LUXEMBOURG: The EU’s top court on Thursday dismissed a bid by an Austrian activist to bring a class action against Facebook for privacy breaches, although he can sue the US social media giant on a personal basis.
Max Schrems said he would now push ahead in an Austrian court with the individual case against Facebook’s Irish division for alleged rights violations including personal data.
Facebook welcomed the judgment and said it looked forward to “resolving” the case brought by Schrems, a campaigner who has previously brought down a landmark EU-US data sharing pact.
“Mr Schrems may bring an individual action in Austria against Facebook Ireland,” the Luxembourg-based European Court of Justice said in a statement.
“By contrast, as the assignee of other consumers’ claims, he cannot benefit from the consumer forum for the purposes of a collective action.”
Schrems had lodged legal cases in an Austrian court on behalf of himself and seven other users in Austria, Germany and India against Facebook in Ireland as a way of starting a class action suit.
Austria’s Supreme Court had referred the matter to the ECJ after Schrems’s lawsuit was first thrown out and then restored by the country’s courts.
Schrems still hailed it as a victory, tweeting “YAY” with a winking-smiley-face emoji.
YAY: @EUCourtPress decides: I can finally sue Facebook in Vienna over Privacy violations! However, it limits consumer rights to "contract partner" only, so no class action. Huge problem for Facebook anyways..
— Max Schrems (@maxschrems) January 25, 2018
“For three years Facebook has been fighting nail and toe against the Courts jurisdiction in Austria and lost. Now, we can finally go ahead with the case,” he said in a statement.
“Facebook will now have to explain to a neutral Court whether its business model is in line with stringent European privacy laws. This is a huge blow for them.
“Unfortunately the Court of Justice has not taken up the golden opportunity to finally establish collective redress options in Europe, but kicked the ball back to the legislator.”
Facebook had argued that people can only sue as individual consumers, not as groups.
“Today’s decision by the European Court of Justice supports the previous decisions of two courts that Mr. Schrems’s claims cannot proceed in Austrian courts as “class action” on behalf of other consumers,” a Facebook spokesperson said in a statement.
“We were pleased to have been able to present our case to the European Court of Justice and now look forward to resolving this matter.”
Schrems single-handedly brought down the EU’s former “Safe Harbour” data sharing arrangement in 2015 after he sued Facebook in Ireland over the transfer of personal information by Facebook from Europe to the United States.
The ECJ ruled the 16-year-old deal was illegal after Schrems cited US snooping practices exposed by former US intelligence contractor Edward Snowden.
Schrems is now suing Ireland’s data protection regulator over the issue in a separate case being considered by the ECJ.
While US lawmakers have expressed alarm at Facebook’s limited ability to know who is buying advertisements
Murdoch, who controls the Wall Street Journal as executive chairman of News, said in a statement
The General Data Protection Regulation (GDPR) is the biggest overhaul of personal data privacy rule