communications networks in the European Union, including public communications networks supporti …","paragraph_id":"para_183","court_paragraph":33},{"text":"34","paragraph_id":"para_184"},{"text":"As regards Article 15(1) of Directive 2002/58, the Court has previously held that the legislative measures that are referred to in that provision come within the scope of that directive, even if they concern activities characteristic of States or State authorities, and are unrelated to fields in whi …","paragraph_id":"para_185","court_paragraph":34},{"text":"35","paragraph_id":"para_186"},{"text":"The Court concluded that Article 15(1), read in conjunction with Article 3 of Directive 2002/58, must be interpreted as meaning that the scope of the directive extends not only to a legislative measure that requires providers of electronic communications services to retain traffic and location data, …","paragraph_id":"para_187","court_paragraph":35},{"text":"36","paragraph_id":"para_188"},{"text":"The protection of the confidentiality of electronic communications and related traffic data, guaranteed by Article 5(1) of Directive 2002/58, applies to the measures taken by all persons other than users, whether private persons or bodies or State bodies. As confirmed in recital 21 of that directive …","paragraph_id":"para_189","court_paragraph":36},{"text":"37","paragraph_id":"para_190"},{"text":"It should also be noted that legislative measures requiring providers of electronic communications services to retain personal data or to grant competent national authorities access to those data necessarily involve the processing, by those providers, of the data (see, to that effect, Tele2 Sverige …","paragraph_id":"para_191","court_paragraph":37},{"text":"38","paragraph_id":"para_192"},{"text":"In the present case, as stated in the order for reference, the request at issue in the main proceedings, by which the police seeks judicial authorisation to access personal data retained by providers of electronic communications services, is based on Law 25/2007, read in conjunction with the Code of …","paragraph_id":"para_193","court_paragraph":38},{"text":"39","paragraph_id":"para_194"},{"text":"In those circumstances, the fact, noted by the Spanish Government, that the request for access was made in connection with a criminal investigation does not make Directive 2002/58 inapplicable to the case in the main proceedings by virtue of Article 1(3) of the directive.","paragraph_id":"para_195","court_paragraph":39},{"text":"40","paragraph_id":"para_196"},{"text":"It is also irrelevant in that regard that the request for access at issue in the main proceedings relates, as is apparent from the Spanish Government’s written answer to a question raised by the Court and confirmed by both that government and the Public Prosecutor’s Office during the hearing, to the …","paragraph_id":"para_197","court_paragraph":40},{"text":"41","paragraph_id":"para_198"},{"text":"As observed by the Advocate General in point 54 of his Opinion, Directive 2002/58, pursuant to Article 1(1) and Article 3 thereof, governs all processing of personal data in connection with the provision of electronic communications services. In addition, in accordance with subparagraph (b) of the s …","paragraph_id":"para_199","court_paragraph":41},{"text":"42","paragraph_id":"para_200"},{"text":"In that connection, as regards, more specifically, data relating to the identity of owners of SIM cards, it is apparent from recital 15 of Directive 2002/58 that traffic data may include, inter alia, the name and address of the person sending a communication or using a connection to carry out a comm …","paragraph_id":"para_201","court_paragraph":42},{"text":"43","paragraph_id":"para_202"},{"text":"The Court therefore has jurisdiction to reply to the question raised by the referring court.","paragraph_id":"para_203","court_paragraph":43},{"text":"Admissibility","paragraph_id":"para_204"},{"text":"44","paragraph_id":"para_205"},{"text":"The Spanish Government argues that the request for a preliminary ruling is inadmissible on the ground that it does not clearly identify the provisions of EU law on which the Court is asked to give a preliminary ruling. What is more, the police request at issue in the main proceedings does not concer …","paragraph_id":"para_206","court_paragraph":44},{"text":"45","paragraph_id":"para_207"},{"text":"The Court has consistently held that it is solely for the national court before which the dispute has been brought, and which must assume responsibility for the subsequent judicial decision, to determine, in the light of the particular circumstances of the case, both the need for a preliminary rulin …","paragraph_id":"para_208","court_paragraph":45},{"text":"46","paragraph_id":"para_209"},{"text":"In the present case, the order for reference contains sufficient factual and legal information required both for the definition of the provisions of EU law referred to in the questions referred for a preliminary ruling and for the understanding of the scope of those questions. More specifically, it …","paragraph_id":"para_210","court_paragraph":46},{"text":"47","paragraph_id":"para_211"},{"text":"In those circumstances, the questions referred for a preliminary ruling are admissible.","paragraph_id":"para_212","court_paragraph":47},{"text":"Substance","paragraph_id":"para_213"},{"text":"48","paragraph_id":"para_214"},{"text":"By its two questions, which it is appropriate to examine together, the referring court asks, in essence, whether Article 15(1) of Directive 2002/58, read in the light of Articles 7 and 8 of the Charter, must be interpreted as meaning that public authorities’ access to data for the purpose of identif …","paragraph_id":"para_215","court_paragraph":48},{"text":"49","paragraph_id":"para_216"},{"text":"In that regard, it is apparent from the order for reference that, as observed in essence by the Advocate General in point 38 of his Opinion, the request for a preliminary ruling does not seek to determine whether the personal data at issue in the main proceedings have been retained by providers of e …","paragraph_id":"para_217","court_paragraph":49},{"text":"50","paragraph_id":"para_218"},{"text":"More specifically, the referring court is uncertain as to the factors that should be taken into consideration in order to assess whether the offences in respect of which the police may be authorised, for the purposes of an investigation, to have access to personal data retained by providers of elect …","paragraph_id":"para_219","court_paragraph":50},{"text":"51","paragraph_id":"para_220"},{"text":"As to the existence of an interference with those fundamental rights, it should be borne in mind, as observed by the Advocate General in points 76 and 77 of his Opinion, that the access of public authorities to such data constitutes an interference with the fundamental right to respect for private l …","paragraph_id":"para_221","court_paragraph":51},{"text":"52","paragraph_id":"para_222"},{"text":"As regards the objectives that are capable of justifying national legislation, such as that at issue in the main proceedings, governing the access of public authorities to data retained by providers of electronic communications services and thereby derogating from the principle of confidentiality of …","paragraph_id":"para_223","court_paragraph":52},{"text":"53","paragraph_id":"para_224"},{"text":"As regards the objective of preventing, investigating, detecting and prosecuting criminal offences, it should be noted that the wording of the first sentence of Article 15(1) of Directive 2002/58 does not limit that objective to the fight against serious crime alone, but refers to ‘criminal offences’ generally.","paragraph_id":"para_225","court_paragraph":53},{"text":"54","paragraph_id":"para_226"},{"text":"In that regard, the Court has admittedly held that, in areas of prevention, investigation, detection and prosecution of criminal offences, only the objective of fighting serious crime is capable of justifying public authorities’ access to personal data retained by providers of electronic communicati …","paragraph_id":"para_227","court_paragraph":54},{"text":"55","paragraph_id":"para_228"},{"text":"However, the Court explained its interpretation by reference to the fact that the objective pursued by legislation governing that access must be proportionate to the seriousness of the interference with the fundamental rights in question that that access entails (see, to that effect, Tele2 Sverige and Watson and Others , paragraph 115).","paragraph_id":"para_229","court_paragraph":55},{"text":"56","paragraph_id":"para_230"},{"text":"In accordance with the principle of proportionality, serious interference can be justified, in areas of prevention, investigation, detection and prosecution of criminal offences, only by the objective of fighting crime which must also be defined as ‘serious’.","paragraph_id":"para_231","court_paragraph":56},{"text":"57","paragraph_id":"para_232"},{"text":"By contrast, when the interference that such access entails is not serious, that access is capable of being justified by the objective of preventing, investigating, detecting and prosecuting ‘criminal offences’ generally.","paragraph_id":"para_233","court_paragraph":57},{"text":"58","paragraph_id":"para_234"},{"text":"It should therefore, first of all, be determined whether, in the present case, in the light of the facts of the case, the interference with fundamental rights enshrined in Articles 7 and 8 of the Charter that police access to the data in question in the main proceedings would entail must be regarded as ‘serious’.","paragraph_id":"para_235","court_paragraph":58},{"text":"59","paragraph_id":"para_236"},{"text":"In that regard, the sole purpose of the request at issue in the main proceedings, by which the police seeks, for the purposes of a criminal investigation, a court authorisation to access personal data retained by providers of electronic communications services, is to identify the owners of SIM cards …","paragraph_id":"para_237","court_paragraph":59},{"text":"60","paragraph_id":"para_238"},{"text":"It is therefore apparent that the data concerned by the request for access at issue in the main proceedings only enables the SIM card or cards activated with the stolen mobile telephone to be linked, during a specific period, with the identity of the owners of those SIM cards. Without those data bei …","paragraph_id":"para_239","court_paragraph":60},{"text":"61","paragraph_id":"para_240"},{"text":"In those circumstances, access to only the data referred to in the request at issue in the main proceedings cannot be defined as ‘serious’ interference with the fundamental rights of the persons whose data is concerned.","paragraph_id":"para_241","court_paragraph":61},{"text":"62","paragraph_id":"para_242"},{"text":"As stated in paragraphs 53 to 57 of this judgment, the interference that access to such data entails is therefore capable of being justified by the objective, to which the first sentence of Article 15(1) of Directive 2002/58 refers, of preventing, investigating, detecting and prosecuting ‘criminal offences’ generally, without it being necessary that those offences be defined as ‘serious’.","paragraph_id":"para_243","court_paragraph":62},{"text":"63","paragraph_id":"para_244"},{"text":"In the light of the foregoing considerations, the answer to the questions referred is that Article 15(1) of Directive 2002/58, read in the light of Articles 7 and 8 of the Charter, must be interpreted as meaning that the access of public authorities to data for the purpose of identifying the owners …","paragraph_id":"para_245","court_paragraph":63},{"text":"Costs","paragraph_id":"para_246"},{"text":"64","paragraph_id":"para_247"},{"text":"Since these proceedings are, for the parties to the main proceedings, a step in the action pending before the national court, the decision on costs is a matter for that court. Costs incurred in submitting observations to the Court, other than the costs of those parties, are not recoverable.","paragraph_id":"para_248","court_paragraph":64},{"text":"On those grounds, the Court (Grand Chamber) hereby rules:","paragraph_id":"para_249"},{"text":"Article 15(1) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications), as amended by Directive 2009/136/ …","paragraph_id":"para_250"},{"text":"[Signatures]","paragraph_id":"para_251"},{"text":"(\n *1\n ) Language of the case: Spanish.","paragraph_id":"para_252"}],"operative_part":"On those grounds, the Court (Grand Chamber) hereby rules:\n\nArticle 15(1) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and el …","word_count":7434,"cites":["C-293/12","C-594/12","C-203/15","C-698/15","C-25/17"],"sha256":"8b3e8d9bef4af8a342444baab1dac4333b97a69f5b7ccf284cdbf4c26932b495","source_url":"https://publications.europa.eu/resource/celex/62016CJ0207.ENG.xhtml.ECR_62016CJ0207_EN_01.html","fetched_at":"2026-09-30T13:38:27.245+00:00","canonical":"https://legal.exploreworldai.com/ai/judgments/eu/c-207-16","risk_graph":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-207-16","relations_graph":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-207-16","changes":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/changes","agent":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-207-16","verification":{"stored_sha256":"8b3e8d9bef4af8a342444baab1dac4333b97a69f5b7ccf284cdbf4c26932b495","recomputed_sha256":"8b3e8d9bef4af8a342444baab1dac4333b97a69f5b7ccf284cdbf4c26932b495","intact":true,"checked_at":"2026-10-11T08:18:26.059Z"}},"hash":"sha256:d0596b0cc54649d9bf62d0c1ea8cebcf891c28438f403dc3c7b5bbc5b9d985da","version":"legal-2026-10-11","expires":"2026-10-12T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-11+legal-2026-10-11+2026-10-11T07:52:39","content_hash":"sha256:d0596b0cc54649d9bf62d0c1ea8cebcf891c28438f403dc3c7b5bbc5b9d985da","revalidate_after":"2026-10-11T09:18:26.644Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu:c-207-16","follow":[{"rel":"risk","href":"https://legal.exploreworldai.com/api/public/v1/risk?id=eu:c-207-16"},{"rel":"relations","href":"https://legal.exploreworldai.com/api/public/v1/relations?id=eu:c-207-16"},{"rel":"agent","href":"https://legal.exploreworldai.com/api/public/v1/eu-praxis/agent?id=eu:c-207-16"},{"rel":"obligations","href":"https://legal.exploreworldai.com/api/public/v1/obligation-chain"},{"rel":"changes","href":"https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=eu"}],"disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/judgment-text","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"},"withheld":{"item.cited_by":3},"access":{"status":"partner_key_required","header":"x-partner-key","contact":"https://legal.exploreworldai.com/kontakt","note":"Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."},"access_class":"public","access_view":"public","citation":{"citation_url":"https://legal.exploreworldai.com/eu/praxis/c-207-16","cite_as":"NovaCopilot (legal.exploreworldai.com)","provenance":{"publisher":"NovaCopilot","signature":"nc-f255573ad33af8117beb42c9108dd642","response_hash":"sha256:d0596b0cc54649d9bf62d0c1ea8cebcf891c28438f403dc3c7b5bbc5b9d985da"}},"freshness":{"freshness_class":"live","as_of":"2026-11-03T03:18:38.490Z","valid_for":3600,"recheck":"https://legal.exploreworldai.com/api/public/v1/judgment-text?id=eu%3Ac-207-16&verify=1","note":"Kontrollera mot recheck efter valid_for sekunder. If-None-Match ger 304 när inget ändrats.","tokens":15608}}