Abusive terms and personal data: Google sentenced in France
The combined reading of the thorough analysis made by the Court in this recent decision and in the previous decision concerning Twitter offers a valuable framework for identifying provisions that may be considered abusive or unlawful within the meaning of French consumer law and the legislation on the protection of personal data.
Based on French consumer law and the French Data Protection Act of January 6, 1978, the Paris Court of First Instance (the “Court”) ordered Google to amend nearly 38 clauses and to make the entire judgment accessible from its website and applications.
As a first step, the Court reaffirmed that the provisions of the Consumer Code and the Data Protection Act are applicable:
- The provisions of French and European consumer law are applicable to the contractual documentation intended for French consumers
The Court held that by collecting data entered free of charge by the user when accessing the platform and by marketing such data for a pecuniary interest, Google is acting for commercial purposes and derives a benefit therefrom within the meaning of Article 1107 §1 of the French Civil Code, so that it must be regarded as a professional within the meaning of the introductory article of the French Consumer Code.
The Court considered that the provisions relating to unfair terms provided for in Article L. 212-1 of the French Consumer Code are applicable insofar as they do not require that the contract be concluded for a pecuniary interest. It only took into account the respective quality of each of the parties, regardless of whether the services are provided to consumers and professionals.
- The French Data Protection Act is applicable
The Court pointed out that the general purposes of the French Data Protection Act “perfectly coincide with those of consumer law, in particular with a view to punishing any significant imbalance between professionals and ordinary individuals in their various consumer activities”.
Considering in particular that Google collects from the French territory or from the territory of EU Member States – for economic exploitation purposes and by determining itself the purposes of the processing – personal data of users wishing to set up a dedicated account on this “Google+” platform by personal identity details and the application of various algorithms allowing geolocation and profiling applications, the Court stated that the French Data Protection Act was applicable.
In particular, it found that the following terms were unfair or unlawful:
More specifically, the Court noted that Google’s contractual documentation refers to a “principle of universality” within Google with regard to the application of privacy rules, except where other Google services are governed by other rules. However, the Court considered that the information provided to the user is not legible and requires him/her to carry out a search in order to determine the rules applicable to the various services offered by Google that he/she uses.
- The terms concerning cookies
- Clauses allowing Google to unilaterally modify user’s contents
Although the Court noted the undeniable practical advantage of this unification of the user’s presentation by Google, it regretted that Google thus claimed the right to unilaterally modify or adapt contents containing personal data, thereby risking altering the data communicated by the user.
It finally recalled that the user’s consent was not sought in any way and declared that this clause was abusive.
- The terms concerning the sharing of personal data
“Many of our services let you share information with others. Remember that when you share information publicly, it may be indexable by search engines, including Google. Our services provide you with different options on sharing and removing your content».
Under this clause, personal data shared by the user may be indexed by search engines, unless the user sets his profile differently in order to exclude such indexing.
Recalling the scope of the Costeja judgment delivered by the Court of Justice of the European Union and enshrining the right to be forgotten online offered to users, the Court pointed out that, in the case at hand, indexation was automatic by default and without specific indication of the possibility for the user to disable that automaticity.
Consequently, the Court considered that such a clause was deemed unwritten (i.e. ineffective) because of its unlawful or abusive nature.
- The unlawfulness of clauses relating to copyright disputes
The Court noted that copyright disputes initiated by a user and in which Google should be party are considered only from the exclusive angle of the American law known as the “Digital Millenium Copyright Act”.
The Court pointed out that, without even questioning the more protective nature of such a law in comparison with French law, American law is clearly less accessible than French law.
However, this indirect exclusion from the provisions set forth in French intellectual property laws or in the Law for the confidence in the digital economy constitutes a significant imbalance to the detriment of the French user and demonstrates Google’s intention to act only within the framework of US law.
- The unlawfulness of the clause granting a worldwide license to Google
The Court observed that the use of the services was “subject by inference” to the granting to Google of an operating license on all the contents provided by the user, and more particularly a worldwide, non-exclusive and free license, the purpose of which is not limited in time or space.
It recalled the terms of Article L. 131-1 of the French Intellectual Property Code, according to which “the global assignment of future works is null and void”, and Articles L. 131-2 and L. 131-3 of the same Code, according to which contracts transmitting copyrights must be recorded in writing since the assignment is subject to the mention of each of the rights in the deed of assignment, in particular as regards the scope and destination of the field of exploitation of such rights.
In addition, according to the French Consumer Code, professionals must provide consumers with contracts drafted in a clear and comprehensible manner.
In the present case, however, it must be noted that while the content transmitted by the user may be protected by copyright, the clause grants Google a free right of use over such content without specifying the content, the nature of the rights granted nor the authorized uses.
Consequently, such clauses are deemed unwritten because of their unlawful or abusive nature.
While on the day of the judgment some of the terms deemed unlawful had already been modified by Google, in particular because of the institution of proceedings more than 5 years ago, the careful analysis of the Court contained in the “Twitter” decision and in this decision offers professionals a valuable framework for identifying provisions that could be considered unfair or unlawful.
In the coming months, the Court is expected to issue a new judgment on Facebook in an action brought by the French association UFC Que Choisir. A case to be followed up…
 “A contract is for pecuniary interest where each of the parties receives a benefit from the other in return for what he/she/it provides”.
 “For the purpose of this Code, the following terms shall have the meaning assigned to them hereunder […] professional: any natural or legal person, public or private, who acts for the purposes falling within the scope of his/her/it commercial, industrial, craft, liberal or agricultural activity, including when acting in the name or on behalf of another professional”.
 Google Spain SL and Google Inc. vs. Agencia Española de Protección de Datos (AEPD) and Mario Costeja González, CJEU, Grand Chamber, May 13, 2014, C-131/12.