Eduardo Álvarez-Armas is Lecturer in Law at Brunel University London and Affiliated Researcher at the Université Catholique de Louvain. He has kindly provided us with his thoughts on recent proposals for amending the Rome II Regulation. This is the second part of his contribution; a first one on the law applicable to strategic lawsuits against public participation can be found here.

Over the last few months, the European Parliament´s draft report on corporate due diligence and corporate accountability (2020/2129(INL)) and the proposal for an EU Directive contained therein have gathered a substantial amount of attention (see, amongst others, blog entries by Geert Van Calster, Giesela Rühl, Jan von Hein, Bastian Brunk and Chris Thomale). As the debate is far from being exhausted, I would like to contribute my two cents thereto with some further (non-exhaustive and brief) considerations which will be limited to three selected aspects of the proposal´s choice-of-law dimension.

1. A welcome but not unique initiative (Comparison with the UN draft Treaty)

Neither Article 6a of Rome II nor the proposal for an EU Directive are isolated initiatives. A so-called draft Treaty on Business and Human Rights (“Legally binding instrument to regulate, in international human rights law, the activities of transnational corporations and other business enterprises”) is currently being prepared by an Open-ended intergovernmental working group on transnational corporations and other business enterprises with respect to human rights, established in 2014 by the United Nation´s Human Rights Council. Just like it is the case with the EP´s proposal, the 2^nd revised UN draft Treaty (dated 6^th August 2020) (for comments on the applicable law aspects of the 1^st revised draft, see Claire Bright´s note for the BIICL here) contains provisions on international jurisdiction (Article 9, “Adjudicative Jurisdiction”) and choice of law (Article 11, “Applicable law”).

Paragraph 1 of the latter establishes the lex fori as applicable for “all matters of substance […] not specifically regulated” by the instrument (as well as, quite naturally, for procedural issues). Then paragraph 2 establishes that “all matters of substance regarding human rights law relevant to claims before the competent court may, upon the request of the victim of a business-related human rights abuse or its representatives, be governed by the law of another State where: a) the acts or omissions that result in violations of human rights covered under this (Legally Binding Instrument) have occurred; or b) the natural or legal person alleged to have committed the acts or omissions that result in violations of human rights covered under this (Legally Binding Instrument) is domiciled”.

In turn, the proposed Article 6a of Rome II establishes that: “[…] the law applicable to a non-contractual obligation arising out of the damage sustained shall be the law determined pursuant to Article 4(1), unless the person seeking compensation for damage chooses to base his or her claim on the law of the country in which the event giving rise to the damage occurred or on the law of the country in which the parent company has its domicile or, where it does not have a domicile in a Member State, the law of the country where it operates.” (The proposed text follows the suggestions made in pp. 112 ff of the 2019 Study requested by the DROI committee (European Parliament) on Access to Legal Remedies for Victims of Corporate Human Rights Abuses in Third Countries.)

Putting aside the fact that the material scopes of the EP’s and the UN’s draft instruments bear differences, the EP´s proposal features a more ambitious choice-of-law approach, which likely reflects the EU´s condition as a “Regional integration organization”, and the (likely) bigger degree of private-international-law convergence possible within such framework. Whichever the reasons, the EP´s approach is to be welcomed in at least two senses.

The first sense regards the clarity of victim choice-of-law empowerment. While in the UN proposal the victim is allowed to “request” that a given law governs “all matters of substance regarding human rights law relevant to claims before the competent court”, in the EP´s proposal the choice of the applicable law unequivocally and explicitly belongs to the victim (the “person seeking compensation for damage”). A cynical reading of the UN proposal could lead to considering that the prerogative of establishing the applicable law remains with the relevant court, as the fact that the victim may request something does not necessarily mean that the request ought to be granted (Note that paragraph 1 uses “shall” while paragraph 2 uses “may”). Furthermore, the UN proposal contains a dangerous opening to renvoi, which would undermine the victim´s empowerment (and, to a certain degree, foreseeability). Therefore, if the goal of the UN´s provision is to provide for favor laesi, a much more explicit language in the sense of conferring the choice-of-law prerogative to the victim would be welcomed.

2. A more ambitious initiative (The “domicile of the parent” connection, and larger victim choice)

A second sense in which the EP´s choice-of-law approach is to be welcomed is its bold stance in trying to overcome some classic “business & human rights” conundrums by including an ambitious connecting factor, the domicile of the parent company, amongst the possibilities the victim can choose from. Indeed, I personally find this insertion in suggested Art. 6a Rome II very satisfying from a substantive justice (favor laesi) point of view: inserting that very connecting factor in Art. 7 Rome II (environmental torts) is one of the main de lege ferenda suggestions I considered in my PhD dissertation (Private International Environmental Litigation before EU Courts: Choice of Law as a Tool of Environmental Global Governance, Université Catholique de Louvain & Universidad de Granada, 2017. An edited and updated version will be published in 2021 in Hart´s “Studies in Private International Law”), in order to correct some of the shortcomings of the latter. While not being the ultimate solution for all the various hurdles victims may face in transnational human-rights or environmental litigation, in terms of content-orientedness this connecting factor is a great addition that addresses the core of the policy debate on “business & human rights”. Consequently, I politely dissent with Chris Thomale´s assertion that this connecting factor “has no convincing rationale”. Moreover, I equally dissent from the contention that a choice between the lex loci damni and the lex loci delicti commissi is already possible via “a purposive reading of Art. 4 para 1 and 3 Rome II”. For reasons I have explained elsewhere, I do not share this optimistic reading of Art. 4 as being capable of filling the transnational human-rights gap in Rome II. And even supposing that such interpretation was correct, as draft Art. 6a would make explicit what is contended that can be read into Art. 4, it would significantly increase legal certainty for victims and tortfeasors alike (as otherwise some courts could potentially interpret the latter Article as suggested, while others would not).

Precisely, avoiding a decrease in applicable-law foreseeability seems to be (amongst other concerns) one of the reasons behind Jan von Hein´s suggestion in this very blog that Art. 6a´s opening of victim´s choice to four different legal systems is excessive, and that not only it should be reduced to two, but that the domicile of the parent should be replaced by its “habitual residence”. Possibly the latter is contended not only to respond to systemic coherence with the remainder of Rome II, but also to narrow down options: in Rome II the “habitual residence” of a legal person corresponds only with its “place of central administration”; in Brussels I bis its “domicile” corresponds with either “statutory seat”, “central administration” or “principal place of business” at the claimant´s choice. Notwithstanding the merits in system-alignment terms of this proposal, arguably, substantive policy rationales (favor laesi) ought to take precedence over pure systemic private-international-law considerations. This makes all the more sense if one transposes, mutatis mutandis, a classic opinion by P.A. Nielsen on the three domiciles of a corporation under the “Brussels” regime to the choice-of-law realm: “shopping possibilities are only available because the defendant has decided to organise its business in this way. It therefore seems reasonable to let that organisational structure have […] consequences” (P. A. NIELSEN, “Behind and beyond Brussels I – An Insider´s View”, in P. DEMARET, I. GOVAERE & D. HANF [eds.], 30 years of European Legal Studies at the College of Europe [Liber Professorum 1973-74 – 2003-04], Cahiers du Collège d´Europe Nº2, Brussels, P.I.E.-Peter Lang, 2005, pp. 241-243).

And even beyond this, at the risk of being overly simplistic, in many instances, complying with four different potentially applicable laws is, actually, in alleged overregulation terms, a “false conflict”: it simply entails complying only with the most stringent/restrictive one amongst the four of them (compliance with X+30 entails compliance with X+20, X+10 and X). Without entering into further details, suffice it to say that, while ascertaining these questions ex post facto may be difficult for victim´s counsel, it should be less difficult ex ante for corporate counsel, leading to prevention.

3. A perfectible initiative (tension with Article 7 Rome II)

Personally, the first point that immediately got my attention as soon as I heard about the content of the EP report´s (even before reading it) was the Article 6a versus Article 7 Rome II scope-delimitation problem already sketched by Geert Van Calster: when is an environmental tort a human-rights violation too, and when is it not? Should the insertion of Art. 6a crystallize, and Art. 7 remain unchanged, this question is likely to become very contentious, if anything due to the wider range of choices given by the draft Art. 6a, and could potentially end before the CJEU.

What distinguishes say Mines de Potasse (which would generally be thought of as “common” environmental-tort situation) from say Milieudefensie v. Shell 2008 (which would typically fall within the “Business & Human Rights” realm and not to be confused with the 2019 Milieudefensie v. Shell climate-change litigation) or Lluiya v. RWE (as climate-change litigation finds itself increasingly connected to human-rights considerations)? Is it the geographical location of tortious result either inside or outside the EU? (When environmental torts arise outside the EU from the actions of EU corporations there tends to be little hesitation to assert that we are facing a human-rights tort). Or should we split apart situations involving environmental damage stricto sensu (pure ecological damage) from those involving environmental damage lato sensu (damage to human life, health and property), considering only the former as coming within Art. 7 and only the latter as coming within Art. 6a? Should we, alternatively, introduce a ratione personae distinction, considering that environmental torts caused by corporations of a certain size or operating over a certain geographical scope come within Art. 6a, while environmental torts caused by legal persons falling below the said threshold (or, rarely, by individuals) come within Art. 7?

Overall, how should we draw the boundaries between an environmental occurrence that qualifies as a human-rights violation and one that does not in order to distinguish Art. 6a situations from Art. 7 situations? The answer is simple: we should not. We should consider every single instance of environmental tort a human-rights-relevant scenario and amend Rome II accordingly.

While the discussion is too broad and complex to be treated in depth here, and certainly overflows the realm of private international law, suffice it to say that (putting aside the limited environmental relevance of the Charter of Fundamental Rights of the EU) outside the system of the European Convention of Human Rights (ECHR) there are clear developments towards the recognition of a human right to a healthy or “satisfactory” environment. This is already the case within the systems of the American Convention on Human Rights (Art. 11 of the Additional Protocol to the Convention in the area of Economic, Social and Cultural Rights) and the African Charter on Human and People´s Rights (Art. 24). It is equally the case as well in certain countries, where the recognition of a fundamental/constitutional right at a domestic level along the same lines is also present. And, moreover, even within the ECHR system, while no human right to a healthy environment exists as such, the case-law of the European Court of Human Rights has recognized environmental dimensions to other rights (Arts. 2 and 8 ECHR, notably). It may therefore be argued that, even under the current legal context, all environmental torts are, to a bigger or lesser extent, human-rights relevant and (save those rare instances where they may be caused by an individual) “business-related”.

Ultimately, if any objection could exist nowadays, if/when the ECHR system does evolve towards a broader recognition of a right to a healthy environment, there would be absolutely no reason to maintain an Art. 6a versus Art. 7 distinction. Thus, in order to avoid opening a characterization can of worms, it would be appropriate to get “ahead of the curve” in legislative terms and, accordingly, use the proposed Art. 6a text as an all-encompassing new Art. 7.

There may be ways to try to (artificially) delineate the scopes of Articles 7 and 6a in order to preserve a certain effet utile to the current Art. 7, such as those suggested above (geographical location of the tortious result, size or nature of the tortfeasor, type of environmental damage involved), or even on the basis of whether situations at stake “trigger” any of the environmental dimensions of ECHR-enshrined rights. But, all in all, I would argue towards using the proposed text as a new Art. 7 which would comprise both non-environmentally-related human-rights torts and, comprehensively, all environmental torts.

Art. 7 is dead, long live Article 7.

 

 

Guest post by Bronwen Manby, Senior Policy Fellow and Guest Teacher, LSE Human Rights, London School of Economics.

In 2014, UNHCR launched a ten-year campaign to end statelessness by 2024. A ten-point global action plan called, among other things, for universal birth registration.  One year later, in September 2015, the UN General Assembly adopted the Sustainable Development Goals (SDGs), an ambitious set of objectives for international development to replace and expand upon the 15-year-old Millennium Development Goals.  Target 16.9 under Goal 16 requires that states shall, by 2030, ‘provide legal identity for all, including birth registration’. The SDG target reflects a recently consolidated consensus among development professionals on the importance of robust government identification systems.

Birth registration, the protection of identity, and the right to a nationality are already firmly established as rights in international human rights law – with most universal effect by the 1989 Convention on the Rights of the Child, to which every state in the world apart from the USA is a party. Universal birth registration, ‘the continuous, permanent, compulsory and universal recording within the civil registry of the occurrence and characteristics of birth, in accordance with the national legal requirements’, is already a long-standing objective of UNICEF and other agencies concerned with child welfare. There is extensive international guidance on the implementation of birth registration, within a broader framework of civil registration.

In a recent article published in the Statelessness and Citizenship Review I explore the potential impact of SDG ‘legal identity’ target on the resolution of statelessness. Like the UNHCR global action plan to end statelessness, the paper emphasises the important contribution that universal birth registration would make to ensuring respect for the right to a nationality. Although birth registration does not (usually) record nationality or legal status in a country, it is the most authoritative record of the information on the basis of which nationality, and many other rights based on family connections, may be claimed.

The paper also agrees with UNHCR that universal birth registration will not end statelessness without the minimum legal reforms to provide a right to nationality based on place of birth or descent. These will not be effective, however, unless there are simultaneous efforts to address the conflicts of law affecting recognition of civil status and nationality more generally. UNHCR and its allies in the global campaign must also master private international law.

In most legal systems, birth registration must be accompanied by registration of other life events – adoption, marriage, divorce, changes of name, death – for a person to be able to claim rights based on family connections, including nationality. This is the case in principle even in countries where birth registration reaches less than half of all births, and registration of marriages or deaths a small fraction of that number. Fulfilling these obligations for paperwork can be difficult enough even if they all take place in one country, and is fanciful in many states of the global South; but the difficulties are multiplied many times once these civil status events have to be recognised across borders.

Depending on the country, an assortment of official copies of parental birth, death or marriage certificates may be required to register a child’s birth. If the child’s birth is in a different country from the one where these documents were issued, the official copies must be obtained from the country of origin, presented in a form accepted by the host country and usually transcribed into its national records. Non-recognition of a foreign-registered civil status event means that it lacks legal effect, leaving (for example) marriages invalid in one country or the other, or still in place despite a registered divorce. If a person’s civil status documents are not recognised in another jurisdiction, the rights that depend on these documents may also be unrecognised: the same child may therefore be born in wedlock for the authorities of one country and out-of-wedlock for another. On top of these challenges related to registration in the country of birth, consular registration and/or transcription into the records of the state of origin is in many cases necessary if the child’s right to the nationality of one or both parents is to be recognised. It is also likely that the parents will need a valid identity document, and if neither is a national of the country where their child is born, a passport with visa showing legal presence in the country. A finding of an error at any stage in these processes can sometimes result in the retroactive loss of nationality apparently held legitimately over many years.  Already exhausting for legal migrants in the formal sector, for refugees and irregular migrants of few resources (financial or social) these games of paperchase make the recognition of legal identity and nationality ever more fragile.

These challenges of conflicts of law are greatest for refugees and irregular migrants, but have proved difficult to resolve even within the European Union, with the presumption of legal residence that follows from citizenship of another member state. The Hague Conference on Private International Law has a project to consider transnational recognition of parentage (filiation), especially in the context of surrogacy arrangements, but has hardly engaged with the broader issues.

The paper urges greater urgency in seeking harmonisation of civil registration practices, not only by The Hague Conference, but also by the UN as it develops its newly adopted ‘Legal Identity Agenda’, and by the UN human rights machinery. Finally, the paper highlights the danger that the SDG target will rather encourage short cuts that seek to bypass the often politically sensitive task of determining the nationality of those whose legal status is currently in doubt: new biometric technologies provide a powerful draw to the language of technological fix, as well as the strengthening of surveillance and control rather than empowerment and rights.  These risks – and their mitigation – are further explored in a twinned article in World Development.

 

 

Introduction:

 

On 9-11 December 2020, ERA – the Academy of European Law – organized an online seminar on “Privacy and Data Protection: Recent ECtHR & CJEU Case Law”.  The core of the seminar was to provide an update on the case law developed by the European Court of Human Rights (ECtHR) and by the Court of Justice of the European Union (CJEU) with relevance for privacy and data protection law since 2019. The key issues discussed were the distinction between the right to privacy and data protection in the jurisprudence of the ECtHR and CJEU, the impact of the jurisprudence on international data transfers, notions of ‘essence of fundamental rights’ ‘personal data processing’, ‘valid consent’ and so on.

 

 

Day 1: Personal Data Protection and right to privacy

 

Gloria González Fuster (Research Professor, Vrije Universiteit Brussel (VUB), Brussels) presented on the essence of the fundamental rights to privacy and data protection in the existing legal framework with a specific focus on the European Convention on Human Rights (Art. 8 of ECHR) and the Charter of Fundamental Rights of the EU (Art. 7, Art. 8)

 

Article 8 of the Convention (ECHR) guarantees the right to respect private and family life. In contrast, Art 52(1) EU Charter recognizes the respect for the essence of the rights and freedoms guaranteed by the Charter. Both are similar, but not identical. This can be validated from the following points:

• As per Art 8 (2) ECHR – there shall be no interference with the exercise of this right except such as in accordance with the law, whereas Art 52 (1) states that any limitation to the exercise of right and freedoms recognized by the Charter must be provided for by law.
• The Art 8 (2) ECHR stresses the necessity in a democratic society to exercise such an interference, whereas Art 52(1) of the EU Charter is subject to the principle of proportionality.
• Respect for the essence of rights and freedoms is mentioned in Art 52 (1) but not mentioned in Art 8 (2).
• Also, Art 8 (2) states that the interference to the right must be only allowed in the interests of national security, public safety, or the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or the protection of the rights and freedoms of others. At the same time, Article 52 (1) states that any limitations to rights must meet objectives of general interest recognized by the Union or the need to protect others’ rights and freedoms.

 

In the Joined Cases C?293/12 and C?594/12, Digital Rights Ireland; the Court addressed the interferences to the rights guaranteed under Articles 7 and 8 caused by the Data Retention Directive. An assessment was carried out as to whether the interferences to the Charter rights were justified as per Article 52(1) of the Charter. In order to be justified, three conditions under Article 52(1) must be fulfilled. The interference must be provided for by law, and there must be respect for the essence of the rights, and it must be subject to the principle of proportionality. Certain limitations to the exercise of such interference/ infringement must be genuinely necessary to meet objectives of general interest. The Directive does not permit the acquisition of data and requires the Member States to ensure that ‘appropriate technical and organizational measures are adopted against accidental or unlawful destruction, accidental loss or alteration of data’ and thus, respects the essence of the right to privacy and data protection. The Directive also satisfied the objective of general interest as the main aim of the Directive was to fight against serious crime, and it was also proportional to its aim of need for data retention to fight against serious crimes. However, even though the Directive satisfied these three criteria, it did not set out clear safeguards for protecting the retained data, and therefore it was held to be invalid.

 

It is pertinent to note here that the ECHR does not contain any express requirement to protect the ‘essence’ of fundamental rights, whereas the Charter does. However, with regard to Art 8 of the ECHR, it aims to prohibit interference or destruction of any rights or freedoms with respect for private and family life. This can be possibly interpreted so as to protect the essence of the fundamental right of private and family life. This is because a prohibition of the destruction of any right would mean affecting the core of the right or compromising the essence of the right.

 

Gloria, also examined Article 7 of the Charter, which guarantees a right to respect for private and family life, home and communications, and Article 8, which not only distinguishes data protection from privacy but also lays down some specific guarantees in paragraphs 2 and 3, namely that personal data must be processed fairly for specified purposes. She analyzed these Charter provisions concerning the Regulation (EU) 2016/679 (GDPR). GDPR creates three-fold provisions by imposing obligations on the data controllers, providing rights to data subjects, and creating provision for supervision by data protection authorities.

 

She also addressed the balance between the right to privacy and the processing of personal data of an individual on one hand and the right to information of the public on the other. Concerning this, she highlighted the interesting decision in C-131/12, Google Spain, wherein it was stated that an interference with a right guaranteed under Article 7 and 8 of the Charter could be justified depending on the nature and sensitivity of the information at issue and with regard to the potential interest of the internet users in having access to that information. A fair balance must be sought between the two rights. This may also depend on the role played by the data subject in public.

It was also discussed in the judgments C-507/17, Google v CNIL; and Case C-136/17 that a data subject should have a “right to be forgotten” where the retention of such data infringes the Directive 95/46 and the GDPR. However, the further retention of the personal data shall only be lawful where it is necessary for exercising the right of freedom of expression and information. The ruling was on the geographical reach of a right to be forgotten. It was held that it is not applicable beyond the EU, meaning that Google or other search engine operators are not under an obligation to apply the ‘right to be forgotten’ globally.

In the next half of the day, Roland Klages, Legal Secretary, Chambers of First Advocate General Szpunar, Court of Justice of the European Union, Luxembourg, presented on the topic: “The concept of consent to the processing of personal data”. He started with a brief introduction of GDPR and stated that there is no judgment on GDPR alone as it has been introduced and implemented recently, but there are judgments based on the interpretation of Directive 95/46 and the GDPR simultaneously.  He commented on the composition of the ECJ, which sits in the panel of 3,5, 15 (Grand Chamber), or 27 (Plenum) judges. The Grand Chamber comprises a President, vice-president, 3 presidents of a 5th chamber, rapporteur, another 9 judges, appointed based on re-established lists (see Article 27 ECJ RP).

 

He discussed the following cases in detail:

 

C – 673/17 (Planet49): Article 6(1) (a) GDPR states that the processing of data is lawful only if the data subject has given consent to the processing of personal data for one or more specific purposes. “Consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by clear affirmative action, signifies agreement to the processing of personal data relating to him or her.[1] This clearly indicates that consent is valid only if it comes from the active behavior of the user as it indicates the wishes of the data subjects. A consent given in the form of a pre-selected checkbox on a website does not amount to active behavior. It also does not fulfill the requirement of unambiguity. Another important aspect of the ruling was that it does not matter if the information stored or retrieved consists of personal data or not. Article 5(3) of Directive 2002/58/ EC (Directive on privacy and electronic communications)protects the user from interference with their private sphere, regardless of whether or not that interference involves personal or other data. Hence, in this case, the storage of cookies at issue amounts to the processing of personal data. Further, it is also important that the user is able to determine the consequence of the consent given and is well informed. However, in this case, the question of whether consent is deemed to be freely given if it is agreed to sell data as consideration for participation in a lottery is left unanswered.

 

Similarly, in case C -61/19 (Orange Romania), it was held that a data subject must, by active behavior, give his or her consent to the processing of his or her personal data, and it is upto the data controller, i.e., Orange România to prove this. The case concerns contracts containing a clause stating that the data subject has been informed about the collection and storage of a copy of his or her identification document with the identification function and has consented thereto. He also discussed other cases such as case C-496/17, Deutsche Post, and C- 507/17, Google (discussed earlier), demonstrating that consent is a central concept to GDPR.

 

 

Day 2: “Retention of personal data for law enforcement purposes.”

 

On the next day, Kirill Belogubets, Magister Juris (Oxford University), case lawyer at the Registry of the European Court of Human Rights (ECtHR), started with a presentation on the topic:

 

“Retention of personal data for combating crime.”

 

Kirill Belogubets discussed the case of PN v. Germany. No. 74440/17 regarding the processing of personal identification of data in the context of criminal proceedings. In this case, a German citizen was suspected of buying a stolen bicycle. Authorities collected an extensive amount of data such as photographs, fingerprints, palm prints, and suspect descriptions. It must be noted here that with regard to the right to respect for private life under Article 8 of the ECHR, the interference must be justified and fulfill the test of proportionality, legitimacy, and necessity. The authorities expounded on the likelihood that the offender may offend again. Therefore, in the interest of national security, public security, and prevention of disorder and criminal offenses, it is essential to collect and store data to enable tracing of future offenses and protect the rights of future potential victims. Thus, the collection and storage of data in the present case struck a fair balance between the competing public and private interests and therefore fell within the respondent State’s margin of appreciation.

 

With respect to margin of appreciation, the case of Gaughran v. The United Kingdom, no. 45245/15was also discussed. This case pertains to the period of retention of DNA profiles, fingerprints, and photographs for use in pending proceedings. The Court considered storing important data such as DNA samples only of those convicted of recordable offences, namely an offense that is punishable by a term of imprisonment. Having said that, there was a need for the State to ensure that certain safeguards were present and effective, especially in the nature of judicial review for the convicted person whose biometric data and photographs were retained indefinitely.

 

However, it has been highlighted that the legal framework on the retention of DNA material was not very precise. It does not specifically relate to data regarding DNA profiles and there is no specific time limit for the retention of DNA data. Similarly, the applicant has no avenue to seek deletion because of the absence of continued necessity, age, personality, or time elapsed. This has been laid down in the case of Trajkovski and Chipovski v. North Macedonia, nos. 53205/13 and 63320/13.

 

Mass Collection and Retention of Communications data

In the next half, Anna Buchta, Head of Unit “Policy & Consultation”, European Data Protection Supervisor, Brussels brought the discussion on Article 7 and 8 of the Charter and Article 8 of the Convention along with the concept of ‘essence’ of fundamental rights, back to the table. With regard to this discussion, she described the case C-362/14 Maximilian Schrems v DPC, which highlights that ‘any legislation permitting the public authorities to have access on a generalized basis to the content of electronic communications must be regarded as compromising the essence of the fundamental right to respect for private life, as guaranteed by Article 7 of the Charter.’ In this context, EU member states must recognize the confidentiality of communication as a distinct legal right. In this case, it was the first time where a Directive was invalidated due to non-confirmation with the ECHR. It was laid down that the safe harbor principles issued under the Commission Decision 2000/520, pursuant to Directive 95/46/EC  does not comply with its Article 25(6), which ensures a level of protection of fundamental rights essentially equivalent to that guaranteed in the EU legal order. The Decision 2000/520 does not state that the United States, infact, ‘ensures’ an adequate level of protection by reason of its domestic law or its international commitments.

 

Traffic and Location data

She also commented on the indefinite retention of data, which might lead to a feeling of constant surveillance leading to interference with freedom of expression in light of CJEU cases C-203/15 and C-698/15 Sverige and Watson. In these cases, the Court agreed that under Article 15(1) of the Directive 2002/58 / EC, data retention could be justified to combat serious crime, national security, protecting the constitutional, social, economic, or political situation of the country and preventing terrorism. However, this must only be done if it is limited to what is strictly necessary, regarding categories of data, means of communication affected, persons concerned, and retention period. Traffic data relating to subscribers and users processed and stored by the provider of a public communications network or publicly available electronic communications service must be erased or made anonymous when it is no longer needed for the transmission of a communication without prejudice to paragraphs 2, 3, and 5 of this Article 6 and Article 15(1) of the Directive. This was reiterated in C-623/17 Privacy International. It must be noted here that these data can be retained only if there is evidence that these data constitute an identifiable link, at least an indirect one, to criminal activities. Data with regard to the geographical location again requires objective factors. It must be retained if there exists a risk of criminal activities in such areas. These locations may correspond to places that are vulnerable to the commission of serious offenses, for instance, areas that receive a large number of people, such as airports, train stations, toll-booth areas, etc.

 

The Court differentiated between generalized and targeted retention of data. Real-time collection and indeterminate storage of electronic communications surveillance involving traffic and location data of specific individuals constitute targeted retention. In this context, the case of C?511/18, C?512/18 and C?520/18, La Quadrature du Net and Others were also relied upon, with a focus on the following findings:

Targeted real-time collection of traffic and location data by electronic communication providers that concerns exclusively one or more persons constitutes a serious interference that is allowed where:

• Real-time collection of traffic and location data is limited to persons in respect of whom there is a valid reason to suspect that they are directly or indirectly involved in terrorist activities. With regard to persons falling outside of that category, they may only be the subject of non-real-time access.
• A court or an administrative authority must pass an order after prior review, allowing such real-time collection. This must be authorized only within the limits of what is strictly necessary. In cases of duly justified urgency, the review must take place within a short time.
• A decision authorizing the real-time collection of traffic and location data must be based on objective criteria provided for in the national legislation, which must clearly define the circumstances and conditions under which such collection may be authorized.
• The competent national authorities undertaking real-time collection of traffic and location data must notify the persons concerned, in accordance with the applicable national procedures.

 

 

Last but not least, the EU Commission as well as the CJEU have started looking at the national laws of data retention and specifically inclined to define national security in manner so as to increase their own role in the area. However, data retention schemes are divergent across the Member States. It is essential to create clearer and more precise rules at the European level to enable the Courts to develop the best ways to strike a balance between the interactions of privacy rights with the need to tackle serious crime. The different legal rules in the area of data retention restricted cooperation between competent authorities in cross-border cases and affected law enforcement efforts. For instance, some Member States have specified retention periods, whereas some do not, a fact from which conflict-of-laws problems may arise. While some Member States for example Luxembourg precisely define ‘access to data’, there are Member States, which do not. This was pointed out by the EU Council in the conclusion of the data retention reflection process in May 2019, wherein it was emphasized that there is a need for a harmonised framework for data retention at EU level to remedy the fragmentation of national data retention practices.

 

Day 3: Data Protection in the Global Data Economy

 

The discussion of the third day started with a presentation by Professor Herwig Hofmann, Professor of European and Transnational Public Law, the University of Luxembourg on the well-known Schremscases namely, C-362/14, Schrems I; C-498/16, Schrems vs Facebook; and C-311/18, Schrems II;which involves transatlantic data transfer and violation of Article 7 and 8 of the Charter. In the clash between the right to privacy of the EU and surveillance of the US, the CJEU was convinced that any privacy agreements could not keep the personal data of EU citizens safe from surveillance in the US, so long as it is processed in the US under the country’s current laws. The guidelines in the US for mass surveillance did not fit in the EU. Therefore, privacy shield could not be maintained.

He also highlighted that international trade in today’s times involves the operation of standard contractual terms created to transfer data from one point to another. Every company uses a cloud service for the storage of data, which amounts to its processing. It is inevitable to ensure transparency from cloud services. The companies using cloud services must require transparency from cloud services and confirm how the cloud service will use the data, where would the data be stored or transferred.

 

In the last panel of the seminar Jörg Wimmers, Partner at TaylorWessing, Hamburg, spoke about the balance between Data protection and copyright.

The case discussed in detail was C-264/19 Constantin Film Verleih GmbH, which was about the prosecution of the user who unlawfully uploaded a film on YouTube, i.e., without the copyright holder’s permission. In this regard, it was held that the operator of the website is bound only to provide information about the postal address of the infringer and not the IP address, email addresses, and telephone numbers. The usual meaning of the term ‘address’ under the Directive 2004/48 (Directive on the enforcement of Intellectual Property rights) refers only to the postal address, i.e., the place of a given person’s permanent address or habitual residence. In this context, he also commented on the extent of the right to information guaranteed under Article 8 of the said Directive 2004/48. This was done by highlighting various cases, namely, C-580/13, Coty and C-516/17, Spiegel Online, noting that Article 8 does not refer to that user’s email address and phone number, or to the IP address used for uploading those files or that used when the user last accessed his account. However, Article 8 seeks to reconcile the right to information of the rightholder/ intellectual property holder and the user’s right to privacy.

 

Conclusion:

 

To conclude, the online seminar was a total package with regard to providing a compilation of recent cases of the ECtHR and CJEU on data protection and the right to privacy. A plethora of subjects, such as the balance between data protection and intellectual property rights, privacy and data retention, and respect for the essence of fundamental rights to privacy, were discussed in detail. The data retention provision established by the new Directive on Privacy and Electronic Communications may be an exception to the general rule of data protection, but in the current world of Internet Service providers and telecommunication companies, it may not be easy to ensure that these companies store all data of their subscribers. Also, it is important to ensure that data retained for the purpose of crime prevention does not fall into the hands of cybercriminals, thereby making their jobs easier.

 

[1] Article 4 No.11 GDPR

 

Symeon Symeonides, without doubt the doyen of US conflict of laws, just published what he says is the last of his annual surveys of American Choice of Law. (The series will be continued by John F. Coyle, William S. Dodge, and Aaron D. Simowitz, suggesting it takes three of our most eminent scholars to replace Symeonides.)

As everyone in our discipline knows, reliably, at the end of the year, Symeon has posted his survey of conflict-of-laws decisions rendered over the year, according to Westlaw. He would assemble the most important decisions (of which he finds a lot), organize them around themes, and comment on them, always with (sometimes admirable) restraint from criticism. Anyone who has ever tried to survey the case law of an entire year in a jurisdiction knows how much work that is. (We at Max Planck, with IPRspr, certainly do.)

The service rendered to the discipline is invaluable. Conflict-of-laws opinions are hard to track, not least because courts themselves do not always announce them as such, and because they cover all areas of the law. Moreover, conflict of laws in the United States remains disorganized, with different states following different methods. (Symeon helpfully provides a table listing each state’s methodological approach.) Of course, Symeonides also compiled his superb knowledge of the case law in his Hague Lectures on the past, present, and future of the Choice-of-Law Revolution (republished as a book) and his book on (US) choice of law in the series of Oxford Commentaries.

Incredibly, this is Symeon’s 30th survey in 34 years. In this one, he uses the occasion to ruminate about what the 30 years have taught him: reading all the cases, and not missing the forest for the trees, enabled him (and thereby us) to gain a truer view of the conflicts landscape.( Of course, Symeonides also compiled his superb knowledge of the case law in his Hague Lectures on the past, present, and future of the Choice-of-Law Revolution (republished as a book) and his book on (US) choice of law in the series of Oxford Commentaries.) Such surveying shows that some of our assumptions are dated, as he showed in two special surveys on product liability and more generally cross-border torts. And it shows, as he beautifully puts it, that judges are not stupid, just busy.  Which is one of the reasons why the practice of conflicts owes such an amount of gratitude for these surveys.

Our discipline has seen a theoretical revival over the last ten or so years. A discipline once viewed as overly technical, doctrinal and untheoretical (a “dismal swamp”, in Dean Prosser’s much-cited words) is now being analyzed with newly-found theoretical and interdisciplinary interest – from economic analyses to political theory, philosophy, and even gender theory. The risk of such work is always to disentangle from the actual practice of the discipline, and thereby to lose what is arguably one of conflicts’ greatest assets: the concrete case. Symeonides (himself no enemy to methodological and sometimes theoretical discussions) has, with his annual surveys, made sure that such theories could always remain tied to the actual practice. For this, he deserves gratitude not only from practice but also from theory of private international law. His oeuvre is, of course, much much richer than the surveys. But even if he had written nothing beyond the surveys (and truth be told, it is not fully clear how he ever managed to write so much beyond them), his stature would have been earned.

The last twenty of Symeonides’ surveys have been compiled in a three volume edition published by Brill, a flyer allows for a 25% discount. While you wait for delivery (or maybe for approval of the loan you need to afford the books), you may want to download his lates survey, read Symeonides’ own thirty-year retrospective in the beginning, and marvel.

Correction: In the original version of this post I said that Symeonides will be replaced by four scholars. I have now been informed that Melissa Tatum will not join the group of authors for the annual surveys, leaving the list of the other three.

 

The Global struggle towards affordable access to justice: Dutch baby steps towards a more open legal market

 Written by Jos Hoevenaars, Erasmus University Rotterdam (postdoc researcher ERC project Building EU Civil Justice)

In a global context of civil justice in crisis (Zuckerman) and a legal professional under pressure to adjust to the rapidly changing legal landscape (Susskind), experiments, adjustments and transformations in the way justice is done are an almost daily occurrence. Last week, the Dutch Bar Association announced an experiment to (slightly) open up the legal market in the Netherlands.

Effective yet affordable legal representation

The administration of (civil) justice remains an expensive practice, both in terms of public spending on the courts and publicly funded legal aid, as well as for those seeking justice. In most jurisdictions, access to justice remains a far cry from reality for large sections of society. Effective yet affordable legal representation has long been one of the most important stumbling blocks, and it goes without saying that in cross-border cases these costs only increase, while self-presentation – even if allowed – is often illusory.[1] With high and unpredictable lawyer fees as one of the most prevalent impediments to access, there have been many attempts at transforming the market for legal representation.

On the side of the legal system, we have seen moves away from strict legal representation requirements by a lawyer towards more self-representation and ‘do-it-yourself-justice’, taking lawyers out of the equation altogether (a practice leading to some disastrous results in some places). And, in response to the resulting challenges faced by litigants in person, we see movements in the direction of permitting for different forms legal representation, such as the so-called ‘McKenzie friends’ in UK courts, or the ‘Lay Assistant Scheme’ in Singapore, that allow for non-lawyers to be present in court to assist self-representing litigants (to a limited extent).

If we add to this the growing market of private dispute resolution as well as the tectonic shifts that are to be expected from the technological innovations (in both legal aid provisions and the digitalization of court procedures) we can see how such moves are likely small steps on a long and winding road of radical transformations of the legal profession, and likely of legal markets and the justice system as a whole. In the Dutch context, we witnessed one of those small steps last week.

Burgeoning shifts in the Dutch legal market

On December 3^rd the Dutch Bar Association (NOvA) announced an experiment to give more leeway to lawyers from legal assistance insurers and claims settlement offices, by letting lawyers not employed by a law firm represent clients in court. As in many other legal systems, the legal market in the Netherlands has long been a hermetically sealed bulwark. While in large parts of the Dutch legal system assistance by a lawyer is mandatory, litigation with the use of a lawyer is only allowed if that lawyer is employed firm that is owned by layers. Legal departments of service providers such as accountancy organizations and claims settlement offices are therefore sidelined in court. In this recent move, however, the bar association gave the green light to the Hague legal aid provider SRK, a company that is not owned by lawyers, to offer lawyers’ services to people who are uninsured – a practice that up until now was restricted. This move is heralded as a crucial first step to break open the strictly regulated legal market in the Netherlands.

Bar under pressure

The move does not come as a complete surprise, NOvA has been under growing pressure by the Dutch Authority for Consumers and Markets (ACM) to adjust its professional rules because they may frustrate market forces. In February of this year, rather than taking action directly, the ACM gave the bar association a last chance to adjust its rules itself, while emphasizing that it could still conduct an investigation if there was reason to do so.

This pressure resulted from a request by legal aid provider SRK. The company wants to have its lawyers provide services to clients without legal expenses insurance through its subsidiary company BrandMR. However, this would go directly against NOvA rules, which stipulate, among other things, that lawyers may provide their services only while employed by an office that is owned by lawyers. This rule is meant to prevent lawyers from being guided by business interests rather than those of their clients.

There is one exception to this rule: lawyers may be employed by a (non-lawyer owned) legal expenses insurer, provided they work exclusively for insured persons, which is the practice of SRK. However, by also catering to non-insured persons SRK would violate that principle. With BrandMR, SRK targets the market of people who earn too much for subsidized legal aid yet have no legal aid insurance. According to the legal aid provider, about 25% of the Dutch population, especially young people, avoid legal assistance because they are not insured and consider the costs of a lawyer too high and unpredictable.

Since October of this year, and in defiance of the Bar’s rules, people without insurance can turn to SRK if they have a conflict. Under the BrandMR label, SRK offers them legal assistance at a fixed price, instead of the hourly rate that law firms charge. SRK director Peter Leermakers says he ‘supports’ all the rules of the legal profession, but not this one. ‘Our lawyers have been allowed to work for people with legal expenses insurance for over 15 years. Then why not for people without insurance? Why should they suddenly no longer be independent? ‘ He argues that the independence of the lawyers at SRK is guaranteed by an internal committee, which is assisted by two lawyers who previously were acting deputies of NOvA.

Political support

There has been political support for for SRK’s attempt to stretch the rules for the legal profession in the Netherlands. Minister Sander Dekker of Legal Protection (VVD) has submitted a bill to allow experiments in the Dutch legal system. He wants to offer citizens more flexible access to justice and reduce the costs of justice through a wide range of potential changes to and shifts in the Dutch justice landscape. He has already indicated several times that he welcomes initiatives such as those of SRK, and also hinted in the House of possible measures if the bar does not seriously consider how it can help foster new business models in the legal profession.

As described here in an earlier blogpost, the Minister previously clashed with the legal profession about legal aid funding. The government pays lawyers for people who cannot afford it themselves. Lawyers will then receive compensation based on a system of fixed rates for each type of court case. According to many lawyers, these are too low, but Dekker refused to make more money available, eventually leading to a strike by lawyers at the end of 2019.

A five-year experiment

The bar association thus yields to heavy pressure from politics, cartel watchdog ACM and non-industry service providers eager to enter the legal market. Although, rather than a full-fledged rule change that would open up the legal market to a host of providers, for the time being the admission of SRK is ‘an experiment’ with a maximum duration of five years. Service providers other than SRK may also participate, under the watchful eye of the Bar. The experiment is part of a broader investigation into a possible new system of regulations around permitting alternative business structures for lawyers.

The experiment announced by the NOvA must therefore be viewed in that light. “There needs to be movement on this subject somewhere, either by the NOvA, either by the ministry or the ACM,” said General Dean of the Dutch Bar Frans Knüppe. “We think it is wise to start the experiment now, and thus gain knowledge and experience on this fundamental issue. We expect that the Minister and ACM will not have to take any steps for the time being.” Knüppe emphasized that the NOvA is open to new initiatives, as long as the core values – in this case lawyers’ independence – ??are guaranteed.

International shifts in the legal market

While the move by the NOvA is only a small step towards rule changes, in terms of corporate structures it could potentially lead to a significant shift in the character of the Dutch legal market. The opening up of commercial opportunities for legal service providers could be part of the solution for the segment of the population that earn too much for subsidized legal aid but are not wealthy enough to employ costly and often unpredictable services of a lawyer without legal aid insurance.

The changes in the Dutch context do not stand on their own, as we have seen considerable volatility in legal market globally. In the United Kingdom and the United States, established law firms have been facing competition for much longer. The 2011 Legal Services Act in England has made it possible for parties other than lawyers to become co-owners of a law firm. As a result, law firms can collect money from outside the company, at the stock exchange for example. The new law opened the door for non-lawyers such as accountants and bailiffs, as well as supermarkets, to enter the legal market.

It remains to be seen what the impact of this temporary rule change will be on the Dutch legal market. The board of representatives of the NOvA expressed concern that the experiment could potentially lead to shifts in the legal landscape that prove to be irreversible after the five-year experiment. On the other hand, the ACM has applauded the move by the NOvA, yet also questions whether the relaxing of the rules goes far enough.

On request of the Ministry of Justice and Security and the NOvA, the WODC (Research and Documentation Centre) of the Ministry is currently conducting research into the consequences of the admission of alternative business structures in the legal profession.

 

[1] Hoevenaars, J. & Kramer, X.E. (2020). Improving Access to Information in European Civil Justice: A Mission (Im)Possible? In Informed Choices in Cross-Border Enforcement. Cambridge: Intersentia