Right to be forgotten

The right to be forgotten is a concept discussed and put into practice in the European Union (EU) and Argentina since 2006.[1][2] The issue has arisen from desires of individuals to "determine the development of their life in an autonomous way, without being perpetually or periodically stigmatized as a consequence of a specific action performed in the past."[3]:231 There has been controversy about the practicality of establishing a right to be forgotten to the status of an international human right in respect to access to information, due in part to the vagueness of current rulings attempting to implement such a right.[4] There are concerns about its impact on the right to freedom of expression, its interaction with the right to privacy, and whether creating a right to be forgotten would decrease the quality of the Internet through censorship and a rewriting of history,[5] and opposing concerns about problems such as revenge porn sites appearing in search engine listings for a person's name, or references to petty crimes committed many years ago indefinitely remaining an unduly prominent part of a person's Internet footprint.[6]

Conception and proposal

Europe’s data protection laws are intended to secure potentially damaging, private information about individuals. The notion of "the right to be forgotten" is derived from numerous preexisting European ideals. There is a longstanding belief in the United Kingdom, specifically under the Rehabilitation of Offenders Act, that after a certain period of time, many criminal convictions are “spent”, meaning that information regarding said person should not be regarded when obtaining insurance or seeking employment. Similarly, France values this right - le droit d’oubli (the right to be forgotten).[7] It was officially recognized in French Law in 2010.[8] Views on the right to be forgotten differ greatly between America and EU countries. In America, transparency, the right of free speech according to the First Amendment, and the right to know have typically been favored over the obliteration of truthfully published information regarding individuals and corporations. The term "right to be forgotten" is a relatively new idea, though on May 13, 2014 the European Court of Justice legally solidified that the "right to be forgotten” is a human right when they ruled against Google in the Costeja case.

In 1995 the European Union adopted the European Data Protection Directive (Directive 95/46/EC) to regulate the processing of personal data.[9] This is now considered a component of human rights law.[10] The new European Proposal for General Data Protection Regulation provides protection and exemption for companies listed as "media" companies, like newspapers and other journalistic work. However, Google purposely opted out of being classified as a "media" company and so is not protected. Judges in the European Union ruled that because the international corporation, Google, is a collector and processor of data it should be classified as a "data controller" under the meaning of the EU data protection directive. These "data controllers" are required under EU law to remove data that is "inadequate, irrelevant, or no longer relevant", making this directive of global importance.[7]

Current legal frameworks

The right to be forgotten "reflects the claim of an individual to have certain data deleted so that third persons can no longer trace them."[11]:121 It has been defined as "the right to silence on past events in life that are no longer occurring."[12] The right to be forgotten leads to allowing individuals to have information, videos or photographs about themselves deleted from certain internet records so that they cannot be found by search engines.[11] As of 2014 there are few protections against the harm that incidents such as revenge porn sharing, or pictures uploaded due to poor judgement, can do.[13]

The right to be forgotten is distinct from the right to privacy, due to the distinction that the right to privacy constitutes information that is not publicly known, whereas the right to be forgotten involves removing information that was publicly known at a certain time and not allowing third parties to access the information.[11]:122[14]

Limitations of application in a jurisdiction include the inability to require removal of information held by companies outside the jurisdiction. There is no global framework to allow individuals control over their online image. However, Professor Viktor Mayer-Schönberger, an expert from Oxford Internet Institute, University of Oxford, said that Google can not escape compliance with the law of France implementing the decision of the European Court of Justice in 2014 on the right to be forgotten. Mayer-Schönberger said nations, including the US, had long maintained that their local laws have "extra-territorial effects".[15]

Recognition

European Union

In Article 12 of the Directive 95/46/EC the EU gave a legal base to internet protection for individuals.[3]:233 In 2012 the European Commission disclosed a draft European Data Protection Regulation to supersede the directive, which includes specific protection in the right to be forgotten in Article 17.[16]

To exercise the right to be forgotten and request removal from a search engine, one must complete a form through the search engine’s website. Google’s removal request process requires the applicant to identify their country of residence, personal information, a list of the URLs to be removed along with a short description of each one, and attachment of legal identification.[17] The applicant receives an email from Google confirming the request but the request must be assessed before it is approved for removal. If the request is approved, searches using the individual's name will no longer result in the content appearing in search results. The content remains online and is not erased.[18] After a request is filled, their removals team reviews the request, weighing "the individual's right to privacy against the public's right to know", deciding if the website is "inadequate, irrelevant or no longer relevant, or excessive in relation to the purposes for which they were processed".[19] Google has formed an Advisory Council of various professors, lawyers, and government officials from around Europe to provide guidelines for these decisions.[20] However, the review process is still a mystery to the general public. Guidelines set by EU regulators were not released until November 2014, but Google began to take action on this much sooner than that, allowing them to "shape interpretation to [their] own ends".[20] In May 2015, 80 academics called for more transparency from Google, in an open letter.[21]

The form asks people to select one of the twenty-eight countries that make up the European Union, as well as Iceland, Liechtenstein, Norway, and Switzerland.[22] "The form allows an individual or someone representing an individual to put in a request" for the removal of any URLs believed to be a violation of the individual’s privacy.[23] Regardless of who is submitting the form, some form of photo identification of the person the form is being submitted for must be presented. The purpose of this is to provide proof that the person for whom the request is being made for does in fact approve.

The form allows people to submit the name they would like search results removed for. However, it only allows for the submission of one name, which some view as one of its flaws.[23] For example, if someone known as both "Lawrence Smith" and "Larry Smith" were to submit a form for the removal of search results for his name, he would only be allowed to indicate one of these names on the form.[23] Many people view it as inconvenient and believe it is a problem that Google should be able to easily fix.[23]

If Google refuses a request to delink material, Europeans can appeal to their local data protection agency.[24] As of May 2015, the British Data Protection Agency had treated 184 such complaints, and overturned Google's decision in about  1⁄4 of those.[25] If Google objects to a Data Protection Agency decision, it can face legal action.[26]

In July 2014, in the early stages of Google's effort to comply with the court ruling, legal experts questioned whether Google's widely publicised delistings of a number of news articles violated the UK and EU Data Protection Directive, since in implementing the Directive, Google is required to weigh the damage to the person making the request against any public interest in the information being available.[27] Google indeed acknowledged that some of its search result removals, affecting articles that were of public interest, were incorrect, and reinstated the links a week later.[6][28] Commentators like Charles Arthur, technology editor of The Guardian, and Andrew Orlowski of The Register noted that Google is not required to comply with removal requests at all, as it can refer requests to the information commissioner in the relevant country for a decision weighing the respective merits of public interest and individual rights.[6][27][29]

Google notifies websites that have URLs delinked, and the BBC and other news organizations have published lists of delinked articles. Complainants have been named in news commentary regarding those delinkings. In August 2015 the British Data Protection Agency issued an enforcement action requiring Google to delink some of these more recent articles from searches for a complainant's name, after Google refused to do so.[30] Google complied with the request.[31] Some academics have criticized news organizations and Google for their behavior.[32][33]

As of May 2014, Google has removed 1,390,838 URLs.[34] From a gathering of which websites had the most amount of links removed, Facebook won with a total of 11,973 URLs removed. YouTube had 5,999 removed, Google Groups had 7,246 removed, and Twitter had 4,588 removed.[34] Though Facebook had the largest number of deleted URLs, there were other received requests that were not granted deletion. While Google does evaluate millions of URLs that have been requested to be removed, the ultimate decision must be made by a human "because the variables, including public interest claims, needs to be handled on a case-by-case basis".[34] However, it is to be kept in mind that internet users can still find removed information somewhat easily, just not through European Google search engines.

In July 2015, Google accidentally revealed data on delinkings that "shows 95% of Google privacy requests are from citizens out to protect personal and private information – not criminals, politicians and public figures."[35]

This data leak caused serious social consequences for Google as the public expressed their outrage and fear over the information that was recently made public. Though only 5% of requests were made by criminals, politicians, and public figures, the content removed was what sparked the most fear.[36] In particular, one request for data removal was from a British doctor requesting to have 50 links removed on past botched medical procedures. Google agreed to remove three search results containing his personal information.[36] The public voiced their outrage stating that removing such information can be used for manipulation and could lead to innocent people making uninformed decisions. Google responded to the public outrage by saying that when removing content they consider both the right of the individual and public interest.[36]

The European Union has been pushing for the delinkings requested by EU citizens to be implemented by Google not just in European versions of Google (as in google.co.uk, google.fr, etc.), but on google.com and other international subdomains. Regulators want delinkings to be implemented so that the law cannot be circumvented in any way. Google has refused the French Data Protection Agency's demand to apply the right internationally.[37] Due in part to their refusal to comply with the recommendation of the privacy regulating board Google has become the subject of a four-year-long antitrust investigation by the European Commission.[38] In September 2015, the French Data Protection Agency dismissed Google's appeal.[39]

As of September 2015, the most delinked site is www.facebook.com. Three of Google's own sites, groups.google.com, plus.google.com and www.youtube.com are among the ten most delinked sites.[31] In addition to Google, Yahoo and Bing have also put up forms for making delinking requests.

Spain

In May 2014, the European Court of Justice ruled against Google in Costeja, a case brought by a Spanish man, Mario Costeja González, who requested the removal of a link to a digitized 1998 article in La Vanguardia newspaper about an auction for his foreclosed home, for a debt that he had subsequently paid.[40] He initially attempted to have the article removed by complaining to the Spanish Agency of data protection, which rejected the claim on the grounds that it was lawful and accurate, but accepted a complaint against Google and asked Google to remove the results.[41] Google sued in the Spanish Audiencia Nacional (National High Court) which referred a series of questions to the European Court of Justice.[42] The court ruled in Costeja that search engines are responsible for the content they point to and thus, Google was required to comply with EU data privacy laws.[43][44][45] On its first day of compliance only (May 30, 2014), Google received 12,000 requests to have personal details removed from its search engine.[46]

Germany

On October 27, 2009, lawyers for Wolfgang Werlé who—together with Manfred Lauber—was convicted for murdering Walter Sedlmayr sent the Wikimedia Foundation a cease and desist letter requesting that Werlé's name be removed from the English language Wikipedia article Walter Sedlmayr, citing a 1973 Federal Constitutional Court decision that allows the suppression of a criminal's name in news accounts once he is released from custody.[47][48][49] Previously, Alexander H. Stopp, attorney for Werlé and Lauber, had won a default judgment in German court, on behalf of Lauber, against the Wikimedia Foundation.[47] According to the Electronic Frontier Foundation, Werlé's lawyers also challenged an Internet service provider in Austria which published the names of the convicted killers.[50]

Wikimedia is based in the United States, where the First Amendment protects freedom of speech and freedom of the press, under which the articles on Wikipedia would fall. In Germany, the law seeks to protect the name and likenesses of private persons from unwanted publicity.[51] On January 18, 2008, a court in Hamburg supported the personality rights of Werlé, which under German law includes removing his name from archive coverage of the case.[52]

On November 12, 2009, The New York Times reported that Wolfgang Werlé had a case pending against the Wikimedia Foundation in a German court. The editors of the German-language Wikipedia article about Sedlmayr removed the names of the murderers,[47] which have since then been restored to the article. The Guardian observed that the lawsuit has led to the Streisand effect, an upsurge in publicity for the case resulting from the legal action.[53]

On December 15, 2009, the German Federal Court of Justice (Bundesgerichtshof) in Karlsruhe ruled that German websites do not have to check their archives in order to provide permanent protection of personality rights for convicted criminals. The case occurred after the names of the brothers were found on the website of Deutschlandradio, in an archive article dating from July 2000.[54] The presiding judge Gregor Galke stated "This is not a blank check", and pointed out that the right to rehabilitation of offenders had been taken into consideration.[55][56]

Argentina

Argentina has seen law suits by celebrities against Google and Yahoo! in which the plaintiffs demand the removal of certain search results, and require removal of links to photographs.[57] One case, brought by artist Virginia da Cunha, involved photographs which had originally been taken with her permission and uploaded with her permission, however she alleged that the search results improperly associated her photographs with pornography.[58] De Cunha's case achieved initial success resulting in Argentine search engines not showing images of the particular celebrity, however this decision is on appeal.[59]

United States

Consideration of the right to be forgotten can be seen in US case law, specifically in Melvin v. Reid, and in Sidis v. FR Publishing Corp.[60]

In Melvin v. Reid (1931), an ex-prostitute was charged with murder and then acquitted; she subsequently tried to assume a quiet and anonymous place in society. However, the 1925 film The Red Kimono revealed her history, and she sued the producer.[61][62] The court reasoned that "any person living a life of rectitude has that right to happiness which includes a freedom from unnecessary attacks on his character, social standing or reputation."[63]

However, in Sidis v. FR Publishing Corp. the plaintiff, William James Sidis, was a former child prodigy who wished to spend his adult life quietly, without recognition; however, this was disrupted by an article in The New Yorker.[64] The court held here that there were limits to the right to control one's life and facts about oneself, and held that there is social value in published facts, and that a person cannot ignore their celebrity status merely because they want to.[64]

There is opposition to further recognition of the right to be forgotten in the United States as commentators argue that it will contravene the right to freedom of speech and freedom of expression, or will constitute censorship, thus potentially breaching peoples' constitutionally protected right to freedom of expression in the United States Constitution.[65] These criticisms are consistent with the proposal that the only information that can be removed by user's request is content that they themselves uploaded.[65][66]

In a June 2014 opinion piece in Forbes, columnist Joseph Steinberg noted that "many privacy protections that Americans believe that they enjoy – even some guaranteed by law – have, in fact, been eroded or even obliterated by technological advances." Steinberg, in explaining the need for legislation guaranteeing the "right to be forgotten", noted that existing laws that require adverse information to be removed from credit reports after a period of time, and that allow the sealing or expunging of criminals records, are effectively undermined by the ability of prospective lenders or employers to forever find the removed information in a matter of seconds by doing a Google search.[67]

On March 11, 2015, Intelligence Squared US, an organization that stages Oxford-Style debates, held an event centered on the question, "Should the U.S. adopt the 'Right to be Forgotten' online?" The side against the motion won with a 56% majority of the voting audience.[68]

While opinions among experts are divided in the U.S., one survey indicated that 9 in 10 Americans want some form of the right to be forgotten.[69] The consumer rights organization Consumer Watchdog has filed a complaint with the Federal Trade Commission for Americans to obtain the right as well.[70]

India

In April 2016, the Delhi High Court began to examine the issue after a Delhi banker requested to have his personal details removed from search results following a marital dispute.[71] In this case, due to the dispute being settled, the banker’s request is valid.[71] The High Court has asked for a reply from Google and other search engine companies by September 19, upon which the court will continue to investigate the issue.[72]

South Korea

In May 2016, South Korea’s Korea Communications Commission (KCC) announced citizens will be able to request search engines and website administrators to restrict their own postings from being publicly accessible.[73] The KCC released “Guidelines on the Right to Request Access Restrictions on Personal Internet Postings”, which will take effect in June 2016, which will not apply to third party contents.[73] To the extent that the right to be forgotten concerns a data subject's right to limit the searchability of third party postings about him/her, the Guideline does not constitute a right to be forgotten.[74] Also, as to the right to withdraw one's own posting, critics have noted that people have been able to delete their own postings before the Guideline as long as they have retained their login credentials, and that people who have misplaced their login credentials were permitted to retrieve or receive new ones.[75] The only services significantly affected by the Guideline are Wiki-type services where people's contributions make logical sense only in response to or in conjunction with one another's conributions and therefore the postings are made permanent part of the mass-created content, but KCC made sure that the Guideline applies to these services only when the posting identifies the authors.[76]

China

In May 2016, Chinese courts in Beijing determined citizens do not have the right to be forgotten when a judge ruled in favor of Baidu in a lawsuit over removing search results.[77] It was the first of such cases to be heard in Chinese court.[77] In the suit, Ren Jiayu sued Chinese search engine Baidu over search results that associated him with a previous employer, Wuxi Taoshi Biotechnology.[77] Ren argued that by posting the search results, Baidu had infringed upon his right of name and right of reputation, both protected under Chinese law.[77] Because of these protections, Ren believed he had a right to be forgotten by removing these search results.[77] The court ruled against Ren, claiming his name is a collection of common characters and as a result the search results were derived from relevant words.[77]

Connection to International Relations

The regulatory differences in the protection of personal data between countries has real impact on international relations. The right to be forgotten, specifically, is a matter of EU-US relations when applied to cross-border data flow, as it raises questions about territorial sovereignty. The structure of the Westphalian international system assumes that the reach of a country's jurisdiction is limited to its geographic territory.[78] However, online interactions are independent of geographic location and present across multiple locations, rendering the traditional concept of territorial sovereignty moot.[78] Therefore, the EU and the United States are forced to confront their regulatory differences and negotiate on a set of regulations that apply to all foreign companies processing and handling data of European citizens and residents.[78]

The regulatory differences on the right to be forgotten along with numerous other data protection rights have shaped discussions and negotiations on trans-Atlantic data privacy regulations. A case in point is the EU and the United States' endeavors to develop the Safe Harbor agreement, a data transfer pact that enables the transfer of data between the EU and US companies in a manner consistent with the EU's data protection schemes.[79] Article 25 of the Data Protection Directive articulates that cross-border transfer of data can take place only if the "third country in question ensures an adequate level of protection," meaning that the country meets the EU's minimum standards of data protection.[79] The standards include, among many provisions, a component that protects the right to "opt out" of further processing or transmission of personal data, under the assumption that data may not be further processed in ways inconsistent with the intent for which they were collected.[79] Given the inconsistencies between the EU and the United States on numerous digital privacy regulations, including the right to be forgotten, Article 25 poses a threat to trans-Atlantic data flows. Therefore, the EU and the United States entered into negotiations to mediate the differences through the Safe Harbor agreement, which as a result of debate and discussion between the two parties, requires companies to provide individuals with the choice or opportunity to "opt out" and afford other protections.[79]

Draft European Data Protection Regulation

The 2012 draft European Data Protection Regulation Article 17 details the "right to be forgotten and to erasure".[80] Under Article 17 individuals to whom the data appertains are granted the right to "obtain from the controller the erasure of personal data relating to them and the abstention from further dissemination of such data, especially in relation to personal data which are made available by the data subject while he or she was a child or where the data is no longer necessary for the purpose it was collected for, the subject withdraws consent, the storage period has expired, the data subject objects to the processing of personal data or the processing of data does not comply with other regulation".[80]

The EU defines "data controllers" as "people or bodies that collect and manage personal data".[81] The EU General Data Protection Regulation requires data controllers who have been informed that an individual has requested the deletion of any links to or copies of information must "take all reasonable steps, including technical measures, in relation to data for the publication of which the controller is responsible, to inform third parties which are processing such data, that a data subject requests them to erase any links to, or copy or replication of that personal data. Where the controller has authorized a third party publication of personal data, the controller shall be considered responsible for that publication".[80] In the situation that a data controller does not take all reasonable steps then they will be fined heavily.[82]

The European Parliament was once "expected to adopt the proposals in first reading in the April 2013 Plenary session".[83] The right to be forgotten was replaced by a more limited right to erasure in the version of the GDPR adopted by the European Parliament in March 2014.[84][85] Article 17 provides that the data subject has the right to request erasure of personal data related to him on any one of a number of grounds including non-compliance with article 6.1 (lawfulness) that includes a case (f) where the legitimate interests of the controller is overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (see also Costeja).[86][87]

The European Union is a highly influential group of states, and this movement towards the right to be forgotten in the EU is a step towards its global recognition as a right. To support this, in 2012 the Obama Administration released a "Privacy Bill of Rights" to protect consumers online, and while this is not quite the strength of the EU law, it is a step towards recognition of the right to be forgotten.[88]

Criticism

Major criticisms stem from the idea that the right to be forgotten would restrict the right to freedom of speech.[89][90][91] Many nations, and the United States in particular (with the First Amendment to the United States Constitution), have very strong domestic freedom of speech law, which would be challenging to reconcile with the right to be forgotten.[92] Some academics see that only a limited form of the right to be forgotten would be reconcilable with US constitutional law; the right of an individual to delete data that he or she has personally submitted.[65][66][93] In this limited form of the right individuals could not have material removed that has been uploaded by others, as demanding the removal of information could constitute censorship and a reduction in the freedom of expression in many countries.[94] Sandra Coliver of the Open Society Justice Initiative argues that not all rights must be compatible and this conflict between the two rights is not detrimental to the survival of either.[95]

The Proposed Data Protection Regulation is written broadly and this has caused concern.[4] It has attracted criticism that its enactment would require data controlling companies to go to great lengths to identify third parties with the information and remove it.[96] The Proposed Regulation has also attracted criticism due to the fact that this could produce a censoring effect in that companies, such as Facebook or Google, will wish to not be fined under the act, and will therefore be likely to delete wholesale information rather than facing the fine, which could produce a "serious chilling effect."[96] In addition to this, there are concerns about the requirement to take down information that others have posted about an individual; the definition of personal data in Article 4(2) includes "any information relating to" the individual.[97] This, critics have claimed, would require companies to take down any information relating to an individual, regardless of its source, which would amount to censorship, and result in the big data companies eradicating a lot of data to comply with this.[98] Such removal can impact the accuracy and ability of businesses and individuals to carry out business intelligence, particularly due diligence to comply with antibribery, anticorruption, and know your customer laws.[99] The right to be forgotten was invoked to remove from Google searches 120 reports about company directors published by Dato Capital, a Spanish company which compiles such reports about private company directors, consisting entirely of information they are required by law to disclose;[99][100] Fortune magazine examined the 64 reports relating to UK directorships, finding that in 27 (42%) the director was the only person named, in the remaining only the director and co-directors were named, and 23 (36%) involve directorships started since 2012.[100]

Other criticism revolves around the principle of accountability.[101]

There are concerns that the Proposed Data Protection Act will result in Google and other Internet search engines not producing neutral search results, but rather producing biased and patchy results, and compromising the integrity of Internet-based information.[96] To balance out this criticism, the Proposed Data Protection Regulation includes an exception "for the processing of personal data carried out solely for journalistic purposes or the purpose of artistic or literary expression in order to reconcile the right to the protection of personal data with the rules governing freedom of expression."[80] Article 80 upholds freedom of speech, and while not lessening obligations on data providers and social media sites, nevertheless due to the wide meaning of "journalistic purposes" allows more autonomy and reduces the amount of information that is necessary to be removed.[3]:9 When Google agreed to implement the ruling, European Commission Vice-President Viviane Reding said, "The Court also made clear that journalistic work must not be touched; it is to be protected."[102] However, Google was criticized for taking down (under the Costeja precedent) a BBC News blog post about Stan O'Neal by economics editor Robert Peston (eventually, Peston reported that his blog post has remained findable in Google after all).[103][104] Despite these criticisms and Google’s action, the company’s CEO, Larry Page worries that the ruling will be “used by other governments that aren’t as forward and progressive as Europe to do bad things", though has since distanced himself from that position.[105] For example, pianist Dejan Lazic cited the Right To Be Forgotten in trying to remove a negative review about his performance from The Washington Post. He claimed that the critique was "defamatory, mean-spirited, opionated, offensive and simply irrelevant for the arts".[106][107] and the St. Lawrence parish of the Roman Catholic church in Kutno, Poland asked Google to remove the Polish Wikipedia page about it,[108] without any allegations mentioned therein as of that date.

Index on Censorship claimed that the Costeja ruling "allows individuals to complain to search engines about information they do not like with no legal oversight. This is akin to marching into a library and forcing it to pulp books. Although the ruling is intended for private individuals it opens the door to anyone who wants to whitewash their personal history....The Court's decision is a retrograde move that misunderstands the role and responsibility of search engines and the wider internet. It should send chills down the spine of everyone in the European Union who believes in the crucial importance of free expression and freedom of information."[109]

In 2014, the Gerry Hutch page on the English Wikipedia was among the first Wikipedia pages to be removed by several search engines' query results in the European Union.[110][111] The Daily Telegraph said, on 6 Aug 2014, that Wikipedia co-founder Jimmy Wales "described the EU's Right to be Forgotten as deeply immoral, as the organisation that operates the online encyclopedia warned the ruling will result in an internet riddled with memory holes".[112] Other commentators have disagreed with Wales, pointing to problems such as Google including links to revenge porn sites in its search results,[6][113] and have accused Google of orchestrating a publicity campaign to escape the burdensome obligation to comply with the law.[27][29] Julia Powles, a law and technology researcher at the University of Cambridge, made a rebuttal to Wales' and the Wikimedia Foundation concerns in an editorial published by Guardian, opining that "There is a public sphere of memory and truth, and there is a private one...Without the freedom to be private, we have precious little freedom at all."[114]

In response to the criticism, the EU has released a factsheet to address what it considers myths about the right to be forgotten.[115]

Research

Conceptual overview of Oblivion

Security researchers from CISPA, Saarland University[116] and the University of Auckland[117] proposed a framework, called Oblivion,[118] to support the automation of the right to be forgotten in a scalable, provable and privacy-preserving manner. Oblivion is a program that helps to ”automate” the process of attempting to verify someone’s personal information that could be found in a Google search result.”[119] Google gets many take-down requests at a high volume, so Oblivion is able to help with this problem. Researchers and authors behind Oblivion say that “it is essential to develop techniques that at least partly automate this process and are scalable to internet size.”[119] Oblivion helps the humans that operate the forms at Google ensure that ill-intending users cannot “blacklist links to internet sources that do not affect them.”[119] For example, tests have proven that Oblivion handles requests at a rate of 278 per second.[119] The software allows Google, the government, and the user to work together to get content removed quickly and for just cause. To ensure that the program works quickly, is secure for its users and is impervious to fake take-down requests, Oblivion uses a three-part system.

In the first part, Oblivion requires a user to submit identification about themselves – not limited to “name, age, and nationality.”[119] Oblivion then enables a user to automatically find and tag his or her disseminated personal information using natural language processing and image recognition techniques and file a request in a privacy-preserving manner. Oblivion will scan the article for attributes that match information that has been submitted by the user. Second, Oblivion provides indexing systems with an automated and provable eligibility mechanism, asserting that the author of a request is indeed affected by an online resource. The author of a request is then issued an “ownership token”[119] that confirms the articles they submitted for evaluation include sensitive personal information. The automated eligibility proof ensures censorship-resistance so that only legitimately affected individuals can request the removal of corresponding links from search results. In the third and last phase, this “ownership token” is submitted to Google, accompanied by the user’s concerns as to what information should be deleted.[119] Google’s staff is then allowed to decide for themselves if they want to delete this information or not - but thanks to Oblivion, they know that the information in question is valid.

Researchers with Oblivion, however, have noted that it comes with some limitations. The software is lacking a human element, therefore it cannot decide on its own “whether or not a piece of information is public interest and should therefore not be removed from Google search results.”[119] Researchers have conducted comprehensive evaluations, showing that Oblivion is suitable for large-scale deployment once it is fine-tuned.

See also

References

  1. ↑ Sreeharsha, Vinod. "Google and Yahoo Win Appeal in Argentine Case". New York Times.
  2. ↑ "El derecho al olvido en Internet se deberá aplicar también en la Capital Federal". lanacion.com.ar.
  3. 1 2 3 Mantelero, Alessandro (2013). "The EU Proposal for a General Data Protection Regulation and the roots of the 'right to be forgotten'". Computer Law & Security Review. 29 (3): 229–235. doi:10.1016/j.clsr.2013.03.010.
  4. 1 2 Fleischer, Peter (2011-03-09). "Peter Fleischer: Privacy...?: Foggy thinking about the Right to Oblivion". Peterfleischer.blogspot.co.nz. Retrieved 2014-08-09.
  5. ↑ Mayes, Tessa (2014-05-21). "We have no right to be forgotten online". theguardian.com. Retrieved 2014-08-09.
  6. 1 2 3 4 Arthur, Charles (4 July 2014). "What is Google deleting under the 'right to be forgotten' - and why? What if there were a page on a 'revenge porn' site about you - would you want to use Google's 'right to be forgotten' to get it taken out of search?". The Guardian. Retrieved 11 August 2014.
  7. 1 2 Charles Arthur. "Explaining the 'right to be forgotten' – the newest cultural shibboleth". the Guardian.
  8. ↑ Charte sur la publicité ciblée et la protection des internautes [Code of Good Practice on Targeted Advertising and the Protection of Internet Users] (PDF) (in French), Secrétariat d’Etat chargé de la Prospective et du Développement de l’économie numérique, 2010
  9. ↑ Directive 95/46/EC on the protection of individuals with regard to the processing of personal data and on the free movement of such data. EU Directive 1995.
  10. ↑ Mitrou, Lilian; Karyda, Maria (2012). "EU's Data Protection Reform and the right to be forgotten—A legal response to a technological challenge?". 5th International Conference of Information Law and Ethics: 29–30. SSRN 2165245Freely accessible.
  11. 1 2 3 Weber, Rolf H. "The right to be forgotten." More than a Pandora's Box 2 (2011)
  12. ↑ Pino, G. (2000). “The right to personal identity in Italian private law: Constitutional interpretation and judge-made rights”. In: M. Van Hoecke; F. Ost (eds.). The harmonization of private law in Europe (pp. 225-237). Oxford: Hart Publishing. p. 237.
  13. ↑ Hill, Kashmir (July 6, 2011). "Revenge Porn With A Facebook Twist". Forbes. Retrieved 2014-08-09.
  14. ↑ Crovitz, L. Gordon (2010-11-15). "Crovitz: Forget any 'Right to Be Forgotten' - WSJ". Online.wsj.com. Retrieved 2014-08-09.
  15. ↑ (September 23, 2015)Expert: Google Can Not Escape French Law on Right to Delist. Yibada.com
  16. ↑ European Commission. Proposal for a Regulation of the European Parliament and of the Council on the Protection of Individuals with Regard to the Processing of Personal Data and On the Free Movement of Such Data (General Data Protection Regulation). 2012/0011 (COD). Article 17. Right to be forgotten and To Erasure
  17. ↑ https://support.google.com/legal/contact/lr_eudpa?product=websearch
  18. ↑ "How Google's New "Right To Be Forgotten" Form Works: An Explainer". Search Engine Land. 30 May 2014.
  19. ↑ Brindle, Beth. "How can Google forget you?". How Stuff Works. Retrieved 22 May 2015.
  20. 1 2 Powles, Julia; Chaparro, Enrique. "How Google determined our right to be forgotten". The Guardian. Retrieved 22 May 2015.
  21. ↑ Kiss, Jemima. "Dear Google: open letter from 80 academics on 'right to be forgotten'". The Guardian.
  22. ↑ "Search Removal Request Under Data Protection Law in Europe". Google. Retrieved 22 May 2015.
  23. 1 2 3 4 Sullivan, Danny (30 May 2014). "How Google's New 'Right to be Forgotten' Form Works: An Explainer". Search Engine Land. Retrieved 22 May 2015.
  24. ↑ Arthur, Charles. "Google removing 'right to be forgotten' search links in Europe". The Guardian.
  25. ↑ Martin, Alexander J. "'Right to be forgotten' festers as ICO and Google come to blows". The Register.
  26. ↑ Dean, James. "Google could face legal action over 'right to be forgotten' rejections". The Times.
  27. 1 2 3 Orlowski, Andrew (4 July 2014). "Google de-listing of BBC article 'broke UK and Euro public interest laws' - So WHY do it?". www.theregister.co.uk. The Register. Retrieved 4 July 2014.
  28. ↑ David Drummond. "We need to talk about the right to be forgotten". the Guardian.
  29. 1 2 Orlowski, Andrew (17 June 2014). "Slippery Google greases up, aims to squirm out of EU privacy grasp. Will the huge advertising firm manage to spin its way free of the law?". www.theregister.co.uk. The Register. Retrieved 11 August 2014.
  30. ↑ Gibbs, Samuel. "Google ordered to remove links to 'right to be forgotten' removal stories". The Guardian.
  31. 1 2 "Transparency Report. European privacy requests for search removals". Google. Retrieved 10 September 2015.
  32. ↑ Powles, Julia. "Why the BBC is wrong to republish 'right to be forgotten' links". The Guardian.
  33. ↑ Boiten, Eerke. "Privacy watchdog takes first step against those undermining right to be forgotten". The Conversation.
  34. 1 2 3 "Oblivion handles hundreds of right to be forgotten demands in SECONDS". Mail Online. Retrieved 2016-02-29.
  35. ↑ Tippmann, Sylvia; Powles, Julia. "Google accidentally reveals data on 'right to be forgotten' requests". The Guardian.
  36. 1 2 3 Tippmann, Sylvia; Powles, Julia (2015-07-14). "Google accidentally reveals data on 'right to be forgotten' requests". The Guardian. ISSN 0261-3077. Retrieved 2016-02-29.
  37. ↑ Hern, Alex. "Google says non to French demand to expand right to be forgotten worldwide". The Guardian.
  38. ↑ "EU wants 'right to be forgotten' applied globally". CNET. CBS Interactive.
  39. ↑ Gibbs, Samuel (21 September 2015). "French data regulator rejects Google's right-to-be-forgotten appeal". The Guardian. Retrieved 23 September 2015.
  40. ↑ Julia Powles (15 May 2014). "What we can salvage from 'right to be forgotten' ruling". Wired.co.uk. Retrieved 16 May 2014.
  41. ↑ Solon, Olivia (13 May 2014). "People have the right to be forgotten, rules EU court". Wired.co.uk. Conde Nast Digital. Retrieved 13 May 2014.
  42. ↑ European Court of Justice (13 May 2014). "Judgment of the Court of Justice in Case C-131/12: An internet search engine operator is responsible for the processing that it carries out of personal data which appear on web pages published by third parties" (Press release). Luxembourg. Retrieved 13 May 2014.
  43. ↑ "EU court backs 'right to be forgotten' in Google case". BBC News. 13 May 2014. Retrieved 13 May 2014.
  44. ↑ "EU court rules Google must tweak search results in test of 'right to be forgotten'". CBS News. 13 May 2014. Retrieved 13 May 2014.
  45. ↑ David Streitfeld (13 May 2014). "European Court Lets Users Erase Records on Web". New York Times. Retrieved 14 August 2014.
  46. ↑ "Removal of Google personal information could become work intensive". Europe News.Net. Retrieved 2 June 2014.
  47. 1 2 3 Schwartz, John (November 12, 2009). "Two German Killers Demanding Anonymity Sue Wikipedia's Parent". New York Times. Retrieved 2009-11-13. Wolfgang Werlé and Manfred Lauber became infamous for killing a German actor in 1990. Now they are suing to force Wikipedia to forget them.
  48. ↑ Kravets, David (November 11, 2009). "Convicted Murderer Sues Wikipedia, Demands Removal of His Name". Wired News. Wikipedia is under a censorship attack by a convicted murderer who is invoking Germany's privacy laws in a bid to remove references to his killing of a Bavarian actor in 1990.
  49. ↑ "Cease and Desist letter" (PDF), Wired News, 2009
  50. ↑ "Wikipedia sued for publishing convicted murderer's name". The Register.
  51. ↑ Jennifer Granick (10 November 2009). "Convicted Murderer To Wikipedia: Shhh!". Electronic Frontier Foundation. Who killed Sedlmayr? Its [sic] a matter of public record, but if one of the men and his German law firm gets their way, Wikipedia (and EFF) will not be allowed to tell you. A few days ago, the online encyclopedia received a cease and desist letter from one of the convicts—represented by the aptly named German law firm Stopp and Stopp—demanding that the perpetrator's name be taken off of the Sedlmayr article page.
  52. ↑ "Abwägung bei einem Unterlassungsanspruch zwischen dem Recht auf freie Meinungsäußerung und dem Persönlichkeitsrecht (Resozialisierung) bei elektronischen Pressearchiven einen Mordfall betreffend" (in German). Hamburger Justiz. 18 January 2008. Retrieved January 13, 2012.
  53. ↑ Arthur, Charles (November 13, 2009). "Wikipedia sued by German killers in privacy claim". The Guardian. London. Retrieved 2009-11-15.
  54. ↑ "Vor 10 Jahren – Walter Sedlmayr ermordet". Deutschlandradio (in German). 14 July 2000. Retrieved 2009-12-17.
  55. ↑ "Namen der Sedlmayr-Mörder bleiben online". Süddeutsche Zeitung. Retrieved 2009-12-15.
  56. ↑ "BGH-Urteil – Keine ständige Kontrolle von Online-Archiven" (in German). Focus. December 15, 2009. Retrieved 2012-01-13.
  57. ↑ "La Justicia Argentina Sobreseyó a Adriana Noreña, Directora General de Google". Infotechnology.com. 2012-09-21. Retrieved 2014-08-09.
  58. ↑ Carter, Edward L. "Argentina's Right to Be Forgotten." Emory International Law Review. 27 (2013): pg 23.
  59. ↑ "'Search engines not responsible for content'". BuenosAiresHerald.com. 2013-09-05. Retrieved 2014-08-09.
  60. ↑ Melvin v. Reid, 112 Cal.App. 285, 297 P. 91 (1931); Sidis v F-R Publishing Corporation 311 U.S. 711 61 S. Ct. 393 85 L. Ed. 462 1940 U.S.
  61. ↑ Melvin v. Reid, 112 Cal.App. 285, 297 P. 91 (1931)
  62. ↑ Friedman, Lawrence Meir (2007). "The Red Kimono [sic]: The Saga of Gabriel Darley Melvin". Guarding Life's Dark Secrets: Legal and Social Controls over Reputation, Propriety, and Privacy. Stanford University Press. pp. 217–225. ISBN 978-0-8047-5739-3.
  63. ↑ Melvin v. Reid, 112 Cal.App. 285, 297 P. 91 (1931) at 852-853
  64. 1 2 Sidis v F-R Publishing Corporation 311 U.S. 711 61 S. Ct. 393 85 L. Ed. 462 1940 U.S.
  65. 1 2 3 Hendel, John (2012-01-25). "Why Journalists Shouldn't Fear Europe's 'Right to be Forgotten'". The Atlantic. Retrieved 2014-08-09.
  66. 1 2 Walker, Robert K. "The Right to be forgotten." 64 Hastings Law Journal 257, 2012. Pg 257.
  67. ↑ Joseph Steinberg (2014-06-02). "Your Privacy Is Now At Risk From Search Engines -- Even If The Law Says Otherwise". Forbes. Retrieved 2014-06-03.
  68. ↑ "The U.S. Should Adopt the 'Right to Be Forgotten' Online". intelligencesquaredus.org.
  69. ↑ Coffee, Patrick. "Hey Google: 9 in 10 Americans Want the 'Right to Be Forgotten'". Adweek.
  70. ↑ Eng, James. "Consumer Watchdog: Google Should Extend 'Right To Be Forgotten' to U.S.". NBC News.
  71. 1 2 "Delhi banker seeks 'right to be forgotten' online - Times of India". The Times of India. Retrieved 2016-05-23.
  72. ↑ "What is the Right to be Forgotten and how it could affect you?". CatchNews.com. Retrieved 2016-05-23.
  73. 1 2 "South Korea Releases Right to Be Forgotten Guidance". www.bna.com. Retrieved 2016-05-23.
  74. ↑ "방통위, '잊혀질 권리 가이드라인' 제정". 2016-03-25. Retrieved 2016-09-18.
  75. ↑ 심재석 (2016-04-01). "[심재석의 입장] 방통위의 이상한 '잊혀질 권리 가이드라인'". BYLINE NETWORK. Retrieved 2016-09-18.
  76. ↑ "'네이버 지식iN' 질문 글, 개인정보 남아 있을 때만 '잊혀질 권리' 적용". Retrieved 2016-09-18.
  77. 1 2 3 4 5 6 Tone, Sixth (2016-05-05). "Chinese Have No Right to Be Forgotten, Court Rules". Sixth Tone. Retrieved 2016-05-23.
  78. 1 2 3 Stephen J. Kobrin (2004). Safe harbours are hard to find: the trans-Atlantic data privacy dispute, territorial jurisdiction and global governance. Review of International Studies, 30, pp 111-131. doi:10.1017/S0260210504005856.
  79. 1 2 3 4 The Council: Common Position (EC) no. 95
  80. 1 2 3 4 Proposal for a Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (PDF), European Commission, 2012, Article 17 "Right to be forgotten and to erasure"
  81. ↑ "Who can collect and process personal data? - Justice". Ec.europa.eu. 2014-06-26. Retrieved 2014-08-09.
  82. ↑ "European Parliament gives overwhelming backing to new EU data protection laws". Out-law.com. March 12, 2014. Retrieved 2014-08-09.
  83. ↑ "EUROPA - Press Releases - Press release - Data Protection Day 2014: Full Speed on EU Data Protection Reform". Europa.eu. January 27, 2014. Retrieved 2014-08-09.
  84. ↑ Baldry, Tony; Hyams, Oliver. "The Right to Be Forgotten". 1 Essex Court.
  85. ↑ "European Parliament legislative resolution of 12 March 2014 on the proposal for a regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)". European Parliament.
  86. ↑ Powles, Julia (21 May 2014). "What did the media miss with the 'right to be forgotten' coverage?". The Guardian.
  87. ↑ "Factsheet on the 'Right to be Forgotten' ruling (case C-131/12)" (PDF). European Commission.
  88. ↑ "Fact Sheet: Plan to Protect Privacy in the Internet Age by Adopting a Consumer Privacy Bill of Rights | The White House". Whitehouse.gov. 2012-02-23. Retrieved 2014-08-09.
  89. ↑ Volokh, Eugene (2000). "Freedom of Speech, Information Privacy, and the Troubling Implications of a Right to Stop People from Speaking about You". Stanford Law Review. 52 (5): 1049–1124. doi:10.2307/1229510.
  90. ↑ Solove, Daniel J. (2003). "The Virtues of Knowing Less: Justifying Privacy Protections against Disclosure". Duke Law Journal. 53 (3): 967–1065 [p. 976]. JSTOR 1373222.
  91. ↑ Mayes, Tessa (18 March 2011). "We have no right to be forgotten online". The Guardian.
  92. ↑ Whitman, James Q. (2004). "The Two Western Cultures of Privacy: Dignity Versus Liberty". Yale Law Journal. 113 (6): 1151–1221 [p. 1161–2]. JSTOR 4135723.
  93. ↑ Ryan, Timothy (2011-05-02). "The Right To Be Forgotten: Questioning The Nature Of Online Privacy". PSFK. Retrieved 2014-08-09.
  94. ↑ Bernal, Paul Alexander (2011). "A right to delete?". European Journal of Law and Technology. 2 (2).
  95. ↑ Coliver, Sandra. Editor. “Striking a Balance. Hate Speech, Freedom of Expression and Non-Discrimination.” Article 19. (1992) International Centre against Censorship. Human Rights Centre. University of Essex.
  96. 1 2 3 Rosen, Jeffrey (February 13, 2012). "The Right to Be Forgotten". Stanford Law Review. Retrieved 2014-08-09.
  97. ↑ "Document 52012PC0011 — Proposal for a Regulation of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)". Eur-lex.europa.eu. 3.4.1. Chapter I - General Provisions, Article 4. Retrieved 2014-08-09.
  98. ↑ "Privacy laws: Private data, public rules". The Economist. 2012-01-28. Retrieved 2014-08-09.
  99. 1 2 Wright, Jason (19 January 2015). "Some Things Should Not Be 'Forgotten'". The Wall Street Journal. Retrieved 16 February 2015. (subscription required (help)). Consider the necessity for accurate business intelligence. Antibribery laws and “know your customer” regulations often require companies and individuals to do due-diligence checks on entities they want to do business with...The requirement for proper due diligence instills confidence, helps to prevent fraud and corruption, and informs businesses about potential risks...Several cases already illustrate how the “right to be forgotten” impedes business intelligence. Fortune magazine reported last year on Dato Capital, a company that compiles reports on the directors of private companies based in the United Kingdom and Spain...Dato’s reports contained information that companies and directors are often required by law to disclose publicly, such as debt and financial history. Bleaching this from search results has made it more difficult for potential investors and business partners to understand the profile and history of individuals with whom they were considering doing business.
  100. 1 2 Parloff, Roger (21 October 2014). "Company directors are deep-sixing Google links citing 'right to be forgotten'". Fortune. Retrieved 17 February 2015.
  101. ↑ Zittrain, Jonathan (13 July 2014). "The right to be forgotten ruling leaves nagging doubts". Financial Times. Retrieved 19 July 2015.
  102. ↑ "'Right to be forgotten' and online search engines ruling" (Press release). European Commission. 2014-06-03. Retrieved 2014-07-03.
  103. ↑ Peston, Robert (2 July 2014). "Why has Google cast me into oblivion?". BBC News. Retrieved 2014-07-03.
  104. ↑ Scheer, Peter Z. (July 2, 2014). "The 'Right to Be Forgotten' Is Already Messing Up Journalism". Truthdig. Retrieved 2014-07-03.
  105. ↑ Samuel Gibbs. "Google hauled in by Europe over 'right to be forgotten' reaction". the Guardian.
  106. ↑ "Musician attempts use EU Right To Be Forgotten to hide a bad review". Retrieved 11 November 2014.
  107. ↑ Dewey, Caitlin. "Pianist asks The Washington Post to remove a concert review under the E.U.'s 'right to be forgotten' ruling". The Washington Post. Archived from the original on 13 November 2014.
  108. ↑ Google. "Notice of removal from Google Search" (PDF). WikiMedia Foundation. Retrieved 23 November 2014.
  109. ↑ "Index blasts EU court ruling on "right to be forgotten"". Index on Censorship. 2014-05-13. Retrieved 2014-08-09.
  110. ↑ Chubb, Karla. "Request made to remove Gerry 'The Monk' Hutch from EU search results". Newstalk. Retrieved 6 August 2014.
  111. ↑ Curties, Sophie; Philipson, Alice (6 August 2014). "Wikipedia founder: EU's Right to be Forgotten is 'deeply immoral'". The Daily Telegraph. Retrieved 6 August 2014.
  112. ↑ "Wikipedia founder: EU's Right to be Forgotten is 'deeply immoral'". The Telegraph. 6 Aug 2014. Retrieved 7 August 2014.
  113. ↑ Edwards, Lilian (29 July 2014). "Revenge porn: why the right to be forgotten is the right remedy". The Guardian. Retrieved 11 August 2014.
  114. ↑ Powles, Julia (8 August 2014). "Jimmy Wales is wrong: we do have a personal right to be forgotten". The Guardian. Retrieved 11 August 2014.
  115. ↑ "Mythbuster: The Court of Justice of the EU and the "Right to be Forgotten"". European Commission's Directorate General for Justice and Consumers.
  116. ↑ "CISPA: The Center for IT-Security, Privacy, and Accountability".
  117. ↑ "The University of Auckland".
  118. ↑ Simeonovski, Milivoj; Bendun, Fabian; Asghar, Muhammad Rizwan; Backes, Michael; Marnau, Ninja; Druschel, Peter (2015). "Oblivion: Mitigating Privacy Leaks by Controlling the Discoverability of Online Information". arXiv:1506.06033Freely accessible.
  119. 1 2 3 4 5 6 7 8 "'Oblivion' Is the Software That Could Automate the 'Right to Be Forgotten'". Motherboard. Retrieved 2016-02-29.

Bibliography

Cases

Legislation

External links

This article is issued from Wikipedia - version of the 12/4/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.