Showing posts with label European Court of Human Rights. Show all posts
Showing posts with label European Court of Human Rights. Show all posts

Wednesday, 29 April 2026

Time to ring the Bell: Luxembourg’s Light on Pushbacks, Strasbourg’s Shadow on Pullbacks


On Frontex’s Operational Powers, Allocation of Responsibility for Fundamental Rights Violations and Fragmented Justice

 

By Prof. Jean-Yves Carlier and Dr. Eleonora Frasca

Université catholique de Louvain (UCLouvain), members of Equipe droits et migrations (EDEM)

 This is a revised version of extracts from the yearly case law column “Droit européen des migrations”, published in French in the Journal de droit européen, no. 3, March 2026.

Photo credit: Luxofluxo, via Wikimedia commons


1.     The Fragmented Architecture of Accountability in EU Migration Control

The judgments of the Court of Justice of the European Union (CJEU) in Hamoudi v. Frontex (C-136/24 P) and WS and Others v. Frontex (C-679/23 P), together with the decision of inadmissibility in S.S. and Others v. Italy by the European Court of Human Rights (ECtHR), can be read as addressing a common structural problem from two different judicial perspectives: how responsibility for fundamental rights violations is allocated in a system of composite, and externalised border controls. Read together, the Luxembourg rulings on Frontex’s non-contractual liability and Strasbourg’s approach to extraterritorial jurisdiction reveal, on the one hand, a tightening of accountability within the EU legal order and, on the other, a persisting fragmentation of protection under the Convention system. Their juxtaposition reveals an emerging asymmetry between pushbacks and pullbacks and highlights the risk of a fragmented landscape of remedies in a field where operational powers are increasingly shared and strategically displaced.

The CJEU confirmed the centrality of access to the territory of the Union in contemporary EU migration policy by subjecting obstacles to external border crossings to strict judicial review. Overturning decisions by the General Court that absolved the Agency from any responsibility for its border operations (T-136/22 and T-600/21), the Court contends that Frontex may incur in non-contractual liability and must comply with fundamental rights obligations when exercising its powers in border control operations. The two rulings provide interpretative clarifications regarding the conditions for engaging Frontex’s non-contractual liability under Article 340(2) TFEU. Anchoring the Agency’s operational role firmly within the constitutional framework of fundamental rights, the Court redefined the division of responsibility between Frontex and Member States in joint operations (Hamoudi v. Frontex) and partially reshaped the concept of causation, clarifying the link between Frontex’s conduct and alleged pushbacks (WS and Others v. Frontex). In contrast, the Strasbourg Court did not approach joint state responsibility in externally coordinated maritime Search-and-Rescue (SAR) operations involving cooperation with Libya (S.S. and Others v. Italy).

The real challenge in the interpretation of EU migration and asylum law no longer lies in the technical refinement of positive norms. Rather, it stems from the operational choices through which the Union and its Member States implement migration control. In particular, maritime operations and cooperation with EU agencies as well as third countries’ national authorities generate complex legal questions precisely because border control activities are organised (and presented) as technical or operational, rather than as exercises of public authority with distinct legal consequences. Two structural features amplify this complexity. First, Frontex’s operational activities are embedded in a hybrid administrative framework that blurs the boundaries between Union and national competences. Second, joint operations disperse decision-making and execution across multiple actors, including third countries’ migration control authorities. In the context of pushbacks, this model of composite governance waters down the attribution of responsibility where illegal coercive practices occur. In the context of pullbacks, the expansion of controls at and beyond the Union’s external borders – through externalisation techniques – further complicates accountability.

2.     Asylum Seekers’ Vulnerability Requires an Adjustment of the Burden of Proof Regarding the Damage Suffered and Caused by Frontex’s Pushbacks

In the CJEU’s own words in Hamoudi v. Frontex, a pushback operation undermines the effectiveness of judicial protection for asylum seekers who have reached the territory of the Union and it “is characterised by the significant vulnerability of the persons subject to it and by the absence of the identification and personalised treatment of those persons by the authorities” (para 88). Following the Advocate General’s Opinion and on the very basis of the Frontex Regulation, the Court clarifies the division of responsibility between Frontex and the Member States: “while Frontex and the national authorities responsible for border management have a shared responsibility […], Frontex is fully responsible and accountable for any decision it takes and for any activity for which it is solely responsible under that regulation” (para 66).

For the time being, the CJEU has adopted a substantive approach to responsibility attribution, refusing to allow operational powers to serve as Frontex’s procedural shield. The Court recalls that Article 97(4) of the same Regulation “provides – like the second paragraph of Article 340 TFEU, to which it gives a concrete expression – that, in the case of non-contractual liability, Frontex is, in accordance with the general principles common to the laws of the Member States, to make good any damage caused by its departments or by its staff in the performance of their duties. Consequently, the case-law of the Court relating to that provision of the TFEU is relevant in the present case” (para 67). Next, and most importantly, after reiterating the obligation to compensate any damage, the Court acknowledges “the need to adapt the burden of proof” in respect of that damage, adapting it to the “specific circumstances” of operations conducted by Frontex, even when carried out jointly with a Member State (paras 86 et seq.).

Unequivocally, the judgment is rooted in the constitutional framework of Article 47 of the Charter, inviting the General Court, where necessary, to make use of the exceptional measures of inquiry permitted under its Rules of Procedure “in order to guarantee [effective judicial] protection […] which is fundamental in the European Union as a Union based on the rule of law” (paras 78 and 80–84). This means that Frontex can no longer rely on the complexity of its operational arrangements nor on the intermediation of Member States to escape effective judicial review of the activities for which it is “fully responsible” (para 66). The Agency cannot claim a “de facto immunity” that would hinder “all legal action by victims of a pushback operation against Frontex” (para 105). The “full respect” for the right to an effective remedy requires an “adjustment of the burden of proof,” which, in particular, must allow applicants to limit themselves to “present prima facie evidence that that operation, in which Frontex participated, occurred and that they were present during it” (para 106). In the present case, this may consist of the applicant’s testimony corroborated by a press article concerning the pushback.

The General Court ought to have granted the requests for measures of inquiry and hearings to actively seek the evidence held by Frontex, for example by ordering the Agency to produce documents in its possession. The Court notes that, on the one hand, Frontex is “likely to possess information that is relevant for the purpose of proving the existence of pushbacks” (para 96) and, on the other hand, that that failure to cooperate by Frontex “justif[ied] the General Court’s involvement” (para 148). The standard of proof must necessarily be relaxed, considering the informational asymmetry inherent in situations of pushbacks at the borders. Operational decisions adopted by Frontex must be traceable, and the Agency’s practices – long presented as purely technical – must be acknowledged in their full legal significance (on Frontex’s growing power not matching its fundamental rights responsibility, see G. Raimondo).

3.     On the Reasonableness of Asylum Seekers’ Choices in the Assessment of the Causal Link

The Court further develops the analysis of causation in light of the asylum seekers’ conduct in WS and Others v Frontex (Joint return operation). In its 2023 judgment, the General Court had taken into account numerous factual elements relating to the applicants’ conduct in order to dismiss their claim for damages. However, these elements concerned events subsequent to the refusal of entry into Greek territory and the return to Turkey, such as their departure from Turkey and their settlement in Iraq. According to the General Court, such decisions were autonomous choices, the risks and costs of which the applicants had knowingly assumed. They were, in a sense, rational choices comparable to those made by economic operators in other cases concerning the Union’s non-contractual liability. The General Court, therefore, concluded that the damage resulting from such choices could not be attributed to Frontex’s conduct, in the absence of a sufficiently direct causal link with the Agency’s actions.

At that time, we already believed that this line of reasoning was highly questionable (see our analysis in the Journal de droit européen). It characterised the subsequent conduct of the Syrian asylum seekers as “autonomous choices” and effectively neutralised the prior legal and factual constraints inherent in the asylum context. Access to the territory of the EU is not a strategic option. Without access to the territory, there can be no access to the asylum procedure. Where Frontex, through the actions of its agents – whether alone or in cooperation with those of a Member State –, unlawfully prevents access to the EU territory, those actions constitute a decisive cause of the damage consisting in the impossibility of accessing the refugee status determination procedure. Even if shared with the Member States, there is a responsibility of the Union that cannot be ignored.

Similarly, the CJEU censured the General Court’s flawed causal reasoning. The Court observed that, while an “entirely rational decision-making may be expected of economic operators experienced in the management of risks involved in the exercise of their usual activities […], such rational behaviour cannot be elevated to the rank of a criterion of general application, in particular when natural persons are concerned” (para 155). The applicants’ decision, “although not the only possible response, may be regarded as a reasonable response having regard to all the circumstances characterising that situation” (para 157, emphasis added). Such choices are not capable of breaking any sufficiently direct causal link between the conduct complained of and the alleged damage without first assessing in concreto their reasonableness “in the light of all the circumstances characterising the context in which they were made” (paras 161 and 197).

The Court thus clarifies the method for examining the causal link between alleged violations of fundamental rights committed by Frontex and the damage suffered by asylum seekers following their expulsion from Union territory. To that end, the Court provides a clear reconstruction of the obligations incumbent upon Frontex regarding the protection of fundamental rights, particularly in the context of joint return operations. These obligations include verifying the existence of “written and enforceable return decisions […] for all persons whom a Member State intends to include in such operations” (para 107), in order to ensure compliance with the principle of non-refoulement. Admittedly, the Court specifies that this obligation of verification does not automatically entail the existence of a causal link, the assessment of which “must be undertaken taking into account of all the relevant facts […] and the legal assessments required” (para 112).

Furthermore, given the joint nature of such operations, the fact that Frontex provides “technical and operational” support to Member States does not mean that any alleged violation of the asylum seekers’ fundamental rights would result exclusively from the Member State’s conduct (in this case, Greece), thereby excluding the possibility of engaging Frontex’s liability. In doing so, the Court requires a well-articulated reading of liability arising from the exercise – even in hybrid form – of the Union’s public authority, subject to full and effective judicial review.

The lesson is clear: litigation concerning Frontex cannot constitute exceptional litigation. The more autonomous capacities the Agency possesses, the more it might be held legally accountable for their exercise. Clearly defining the contours of responsibility thus becomes a central issue of the EU administrative and constitutional law. The Court’s judgment reflects a firmer recognition of Frontex’s own obligations regarding fundamental rights protection and a more open approach to causation in joint operations. It stands in clear opposition to the restrictive interpretations of the conditions for engaging the Agency’s non-contractual liability adopted by the General Court in 2023.

4.     On Allocation of Responsibilities for Fundamental Rights Violations and Competences? 

One can only endorse these two Frontex rulings, which hold the EU agency accountable for its actions. That is not to say that assessing their consequences will be straightforward. As the cases have been referred to the General Court following the annulment of its original decisions, the concrete analysis of causation, damage and compensation for the harm suffered remains open. However, it cannot be denied that the Court’s reasoning leads to a certain shared responsibility between the Member States and the EU agency. Could this division of responsibility result in joint and several liability (in solidum) of all the actors for the entirety of the damage? The question is not definitively settled. Advocate General Tamara Ćapeta devoted a fairly extensive analysis to this issue in her Opinion in WS and Others. Limiting herself on this point to examining causation, she nevertheless suggested that “in situations in which both Frontex and Member States share obligations in joint return operations, Frontex can be held liable for damage caused by the breach of such obligations, even if a Member State can be liable in parallel for the same damage” (para 93). Her reasoning drew on a possible analogy with the joint liability of another EU agency, Europol (Kočner v. Europol). In the case of Europol, it might be difficult a posteriori for a person harmed by an abusive alert to determine whether the source was the EU agency or a Member State. In contrast, with Frontex there would be, in a sense, a priori responsibility on the part of each actor – both the State and the Agency – each being fully required to prevent any serious violation of fundamental rights. Both scenarios could lead, in similar fashion, to joint and several liability.

However, the CJEU held that the plea alleging possible joint and several liability was inadmissible on the ground that it had not been raised before the General Court (WS and Others, paras 80–89). Consequently, at least in the cases at issue, it is highly likely that – not least because of the division of competences – separate findings of liability will be made corresponding to each actor’s share of responsibility. This latter scenario could generate complex litigation, leading to parallel proceedings before Luxembourg and Strasbourg. In his commentary on the two judgments, Johan Callewaert highlights their systemic significance for protection under the European Convention on Human Rights (ECHR). The complex cooperative frameworks of a hybrid administration (such as joint operations) create new situations from the ECHR perspective. Certain actions carried out on the territory and under the jurisdiction of Member States, but by EU agencies such as Frontex, result in fragmented Convention protection: “patchwork coverage”. Some actions would remain covered by the Convention when attributable to national authorities, whereas those attributable to EU bodies would escape it and fall instead within the jurisdiction of the EU courts, with the result that the ECtHR would no longer be able to hold a State liable for the entirety of the damage arising from a joint operation. In other words, while the 2025 Frontex case law shed some light – by reducing the grey areas regarding EU liability – it also cast a shadow, as any light does, in this case concerning the extent of damage that the ECtHR may attribute to the responsibility of States. The way out of this paradox would, of course, be the completion of the EU’s accession to the ECHR. Yet that prospect still appears remote.

5.     Non-Justiciability of Human Rights Violations Arising from the Coordination of Search-and-Rescue (SAR) Operations at Sea

While the evolving case law concerning Frontex has led the two European courts – Luxembourg and Strasbourg – to review, concurrently if not jointly, compliance with fundamental rights in pushback operations at the borders, for the time being, so-called pullback operations still escape review by the Strasbourg Court. Even if the ECtHR emphasised that “entering into bilateral agreements on migration with third States has the effect of placing extremely vulnerable individuals at serious risk of infringements of their fundamental rights” (S.S. and Others v. Italy, para 110), such arrangements do not automatically bring those individuals within the jurisdiction of a Contracting State for the purposes of the Convention, thereby limiting access to Strasbourg protection.

The inadmissibility decision delivered in S.S. and Others v. Italy reveals the limits of Convention responsibility in the face of the EU policy of delegating migration control, including maritime control, to third countries. The involvement of EU Member States in SAR operations in the Mediterranean cannot be understood without reference to the central role entrusted, for more than a decade, to the border coast guards of third countries such as Libya or Tunisia. In the absence of an integrated EU SAR programme, the Union and its Member States have progressively externalised the management of SAR obligations, while adopting an increasingly restrictive approach toward humanitarian operations conducted by non-governmental organisations (NGOs). This development has been accompanied by financial, material and operational support to third countries: provision of vessels, training, technical assistance and the establishment of a coordination centre (on this topic see E. Frasca). Although the strengthening of SAR capacities in these countries is officially carried out in the name of saving human lives, it is structurally linked to the objective of preventing irregular Mediterranean crossings into the EU territory.

By relocating such actions, externalisation also makes it possible to shield these practices from scrutiny under the obligations arising from the ECHR. Yet this strategy unfolds in a context marked by interceptions at sea that systematically expose migrants to serious violations of their fundamental rights, including treatment contrary to Articles 2 and 3 of the Convention. Like the cases concerning Frontex before the CJEU, S.S. and Others v. Italy raises the issue of the dilution and segmentation of the exercise of powers and, consequently, of responsibilities in the conduct of SAR operations at sea. The Strasbourg Court confirms that its jurisdiction over extraterritorial actions of Contracting States remains exceptional. To fall within its jurisdiction, such extraterritorial actions require the establishment, in the control exercised over individuals, of a direct link with the respondent State. In this way, a dissociation occurs between factual causation and legal attribution, creating a procedural obstacle that is practically insurmountable (on this topic, see C. Ryngaert). In the present case, the Court held that the financial, logistical and operational support provided by Italy to strengthen the capacities of the Libyan coast guard does not, absent effective control or direct operational direction, amount to sufficiently decisive influence to trigger jurisdiction within the meaning of Article 1 of the Convention. In doing so, it effectively casts a veil of ignorance over any responsibility of a Contracting State under the ECHR. Any notion of indirect, functional, or remote control is rejected, even where the risks faced by the persons “rescued” at sea – only to be returned to Libya and subjected to torture and inhuman treatment that has been widely documented – are fully known.

Conclusion: A Rebuttable Presumption Grounded in Prima Facie Evidence

Rulings on matters of access to the EU territory are likely to become more and more significant, signalling a new focus not only by Member States but also by national courts and, consequently, by the CJEU and the ECtHR, on the control of the Union’s external borders and their heir harmful consequences on asylum seekers. The ECtHR’s inadmissibility decision may be read as consistent, confirming the Court’s settled case law on extraterritorial situations (Banković, Al-Skeini, M.N. v. Belgium). It may also be read as a retreat from an evolutive interpretation of fundamental rights in light of today’s conditions. Indeed, a well-established case law recognises indirect responsibility or secondary accountability (par ricochet) in cases of extradition or refoulement, and this restrictive interpretation of jurisdiction refuses to adapt this case law to the reality and contemporary transformations of migration control. There is a middle ground between the frequently criticised slippery slope of judicial overreach whereby Courts are deemed overly protective and the equally problematic territorial lock that shields fundamental rights violations of a serious nature from scrutiny. The middle ground advocated here may appear modest: a rebuttable presumption grounded in prima facie evidence. However, it is precisely in such narrow interpretative openings that the protection of fundamental rights may evolve, by adapting interpretation to the context – a context marked, on the one hand, by situations of extreme vulnerability and, on the other hand, by elements such as bilateral agreements and conspicuous funding which make it possible to presume a genuine link between the contested acts and a Contracting State. Just as the Luxembourg Court has done with regard to Frontex, the Strasbourg Court would be well advised to accept that prima facie evidence gives rise to a rebuttable presumption (juris tantum) requiring the Contracting State to produce evidence capable of rebutting responsibility through facts and documents that would exonerate it. “There’s a crack in everything. That’s how the light gets in”, sang the poet Leonard Cohen. In the present context, we believe that European courts and judges must now more than ever try to maintain a balance. That crack is the space within existing doctrine, mindful of the rights of the individuals concerned, that allows Courts to remain faithful to their jurisdictional frameworks while adapting to new realities of migration control.


Saturday, 20 April 2024

Podchasov v. Russia: the European Court of Human Rights emphasizes the importance of encryption

 

 


 

Mattis van ’t Schip & Frederik Zuiderveen Borgesius*

*Both authors work at the iHub and the Institute for Computing and Information Sciences, Radboud University, The Netherlands - mattis.vantschip[at]ru.nl & frederikzb[at]cs.ru.nl

Photo credit: Gzen92, on wikimedia commons 

 

In a judgment from February 2024 in the case Podchasov v. Russia, the European Court of Human Rights emphasised the role of encryption in protecting the right to privacy. The judgment comes at a time where encryption is central to many legal debates across the world. In this blog post, we summarise the main findings of the Court and add some reflections.

Summary

Podchasov, the applicant in the case, is a user of Telegram. Russia listed Telegram as an ‘internet communication organiser’ in 2017. This registration meant that Telegram, according to Russian law, had to store all its communications data for one year, and the contents of communication data for six months. The obligation concerns all electronic communications (e.g., textual, video, sound) received, transmitted, or processed by internet users. Law enforcement authorities could request access to that data, including access to the decryption key in case communications are encrypted (para 6 of the judgment).

Telegram is a messaging app that users often employ because of its end-to-end encrypted messaging. For instance, Telegram is an important communication channel for Ukrainians to receive updates about the current war. End-to-end encryption means, roughly summarised, that only the sender and the intended recipient can access the content of the encrypted data, in this case Telegram messages.

In July 2017, the Russian Federal Security Service (FSB) required Telegram to disclose data that would allow the FSB to decrypt messages of suspects of ‘terrorism-related’ activities (para 7 of the judgment). Telegram refused. Telegram said that it was impossible to allow the FSB to access encrypted messages without creating a backdoor to their encryption that malicious actors might also use. Because of Telegram’s refusal, a District Court in Moscow ordered the nation-wide blocking of Telegram in Russia. The applicants challenged the disclosure order, but their challenge was dismissed across several Moscow courts. Meanwhile, Telegram remains operational in Russia today. Finally, the applicants lodged their complaint with the European Court of Human Rights. They complained that Russia violated their right to private life in Article 8 of the European Convention on Human Rights (ECHR).

Russia is not a member of the Council of Europe anymore. The Council of Europe stopped Russia’s membership in March 2022, in response to Russia’s invasion of parts of Ukraine. Six months later, on 16 September 2022, Russia ceased to be party to the European Convention on Human Rights. Nevertheless, the Court gives this judgment. The Court says that it has jurisdiction over this case, as the alleged violations occurred before the date that Russia ceased to be a party to the Convention.

The Court quotes several documents that are not directly related to the ECHR, including surveillance case law of the Court of Justice of the European Union, a report on the right to privacy in the digital age by the Office of the United Nations High Commissioner for Human Rights, a statement by Europol and the European Union Agency for Cybersecurity, and an Opinion of the European Data Protection Supervisor (EDPS) and the European Data Protection Board (EDPB).

The surveillance scheme before the European Court of Human Rights resembles earlier Russian surveillance schemes, which the Court held as a violation of providing adequate and sufficient safeguards to protect against indiscriminate breaches of the right to private life in Article 8 ECHR. Earlier holdings thus also apply in the underlying case. Unlike in previous judgments about surveillance in Russia, the Court discusses the role of encryption in protecting the right to private life.

On encryption, the Court holds that the underlying case only concerns the encryption scheme of ‘secret chats’. Telegram offers ‘cloud chats’ by default with ‘custom-built server-client encryption’, but users can also decide to activate ‘secret chats’ which are end-to-end encrypted (para 5 of the judgment). The Court explicitly excludes any considerations of so-called ‘cloud chats’ in the case, as the complaints only concern the ‘secret chats’. The scope of the Court’s holdings is therefore limited to only end-to-end encryption as used for secret chats.

The applicants and several privacy-related civil organisations say that decryption of end-to-end encrypted messages would concern all users of that system, in this case Telegram, as technical experts can never create an encryption backdoor for a specific instance, case, or user. The Russian government did not refute these statements. The Court therefore holds that the Russian authorities interfered with right to private life of Article 8 ECHR. The Court then investigates whether the Russian authorities can justify this violation, for instance because the violation is necessary in a democratic society. The Court analyses encryption in this light.

The Court emphases that encryption contributes to ensuring the enjoyment of the right to private life and other fundamental rights, such as freedom of expression:

[T]he Court observes that international bodies have argued that encryption provides strong technical safeguards against unlawful access to the content of communications and has therefore been widely used as a means of protecting the right to respect for private life and for the privacy of correspondence online. In the digital age, technical solutions for securing and protecting the privacy of electronic communications, including measures for encryption, contribute to ensuring the enjoyment of other fundamental rights, such as freedom of expression (…) (para 76).

The Court adds that encryption is important to secure one’s data and communications:

Encryption, moreover, appears to help citizens and businesses to defend themselves against abuses of information technologies, such as hacking, identity and personal data theft, fraud and the improper disclosure of confidential information. This should be given due consideration when assessing measures which may weaken encryption. (para 76)

The Court observes that legal decryption obligations cannot be specific or limited to certain circumstances: once a messaging provider creates a backdoor, there is a backdoor to all communications on the messaging platform:

Weakening encryption by creating backdoors would apparently make it technically possible to perform routine, general and indiscriminate surveillance of personal electronic communications. Backdoors may also be exploited by criminal networks and would seriously compromise the security of all users’ electronic communications. The Court takes note of the dangers of restricting encryption described by many experts in the field. (par 77)

Based on the above-mentioned arguments, the Court holds that the requirement to decrypt communication messages cannot be ‘regarded as necessary in a democratic society.’ (para 80 of the judgment) The Court concludes that Russia breached the right to private life, protected in article 8 ECHR.

Comments

The Podchasov case follows a long debate about the value of end-to-end encryption in democratic societies globally. As the Court mentions, end-to-end encryption is valuable for privacy as it enables people to communicate in such a way that third parties cannot access the communication. In this context, experts herald end-to-end encryption for its capacity to support, for instance, journalists in performing their work safely, or historically marginalised groups to express themselves freely.

At the same time, some law enforcement agencies consider end-to-end encryption a threat to public safety, as malicious actors can benefit from the privacy provided by secure messaging and similar methods, such as data encryption, too.

For instance, the FBI is in a long battle with Apple over the encryption of iPhones, which several suspects employed to keep their phone information and data private. On each occasion, Apple refused to offer decryption keys or software to the FBI, citing security concerns that can stem from enabling such backdoors.

The battle between security and privacy is, of course, long-standing. Encryption is now central to this debate. The EU Commission recently joined the debate with a proposal for a Child Sexual Abuse Material Regulation (CSAM proposal). Roughly summarised, the proposal would require communication providers (such as Telegram or WhatsApp) to analyse people’s communications to find, block, and report child sexual abuse materials, such as inappropriate pictures. Experts agree that communication providers can only do so if they do not encrypt communications, if they include a type of backdoor, or if they analyse communications on people’s devices before they are encrypted. Experts warn that such on-device analysis can be seen as a kind of backdoor of encrypted communications too. Many civil organisations, technical experts, and academics oppose the CSAM proposal. Opponents of the CSAM proposal can be expected to cite his judgment. 

The European Court of Human Rights is clear about the role of end-to-end encryption for the right to private life. In one paragraph, the Court states that end-to-end encryption is vital to privacy. The Court bases its reasoning partly on an opinion of the European Data Protection Supervisor (EDPS) and the European Data Protection Board (EDPB) which discusses encryption in the context of the above-mentioned CSAM proposal. The Court also refers to responses from civil society organisations, who can present their views to the Court as amici curiae. The Court follows the reasoning of the EDPS, the EDPB, and privacy organisations regarding the conclusion that once encryption is broken, the entire system is no longer secure for its users.

The Court also mentions that encryption is vital to security of users. Consider, for instance, the importance of data protection in the current privacy context. Without adequate data encryption, people cannot be sure that the data they store in, for instance, cloud storage, is accessible to only them. Encryption therefore also helps against hacking, identity fraud, and data theft (para 76 of the judgment).

The Podchasov case is straight-forward: encryption is vital to the protection of the right to privacy. The Court’s clear statements will influence ongoing encryption debates, but the end of the debate is not in sight.

Monday, 10 January 2022

Update to the Commentary on the EU Charter of Fundamental Rights: Article 47 and the rule of law


 


 


 

European norms on the independence of the judiciary and the rule of law

 

The following is a precise of the most recent developments on the question of independence of the judiciary and the rule of law. It is to be read in conjunction with paragraphs 47.349 to 47.359 in S. Peers, T. Hervey, J. Kenner, and A. Ward (eds.) The EU Charter of Fundamental Rights: a Commentary (2021, Bloomsbury, second edition).

 

Manifestly irregular judicial appointments

 

Manifestly irregular judicial appointments

 

1.      The question of manifestly irregular judicial appointments has been addressed in case law of both the European Court of Human Rights and the CJEU. The former tribunal has confirmed that Article 6(1) ECHR is also applicable to proceedings before constitutional courts. It follows that a panel of a constitutional court which includes an individual irregularly elected to this body, and manifestly violating, inter alia, the said constitutional court’s previous judgments, cannot be said to be a ‘tribunal established by law’.[1] In two subsequent judgments, the European Court of Human Rights has further established that Poland’s two newly chambers created by Poland’s current governmental coalition do not constitute tribunals established by law within the meaning of Article 6(1) ECHR due inter alia to the undue influence exercised by the legislative and executive powers and the fundamental irregularities that adversely affected the procedure for appointing judges to these two new chambers.[2]

 

2.      The CJEU has equally held in its ruling in Case C-487/19 with reference to the second subparagraph of Article 19(1) TEU and the principle of primacy of EU law that the order by which a judge dismissed the action of a judge transferred against his will must be declared null and void if the appointment of the deciding judge ‘took place in clear breach of fundamental rules which form an integral part of the establishment and functioning of the judicial system concerned’ and ‘the integrity of the outcome of that procedure is undermined … with the result that that order may not be regarded as being made by an independent and impartial tribunal previously established by law’.[3] Most recently, the European Commission launched its first ever infringement action against a Member State on account of the unlawful appointments made to the national constitutional court in breach of the fundamental rules forming an integral part of the establishment and functioning of the system of constitutional review in the Member State, which led the Commission to conclude that the said constitutional court no longer meets the requirements of a tribunal previously established by law, as required by Article 19(1) TEU.[4]

 

3.      It is now firmly established that compliance by a Member State with the values enshrined in Article 2 TEU is a condition for the enjoyment of all of the rights deriving from the application of the Treaties to that Member State.  In consequence, a Member State cannot amend its legislation in such a way as to bring about a reduction in the protection of the value of the rule of law, a value which is given concrete expression by, inter alia, Article 19 TEU. The Member States are thus required to ensure that, in the light of that value, any regression of their laws on the organisation of justice is prevented, by refraining from adopting rules which would undermine the independence of judges.[5]

 

4.      Development of jurisprudence on manifestly irregular judicial appointments has not emanated exclusively from Poland. In this context, one must also take due note of the CJEU’s Grand Chamber judgment as regards the provisions governing judicial appointments in Malta in which the Court was asked inter alia to clarify whether the second subparagraph of Article 19(1) TEU and Article 47 of the Charter must be interpreted as precluding national laws conferring a decisive power to the Prime Minister with respect to the appointment of new judges.[6] For the Court, Article 47 of the Charter was not, as such, applicable to the dispute, because the plaintiff was not relying on a right conferred on it by a provision of EU law. The second subparagraph of Article 19(1) TEU was, by contrast, relevant and applicable as it sought ‘to ensure that the system of legal remedies established by each Member State’ guaranteed ‘effective judicial protection in the fields covered by EU law’.[7] For the first time, the Court also explicitly held that ‘the second subparagraph of Article 19(1) TEU must be interpreted as precluding national provisions relating to the organisation of justice which are such as to constitute a reduction, in the Member State concerned, in the protection of the value of the rule of law, in particular the guarantees of judicial independence’.[8] The Court did not, however, detect any regression as far as the situation in Malta was concerned, to the extent the process of appointing judges appeared to have been made more objective following the establishment of a sufficiently independent Judicial Appointments Committee.

 

 

Objective legitimate doubts with respect to independence

 

5.      The CJEU has clarified that the second subparagraph of Article 19(1) TEU must be interpreted as precluding national legislative changes where it is apparent that these changes ‘are capable of giving rise to legitimate doubts, in the minds of subjects of the law, as to the imperviousness of the judges appointed, by the President of the Republic of Poland, on the basis of those decisions of the KRS [National Council of the Judiciary], to external factors, in particular, to the direct or indirect influence of the legislature and the executive, and as to their neutrality with respect to the interests before them and, thus, may lead to those judges not being seen to be independent or impartial with the consequence of prejudicing the trust which justice in a democratic society governed by the rule of law must inspire in subjects of the law’.[9] This rule extends to appointment of judges to managerial posts and to the designation of prosecutors,[10] with the CJEU having held that Member State rules governing the personal liability of judges for judicial error can be inconsistent with Article 2 TEU and the second subparagraph of Article 19 (1) TEU.[11] 

 

6.      The same applies to the appointment of judges to disciplinary chambers. Such appointments are to contain safeguards to secure the independence of judges subject to disciplinary regimes,[12] seen from this objective standard. Further, in order to avoid any risk of a disciplinary regime  being used as a system of political control of the content of judicial decision, such a regime must include rules defining the forms of conduct which constitute a disciplinary offence,[13] and with sufficient clarity.[14] 

 

7.      In addition to this, too broader a discretion in the hands of an individual judge in the designation of the competent disciplinary tribunal to adjudicate on a given case is inconsistent with the requirement under EU law (notably Articles 19 (1) TEU,  47 and 48 of the Charter) for tribunals to be ‘established by law’.[15] The rights of the defence and adjudication within a reasonable time are also to be protected in such proceedings.[16]

 

8.      Finally, given that the Article 267 reference mechanism is a keystone of the EU judicial edifice, provisions of national law which expose national judges to disciplinary proceedings as a result of the fact that they made a reference for a preliminary ruling to the CJEU cannot be permitted.[17] Equally, objections to the effect that the referring body did not amount to a ‘court or tribunal’ under Article 267 TFEU for failure to comply with domestic requirements with respect to its composition will not be reviewed by the CJEU, given the established rule that ‘it is not for the Court, in view of the distribution of functions between itself and the national court, to determine whether the order for reference was made in accordance was made in accordance with the rules of national law governing the organisation of the courts and their procedure.’[18] The CJEU is therefore bound by an order for reference in so far as that order has not been rescinded on the basis of means of redress provided by Member State law.[19]

 

9.      Thus, a rule of national law cannot prevent a national court from exercising the discretion to refer under Article 267 TFEU, which is inherent part of the system of cooperation between the national courts and the Court of Justice established in Article 267 TFEU. In consequence, a national court must be able to maintain a reference for a preliminary ruling after it has been made. A national rule the effect of which may inter alia be that a national court will choose to refrain from referring questions for a preliminary ruling to the Court in order to avoid having the case withdrawn from it is detrimental to the prerogatives thus granted to national courts and tribunals by Article 267 TFEU and, consequently, to the effectiveness of the cooperation between the Court and the national courts and tribunals established by the preliminary ruling mechanism. Consequently, while it is in principle permissible for a Member State, for example, to amend its domestic rules conferring jurisdiction, with the possible consequence that the legislative basis on which the jurisdiction of a national court which has made a reference for a preliminary ruling has been established will disappear, or to adopt substantive rules that have the incidental consequence of rendering the case in which such a reference was made devoid of purpose, a Member State cannot, without infringing Article 267 TFEU, read in conjunction with the third subparagraph of Article 4(3) TEU, make amendments to its national legislation the specific effects of which are to prevent requests for a preliminary ruling addressed to the Court from being maintained after they have been made, and thus to prevent the latter from giving judgment on such requests, and to preclude any possibility of a national court repeating similar requests in the future.[20] Similarly, EU law precludes a national supreme court from declaring a request for a preliminary ruling submitted by a lower court unlawful on the ground that the questions are not relevant and/or necessary with EU law directly granting national courts the authority to disregard any national judicial practice which is prejudicial to their right to make a reference to the Court of Justice.[21]

Consequences following from the obligations enshrined in Article 19 (1) TEU

 

10.  Where it is proved that the second subparagraph of Article 19(1) TEU has been infringed, the principle of primacy of EU law must be interpreted as requiring the referring court to disapply relevant national provisions, even in the face of impediments to so doing under domestic constitutional law.[22] Interim relief must also be available under Member State law to guarantee the independence of the judiciary,[23] just as it is before the CJEU to secure compliance of a Member State with a judgment issued in consequence of a direct action instituted by the Commission for non-compliance with respect for the rule of law and the independence of the judiciary inconsistently with Article 2 TEU and the second sub-paragraph of Article 19(1) TEU.[24]  Pending a ruling on independence, a judge should not be appointed,[25] and any order issued by such a judge must be voided, in accordance with the primacy of EU law.[26]

 

11.   More broadly, the second subparagraph of Article 19(1) TEU requires Member States to provide remedies that are sufficient to ensure effective legal protection, within the meaning in particular of Article 47 of the Charter, in the fields covered by EU law, meaning that the latter provision must be duly taken into consideration for the purposes of interpreting the second subparagraph of Article 19(1) TEU.[27] Given that the Article 47 of the Charter has been held to have direct effect,[28] the second subparagraph of Article 19(1) TEU imposes on the Member States a clear and precise obligation as to the result to be achieved and that obligation is not subject to any condition as regards the independence which must characterise the courts called upon to interpret and apply EU law.[29]  Under the second subparagraph of Article 19(1) TEU, every Member State must ensure that the bodies which, as ‘courts or tribunals’ within the meaning of EU law, come within its judicial system in the fields covered by EU law and which, therefore, are liable to rule, in that capacity, on the application or interpretation of EU law, meet the requirements of effective judicial protection.[30]

 

12.  The remedial rights of Member States are protected, in the sense that the CJEU has ruled that it had jurisdiction to judicially review a resolution of the European Parliament on a proposal calling on the Council of the European Union to determine the existence of a clear risk of a serious breach of the values on which the European Union is founded.[31]

Photo credit: Razvan Orendovici, via wikicommons


[1]Xero Flor w Polsce sp. z o.o. v. Poland, CE:ECHR:2021:0507JUD000490718. For further analysis, M. Szwed, ‘What Should and What Will Happen After Xero Flor: The judgement of the ECtHR on the composition of the Polish Constitutional Tribunal’, VerfBlog, 9 May 2021, <https://verfassungsblog.de/what-should-and-what-will-happen-after-xero-flor>; M. Leloup, ‘The ECtHR Steps into the Ring: The Xero Flor ruling as the ECtHR’s first step in fighting rule of law backsliding’, VerfBlog, 10 May 2021, <https://verfassungsblog.de/the-ecthr-steps-into-the-ring>.

[2] See Judgment of 22 July 2021, Reczkowicz v. Poland, CE:ECHR:2021:0722JUD004344719 (the Disciplinary Chamber of the Poland’s Supreme Court is not a tribunal established by law); Judgment of 8 November 2021, Dolińska-Ficek and Ozimek v. Poland, CE:ECHR:2021:1108JUD004986819 (the Chamber of Extraordinary Review and Public Affairs of Poland’s Supreme Court is not an independent and impartial tribunal established by law).

[3] Case C-487/19, W.Ż., EU:C:2021:798, paragraph 162. See also Opinions of AG Tanchev in W.Ż., C-487/19, EU:C:2021:289 and M.F., C-508/19, EU:C:2021:290.

[4] European Commission, Rule of Law: Commission launches infringement procedure against Poland for violations of EU law by its Constitutional Tribunal, Press release IP/21/7070, 22 December 2021: https://ec.europa.eu/commission/presscorner/detail/en/IP_21_7070.

[5] E.g. judgment of 15 July 2021, Commission v Poland (Régime disciplinaire des juges) EU:C:2021:596, [51], (referring to judgments of 20 April 2021, Repubblika, C‑896/19, EU:C:2021:311, [63 to 65] and the case-law cited, and judgment of 18 May 2021,  Asociaţia ‘Forumul Judecătorilor din România’ and Others, C-83/19, C-127/19, C-195/19, C-291/19, C-355/19, and C-397/19, EU:C:2021:393, [162]. For a transversal and comprehensive overview of the Court’s case law starting with ASJP, C-64/16, EU:C:2018:117 and ending with Repubblika, C-896/19, EU:C:2021:31, see L Pech and D Kochenov, Respect for the Rule of Law in the Case Law of the European Court of Justice: A Casebook Overview of Key Judgments since the Portuguese Judges Case (Stockholm, SIEPS, 2021).

[6] Judgment of 20 April 2021, Repubblika v Il-Prim Ministru, C-896/19, EU:C:2021:31.

[7] [52].

[8] [65].

[9] Judgment of 2 March 2021, A.B. et al (Appointment of judges to the Supreme Court – Actions), C-824/18, EU:C:2021: [153], [150] and [167]. See further judgment of 15 July 2021, Commission v Poland (Régime disciplinaire des juges), C-791/19, EU:C:2021:596, [99 to 110]. See further on Poland’s K.R.S, the judgments of 19 November 2019, A.K. and others (Independence of the Disciplinary Chamber of the Supreme Court, C-585/18, C-624/18, and C-625/18, EU:C:2019:982, and of 2 March 2021, AB and Others, C-824/18; EU:C:2021:153.

[10] Judgment of 18 May 2021, Asociaţia ‘Forumul Judecătorilor din România’ and Others, C-83/19, C-127/19, [C-195/19, C-291/19, C-355/19, and C-397/19, EU:C:2021:393

[11] Ibid, [224 to 241].

[13] Judgment of 15 July 2021, Commission v Poland (Régime disciplinaire des juges), C-791/19, EU:C:2021:596, [134]. For further analysis, see L. Pech, ‘Protecting Polish Judges from Political Control: A brief analysis of the ECJ’s infringement ruling in Case C-791/19 (disciplinary regime for judges) and order in Case C-204/21 R (muzzle law)’, VerfBlog, 20 July 2021: https://verfassungsblog.de/protecting-polish-judges-from-political-control/

[14] Ibid [140] and the case law cited.

[15] Ibid [164 to 176]. See recently on the concept of ‘established by law’ the Opinion of Advocate General Bobek of 8 July 2021, C-132/20, Getin Noble Bank, EU:C:2021:557, judgment pending. For a critical assessment of this Opinion, see L. Pech and S. Platon, ‘How not to deal with Poland’s fake judges’ requests for a preliminary ruling: A critical analysis of AG Bobek’s proposal in Case C-132/20’, Verfblog, 28 July 2021: https://verfassungsblog.de/how-not-to-deal-with-polands-fake-judges-requests-for-a-preliminary-ruling/

[16] Ibid [187 to 214]. See further on the rights of the defence, in the context of the presumption of innocence with respect to termination of the secondment of a judge, the judgment of 16 November 2021, WB, Joined Cases C-748/19 and C-754/19, EU:C:2021:931 [88-89]

[17] Ibid [227] and the case law cited. See also the judgment of 23 November 2021, IS (Illegality of the order for reference), C-564/19, EU:C:2021:949.

[18]  Judgment of 16 November 2021, WB and Others, Joined Cases C-748/19 to C-754/19, EU:C:2021:931, [44]

[20] Judgment of 2 March 2021, AB and Others, C-824/18; EU:C:2021:153, [93 – 95], referring to, inter alia, judgment of 19 November 2019, A.K. and others (Independence of the Disciplinary Chamber of the Supreme Court, C-585/18, C-624/18, and C-625/18, EU:C:2019:982. See also [141] of the judgment of 2 March 2021, AB and Others, C-824/18; EU:C:2021:153.

[21] Judgment of 23 November 2021, IS (Illegality of the order for reference), C-564/19, EU:C:2021:949.

[22] Judgment of 18 May 2021, Asociaţia ‘Forumul Judecătorilor din România’ and Others, C-83/19, C-127/19, C-195/19, C-291/19, C-355/19, and C-397/19, EU:C:2021:393 [242 to 252]. See also judgments of 6 October 2021, WZ, C-487/19? EU:C:2021:798 [155 to 161], and of 2 March 2021, AB and Others, C-824/18; EU:C:2021:153, [81] and [140 to 148]; judgment of 21 December 2021, Euro Box Promotion e.a., C-357/19, C-379/19, C-547/19, C-811/19 and C-840/19, C:2021:1034. 

[23] Judgment of 6 October 2021, WZ, C-487/19? EU:C:2021:798 [142]

[24] E.g. judgment of 6 October 2021, Poland v Commission, C-204/21 R – RAP, EU:C:2021:834; judgment of 27 October 2021 R, Commission v Poland, C-204/21 R, EU:C:2021:878.

[25] Judgment of 6 October 2021, WZ, C-487/19, EU:C:2021:798 [143].

[26]  Ibid, [155]

[27]  Judgment of 2 March 2021, AB and Others, C-824/18; EU:C:2021:153, [143], referring to, inter alia, judgment of 19 November 2019, A.K. and others (Independence of the Disciplinary Chamber of the Supreme Court, C-585/18, C-624/18, and C-625/18, EU:C:2019:982.

[28] Ibid, [145].

[29] Ibid, [146].

[30] Ibid [114] and the case law cited.

[31] Judgment of 3 June 2021, Hungary v European Parliament, C-650/18, EU:C:2021426. See also the Opinion of Advocate General Bobek of 3 December 2020, EU:C:2020:985, and the Opinion of Advocate General Sánchez Bordona, Hungary v European Parliament and Council, C-156/21, EU:C:2021:974.