XX (the data subject) – Complaint Upheld (Italy, 2023)

Complaint Upheld
Garante per la protezione dei dati personali11 January 2023Italy
final
ePrivacy
Complaint Upheld

A former politician wanted Google to remove old articles about him, claiming they were no longer relevant. The Italian DPA agreed that some links should be removed, showing that people can sometimes have outdated personal information taken down from the web.

What happened

A former politician requested the removal of URLs linking to articles about his past political activities, arguing they were outdated.

Who was affected

The former politician whose past political activities were still accessible online through search results.

What the authority found

The Italian DPA upheld the complaint for some URLs, recognizing that the information was no longer relevant to the public interest.

Why this matters

This case emphasizes the right to be forgotten, allowing individuals to request the removal of outdated personal information. It signals to businesses the importance of balancing public interest with privacy rights.

GDPR Articles Cited

Art. 17(1)(c) GDPR
Art. 21(1) GDPR

Entities Involved

XX (the data subject)
Google LLC (the controller)
Full Legal Summary
Detailed

A former politician (the data subject) asked Google LLC (the controller) to remove a number of URLs associated with his name and which linked to articles containing information relating to his political commitment. As a matter of fact, he believed that considerable time passed and such disclosure of personal data was no longer in the public interest. On 5 May 2021, the data subject filed a complaint with the Italian DPA, requesting the controller to remove the content and alleging the damage suffered by his personal and professional reputation as a result of the long-standing online availability of such information. The data subject stressed that no legal action was undertaken against him because of the facts described in the publication and that his political career ended five years before the erasure request. The controller claimed that it failed to identify the name of the data subject on the page relating to one of the URLs concerned. As result, it only adopted manual measures to prevent the publication from appearing among the results associated with that name. Concerning the other URLs, the controller argued that it was not able to comply with the data subject's request, given that those were contents linked to the political role he played at the time of publication. More specifically, they related to a video where the data subject tried to persuade voters to vote for the party to which he belonged. The data subject made that video during his electoral campaign and deliberately published it for the purpose of public sharing. These circumstances, therefore, determined the existence of an interest of the public to have knowledge of it. Moreover, the controller argued that although the data subject did not currently hold political office, he nevertheless played a public role as a businessman. The DPA held that because the name of the data subject was not specified in the first URL link mentioned, there was no reason to take measures in this regard. However, wi

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Details

Decision Date

11 January 2023

Authority

Garante per la protezione dei dati personali

GDPRhub ID

gdprhub-5760

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0

Cite as: Cookie Fines. XX (the data subject) - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: