Skip to content
Case Law · GDPRhub ·CJEU - C-460/20 - TU, RE v Google EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

TU and RE were directors and shareholders of investment companies

Three articles were published in the news criticizing their companies and showing pictures of TU and RE suggesting a luxury lifestyle.

GDPRhub

How it connects

3 of 3 paragraphs apply legislation or carry a topic — see them in the full text ↓
577/2026 The DPA issued a warning against a media company for airing a deepfake of a known journalist without sufficiently marking the footage as AI-generated.The DPA issued a warning… 577/2026 ·Italy ·Garante Sep 8, 2026 Processing Data Controller Supervisory Authorities
ps-0035-2025 On 1 October 2023, the controller sent an email stating that, unless the data subject vacated the property and returned the keys, it would provide the data subject’s workplace… ps-0035-2025 ·Spain ·AEPD Sep 8, 2026 Identification Personal Data Controllers
AEPD · ps-00256-2025 Facts. Facts After receiving an in-person visit at her address, a data subject received a letter from a third party concerning a plot of land. The third party asked the data… ps-00256-2025 ·Spain Sep 8, 2026 Personal Data Supervisory Authorities Controllers
Garante · 551/2026 A data subject complained to the DPA after their personal data was published on the website of the Bologna University Hospital IRCCS (the controller), and indexed on Google. The… 551/2026 ·Italy Sep 8, 2026 Public Authority Public Sector Personal Data
2025010364 In their complaint, the data subject claimed that their personal data was not processed in a lawful, fair and transparent manner, and demanded that the false and anonymous… 2025010364 ·Iceland ·Persónuvernd Sep 8, 2026 Fairness & Transparency Personal Data Consent
DSB-D124.0850/25 Health data that is required for an expert opinion in a court proceeding can be processed under Article 9(2)(f) and (g) GDPR in conjunction with Austrian national law and, the… DSB-D124.0850/25 ·Austria ·Art. 9 Sep 8, 2026 Health Data Personal Data Special Categories of Data

Full text 3 paragraphs

Paragraphs carrying a topic or an applied provision show those connections inline
§

Facts — TU and RE were directors and shareholders of investment companies. Three articles were published in the news criticizing their companies and showing pictures of TU and RE suggesting a luxury lifestyle. These articles were accessible upon research of their names in Google. TU and RE requested Google, as controller to de-reference the links to the articles from the list of search results when researching their names. Google refused to comply with this request. TU and RE therefore brought an action with the Landgericht Köln (Regional Court Cologne) to have the Court order Google to de-reference. They argued among other things that the articles contained inaccurate claims and defamatory opinions. After the dismissal of their action in first instance, TU and RE filed an appeal with the Oberlandesgericht Köln (Higher Regional Court Cologne). This appeal was also dismissed. TU and RE appealed this second decision with the Bundesgerichtshof (Federal Court) which referred two questions to the CJEU.

§

Oskar J. Gstrein summarized these questions as follows : "How should courts handle requests for de-referencing in cases where applicants claim that the information presented by a news outlet are inaccurate, and in which the legality of the publication depends on whether the claims are factually true? " Holding — For the first question, the Court explained that the processing by the search engine (in this case Google) constitutes a processing of personal data and must be distinguished from the publication on the website. The Court then recalled that the right to data protection is not absolute and must be balanced with the right to freedom of expression. In this context, the Court held that it is to the person requesting de-referencing to establish the manifest inaccuracy of the information. The search engine cannot be required to assess the accuracy of the information published in order to handle a request on the basis of Article 17(3)(a) GDPR.

§

". For the second question, the Court held a similar reasoning. It considered that search engines must operate an assessment when displaying and using images and take into account the informative value of such images. Holding — For the first question, the Court explained that the processing by the search engine (in this case Google) constitutes a processing of personal data and must be distinguished from the publication on the website. The Court then recalled that the right to data protection is not absolute and must be balanced with the right to freedom of expression. In this context, the Court held that it is to the person requesting de-referencing to establish the manifest inaccuracy of the information. The search engine cannot be required to assess the accuracy of the information published in order to handle a request on the basis of Article 17(3)(a) GDPR. ". For the second question, the Court held a similar reasoning. It considered that search engines must operate an assessment when displaying and using images and take into account the informative value of such images. Comment — It is interesting to note that thumbnails and photographs can be object to a de-referencing request.