“In a landmark ruling the European Court of Justice (ECJ) today ruled that search engines, as a principle, need to remove the link between search results and a webpage if it contains information the individual deems should be ‘forgotten.’” In this Privacy Tracker post, DLA Piper’s Patrick Van Eecke analyzes the case and the ECJ’s decision, notably, that “Google is not a mere processor but also a controller of personal data on third-party web pages, because it is Google that decides upon the purposes and the means of the indexing activity.” The decision may have broad implications for “any service that uses third-party data sources containing personal data,” especially in light of the new Data Protection Regulation, in which the “right to erasure is defined even more broadly.” (IAPP member login required.)
Full Story