Terrorgefahr und Vorratsdatenspeicherung in Europa: unterschiedlichste nationale Schutzstandards mangels klarer unionsrechtlicher Grenzen

Bereits wenige Tage bevor Europa durch Terrorangriffe in Paris erschüttert wurde, haben sich in Großbritannien, Frankreich und Deutschland bemerkenswerte sicherheitsrechtliche Kurskorrekturen vollzogen. Sie betreffen insbesondere das Instrument der Vorratsdatenspeicherung und gewinnen angesichts der Debatte, welche Lehren wir aus den jüngsten Anschlägen ziehen sollten, enorm an Relevanz.

Staatliche Gewährleistung der Informationsfreiheit zwischen #netneutrality und #notneutrality

Das Internet der Gleichheit, in dem alle Daten unter den genau gleichen Bedingungen befördert werden, wird es in Europa langfristig so nicht mehr geben. Diese Entwicklung hat das Europäische Parlament mit dem Erlass der Verordnung zum Telekommunikationsmarkt angestoßen. Daten sollen danach im Grundsatz zwar weiterhin unter gleichen Bedingungen befördert werden. „Spezialdienste“ können davon aber ausgenommen werden. Im Zentrum der öffentlichen Debatte steht daher die Ungleichbehandlung unterschiedlich zahlungsstarker Dienste und Nutzer. Verfassungsrechtlich stellt sich zudem aber die Frage, wie weit die Pflicht des Staates allgemein reicht, Informationsfreiheit zu gewährleisten. Dann wird das Bild komplexer, weil ein Netzmanagement den Zugang zu Daten einerseits reglementiert, die enormen digitalen Datenströme dadurch unter Umständen aber auch gemäß ihren Anforderungen zielführend geordnet werden könnten.

The Force awakens – The Schrems case from a German perspective

Just like Star Wars, the "Solange" saga about German constitutional order’s approach to fundamental rights protection in the context of European integration appeared as a story told and settled. But now there are rumours that in Germany Solange Episode III is in the making, with a release date around 2016. The ECJ’s Schrems decision will bring some turmoil to the Solange Episode III production in Germany.

The Schrems Judgement: New Challenges for European and international companies

In Schrems the CJEU has declared the Safe-Harbor-Decision of the European Commission invalid whilst strengthening the EU fundamental rights. The Court has done so with astonishing clarity. Although the matter is about Facebook Ireland’s transfer of data to servers of Facebook, Inc. in the U.S., it, ironically, will not be Facebook but companies of the European “old economy” that will have to face severe consequences in the aftermath of this landmark judgement. In many cases of every day data processing in the business world, the consent of data subjects will be impossible to obtain. It is at the same time nearly impossible to prevent data to be transferred outside the EU. Hence, a vast number of data processing operations which were lawful before Schrems are now illegal.

Negotiating the Data Protection Thicket: Life in the Aftermath of Schrems

The Schrems judgment of the ECJ has implications for the viability of the commercial practices of Internet giants (and minions), for the legality of state surveillance practices and for the future sustainability of an Internet that is global rather than parochial. It is thus not surprising that the Court of Justice of the EU delivered its judgment only one week after the Opinion of the Advocate General and that this judgment has attracted so much academic and media attention, including through the existing commentary on this blog. In adding to this commentary, I shall not rehash the well-versed facts but shall focus on three points which I found striking.

Safeguarding European Fundamental Rights or Creating a Patchwork of National Data Protection?

On Tuesday, the Grand Chamber of the Court of Justice of the European Union declared the Commission’s US Safe Harbour Decision invalid. The Court’s ruling in Case C-362/14 of the Austrian Internet activist Maximillian Schrems v the Irish Data Protection Commissioner is a milestone in the protection of European fundamental rights, but it also preserves space for different national supervisory standards and national discretion on whether data may actually be transferred. Is the ruling opening the way for a patchwork of national data protection? How does this ruling influence the TTIP negotiations?

The Sinking of the Safe Harbor

The judgment of the Court of Justice of the European Union (CJEU) in Schrems v. Data Protection Commissioner (Case C-362/14) is a landmark in EU data protection law, but one about which I have serious misgivings. While I share the Court’s concern regarding the surveillance practices of the US government (and other governments for that matter) and some of its criticisms of the EU-US Safe Harbor Arrangement, I take exception to its lack of interest in the practical effects of the judgment and the global context in which EU law must operate.

The Essence of Privacy, and Varying Degrees of Intrusion

What is remarkable in the CJEU's Schrems decision is that a) the Court actually identified the intrusion in question as falling under the notion of the essence of privacy – something the European Court of Human Rights has never done under the privacy provision of ECHR Article 8, and b) the identification of an intrusion as compromising the essence of privacy meant that there was no need for a proportionality assessment under Article 52 (1.2) of the Charter. For these reasons, the Max Schrems judgment is a pathbreaking development, a major contribution to the understanding of the structure and legal effect of fundamental rights under the Charter.

Finnish Government and the Desire to Constitutionalize Mass Surveillance: Toward Permanent State of Emergency?

The Finnish Government intends to amend the constitution to clear the path for a NSA-type surveillance scheme. The form of constitutionalism that results from this kind of change would reverse the traditional grounds of legitimacy as set forth by the constitutions and human rights treaties: instead of providing one possible but narrowly interpreted ground for restricting right to confidential communications and protection of personal data, national security would occupy the position of a main rule while the constitutional right would wither away to a narrowly applied exception. In essence, the amendment would securitize one of the key fundamental rights of our time, and create a permanent state of emergency within it.