11 obscure questions, Facebook, Max Schrems and the European Court of Justice

Seven years in court

Between those two judgments and the answers on Thursday lies a court case now in its seventh year. The litigation, starting in the Irish High Court in 2013, passed from the Irish High Court to the European Court of Justice in 2015, then back to the Irish High Court in 2016, and finally to the Irish Supreme Court in 2018, where a definitive judgment was made on 31 May 2019. But not quite. In 2018, in mid-flight between the Irish High Court and the Irish Supreme Court, an Irish judge, Caroline Costello, sent 11 questions about the matter to the European Court of Justice, which will be decided this week.

On 31 May 2019, led by the chief justice of Ireland, judge Frank Clarke, the Irish Supreme Court unanimously dismissed an application by the US government and Facebook to quash judge Hogan’s findings of 18 June 2014 – that the US was engaged in “mass and indiscriminate surveillance” throughout the EU (including the UK).

Until the US halts the Prism programme, its nine agents, named in the UK Parliamentary Hansard on 17 April 2018, and again on 14 February 2019, as Microsoft, Apple, Google, Facebook, Yahoo, Hotmail, Skype, You Tube and AOL, remain in the frame for their part in enabling serious breaches of all EU and UK data protection laws. By now, the number of companies taking part in Prism and similar surveillance programmes must be far greater.

Boris Johnson’s meeting in the Wirral

On 1 November 2018, the UK’s biggest spy agency, GCHQ, made a public appeal in Dublin for the Irish spooks to get on board for a campaign against alleged Russian cyber crime.

The Irish spooks pointed out that questions had been raised in the Irish courts about GCHQ’s partner in surveillance, the US National Security Agency, over its interception of data of EU citizens. 

On 10 October 2019, during a three-hour meeting with the Irish premier (Taoiseach) at the Thornton Manor Hotel on the Wirral, prime minister Boris Johnson was reminded of what the Irish intelligence agency, G2, had told GCHQ. Johnson was also appraised, in detail, of the findings of the Irish Supreme Court.

He was, it has been suggested, told that if GCHQ continued its partnership with the NSA, against EU citizens, the EU would consider cutting the UK off from all EU data transfers.  

In the front line of all this are the 37 million UK users of the internet, who have had their data captured by the US. After seven years of major litigation, all of it affecting them but none of it in the UK, in two Supreme Courts, one High Court and from the UK Parliament, but unreported, at an estimated cost of over £50m, UK internet users are unaware of the scale of the unlawful theft of their data.