Content uploaded by Marta Requejo Isidro
Author content
All content in this area was uploaded by Marta Requejo Isidro on Feb 20, 2019
Content may be subject to copyright.
!
"#$%
%&'(!
%)*!
%+
%,-.+
%/$
%%$
%0(1
02#
0#
0(3#
0(45
0%(
00(
00
0 0
02!
!,+
Procedural Harmonization and Private Enforcement in the area of
Personal Data Protection
Marta Requejo Isidro
Senior Research Fellow
MPI Luxembourg
1. Introduction
2 $ , 6 ( 7" ,
4)6*5"&8
9&" 2:&67
" 1#*
.*"9..3
9.9.&
91!;0:;,,0<.11!
9
=
1+;::;,,
!.11+"
%
& 9 ## . ##;!$;,"
4 )>*5"
0
##1 .
##1;%:;,
!
2 (
,
##;!$;, 4(
,5"
:
1!;0:;, . . ( 475
#:;:+1,+2#:
9
"1!;0:;,"'("9#:
. !" #$
+
9 8
62$:&,?9.
<@/$"%11!
%
<@/0"%#11$
0
<@/#"%+##
!
<@/%%+"$##1
:
,<;#+;##-#+;#%
+
<@ / 1 0!#: 6 ?
475 #:;:$# ," + 2 #:"
9 .
""8"
",69>##$;1++;@2"<@/1"0!#:5
A ( - ( 475 #$;$#+
,0A.#$9> 9-
7"<@/%#%"$#$
( ,B2
.
. '(C=
'(
$
D'(>9 1!;0:;,"
9 9 9 6"
. . 9
"
7
1
2'(
.3" .
" 9 9 "
".
& ) 9* 3 . =
. .3 '(
3
#
2 " 9
2+143 52$#4
5" . 6" . .
; " '(
. 9 9 7 2 >"
9"'( ."
9 9 9 9
'(8=99
.
7
2. Setting the scene. Status quo prior to May 25
th
, 2018
2 21!;0:;,4(5".9.>
3 . . . 9
. 2 % 4/. 5
.
9" .9
$
2 4 .> 2 ++" +$ +1 '(5" 2 4 2 $=
.5&42$#'(5=2 .
-8
1
&7 9 . 9
4 "59
#
( / /" B @ ,-E 2
'(C">6 /9"(!+"0
E" ." 9
?*9"
9 :
. 7 . . 7
2 6("6(2"
9 9
3 - 9
.3
%
2
. 8 . ?
)459
*" )
*"). *4("+"#"":$=92
5 9" =
> 9
0
. . ) .* < " 9>
" = ."
* <"
?
9
. " . "
. .
=
!
9
". "".)
-*&
:
9
1!;0:;, & . >
.per se
".3.".
. )*? .3 .
9 . 8
+
"
?
F" BA9 , - , ,? .9
/9 7C 46. !"##5 ,'@" 6 (
2. (A? ?;;;.G:%$1! ?;;8;#%1;:%$1! 4
0##15/E "Data Privacy Law"<7"#0"+$
?;;;;.;#0;-----.- 4
+##15
%
6(2 45"%"6/E 45?
3".9
0
</ > " The Foundations of EU Data Protection Law"<7"#!" " ,0"
.9
!
1#*",,!0;11%"##+11%"BOEA
1+"$#$11%":
:
6 " @
("2 "B( ?2A9,69C":>/H&(#
+
Id. loc."+</ > 405"
. - ) *"
.9 9
= ) .*" .
=). -*
. 9= -
$
&
9> . ?
.= 9 " ;
. <"
9" .
" .3
1
.
9
9? " . #0 9
9I+!#9I
#
. 9
?-9
= - . ." " . =
.".. " 9 9
8 .3 -=
.--.
9-
8-= .
3. The GDPR and Private Enforcement
3.1 ‘Putting individuals in control of their personal data’
, ) , D 2
69> , *" #"
%
, >9
)4J5 &
9"99
<" >9 9 8 * 2 " 9
$
</ > 405",:"96(2 45"%(
= " "
"
1
6(2 45"%#-%
#
2>" B ? C" %##+"
?;;999.93.;--;;-;#+;#; ---
-- ---4%##15
6(2 45"0
" B 2 @C" ? D" 45" Enforcing
Privacy. Regulatory, Legal and Technological Approaches""#:"1!-""0
%
,<4#51"##
9)">
.9.
8 *
0
& '( > *
2 . " 8 .3
, ? " "
.". ".3
" . .3 .
"=..-2$-
. -2 #- 9 & . "
,K"<
-9=9.-"..3
8;(
. .3"
" . 8 2 >
"". ."
" 9 &
.3 2 ! - 1!;0:;,?
.3 9
9. 4 5" 9
. .3 "
2+8"
2 1 .
""9
.
6 .3vis-à-vis ".
6
. ? 2 $ 4( . 5"
9-
(
. '( 9
, K" 2 +1
.33 =
" 9 . " 2 $
!
0
Loc. ult. cit.":
!
= 9"
. > 8&'(
? -- 3 . .
. .
E1!;0:;,?
2"2%&"2$"
. " ( .> 9
9 9 , "
99"9
3.2 Procedural tools
2 '( 45 . "
9
3.2.1 Cross-border litigation and parallel proceedings
1!;0:;, 3
:
2 "
3 9 . 7 ( - "
( 475 A !;#" ,"
+
" . ,@7- 9 .= 9"
. < " 2 +1 '(" )
. . . .
9.2 " .
... 9.3.
4J5* ( 0! > ( 0+
8 3 ( 475A !;#
3'(
2 " '( 2 $
..,
8 =."
=
" 33
9&9
? . 3
(= 3.32
+++1420#F'(5&(9.
42 :5 42 +5" 9 >9 . 9
=99
:
.9"2 0 - - 7
. 94"?
"..95
+
( 475 A !;# , . #
3 3 " <@ / %!"
##
" .9
3.2.2 Legal standing
2 $# '("
$
-- . "
89
" 3 4 "
5.3; .D. .
9.3"..
8
3.2.3 Evidence
'(.
2!'("" 9
) . *" 9 . 9
." - - .
?)&. . "..9"
*68(.
9 . .
"( 9 .
" 4 2 0#" ),
*54 20"),*5
. . 9 9 .? 2
0%"2!%" 2$!"2%%"2%!$& (?
9 . . . "
.9.
;4($5
2 : 9
". .3 . .
"...3
42 +" ( 05 " .
=9 . . 9
. .
" " "
.
42+"(0%5
$
9(0
2".38
2 ! 9
.3 9(=9"
9 . 8
.3 42 5 D .3
8"."
= . .
842!5
2 '( . .3 .3 .3
9 "
.3."8
1
2 2 $" . "
. 8 . . 9
( 4 5" 9 9 . (
9 9
45" 9 .
3.2.4 Remedies
.3..
9 2 +1" . 9 2 $
" . . 9
- ("
; 2 ." . .
8. . ?
in any way.45
< "(0:..
-9,@"9
.3(
1
9(:1?B4J5.
.3C
4. Assessment
4.1 In terms of procedural harmonization
&8'((98
. - -
4 ( #"(15
%#
( . 8 -
9 - 3 -
. 7
.
4.1.1 Rules on international jurisdiction and parallel proceedings
2+1'( 9 .
934 (
475 A !;#5" 8 9 . "
. 2+1 '(" 9 )* 2
89..397.9is
7" 9 . 7. =
'(2 %"
%
.
2 +1 . 9 .
).*-(". (
9 0!;1:;," > 9 ,@7
%
-"
). * .3"
%%
9 )
* 4 9 9 "
2+E.(5
" ,@ 9 3
9>."9
%#
& 9 . " >
.9 "(9
4($5
%
B&(.397.
.7"9 ?45
" 9 .3 " .3 7=
4.5..>97C
%
'L" B& A9 & 7 /9? (
2C" #+ 4!05 , > /9 (9 !:+" !+#-!+0= 2" B2
M? D&.@C"4#!5%/
/ 7M=id.,B, .('.M
7MC"4#+5:1(N+!"
%%
27 B.C". 9
84 9"." 9J59
2 $# '( . .. .
.3.
%0
" 2 $" 9
. 3
" .9 ( 00
"? )9
. .
" .3
. ""..
.*
4.1.2 Rules on standing (and on the identification of the defendant)
<"2$#'(8
4 . 5 . 9 2
7 " 8"
%!
--."
" . .
'(-" 9.
9.. .3=..
. (" ad hoc" 3
.=
%:
7F ..
. 4 Lloyd v Google LLC . 9
. 5
%+
".9.92+1
" 9 . .3" 2 $
%0
, ,- 01$;:" 7?,?#$?%+= (3 " B8 2 6.> ,@7" ,-01$;:C"
D>"#$405"#
%!
(3 O/M M P
475 #:;:+1Q 4#+5 0 // R"
%:
(3"loc. ult. cit=2"B&,(7C"
.,;;(345"Privatizing Dispute Resolution and Its Limits, A"
%+
S#$TD,!114UE5 '9""
.D>" . & 9 . ,( 1:"
9 B(9C&, 99
" .
9 . ,= "
,* 9 . 8
,97? 6-7 ." Echavarria et
al. v Facebook Inc", %?$--#!1$" . ?
?;;999;.;;!++:0+;,2K2((2VVVV6.>"V 4
:#1#15
" 9 4)2 *5 & > 8
.
<" .
- )*-"
".("20+4
5 2 $ 4 5 9" 9 9 .9" .
9 > " .
.
4.1.3 Rules on evidence
& 8 ). .
*"9'("&9"(
9 . 8 vis-à-vis .3 4W5
%$
2"9
."9?)<X
*X *8 *
('*
%1
, ) S2 +T
. burden of proof 4J5*"
0#
)S
. T . 4J5
ST . .3 4J5 " .
.. . *=
0
)2
". '(. 4J5
). *
> . ..
.3".
.39 *
0
4.1.4 Rules on remedies
%$
A priori" .9 2$%42"Y2
+Z" ? 9 45" Europaïsche Datenschutzgrundverordnung,
" A" #$" 00!" !%"
. 52 "2%#0($.
9
%1
F (" 2 " B/ X .X . -
('Z"?&9;(45"Le Règlement Général sur la protection des Données (RGPD)"/"
#$"::!":$
0#
/6"A6M"D"The EU General Data Protection Regulation4'(5?A Commentary, '/"#$" $+
4. 5 " 2 E" Tèglement Européen sur la Protection des données"
"
E "#$"#!
0
/6"A6M"D40#5"+:
0
K2 "E" B/. 7 /9? 61!;0: '
(C"4#:5@&,+"%%
&'(=;
. 8 6 "
? . '("
0%
2 +1
.33 9
( have been infringed -
9(45
(3".> .
& ... ".
,@7
00
- 2 $-" '( .
9".(0:.
8 -) .3
*-"...
8-)& .. -9
, @ 9 .3 (*"
-
48 2$5"..?
9 9
.
0!
"92$9
" 9 " .
0:
6"
.4
.. 9>= 5"
0+
0%
(%+" 2 :+" 2::"8 3
00
2' ,-!#!;+" 7?,?#1?!" ###1 9 ,-$;$
4##15
0!
& 87F"Google Inc. V. Vidal Hall"S#:TUE##%"S#!TD,2,%
0:
" , ( 4,((5" , 9> - ,((
" !##:" . ? ?;;999;;;;:#!V,((V V6" !$
& 7FLloyd v. Google S#$TD,!114UE5" !!- 2
11$-9
0+
2 '" " B& ( 7 /9?
&9.3- ( C" #! (92
/9!"01"79>89".
9 "8*
4.2 In terms of private enforcement
4.2.1 Preliminary evaluation
9 '
>" 9 .
?
(? = ==
. ( 4 9 5?
4" . = -
"5
( 9 ? " " .
" " = " .9 ;.
49- "
5
"
1!;0:;," '( . 9 &
" " 3" "
.3.;.
> Richardson v Facebook" 9
[3..
".,@
0$
. ." 9 .
. . 9 9>" 9 . 9 9.=
. "
9&3
9.. 9
8998"9.
. " 9. 9[ 7F . " 9 9
. 9 9 . &
>.9...
9.9[7F. "99.
9 9 . "
. '(
42%"205 .
0$
S#!T D, %!0 4UE5 E 9 < 2
"B6.>?K /9 < C" 8
> /8." :##+" .= F &>" B7> 2 <
(C"4#!;#:5+\.>/9$
4.2.2 A second glance
" .
'( 8 9"
" ;
?
, & 9" (
=.
01
"
. &9->9Google Inc. V. Vidal Hall
!#
9?3
. =
3" 3 9=
."9
. / 2 -
" 9 '( &
( :! 8?
.").3 9
> . " 9 "
& .3 . . 8
9*
. 3
.'(*
9 .3 .9"
."92+1"
9. 2$
!
"
)* 9
,@7 Google Spain"
!
,
9?. 42!"#:5".
4@%"#:5= '
= " "
, ,-#;: ,@7 4Unabhängiges Landeszentrum für
01
&." 979 .
89>- .
!#
2."0!
!
2 2 % 0 ' (
.3" . D 2 +0 9 9
7.
!
,-%;"7?,?#0?%+
Datenschutz Schleswig-Holstein5"
!%
9 . 9 "
,-0#;+
!0
". .>.
=
!!
- >
845
!:
>2 .'(."E
'".
'( . > 8
.
!+
9
'( .
-".9.
42!+"(05-.vis-à-vis
("8..
). *"(
..?9".
. "
.9.9- 9 9 9
45 prima facie
(2 3 9.? 3
. . 9
'(42 %5 > .
">3
," & '( -
((4,5A$:;##+
, @ ##+ . , "
!$
2 :-"
- > 2 00" 0! , ( 4,5A 0;##1 $ .
##$3".9"
.
!1
.(
.? , ( . -.
=(9-.
9".8
!%
,/?7?,?#$?%$$
!0
,2'E.>"7?,?#$?#%1
!!
,F&>40$5".@"6"7
!:
, & D" B, A- ? - 6 ,8C" 0
/(4#$5$"1
!+
2'"40+5"0$
!$
<@/11"%+##+
!1
<@/+"###1
'(=."9>
-.
><"
. >93 .9
- 9" 9 > . .
9 . < " -.
.."7.
& ,
inter privatos 7 . " 9
.93 =
:#
>9
8 ( " 9
8 )@ 3* & , 4
, 3
" . , #$5" 9 .9
.>28 8
:
2" & 7
" =
>*7
7 9> > .
. ..
.
:
&.'(
5. Conclusion
1!;0:;,
7 9
? 3
.
& 9 '( .
9 ? ) * .
. "
:%
. &
:#
, 9
4'
(5" ,<4#5 " 2 +!0? B& . .
2C
:
,, " B&8 & ,
@C" 4#+;#$5 \.> /9 0+!" 0$:" 9
.>"9
:
,20,4!$5
:%
,"B?&,C"0/(:!4#$5"::
7 -
.
9 >9
:0
& 8 " 9 .
9
. ,
. " 9
" . = 9 . 9
.3 . ) -*
2 " '( . & . "
'(9..
9 . ." 6.>
'
:!
.9"""."
=Lloyd v Google LLC
::
:0
" 9 9>
. & . -? . 9
=9" . "
> 99" .?."
:!
.. ".
9?. ,"B,26(,
6.>*& C"0 /(0 4#$5 9 (" B
9 9- 9 .
9C"#+,/%
::
2.%+"$