European Private Law and Fundamental Rights

European Private Law and Fundamental Rights represent a dynamic and complex field that shapes how individuals and states interact across the continent. For students delving into this area, understanding its multi-layered structure and the increasing influence of fundamental rights is crucial. This article provides a comprehensive overview of European Private Law (EPL), explores the vital role of fundamental rights (FRs), and examines data protection as a key example of how these concepts intertwine.

Understanding European Private Law: A Multi-Level Landscape

European Private Law is not a single, unified code, but rather a multi-level field of study and practice. It involves national laws, EU law, the European Convention on Human Rights (ECHR), and international instruments. This complexity requires a global jurist to operate within a diverse framework.

Why Private Law Remains Primarily National

Despite a shared history rooted in Roman law and ius commune, private law largely remains national due to several factors:

• Historical Reasons: The 19th-century rise of nation-states led to the codification of private law, making civil codes central to national identity and legislative authority. As Collins notes, civil codes and common law systems are symbols of national identity.
• Contemporary Reasons: Core concepts like autonomy, good faith, property, and liability are deeply embedded in national political and cultural traditions. Furthermore, private law rights require state-based enforcement, and regulatory competition sees states using their private law to attract business.

Main National Sources of Private Law

National legal systems form the bedrock of private law, drawing from various sources:

• Constitutions: These are increasingly influential, establishing principles (e.g., equality, proportionality) and fundamental rights (e.g., dignity, privacy, property, freedom to conduct a business). Constitutions impact private relations through conforming interpretation, constitutional review, and horizontal effect. Collins points out the ambiguity: they can express cosmopolitan human rights ideals but also reinforce national identity.
• Civil Codes: In civil-law countries (like France, Germany, Netherlands, Italy), these codes provide systematic and largely complete frameworks for private law disputes. While covering similar areas (persons, property, obligations), their structures and concepts differ.
• Special Legislation and Other Sources: Many specific areas, such as consumer, labor, digital, and environmental law, are regulated by special statutes, often influenced by EU law. Courts develop case law, principles, and gap-filling doctrines, while private regulation (standards, codes of conduct) also plays a role. Academic projects like the Common Core and DCFR influence legal debates.

The Role of Private International Law (PIL) and International Substantive Law

Private International Law is essential for cross-border disputes involving national private laws. It typically involves:

1. Legal Qualification: Categorizing the dispute (e.g., contract, tort).
2. Connecting Factor: Identifying the relevant link (e.g., habitual residence, place of performance).
3. Applicable Law: Determining the law based on the connecting factor. Parties often have autonomy to choose applicable law in contracts, though with protections for weaker parties. Sources include national PIL rules, Hague conventions, and EU regulations (e.g., Rome I, Rome II).

International Substantive Private Law consists of conventions and soft law that provide uniform rules (e.g., CISG, UNIDROIT Principles). These instruments are sector-specific and complementary, co-existing with national and EU law rather than replacing them.

“European Private Law” as a Field of Study

EPL is not a codified European Civil Code but rather:

• The segment of national private law shaped by EU treaties, secondary legislation, and CJEU case law.
• Soft-law instruments and academic projects (e.g., PECL, PETL, DCFR). These academic works function as interpretative tools and models for future law-making, with the DCFR being particularly influential.

While the European Parliament once called for a European Civil Code, political realities have led to a piecemeal approach. Today, EPL is primarily made through EU directives/regulations in specific fields, CJEU case law, and academic work.

EU Competences and Techniques in Private Law Harmonisation

The EU has no general competence for private law. Its actions are based on specific, shared competences such as the internal market (Arts. 26, 114, 115 TFEU), consumer protection, and social policy. Divergences must actually hinder trade or distort competition for the EU to act. EU law instruments include:

• Directives: The main tool, binding as to the result, allowing national implementation choices, and often providing minimum or full harmonization.
• Regulations: Directly applicable, increasingly used (e.g., GDPR).

The CJEU's case law and general principles (e.g., effectiveness, fundamental rights) also reshape national private and procedural law. Furthermore, EU norms can have horizontal effects, meaning they can impose obligations between individuals, blurring the vertical/horizontal distinction (e.g., Mangold, Kücükdeveci, Bauer).

Fundamental Rights in Private Law: Shaping Autonomy

Fundamental Rights (FRs) are essential protections found in national constitutions, the ECHR, and the Charter of Fundamental Rights of the EU (CFREU). The CFREU's preamble emphasizes dignity, freedom, equality, solidarity, democracy, and the rule of law, placing the individual at the center.

Why Fundamental Rights Matter for Private Law

FRs are not solely about limiting state action; they profoundly reshape private autonomy. Examples include:

• Medical treatment against a patient's will.
• Contracts involving body parts or personal data.
• Conflicts between media freedom and privacy/reputation.
• Discriminatory wills or employment practices.

Key takeaways are that FRs limit contractual freedom and property rights, and they also limit each other, making balancing a central element. Most FRs are not absolute; they can be limited under defined conditions, unlike the absolute prohibition of inhuman or degrading treatment (Art. 4 CFREU).

Legal Bases for FR Protection and the Charter's Role

FR protection operates at multiple levels:

• National constitutions and courts.
• ECHR and the European Court of Human Rights (ECtHR).
• EU law (Treaties + CFREU) and the Court of Justice of the EU (CJEU).

The CFREU serves as a source of inspiration, an interpretative aid, and a ground for judicial review within EU law. EU legislation can be annulled, and national law implementing EU law can be set aside if it breaches the Charter. While common values are balanced with respect for national diversity, EU legislation can set a uniform level of protection or allow national diversity above a minimum Charter standard, provided the primacy and effectiveness of EU law are preserved (Art. 6(3) TEU).

Effects of the Charter on National Law

• Vertical Dimension: The Charter primarily addresses EU institutions and Member States only when they are implementing Union law. As Art. 51 CFREU states, it does not extend EU competences; it's the shadow of EU law.
• Horizontal Dimension: While Art. 51(1) doesn't explicitly exclude it, certain Charter provisions can directly bind individuals. The Bauer case confirmed that sufficiently clear and unconditional rights (e.g., right to paid annual leave, Art. 31(2) CFREU) can confer rights on workers against private employers in fields covered by EU law.

Generally, principles (Art. 52(5) CFREU) are implemented via legislation and used for interpretation, while provisions clearly granting subjective rights can have direct horizontal effect, though the distinction is not always clear.

Horizontal Effect of FRs and Their Limitation

Cases like IR v JQ (C-68/17) confirm the horizontal effect of fundamental rights, especially in employment. This case involved a dispute between a Catholic hospital and a doctor, where the prohibition of discrimination on religion (Art. 21 CFREU) was held to be mandatory and enforceable between private parties in fields covered by EU law.

Limitations to FRs, as per Art. 52(1) CFREU, must:

• Be provided by law.
• Respect the essence of the right.
• Be necessary and proportionate.
• Pursue general interests recognized by the Union or protect others’ rights.

Examples like discriminatory pay agreements or employer vaccination obligations must pass this test.

Remedies and Effective Protection

For FRs to be truly effective, remedies must be robust. As shown in Diskrimineringsombudsmannen (C-30/19), purely economic settlements might be insufficient. Effective protection of equality rights may require courts to be able to declare whether discrimination occurred, emphasizing the non-economic nature of many harms (dignity, equality). Remedies must be effective, proportionate, and dissuasive.

Data Protection as a Fundamental Right: A Core EU Principle

Data protection is a paramount example of a fundamental right deeply integrated into European Private Law. It's often confused with privacy but has distinct characteristics.

Privacy vs. Data Protection

• Privacy: Generally refers to protection against unwarranted intrusion into private life (Art. 7 CFREU, ECHR-style).
• Data Protection: A distinct right (Art. 8 CFREU) focusing on specific control over the processing of personal data (collection, use, disclosure, safeguards). It ensures fair processing, specified purposes, a legal basis, access/rectification, and supervision by an independent authority.

Historically, privacy in Continental Europe has been tied to dignity and control over one's public image, whereas in the US, it focused more on liberty against state intrusion. EU data protection evolved from this dignity and informational self-determination perspective.

Personal Data: An Intentionally Broad Concept

The concept of personal data is intentionally very broad. The GDPR Art. 4(1) defines it as any information relating to an identified or identifiable natural person. Identifiability is broad, covering both direct and indirect identifiers. While the Data Act defines data broadly as any digital representation, the Digital Omnibus proposal attempts to narrow GDPR scope by suggesting information isn't personal data for an entity if that entity cannot reasonably identify the person.

Why Data Protection is a Fundamental Right

Data protection interacts with multiple FRs, making it a stand-alone right (Art. 8 CFREU):

• Privacy.
• Freedom of information/no-information.
• Autonomy and identity.
• Non-discrimination (especially for special categories under Art. 9 GDPR).

Misuse of data (e.g., profiling, reputational damage, chilling effects) directly affects these interests, justifying its status as a distinct fundamental right.

Balancing Data Protection with Other Rights

Like other fundamental rights, data protection must often be balanced with competing interests:

• Data Protection vs. Health: Art. 9 GDPR generally prohibits processing special categories of data, including health data, with specific exceptions (e.g., vital interests, public health interests). Even when collected for public health, such as during a pandemic, processing must meet legality, necessity, proportionality, and safeguards.
• Data Protection vs. Freedom of Expression – Google Spain: The CJEU's ruling in the Google Spain case (search results linking a name to old debt notices) involved balancing privacy, data protection, freedom of expression, and the public's right to information. The Court found search engines to be controllers of data and ruled that, as a rule, Arts. 7 and 8 CFREU override the economic interests of search engines and the general public interest in name-based searches, except for public figures. This led to the emergence of a right to be forgotten against search engines.

GDPR Right to Erasure (Art. 17)

Article 17 of the GDPR codifies the right to erasure (also known as the right to be forgotten), balancing data protection with other interests:

When can data be erased (Art. 17(1))?

• Data is no longer necessary for its original purpose.
• Consent is withdrawn, and there's no other legal basis.
• A successful objection to processing has been made.
• Processing is unlawful.
• There's a legal obligation to erase.
• Data was collected in the context of information society services offered to a child.

If data has been made public, the controller must take reasonable steps to inform other controllers of the erasure request (Art. 17(2)).

Exceptions to erasure (Art. 17(3)): Processing may be necessary for:

• Exercising freedom of expression and information.
• Compliance with a legal obligation or public task.
• Public health interests.
• Archiving in the public interest, scientific/historical research, or statistical purposes, with safeguards.
• The establishment, exercise, or defense of legal claims.

Data Protection in the EU Legal Order

Data protection has both national and EU dimensions. Many national constitutions protect privacy/data. At the EU level, Art. 16 TFEU recognizes data protection as a right and grants legislative competence. EU data protection, particularly the GDPR, is simultaneously rights-driven (guaranteeing a fundamental right) and market-driven (ensuring free movement of personal data within the internal market).

Core GDPR Principles and Legal Bases

Art. 5 principles guide data processing:

• Lawfulness, fairness, transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

Art. 6 legal bases specify conditions for lawful processing:

• Consent
• Contractual necessity
• Legal obligation
• Vital interests
• Public interest/official authority
• Legitimate interests (subject to balancing, especially for children)

Consent (Arts. 4(11), 7) must be freely given, specific, informed, and unambiguous. The Orange Romania case clarified that pre-ticked boxes, misleading clauses, or burdensome refusal methods do not constitute valid consent; there's no take it or leave it or hidden consent in standard contracts.

Data Subject Rights and Enforcement

Chapter III of the GDPR outlines robust data subject rights:

• Information, access, rectification, erasure, restriction of processing, data portability, objection, and protection against fully automated decisions with significant effects.

Enforcement is handled by independent supervisory authorities (DPAs) with investigative and sanctioning powers. Individuals also have judicial remedies against DPAs and controllers/processors. Art. 82 GDPR grants the right to compensation for material and non-material damage. The Österreichische Post (C-300/21) case confirmed that there is no threshold of seriousness for non-material damage, and compensation must be full and effective, covering distress or reputational harm without being punitive.

Frequently Asked Questions about European Private Law and Fundamental Rights

What is European Private Law (EPL) and how is it structured?

European Private Law is a multi-level field encompassing national private laws, EU law, the ECHR, and international substantive instruments. It is not a single code but a dynamic area shaped by directives, regulations, CJEU case law, and academic soft law. Its structure is complex, integrating national legal traditions with EU-level harmonization efforts.

Why do Fundamental Rights matter for private law relations?

Fundamental Rights extend beyond state action, directly impacting and limiting private autonomy. They influence aspects like contractual freedom, property rights, and individual interactions, such as employment or data handling. FRs require balancing competing interests and ensure protections like non-discrimination, privacy, and freedom of expression are upheld even between private parties.

How does the EU Charter of Fundamental Rights (CFREU) affect national laws?

The CFREU primarily binds EU institutions and Member States when they are implementing EU law. While it doesn't generally extend EU competences, its provisions can inspire, interpret, and review EU legislation. Certain rights under the Charter can also have horizontal effect, meaning they can directly create obligations between private individuals, especially in areas covered by EU law, as seen in non-discrimination cases.

What is the distinction between privacy and data protection in the EU context?

Privacy (Art. 7 CFREU) broadly protects against unwarranted intrusion into private and family life. Data protection (Art. 8 CFREU) is a distinct and more specific right focused on controlling the processing of personal data, ensuring fairness, legality, purpose limitation, and the right to access and rectify data. It evolved from a concept of informational self-determination, distinct from simple secrecy.

What are the key principles of GDPR and what rights do individuals have?

The GDPR is guided by principles such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability. Individuals (data subjects) have extensive rights, including the right to information, access, rectification, erasure (the right to be forgotten), restriction of processing, data portability, objection, and the right not to be subjected to fully automated decisions with significant effects. These rights are enforced by supervisory authorities and through judicial remedies.