Mobile Holler Theft Too Eu Eprivacy Law: The Cjeu Clarifies Police Describe Powers

Lorna Woods, Professor of Internet Law, University of Essex

Introduction

This week’s CJEU judgment inward Case C-207/16 Ministerio Fiscal is business office of the jurisprudence on the ePrivacy Directive, specifically Article fifteen which broadly allows Member U.S. to permit intrusions into the confidentiality of communications for sure specified reasons.  Article fifteen is business office of the legal framework for the volume retentiveness of communications information from Digital Rights Ireland (Case C-293/12 as well as 594/12), EU:C:2014:238) (“DRI”) on as well as inward which the Court has affirmed that retentiveness schemes could last justified exclusively inward the illustration of “serious crime” (Tele2/Watson (Joined Cases C-203/15 as well as C-698/15), ECLI:EU:C:2016:970).  This left the interrogation of what “serious crime” mightiness be, as well as whether in that place would last European Union law standards circumscribing the orbit of this term. It is this interrogation that the reference hither seeks to address, though it should last noted that the facts inward number were really dissimilar from those inward the before cases.

Facts

The reference arose inward the context of a law investigation relating to the theft of a wallet as well as a mobile phone.  The law wished to seat the novel telephone number associated alongside the stolen phone, as good as the details of persons associated alongside that novel number.  However, Castilian law required that – to access such information – the law must last investigating a serious law-breaking as well as the domestic courts hither constitute that the facts giving rising to the investigation did non constitute a serious law-breaking according to Castilian law. The reference to “serious crime” tin last constitute inward the Court’s illustration law inward DRI, which – considering the correct to private life as well as to information protection inward Article seven as well as 8 of the European Union Charter of Fundamental Rights, gear upwardly that as a minimum threshold for the retentiveness of communications information en masse past times telecommunication operators.

The national courtroom referred a interrogation on the important of Article 15(1) of the ePrivacy Directive (Directive 2002/58/EC, as amended) inward the calorie-free of this jurisprudence.  Article fifteen allows Member U.S. to restrain to a greater extent than or less of the rights granted past times the ePrivacy Directive inward the interests of, inter alia, the prevention, investigation, detection as well as prosecution of criminal offences.  The national courtroom asked whether the utilisation of length of judgement available for a law-breaking tin last used to produce upwardly one's heed whether ‘it is too necessary to seat inward the criminal deport particular levels of impairment to private and/or legally protected interests’?  If length of judgement menstruum lone suffices, is in that place a minimum inward lodge to comply alongside the requirements of DRI?

Judgment

The commencement number before the Court was that of its jurisdiction to listen the question. Both the Castilian as well as U.K. governments argued that the Court did non guide maintain jurisdiction because criminal law is excluded from the orbit of the Data Protection Directive (Art 3(2)) as well as the ePrivacy Directive (Art 1(3)).  The Court referred, however, to its previous judgments inward this field, to concur that legislative measures derogating from the rights inward the ePrivacy Directive based on Article fifteen soundless come upwardly inside its orbit fifty-fifty if the measures pursue objectives which overlap substantially alongside the fields excluded from the ePrivacy Directive past times Article 1(3). [para 34]  It concluded, relying on Tele 2/Watson, that the orbit of the ePrivacy Directive:

extends non exclusively to a legislative mensurate that requires providers of electronic communications services to retain traffic as well as place data, but too to a legislative mensurate relating to the access of the national authorities to the information retained past times those providers [para 35].

The Court too dismissed other submissions on admissibility made past times the Castilian government, re-iterating its long-standing seat that ‘where the questions position past times national courts line of piece of employment organization the interpretation of a provision of European Union law, the Court is, inward principle, outflow to range a ruling’ [para 45].

The Court considered the 2 questions referred past times the Castilian courtroom together. The Court specified that the interrogation inward number did non relate to the compliance of the communications service providers alongside the law but ‘whether, as well as to what extent, the objective pursued past times the legislation .. is capable of justifying the access of the populace authorities, such as the police, to the data…’ [para 49]. The Court reiterated the approach taken past times its Advocate-General to concur that in that place would last an interference through such access, fifty-fifty if such interference was non serious, nor the information accessed sensitive.

The Court noted that the listing of objectives for the utilisation of Article fifteen ePrivacy Directive is exhaustive as well as that the authorities’ demand for access must really lucifer to 1 of those objectives.  Article fifteen does not, however, boundary access to the scrap against serious law-breaking – it refers to criminal offences generally. The reference to “serious” comes from the Court’s illustration law where it was dealing alongside situations involving a serious interference alongside the correct to private life.

By contract, when the interference that such access entails is non serious, that access is capable of beingness justified past times the objective of preventing, investigating, detecting as well as prosecuting ‘criminal offences’ to a greater extent than ofttimes than non [para 57].

The Court so redefined the object of its considerations to the interrogation of whether the interference inward this illustration was ‘serious’.  Since the information sought related exclusively to a brusk menstruum of fourth dimension as well as could non last cross referenced alongside other data, precise conclusions regarding the private lives of the persons inward number could non last drawn. Therefore in that place was non a serious interference alongside the individuals’ correct to private life.

Comment

This judgment could last described as tactical.  The Court has re-iterated that it does guide maintain jurisdiction inward these areas covered past times Article 15. Although before jurisprudence on the ePrivacy Directive distinguished betwixt the commercial operators’ obligation to retain information (falling inside the internal market) as well as access past times the law to those data, the Court did non boundary its ability of review inward Tele2/Watson along those lines, as well as it followed that Tele2/Watson approach here.  Access to the information past times nation authorities requires processing past times the telecommunication operators (see para 37). 

At the same fourth dimension the Court stepped away from the hard question, through its reformulation of what the referring courtroom asked.  In so doing, it avoided the number non simply of what “serious crime” is, but that of whether “serious crime” is an autonomous European Union concept.  In this the Court followed its Advocate General (Opinion three May 2018, ECLI:EU:C:2018:300) who went as far as to scrap that “criminal law” should non last an autonomous concept of European Union law.  While it avoided this question, as well as indirectly answered the interrogation as to whether access to communications information for anything less than serious law-breaking is permissible nether European Union law, it has non helped the Castilian courtroom which is faced alongside a national law that specifically refers to a threshold of seriousness. Moreover, inward emphasising its proportionality declaration to advise that the access for less serious crimes could last permissible, in that place is a danger that this may last read as proverb that national laws should so allow access – an interpretation which would oversteps the bounds of its competence simply as much as defining “serious crime” would.

The judgment re-iterates that Articles seven as well as 8 of the Charter are engaged whether or non the interference is deemed serious or not; equally, the ruling recognises that in that place may last dissimilar levels of intrusion that demand greater or lesser justifications.  Here the information sought was express inward type, as well as related to a express menstruum of time. The interrogation of what is intrusive, specially inward the context of the utilisation of predictive analytics, has non yet been fully answered. 

The Court’s emphasis on its previous caselaw, notably Tele2/Watson as good as DRI, may last seen as trying to construct a consistent approach inside this illustration law as well as too reaffirming the principles set downwards inward those cases.  This judgment tin so last seen as a re-affirmation of the approach inward Tele2/Watson, which mightiness last important inward the calorie-free of pending references seeking to inquire the courtroom to resile from its seat there, notably the questions referred past times the IPT inward the Privacy International litigation (Case C-623/17, pending) regarding the orbit of exclusive Member State competence as regards national security.

One finally request is virtually the implications of the Court’s ruling on recent English linguistic communication caselaw – the Court of Appeal inward Watson ([2018] EWCA Civ 70) as well as the Divisional Court inward Liberty ([2018] EWHC 975 (Admin)).  In Liberty, the Government argued, successfully, that a category of communications information inward the Investigatory Powers Act, “entity data”, did non autumn inside the ePrivacy Directive as well as so the ruling inward Tele2/Watson as it was neither "traffic data" or "location data" inside Article 2.  The Court declared the affair acte clair as well as refused to brand a reference to the Court of Justice (Liberty, paras 154-55).  Yet, the really information that the Castilian authorities were seeking inward the illustration before the Court of Justice were those that would seat the users of a phone, non the details of those users’ communications. The Castilian Government position frontward a like argument, but the Court declared this to last “irrelevant” [para 40]. Expressly next its Advocate General, the Court held that the ePrivacy Directive “governs all processing of personal information inward connector alongside the provision of electronic communications services” [para 41].  This asset throws to a greater extent than or less incertitude on the Divisional court’s sentiment both as to the orbit of the ePrivacy Directive as well as for certain the fact that the interpretation of the directive is acte clair.

Barnard & Peers: chapter 9

JHA4: chapter II:7

Photo credit: PixelVulture

Share this post