CJEU - C-793/19 - SpaceNet AG

From GDPRhub
CJEU - C-793/19 SpaceNet AG
Cjeulogo.png
Court: CJEU
Jurisdiction: European Union
Relevant Law:
Article 11 CFREU
Article 52(1) CFREU
Article 6 CFREU
Article 7 CFREU
Article 8 CFREU
Article 15 Directive 2002/58/EC
Decided:
Parties: Federal Republic of Germany
SpaceNet AG
Case Number/Name: C-793/19 SpaceNet AG
European Case Law Identifier:
Reference from: BVerwG (Germany)
BVerwG 6 C 12.18
Language: 24 EU Languages
Original Source: Judgement
Initial Contributor: FA

The Federal Administrative Court of Germany issued a request for a preliminary ruling in the context of a dispute between an ISP and the German government regarding the lawfulness of national legislation which obliges providers of publicly available electronic communications services to retain traffic and location data of end users.

English Summary

Facts

Since 2016, SpaceNet AG, an ISP, has been challenging a German law which provides for an obligation to store traffic and location data of all users without any reason and across the board, arguing it is incompatible with the EU Charter of Fundamental Rights.

Holding

Question referred

"In the light of Articles 7, 8 and 11 and Article 52(1) of the Charter of Fundamental Rights of the European Union, on the one hand, and of Article 6 of the Charter of Fundamental Rights of the European Union and Article 4 of the Treaty on European Union, on the other hand, is Article 15 of Directive 2002/58/EC to be interpreted as precluding national legislation which obliges providers of publicly available electronic communications services to retain traffic and location data of end users of those services where

  • that obligation does not require a specific reason in terms of location, time or region,
  • the following data are the subject of the storage obligation in the provision of publicly available telephone services — including the transmission of short messages, multimedia messages or similar messages and unanswered or unsuccessful calls:
  • the telephone number or other identifier of the calling and called parties as well as, in the case of call switching or forwarding, of every other line involved,
  • the date and time of the start and end of the call or — in the case of the transmission of a short message, multimedia message or similar message — the times of dispatch and receipt of the message, and an indication of the relevant time zone,
  • information regarding the service used, if different services can be used in the context of the telephone service,
  • and also, in the case of mobile telephone services

the International Mobile Subscriber Identity of the calling and called parties,

the international identifier of the calling and called terminal equipment,

in the case of pre-paid services, the date and time of the initial activation of the service, and an indication of the relevant time zone,

the designations of the cells that were used by the calling and called parties at the beginning of the call,

  • in the case of internet telephone services, the Internet Protocol addresses of the calling and the called parties and allocated user IDs,
  • the following data are the subject of the storage obligation in the provision of publicly available internet access services:
  • the Internet Protocol address allocated to the subscriber for internet use,
  • a unique identifier of the connection via which the internet use takes place, as well as an allocated user ID,
  • the date and time of the start and end of the internet use at the allocated Internet Protocol address, and an indication of the relevant time zone,
  • in the case of mobile use, the designation of the cell used at the start of the internet connection,
  • the following data must not be stored:
  • the content of the communication,
  • data regarding the internet pages accessed,
  • data from electronic mail services,
  • data underlying links to or from specific connections of persons, authorities and organisations in social or ecclesiastical spheres,
  • the retention period is four weeks for location data, that is to say, the designation of the cell used, and ten weeks for the other data,
  • effective protection of retained data against risks of misuse and against any unlawful access to that data is ensured, and
  • the retained data may be used only to prosecute particularly serious criminal offences and to prevent a specific threat to life and limb or a person’s freedom or to the continued existence of the Federal Republic or of a Federal Land, with the exception of the Internet Protocol address allocated to a subscriber for internet use, the use of which data is permissible in the context of the provision of inventory data information for the prosecution of any criminal offence, maintaining public order and security and carrying out the tasks of the intelligence services?"

Comment

-Read SpaceNet's statement here: https://www.space.net/news/vorratsdatenspeicherung-jetzt-ist-der-eugh-gefragt

-Read the German decision here: https://www.bverwg.de/250919B6C12.18.0

Further Resources

Share blogs or news articles here!