Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Ministerio Fiscal

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →

Ministerio Fiscal

Avatar for Szidonia Schneider

Szidonia Schneider

May 26, 2025

Transcript

  1. REFERRING COURT CASE CONTEXT PRELIMINARY QUESTIONS Audiencia Provincial de Tarragona,

    Spain Request for access to personal identification data of SIM card users activated with a stolen mobile phone Must the offense be “serious” to justify access to this type of data?
  2. Legal Framework Directive 2002/58/EC on privacy and electronic communications Article

    15(1): Allows restrictions for national security, defense, public safety, etc. Charter of Fundamental Rights of the EU Article 7: Respect for private and family life Article 8: Protection of personal data
  3. National Court's Position Spanish authorities requested subscriber data linked to

    SIM cards to investigate mobile phone theft. The national court denied the request, arguing that only serious offenses justify interference with data protection rights.
  4. CAN PUBLIC AUTHORITIES ACCESS SUBSCRIBER IDENTIFICATION DATA IN CONNECTION WITH

    A MINOR OFFENSE, OR MUST THE OFFENSE BE CONSIDERED "SERIOUS" UNDER EU LAW? THE PRELIMINARY QUESTION
  5. Advocate General’s Opinion Accessing identity data constitutes an interference with

    fundamental rights, but a minor one. Such access does not require the offense to be serious, provided there are sufficient safeguards in place.
  6. CJEU Judgment (2 October 2018) Access to identity data is

    indeed an interference with fundamental rights. However, it is not a serious interference, so restricting access only to serious crimes is not required. The key is ensuring proportionality and appropriate safeguards.
  7. Implications of the Ruling Member States may allow access to

    identity data for investigating any criminal offense, not only serious ones. However, safeguards such as judicial oversight and data minimization must be respected.
  8. Relevance for Data Protection The case highlights the distinction between

    types of personal data and the level of protection they require. Identity data (e.g., names, addresses) are less sensitive than communications content, and access to them may be allowed more easily.
  9. Conclusion The CJEU emphasized a balanced approach between law enforcement

    needs and individual data protection rights. Even minor interferences must be regulated, but only serious interferences demand restriction to serious crimes. This ruling helps clarify data access rules under EU law.