Certain aspects of the CJEU’s Google Spain judgment relative to lawfulness of data processing and liability of internet search engine operators

The judgment of the Court of Justice of the European Union in the case C-131/12 Google v AEPD and Gonzalez of May 2014 is important for several reasons. Not only because it prompts the right to be forgotten and liability of Internet search engine operators for content published by third parties, but also because it subjects Internet search engine operators to data protection legislation. These operators are characterised as data controllers, their activities as data processing activities, within the meaning of the Data Protection Directive 95/46/EC, while a number of issues related to applicability of Article 7(f) thereof remain unsettled. Besides departing from the Advocate General’s opinion in this case, these aspects of the judgment provoked controversy in scientific and professional circles. In this paper, authors examine reasons offered by the CJEU, in particular related to the abovementioned features of the ruling. Besides, authors focus on some other issues which seem to be insufficiently addressed in the judgment, such as the liability of Internet search engine operators and the implications on the legal scheme for Internet service providers under the E-Commerce Directive 200/31/EC. The proposition is put forward that the CJEU judgment errors in finding legal ground for Internet search engine operators’ activities in Article 7(f), due to inherent lack of possibility of Internet search engine operators to conduct ex ante balancing test. As a result, the CJEU’s finding about Internet search engine operators as data controllers is called into question. Inconsistencies may also be found in attempting to establish their liability, which is equally tied to the awareness of and control over the data. Therefore, more convergence is recommended with the scheme under the E- Commerce Directive