THE RIGHT TO BE FORGOTTEN: A STEP IN THE RIGHT DIRECTION FOR CYBERSPACE LAW AND POLICY.

• Author: Cook, Lyndsay

1. BACKGROUND AND IMPLEMENTATION

   In 2010, a Spanish citizen filed a complaint against Google Spain and Google Inc., arguing that an auction notice of his repossessed home on Google's search results violated his privacy rights because the repossession proceeding had been resolved long ago, and was no longer relevant. (1) Believing that the outdated content was causing damage to his reputation, the citizen argued Google should be required to remove it so that it would no longer show up in a search of his name. (2)

   The case was referred to a Court of Justice for the European Union ("EU") who was asked to decide whether an individual has the right to request that his or her personal data be removed from accessibility via a search engine ("the right to be forgotten"). (3) In a landmark decision, the EU court held that Internet search engines must remove personal information associated with an individual when the information is "inaccurate, inadequate, irrelevant or excessive." (4) Simply put, the new "right to be forgotten" provides a remedy for individuals seeking to have harmful or embarrassing details about themselves removed from the Internet, when certain criteria are met.

   In practice, the right to be forgotten should function in a fairly straightforward manner. Under the new law, an individual who wishes to have information erased can file a request for deletion with a particular search engine, such as Google. (5) Upon receipt, the search engine is required to assess the request for deletion on a case-by-case basis to determine whether removal is warranted. (6) In deciding whether to grant the request, the EU court explained that search engine operators should consider a variety of factors, primarily "accuracy, adequacy and relevance (including time passed) of the information, as well as the proportionality of the links in relation to the purposes of the data processing." (7) According to Google's transparency report, the search engine has received over 183,000 requests for removal since implementing the official request process in May 2014. (8) Out of the approximate 659,000 URLs Google has evaluated in connection with these requests, it has removed approximately 40.5 percent of the links. (9)

   The right to be forgotten represents a positive shift in cyberspace law and policy because it increases individuals' control over personal information, and restores the balance between free speech and privacy in the digital world. Further, when negative information no longer serves the public interest, the policy gives deserving individuals the right to "start over" by having the information deleted. Consequently, the United States should follow the lead of the European Union and adopt the policy for the following reasons; the right to be forgotten: (1) promotes privacy and autonomy; (2) provides much-needed remedy to victims of cyber harassment; and (3) prevents discriminatory hiring practices based upon irrelevant information.

2. BENEFITS OF THE RIGHT TO BE FORGOTTEN

   1. The Right to be Forgotten Promotes Privacy and Autonomy

      The right to autonomy means "the right to exert some modicum of control over one's electronic environment." (10) Similarly, the right to privacy involves a person's right to choose what information he or she wants to share with the public. (11) Without a doubt, the growth of the Internet and the modern search engine presents a challenge in terms protecting these rights, especially in countries like the United States. As privacy law in the U.S. has not adapted fast enough to address the growing concerns associated with modern technology, individuals' rights to privacy and autonomy are rapidly deteriorating.

      In today's digital world, keeping certain personal information private is nearly impossible. For example, a simple Google or Yahoo search of an individual's name will often reveal where the person lives, works, where they went to school, if the person is married, who their spouse is and whether they have children. Furthermore, if the individual is active on social media websites like Facebook, Twitter, and LinkedIn, a search may also uncover photos and comments shared via social media networks, unless the individual has taken intricate precautions to keep the information private.

      In many instances, easy access to others' personal information makes our lives easier. For instance, a person looking for a long lost friend or relative may be able to find the individual much more easily with the advent of the modern search engine. In addition, Internet searches allow us to "get to know" potential employers, co-workers, and blind dates prior to meeting them. In these situations, easy access to a stranger's personal information is not necessarily harmful. Still, there is a great deal of scenarios in which Internet users peruse the web for personal information to be used for an illegal or disturbing purpose, without the individual's knowledge or consent. (12)

      Despite the conveniences associated with the modern Internet search, the widespread dissemination of personal data comes with a hefty price and is vulnerable to abuse. (13) The storage of personal information on the Internet has virtually destroyed our ability to keep even the most basic personal information private. (14) Likewise, the widespread availability of personal data has reduced individuals' control over their electronic identities and environments. (15) A crucial component of autonomy functions as the "flip side of the freedom of speech, that is, the freedom not to speak. This freedom not to speak protects the right not to have information disclosed without consent or in a manner contrary to one's interests." (16) In cyberspace, the freedom not to speak could be as simple as one's choice not to have their photograph posted online. Most of us no longer have this choice; photos or other personal information may be posted online without our consent. Thus, the Internet has robbed individuals of both privacy and autonomy in a sense that we no longer have the choice to keep certain information private, nor do we have the freedom not to speak.

      In America, without the "Right to be Forgotten", citizens lack a recognized right to demand that invasive material be removed from the Internet. When the invasion of privacy involves nude photographs of a person uploaded to the Internet without consent, the effects can be devastating. (17) For young people who are more likely to experience severe emotional distress from cyber harassment, (18) the effects can be deadly. (19)

      Admittedly, the right to be forgotten surely does not solve all the problems of privacy and...