Internet companies can be made to remove irrelevant or excessive personal information from search engine results, Europe's top court ruled on Tuesday in a case pitting privacy campaigners against Google.
In a landmark case, the Court of Justice of the European Union (ECJ) upheld the complaint of a Spanish man who objected to the fact that Google searches on his name threw up links to a 1998 newspaper article about the repossession of his home.
The case highlighted the struggle in cyberspace between free speech advocates and supporters of privacy rights who say people should have the "right to be forgotten" - meaning that they should be able to remove their digital traces from the Internet.
It creates both technical challenges and potential extra costs for companies like Google, the world's no.1 search engine, and Facebook.
In an advisory judgment that will impact all search engines, including Yahoo and Microsoft's Bing, the court said a search on a person's name yields a results page that amounts to an individual profile. Under European privacy law, it said people should be able to ask to have links to private information in that "profile" removed.
Personal privacy vs. freedom of information
Campaigners say the ruling effectively backs individual privacy rights over the freedom of information.
Google said it was disappointed with the ruling, which contradicted a non-binding opinion from the ECJ's court adviser last year that said deleting sensitive information from search results would interfere with freedom of expression.
"We are very surprised that it differs so dramatically from the Advocate General's opinion and the warnings and consequences that he spelled out. We now need to take time to analyze the implications," said Google spokesman Al Verney.
The European Commission proposed in 2012 that people should have the "right to be forgotten" on the Internet. This was watered down by the European Parliament last year in favor of a "right to erasure" of specific information.
The proposal needs the blessing of the 28 European Union governments before it can become law.
Google, Facebook and other Internet companies have lobbied against such plans, worried about the extra costs.
The issues of privacy and data protection in Europe have become all the more sensitive since a former U.S. intelligence contractor, Edward Snowden, leaked details last year of U.S. surveillance programs for monitoring vast quantities of emails and phone records worldwide.
Tuesday's court ruling will likely benefit ordinary people but not public figures, said Larry Cohen, a partner at law firm Latham & Watkins.
European Justice Commissioner Viviane Reding said that the court ruling vindicated EU efforts to toughen up privacy rules.
"Companies can no longer hide behind their servers being based in California or anywhere else in the world," she said on her Facebook page, calling the judgment a "strong tailwind" for data protection reform.
Google suffered a previous privacy setback earlier this year when a German court ordered it to block search results in Germany linked to photos of a sex party involving former Formula One motor racing boss Max Mosley.
Some information for this report was provided by Reuters and AP.