♾️follow  Marie-Anne Frison-Roche on LinkedIn

♾️subscribe to the Newsletter MAFR Regulation, Compliance, Law 

____

► Full Reference: M.-A. Frison-Roche,The role of the Judge in the deployment of Regulatory Law in Compliance Law, Working Paper, June 2023. 

____

🎤 this Working Paper has been elaborated to be the basis of the final speech in the colloque coorganised by the Conseil d'Etat (French Administrative Supreme Court) and the Cour de Cassation (French Judicial Supreme Court), De la Régulation à la Compliance: quel rôle pour le juge ?, the 2nd Juin 2023

____

📝 It is also the basis for the article written in French that concludes the dossier published in La documentation française following the conference.

____

► Summary of this Working Paper: The role of the Judge, a character who seems weak in Compliance Law, this branch of Law so powerful in a world where technology is developing an even more impressive power, could be to put the strength that is proper to him to continue to do: namely to be the guardian of the Rule of Law, which is not so obviously present because many of Compliance tools are in a way "insensitive" to what we are attached to (I).  The second role that we can expect of the Judge is that he should help to ensure the permanence of this Rule of Law, which relies to a large extent on him, in the face of a world that is opening up before us, which is unknown (mainly digital and climatic), and which Compliance Law wishes to grasp by renewing Regulatory Law (II). In what implies both a profound maintenance of a Judge that one would like to exclude by various agreements or replace by algorithms, and a profound transformation of an office turned towards the future (III), .... (IV).

____

🔓read the Working Paper below⤵️

► Full Reference: J. Morel-Maroger, "La réception des normes de la compliance par les juges de l'Union européenne" ("Application of compliance standards by EU judges"), in M.-A. Frison-Roche (ed.), La juridictionnalisation de la Compliance, coll. "Régulations & Compliance", Journal of Regulation & Compliance (JoRC) and Dalloz, 2023, p. 443-452. 

____

📕read a general presentation of the book, La juridictionnalisation de la Compliance, in which this article is published

____

► Summary of the article (done by the author): Compliance rules are intended to pursue objectives of public interest – or monumental goals – and thereby in principle modify and guide the behaviour of economic operators. In order to achieve these objectives, the full spectrum of norms are used in compliance matters. What is and what should be the role of the judges of the European Union in the development of compliance rules ? As in domestic law, the legality of compliance standards developed by regulatory authorities has been challenged.

It will first be necessary to analyse what control the judges of the European Union have over these rules. The question arises essentially as regards the rules of soft law, the challenge of which can be considered in two ways : by way of an action for annulment and by exception by way of a preliminary ruling.

But beyond the control of the legality of compliance rules exercised by European judges, they also contribute to their application. The effectiveness of compliance rules depend above all on them being followed by those to whom they are addressed, and economic operators are undoubtedly the first actors of its success. But the judges of the European Union, competent to settle disputes concerning the application of European Union law between the Member States, the European institutions, and individual applicants, may be also be involved in ensuring the effectiveness of European compliance rules and in interpreting them.

________

► Full Reference: E. Wennerström, "Quelques réflexions sur la Compliance et la Cour européenne des droits de l'homme" ("Some Reflections on Compliance and the European Court of Human Rights"), in M.-A. Frison-Roche (ed.), La juridictionnalisation de la Compliance, coll. "Régulations & Compliance", Journal of Regulation & Compliance (JoRC) and Dalloz, 2023, p. 479-489.

____

📕read a general presentation of the book, La juridictionnalisation de la Compliance, in which this article is published

____

► Summary of the article (done by the Journal of Regulation & Compliance): The development of the European Court of Human Rights case law, contributing to European integration, has incorporated the substantial concept of ​​"compliance" which goes beyond the idea of ​​legality with respect to which companies remain passive, and promotes legal orders as systems in interaction with another. 

The author develops the spirit and scope of Protocol 15 by which both the principle of subsidiarity and the margins of appreciation the signatory States are organized, mechanisms governed by the principle of proportionality. Subsidiarity means that the States are in the best position to design the most adequate application of the Convention, the close links between the States allowing its effective application. In addition, the new opinion procedure which allows a national court to have during a case the non-binding opinion of the ECHR ensures better compliance with the objectives of the Convention.

The case-law of the Court takes up this substantial requirement through its doctrine, in particular identified in the Bosphorus case, by stressing that the accession of a State to the European Union presumes its compliance when implementing EU law with the obligations arising from the ECHR, even if this presumption can be refuted if the protection is manifestly lacking, which was admitted in several cases, in particular concerning the right to an impartial tribunal in matters of economic regulation. The different legal orders are thus articulated. 

The author concludes that the European Court of Human Rights, like the Court of Justice of the Union, contributes to the construction of Compliance Law in Europe, from an Ex Ante perspective favoring opinions rather than Ex Post sanctions and creating, in particular through the Bosphorus doctrine, elements of security and confidence for European integration around common values.

________

► Full Reference: E. Wennerström, "Some Reflections on Compliance and the European Court of Human Rights", in M.-A. Frison-Roche (ed.), Compliance Jurisdictionalisation, Journal of Regulation & Compliance (JoRC) and Bruylant, coll. "Compliance & Regulation", to be published. 

____

📘read a general presentation of the book, Compliance Jurisdictionalisation, in which this article is published

____

► Summary of the article (done by the Journal of Regulation & Compliance): The development of the European Court of Human Rights case law, contributing to European integration, has incorporated the substantial concept of ​​"compliance" which goes beyond the idea of ​​legality with respect to which companies remain passive, and promotes legal orders as systems in interaction with one another.

The author develops the spirit and scope of Protocol 15 by which both the principle of subsidiarity and the margins of appreciation the signatory States are organized, mechanisms governed by the principle of proportionality. Subsidiarity means that the States are in the best position to design the most adequate application of the Convention, the close links between the States allowing its effective application. In addition, the new opinion procedure which allows a national court to have during a case the non-binding opinion of the ECHR ensures better compliance with the objectives of the Convention.

The case-law of the Court takes up this substantial requirement through its doctrine, in particular identified in the Bosphorus case, by stressing that the accession of a State to the European Union presumes its compliance when implementing EU law with the obligations arising from the ECHR, even if this presumption can be refuted if the protection is manifestly lacking, which was admitted in several cases, in particular concerning the right to an impartial tribunal in matters of economic regulation. The different legal orders are thus articulated. 

The author concludes that the European Court of Human Rights, like the Court of Justice of the Union, contributes to the construction of Compliance Law in Europe, from an Ex Ante perspective favoring opinions rather than Ex Post sanctions and creating, in particular through the Bosphorus doctrine, elements of security and confidence for European integration around common values.

___ 

🦉This article is available in full text to those registered for Professor Marie-Anne Frison-Roche's courses

________

► Law is slow, but firm. By its judgment of June 15, 2021, Facebook , the European Union Court of Justice widely interprets the powers of National Authorities, since they serve the people protection in the digital space (➡️📝(CJEU, June 15, 2021, Facebook). 

Law is slow. The reproach is so often made. But the bottom line is that, in the noise of changing regulations, it establishes clear and firm principles, letting everyone know what to stand for. The more the world is changing, the more Law is required.

When Law degenerates into regulations, then it is up to the Judge to make Law. "Supreme Courts" appear, de jure as in the United States, de facto as in the European Union by the Court of Justice of the European Union which lays down the principles, before everyone else, as it did for the "right to be forgotten" in 2014 (➡️📝CJEU, Google Spain, May 13, 2014), and then with the impossibility of transferring data to third countries without the consent of the people concerned (➡️📝CJEU, Schrems, October 6, 2015).

Facebook litigation is kind of a novel. The company knows that it is above all to the Courts that it speaks. In Europe, it is doing it behind the walls of the Irish legal space, from which it would like to be able not to leave before better dominating the global digital space, while national regulatory authorities want to take it to protect citizens.

There is therefore a technical question of "jurisdictional competence". The texts have provided for this, but Law is clumsy because it was designed for a world still anchored in the ground: the GDPR of 2016 therefore organizes cooperation between national regulatory authorities through a "one-stop-shop", forcing the authorities to relinquish jurisdiction so that the case is only handled by the "lead" National Authority. This avoids splintering and contradiction. But before the adoption of the GDPR, the Belgian data protection regulator had opened a procedure against Facebook concerning cookies. The "one-stop-shop" mechanism, introduced in 2016, is therefore only mentioned before the Brussels Court of Appeal, which is asked to relinquish jurisdiction in favor of the Irish Regulatory Authority, since the company has in Europe its head office in this country. The Court of Appeal referred to the CJEU for a preliminary ruling.

By its judgment of June 15, 2021 (➡️📝CJUE, Facebook, June 15, 2021), it follows the conclusions of its Advocate General and maintains the jurisdiction of the Belgian National Regulator because, even after the GDPR, the case still undergoes national treatment. In this decision, the most important is its reasoning and the principle adopted. The Court notes that the "one-stop-shop" rule is not absolute and that the national regulatory authority has the power to maintain its jurisdiction, in particular if cooperation between national authorities is difficult.

Even more, will it not one day have to adjust Law more radically? We need to consider the fact that the digital space is not bound by borders and that the ambition of "cross-border cooperation" is ill-suited. It is of course on this observation of inefficiency, consubstantial with the digital space, that the European Public Prosecutor's Office (EPPO) was designed and set up, which is not a cooperation, nor a "one-stop shop", but a body of the Union, acting locally for the Union, directly linked to Compliance concerns (➡️📝Frison-Roche, M.-A. "The European Public Prosecutor's Office is a considerable contribution to Compliance Law", 2021 and ., European Public Prosecutor's Office comes on stage: the company having itself become a private prosecutor, are we going towards an alliance of all prosecutors ?, 2021).

So that's what we should be inspired by.

Full reference: Frison-Roche, M.-A., Due process and Personal Data Compliance Law: same rules, one Goal (CJEU, Order, October 29, 2020, Facebook Ireland Ltd v/ E.C.), Newsletter MAFR - Law, Compliance, Regulation, 1st of November 2020

Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation

Read Marie-Anne Frison-Roche's interview in Actu-juridiques about this decision (in French)

Summary of the news: 

As part of a procedure initiated for anti-competitive behaviors, the European Commission has three times requested, between the 13th of March and the 11th of November 2019, from Facebook the communication of information, reitarated in a decision in May 2020.  

Facebook contests it alleging that the requested documents would contain sensitive personal information that a transmission to the Commission would make accessible to a too broad number of observers, while "the documents requested under the contested decision were identified on the basis of wideranging search terms, (...) there is strong likelihood that many of those documents will not be necessary for the purposes of the Commission’s investigation". 

The contestation therefore evokes the violation of the principles of necessity and proportionality but also of due process because these probatory elements are collected without any protection and used afterwards. Moreover, Facebook invokes what would be the violation of a right to the respect of personal data of its employees whose the emails are transferred. 

The court reminds that the office of the judge is here constraint by the condition of emergency to adopt a temporary measure, acceptable by the way only if there is an imminent and irreversible damage. It underlines that public authorities benefit of a presumption of legality when they act and can obtain and use personal data since this is necessary to their function of public interest. Many allegations of Facebook are rejected as being hypothetical. 

But the Court analyzes the integrality of the evoked principles with regards with the very concrete case. But, crossing these principles and rights in question, the Court estimates that the European Commission did not respect the principle of necessity and proportionality concerning employees' very sensitive data, these demands broadening the circle of information without necessity and in a disproportionate way, since the information is very sensitive (like employees' health, political opinions of third parties, etc.). 

It is therefore appropriate to distinguish among the mass of required documents, for which the same guarantee must be given in a technique of communication than in a technic of inspection, those which are transferable without additional precaution and those which must be subject to an "alternative procedure" because of their nature of very sensitive personal data. 

This "alternative procedure" will take the shape of an examination of documents considered by Facebook as very sensitive and that it will communicate on a separate electronic support, by European Commission's agents, that we cannot a priori suspect to hijack law. This examination will take place in a "virtual data room" with Facebook's attorneys. In case of disagreement between Facebook and the investigators, the dispute could be solved by the director of information, communication and medias of the Directorate-General for Competition of the European Commission. 

___

We can draw three lessons from this ordinance: 

1. This decision shows that Procedural Law and Compliance Law are not opposed. Some often say that Compliance guarantees the efficacy and that Procedure guarantees fundamental rights, the protection of the one must result in the diminution of the guarantee of the other. It is false. As this decision shows it, through the key notion of sensitive personal data protection (heart of Compliance Law) and the care for procedure (equivalence between communication and inspection procedures; contradictory organization of the examination of sensitive personal data), we see once again that two branches of Law express the same care, have the same objective: protecting people. 
2. The judge is able to immediately find an operational solution, proposing "an alternative procedure" axed around the principle of contradictory and conciliating Commision's and Facebook's interests has shown that it was able to bring alternative solutions to the one it suspends the execution, appropriate solution to the situation and which equilibrate the interest of both parties. 
3. The best Ex Ante is the one which anticipate the Ex Post by the pre-constitution of evidence. Thus the firm must be able to prove later the concern that it had for human rights, here of employees, to not being exposed to sanctioning pubic authorities. This Ex Ante probatory culture is required not only from firms but also from public authorities which also have to give justification of their action. 

__________

Full reference: Frison-Roche, M.-A., Freedom&Media: when Italian Media Regulation's real "goal"​ is not Pluralism Protection, Freedom of Establishment prevails (CJEU, 3 Sept.2020,Vivendi), Newsletter MAFR - Law, Regulation, Compliance, 9th of September 2020

Read by freely subscribing other news of the Newsletter MAFR - Law, Regulation, Compliance

Summary of the news

The media sector is organized on an equilibrium between the principle of competition and other concerns like information pluralism. Generally, competition Law by making market accessible to many competitors ensures information pluralism. But, this is not the case if an operator get an excessive market power, running risk not only for competition but also for information pluralism. It is the reason why the Italian legal system forbids the constitution of an operator gathering more than 40% of the total income generated by the media sector or more than 10% of the total income generated by the Italian communication sector. 

In 2016, Vivendi, a French media group, got more than 28% of the Mediaset Group's actions and around 30% of its voting right. The Italian communication regulation authority sized by Mediaset demands in 2017 to Vivendi to ends its participations in the group Mediaset. Vivendi contested this decision before the regional administrative court which referred to the Court of Justice of the European Union in order to know if freedom of establishment can legitimately be discarded in favor of information pluralism in this concrete case. The Court of Justice answered, in a decision of 3rd of September 2020, that the restriction of the freedom of establishment can in principle be justified by a general interest objective such as information pluralism protection but that in this concrete case, this is not justified because the fact that a firm is committed in the transmission of contents does not necessarily give it the power to control the production of such contents.

We can learn three lessons form this case:

1. The Court precises that even if the principle is the freedom of establishment, it is possible to discard it to protect information pluralism protection under the condition that the concerned member State do not use this legitimate power to create a political monopoly, the burden of proof falling on the person attacking national legislation and not on the Member State.
2. The Court distinguishes transmission of contents and production of contents and explains that if the State rejects this decision, the burden falling to it to prove the concrete links between these two activities.
3. This case shows that the power to share the respective places of the "principle" and of the "exception" always comes back to the judges. 

Référence complète : Potvin-Solis., L., Le dialogue entre la Cour européenne des droits de l'homme et la Cour de justice de l'Union européenne dans dans la garantie des droits fondamentaux, in  Mélanges en l'honneur de Frédéric Sudre, Les droits de l'homme à la croisée des droits, LexisNexis, 2018, pp. 591-602.

Lire une présentation générale de l'ouvrage.

Les étudiants de Sciences-Po peuvent consulter l'article via le Drive, dossier "MAFR- Régulation & Compliance".