The European Directive of 22 October 2014 ot the European Parliament and of the Council as regard disclosure of non-financial and diversity information by certain large undertaking  and groupe  comes from afar.

Some present it as a step of an "irrestible rises  of Corporate Social Responsabilité.  This text would be a  a "step forward" and a "strong signal".

It is true the Directive of the European Parliament and the Council follows a consultation conducted for several years by the European Commission on the subject of Social Responsibility. Whatever might have said the "stakeholders", the Directive contains the same lines tham the European Commission Communication of 13 April 2011, adopted on 25 October 2011 on the topic.

It is difficult today to oppose "Hard Law" and "Soft Law": Law hardens gradually. Thus, from the "communication", we went to the "resolutions", whose status remains uncertain, both a communication firmer but less binding than a law, since resolution is only for its author ... Thus Parliament in its resolutions of 6 February 2013 'resolved' to design an "inclusive" vision of the corporate action, to dance together profitability and social justice. To get by,  it must suffice to say that the Social Responsibility Company is "multidimensional" ... Guidelines of the European Commission (non-binding) will explicit. Wait and see.

Following a series of obligations on information that companies must make available "to the public and authorities." Thus, companies must do the work instead of public authorities themselves. The provisions relating to non-financial information are mandatory and standardized. They are particularly demanding on the environment.

But when the text provides more substantial obligations, such as making the activity business less polluting, the Directive simply ask the member states to encourage companies to adopt "best practices" in the field. The market itself is incitative, in particular for making boards of large corporations more diverses. Because the principle is the belief that "investor access to non-financial information is a step towards achieving the goal of effective .... Europe in the use of resources," in a regulatory context of a "smart, sustainable and inclusive" growth".

 

Translated Summaries

ENGLISH

In May 2011, Nasdaq OMX and its partner Intercontinental Exchange (ICE) were authorized by their respective boards of directors to perform a tender offer on the stock market operator NYSE Euronext. The American Department of Justice was worried about the consequences that this operation would have on competition, and despite the remedies proposed by the two companies, notified them that it would refuse the merger. On May 16, 2011, this potential refusal was enough for Nasdaq OMX and ICE to abandon their plan. This game of signals demonstrates the power of interregulation between merger review and the regulation of tender offers.

Capital market - Competition - Concentration - Financial market - Initial Public Offering (IPO) - Regulator - Self regulation - United States *

* In The Journal of Regulation, these keywords are done by the Editor and not by the Author.

Capital market - Competition - Concentration - Financial market - Initial Public Offering (IPO) - Regulator - Self regulation - United States *

 

* In The Journal of Regulation, these keywords are done by the Editor and not by the Author.

ITALIAN

Relazione tematica (Finanza): Il Dipartimento di giustizia americano ha informato Nasdaq e Intercontinental Exchange che rifiuterà la loro offerta pubblica iniziale su NYSE Euronext a ragione degli effetti anticoncorrenziali e le due società hanno quindi abbandonato il progetto.

Durante il mese di maggio 2011, Nasdq OMX ed il suo partner Intercontinental Exchange (ICE) erano stati autorizzati dai propri consigli di amministrazione a fare un’offerta sull’operatore di mercato NYSE Euronext. Il dipartimento di giustizia americano era preoccupato delle conseguenze che tale operazione avrebbe avuto sulla libera concorrenza e, malgrado i provvedimenti proposti dalle due società, aveva informato le società che avrebbe rifiutato la fusione. Il 16 maggio 2011, questo potenziale rifiuto bastò a Nasdaq OMX e ICE a far abbandonare il loro progetto. Questo gioco di segnali mette in rilievo il potere dell’interregolazione tra il controllo delle concentrazioni e la regolazione delle offerte all’asta.

Autoregolazione – Concorrenza - Concentrazione – Mercato finanziario – Mercato dei capitali – Offerta Pubblica Iniziale (IPO) – Regolatore – Stati Uniti d’America *

* In The Journal of Regulation, le parole chiave sono responsabilità dell’Editore e non dall’Autore.

 SPANISH

Informe temático (Finanza): El Departamento americano de justicia informó a Nasdaq y ICE que rechazó su IPO sobre el NYSE Euronext a causa de sus efectos anticompetitivos, y que las dos compañías deben por lo tanto abandonar su plan. NYSE Euronext y Deutsche Börse han decidido merge.

En mayo del 2011, Nasdaq OMX y su partidario, Interncontinental Exchange (ICE), obtuvieron la autorización por sus respectivas juntas directivas para extender una oferta en el operador del mercado de valores, NYSE Euronex. El Departamento americano de justicia comenzó a preocuparse sobre las consecuencias que esta operación tendría sobre la competencia, y a pesar de algunos remedios propuestos por las dos compoañías, notificó que rechazaría la unión. El 16 de mayo del 2011, esta rechazo potencial fue suficiente para que Nasdaq OMX y ICE abandonaran su plan. Este juego de señales demuestra el poder de la inter-regulación entre el proceso de revisión de uniones y la regulación de ofertas públicas de adquisición.

 PORTUGUESE

Informe temático (Finanças): O Departamento de Justiça dos Estados Unidos da América informou Nasdaq e ICE que ele iria rejeitar o IPO em NYSE Euronext por causa de seus efeitos anti-concorrenciais, assim as duas empresas abandonaram seu plano.

Em maio de 2011, Nasdaq OMX e seu parceiro Intercontinental Exchange (ICE) foram autorizados por suas respectivas diretorias a realizar uma oferta no operador do mercado de estocagem NYSE Euronext. O Departamento de Justiça dos Estados Unidos da América ficou preocupado com as conseqüências que esta operação teria na concorrência, e apesar dos contrapesos indicados pelas duas empresas, informou que ele iria recusar a operação. Em 16 de maio de 2011, esta recusa potencial foi suficiente para Nasdaq e OMX e ICE abandonarem seu plano. Este jogo de sinais demonstra o poder da interregulação entre revisão de operações e regulação de ofertas.

Mercado de capitais – Concorrência – Concentração – Mercado financeiro – Oferta pública inicial (IPO) – Regulador – Auto-regulação – Estados Unidos.*

* Em The Journal of Regulation, estas palavras-chave são fornecidas pelo Editor e não pelo Autor.

.....................

Other translations forthcoming.

 

In what it presents as a set of guidelines designed by a risk-driven approach, the FATF published on 21 June 2019 recommendating to fight the use of crypto-assets and cryptocurrency platforms for launderind money and financing terrorism.

This fight against money laundering is (with the fight against corruption) often presented as the core of the Compliance Law. The FATF takes a large part of it. Even if this new branch of Law aims to crystallize other ambitions, such as the fight against tax fraud or climate change, or even the promotion of diversity or education and the preservation of democratie, the legislation of Compliance Law are mature in the matter of money laundering and the terrorism financing, as they are in the fight against corruption.

The news comes then not from the new legal mechanisms but rather from the new technological tools that could allow the realization of the behaviors against which these obligations of compliance have been inserted in the legal system. It is then to these technologies that the law must adapt. This is the case with crypto-assets and cryptocurrency platforms. Because these are rapidly evolving technologies, with the exercise of written guidelines in 2019 to inform the meaning of the provisions adopted in 2018, the FATF is taking the opportunity to change the definition it provides of crypto-assets and cryptocurrencies. So that a too narrow definition by the texts does not allow the operators to escape the supervision (phenomenon of "hole in the racket" - loophole)..  

 

___

 

In fact, in October 2018, the FATC (Financial Action Task Force) developed 15 principles applying to these platforms, to allow this intergovernmental organization to carry out its general mission to combat money laundering and the financing of terrorism. These June 2019 recommendations are to interpret them.

 

In this very important document, where it is expressly stated that it is a matter of fixing the obligations of those who propose crypto-assets and crypto-currencies, the notion of self-regulation is rejected. Il est writter : "Regarding VASP (virtual assets services providers) supervision, the Guidance makes clear that only competent authorities can act as VASP supervisory or monitoring bodies!footnote-119, and not self-regulatory bodies. They should conduct risk-based supervision or monitoring, with adequate powers, including the power to conduct inspections, compel the production of information and impose sanctions. There is a specific focus on the importance of international co-operation between supervisors, given the cross-border nature of VASPs’ activities and provision of services."

On the contrary, it is a matter of elaborating the control obligations that these service providers must exercise over products and their customers (Due Diligences), which must be supervised by public authorities. 

In order to exercise this supervision and monitoring, the national authorities themselves must ensure that they work together : "As the Virtual Assets Services Providers (VASP) sector evolves, countries should consider examining the relationship between AML/CF (Anti-Money Laundering and Counter Terrorist Financint) measures for covered VA activities and other regulatory and supervisory measures (e.g., consumer protection, prudential safety and soundness, network IT security, tax, etc.), as the measures taken in other fields may affect the ML/TF risks. In this regard, countries should consider undertaking short- and longer-term policy work to develop comprehensive regulatory and supervisory frameworks for covered VA activities and VASPs (as well as other obliged entities operating in the VA space) as widespread adoption of VAs continues".

After particularly interesting comparative law information on Italy, the Scandinavian countries and the United States, the report concludes: "International Co-operation is Key", because of the global nature of this activity.

 

Since the issue is not the global Regulation of these platforms and types of products, but only the possible modes of money laundering and terrorist financing to which they may give rise, the FATF recalls that neither crypto-products nor product suppliers are not referred to as such. As the guidance's title recalls, common to the 2018 document adopting the 15 principles and this interpretive document, these are "risk-based" rules. Thus, it is according to the situations that these - products and suppliers - that they may or may not present risks of laundering and financing of terrorism: depending on the type of transaction, the type of client, the type of country, etc. For example, from the moment that the transaction is anonymous, that is impossible to know the "beneficiary", or that it is transnational and instantaneous, which makes it difficult to supervise because of the heterogeneity of national supervisions little articulated between them.

In reports that public supervisors must have with crypto-product suppliers, they must adjust according to the level of risk presented by them, higher or lower: "Adjusting the type of AML/CFT supervision or monitoring: supervisors should employ both offsite and onsite access to all relevant risk and compliance information.However, to the extent permitted by their regime, supervisors can determine the correct mix of offsite and onsite supervision or monitoring of Virtual Assets Services Providers (VASPs). Offsite supervision alone may not be appropriate in higher risk situations. However, where supervisory findings in previous examinations (either offsite or onsite) suggest a low risk for ML/TF, resources can be allocated to focus on higher risk VASPs. In that case, lower risk VASPs could be supervised offsite, for example through transaction analysis and questionnaires".

This "adjustment" required does not prevent a very broad conception of the power of supervision. So, for nothing escapes the recommendations (and in particular the obligations that ensue for the suppliers of these products), the definition of the crypo-assets and crypo-currencies is this one: “Virtual asset” as a digital representation of value that can be digitally traded or transferred and can be used for payment or investment purposes. Virtual assets do not include digital representations of fiat currencies, securities, and other financial assets that are already covered elsewhere in the FATF Recommendations."

And for the same reason of effectiveness is posited the principle of technological neutrality: "Whether a natural or legal person engaged in Virtual Assets (VA) activities is a Virtual Asset Services Provider (VASP) depends on how the person uses the VA and for whose benefit. As emphasized above, ...  then they are a VASP, regardless of what technology they use to conduct the covered VA activities. Moreover, they are a VASP, whether they use a decentralized or centralized platform, smart contract, or some other mechanism.".

The interpretative guidelines then formulate the obligations that these platforms have with regard to the supervisors they obey(question of the "jurisdiction", ratione loci ; ratione materiae): " The Guidance explains how these obligations should be fulfilled in a VA context and provides clarifications regarding the specific requirements applicable regarding the USD/EUR 1 000 threshold for virtual assets occasional transactions, above which VASPs must conduct customer due diligence (Recommendation 10); and the obligation to obtain, hold, and transmit required originator and beneficiary information, immediately and securely, when conducting VA transfers (Recommendation 16). As the guidance makes clear, relevant authorities should co-ordinate to ensure this can be done in a way that is compatible with national data protection and privacy rules. ".

These platforms are not uniformly defined due to the diversity of their activities. Because it is their activity that makes them responsible for this or that regulator. For example from the Central Bank or the Financial Regulator: "For example, a number of online platforms that provide a mechanism for trading assets, including VAs offered and sold in ICOs, may meet the definition of an exchange and/or a security-related entity dealing in VAs that are “securities” under various jurisdictions’ national legal frameworks. Other jurisdictions may have a different approach which may include payment tokens. The relevant competent authorities in jurisdictions should therefore strive to apply a functional approach that takes into account the relevant facts and circumstances of the platform, assets, and activity involved, among other factors, in determining whether the entity meets the definition of an “exchange”!footnote-121 or other obliged entity (such as a securities-related entity) under their national legal framework and whether an entity falls within a particular definition. In reaching a determination, countries and competent authorities should consider the activities and functions that the entity in question performs, regardless of the technology associated with the activity or used by the entity".

 

____

Reading this very important document, it is possible to make 6 observations: 

1. Interpretative documents are often more important than rules interpretated themselves. En these guidances, first and foremost, these are major obligations that are stated, not only for platforms but also for national laws, and well beyond the issue of money laundering. So, it is laid: "Countries should designate one or more authorities that have responsibility for licensing and/or registering VASPs. ...  at a minimum, VASPs should be required to be licensed or registered in the jurisdiction(s) where they are created. ".This is a general prescription, involving a general regulation of these platform, which registered in a general way, will probably be supervised in a general way.

Secondly, it is a series of binding measures that is required of the National legal systems, for example the possibility of seizing crypto-values.

It shows that the soft Law illustrates the continuum of the texts, and allows their evolution. Here the evolution of the definition of the object itself: the definition of crypto-assets and crypto-currencies is widened, so that the techniques of money laundering and terrorist financing are always countered, without it being necessary to adopt new binding rules. We are beyond mere interpretation. And even more of the principle of restrictive interpretation, classically attached to the Repressive Law ...

2. Fort the effectiveness of the Compliance Law, definition become extremely broad. Thus, to follow the FATF, the definititon off a financial institution is as follows: "“Financial institution” as any natural or legal person who conducts as a business one or more of several specified activities or operations for or on behalf of a customer". This is more the definition of a company in Competition Law!footnote-120....Why ? Because otherwise, an operator finds a status allowing him to escape the category and obligations listed. The principle of efficiency implies it. The principle of "legality", derived from criminal law, has hardly any existence. But this also corresponds to the general evolution of the financial world, in which one no longer stars from the organ (for example to be a"bank") but of activity, but from an activity or a fonction whose metamorphoses are so rapid that it is almost impossible to define them ....

3. In the same way, the definition of crypto-assets or crypto-currencies: "“Virtual asset” as a digital representation of value that can be digitally traded or transferred and can be used for payment or investment purposes. Virtual assets do not include digital representations of fiat currencies, securities, and other financial assets that are already covered elsewhere in the FATF Recommendations". This definition is purely operational because nothing can escape the FATF: all that is financial or monetary, whatever its form or support, its traditional form or a form that will be invented tomorrow, is within its competence and, through a such definition, is under national supervisors. In Compliance Law, and since everything is based on risk analysis, the idea is simple: nothing must escape obligations and supervision.

4. Platform apprehension is done by the criterion of activity, according to the "functional" method. Thus, its supervision, or even its regulation, and its obligations of compliance, will apply, depending on what it does, to the Financial Regulator (if it does ICO) or to others if it only uses tokens as an instrument of exchange. If it makes several uses, then it would fall under several Regulators (criterion ratione materiae).

5. The principle of "technological neutrality" is a classic principle in Telecommunications Law. Here we measure the interference between the principles of Telecommunications Law and Financial Law, which is logical because crypto-financial objects are born of digital technology. This neutrality allows both technological innovation to develop and supervision to be unhindered for not having foreseen an innovative technology appearing after the adoption of the legal text. Here again, the effectiveness of Compliance and risk management are served, without the innovation being thwarted, which is often opposed.

6. What is expected of national public authorities is a very wide "interregulation". This is both "positive". Indeed, this includes financial matters but also the security of networks, or the protection of consumers. It can be called equilibrium interregulation in that all goals converge. But this is also an "interregulation" that can be described as balance. Indeed, the FATF is concerned about the protection of personal data. However, it emphasizes that the effectiveness of the Compliance system must stop. But the protection of personal data is also a part of Compliance Law.... This is one of the major challenges in the future: the balance between security and the fight against global evils(here the fight against money laundering and terrorism) and the protection of the privacy of individuals, as both fall under Compliance, but both have opposite legal effects: one the transmission of information, and the other the secret of the information. 

____

 

 

On 31 May, 2012 Mr Jörg Asmussen member of the Executive Board of the European Central Bank, said at a Conference behind closed doors in Frankfurt that the situation of Europe requires the establishment of an integrated supervisory banking in the euro area on the more systemic banks, which we can assess the number to 25. To do this, they should be supervised directly by a supranational regulatory authority and not by their national authority. Reuter was in favour of this statement. The European Central Bank spokesman confirmed the quote.

This scientific manifestation is placed under the scientific responsibility of Marie-Anne Frison-Roche. It is organized by the Journal of Regulation & Compliance (JoRC).

It constitutes the inaugural colloquium of the cycle of colloquia in 2021 on the general topic Compliance Jurisdictionalisation.

 

 

The work will then be incorporated into the two books La juridictionnalisation de la Compliance and Compliance Jurisdictionalization which will be published in the Regulations & Compliance series, co-edited by the JoRC with Dalloz for the book in French and with Bruylant for the book in English.

This colloquium will be held in Paris in 2021.

 

Presentation of the topic: Because Compliance Law is the extension of Regulatory Law, it is experiencing the same movement of Juridictionnalisation. First of all conceived as the goal of protecting systems and people, even if they seem beyond reach, this has led to the establishment of private companies as judges of themselves, to be structurally the judges and judged, those who act and those who observe.  The duty of vigilance has increased this transformation. As in Regulatory Law, which is an Ex Ante branch of Law, the procedure, which is an Ex Post branch of Law, governs the functioning of companies, transfiguring Company Law under the term "governance".

The shock and transformation once received by Administrative Regulatory Authorities has been heightened by the fact that companies have been further seized by the repressive Courts on the one hand and by an American repressive Law on the other hand, two different cultures. There are therefore many technical difficulties that must first be identified and formulated and then resolved. The easiest is in a first step to ask the following questions : Why? Who? How? When? Where? Toward What?

 

 

 

•  

 

 

 

Full reference: Frison-Roche, M.-A., Difficulty of Compliance in Self-Regulation system: example of the Summer 2020 meetings of OPEC about the "conformity"​ for Oil Market Stability​, Newsletter MAFR - Law, Compliance, Regulation, 26th of August 2020

Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation

 

Summary of the news

The world production of oil is largely coordinated by the Organization of the Petroleum Exporting Countries (OPEC) and especially by its Joint Ministerial Monitoring Committee (JMMC). On 15th of July 2020, this Committee decides to reduce the world production of oil in order to maintain a certain price stability in a context of restricted demand because of the COVID-19 pandemic. 

However, such a stability can be maintained only if each member respects this decision and effectively reduce its production level. This meeting of 15th of July also aimed to get member's conformity. In order to get this conformity, the JMMC declared that it will use "name and shame", shaming countries which do not respect the Committee's declaration and naming those which respect it. A second meeting, on 19th of August 2020, reminded to non-compliant countries their obligation and urged them to comply before the 28th of August. 

We can observe two things: 

• The term used by the Committee is "conformity" and not "compliance", which implies less adherence to "monumental goals than the mechanical respect of formal rules.
• In an self-regulation system where there is not supposed to be a need for "conformity", the need for it is a clue that this self-regulation is malfunctioning.

► Full reference: Journal of Regulation & Compliance (JoRC) and Panthéon-Sorbonne University (Paris I), Institut de Recherche juridique de la Sorbonne -IRJS (Sorbonne Legal Research Institute),   Compliance et droit commun des contrats (Compliance and General Contract Law), 15 October 2026.

____

🏗️ This symposium is part of the series of symposiums organised by the Journal of Regulation & Compliance (JoRC) and its partner universities, focusing in 2026 on the general theme of Compliance and Contract.

____

The symposium is under the scientific responsibility of Nicolas Bargue, 🕴️Marie-Anne Frison-Roche and 🕴️Julia Heinich.

____

To register:

____

🧮The event will take place at Panthéon-Sorbonne University (Paris I) on 15 October 2026.

Il will be held in French.

_____

Presentation of the topic:   While Contract Law, in its common rules expressed by the "general theory of contracts", is often considered to be the most developed branch of Law in practice and the most studied at university, at first glance it seems to be given little consideration when it comes to compliance matter. 

This is undoubtedly due to the fact that the company, which is at the heart of the action expected of it—action that is expected to be powerful (since it affects the collective future) and diversified (since it concerns all systems beyond the company's direct activity)—seems above all to have the status of a subject of law. This is exacerbated if, by mistakenly confusing the latter terms, we only talk about "conformity" and assert that it is simply for businesses a matter of "complying with the regulations that apply to them", which then leaves little room for contractual initiative. This would be associated only with Ethics, a normative order that also differs from a contract, which is a binding legal act.

The relationship between Contract and many sorts of documents, standards and ethical acts that are so numerous in compliance techniques, to which we can add the soft law produced by courts, regulators, supervisors and the companies themselves, is therefore an open question. This delicate reconciliation, which the terms "CSR" and "Governance" express without referring to very precise legal definitions, can cause difficulties in relation to general Contract Law: thus, the "commitments" that punctuate the techniques and behaviours that make up the "culture of compliance" have a central place in Compliance Law. However, their place, if not their equivalence with the contract, is not established, and may even be excluded. This too is an open question.

Based on these initial questions, it appears that in order to gain a firmer footing in the analysis of the practices of companies that include compliance clauses into multiple contracts, we must observe that compliance may consist of a comprehensive service that is the very subject of a specific contract, the "compliance contract, or even assist in the conception that judges may, or must, develop in their office when they are seized of "contractual litigation involving Compliance", we must return to common contract law.

Indeed, if we stop viewing Compliance Law solely through the prism of punishment, if we do not limit it to the "detection and prevention" of fraudulent behaviour which, if it occurred, would be punished, the contract does not have the same place in practice. In this initial restrictive conception of Compliance Law based on sanctions, simply by moving from ex post to ex ante, the company remains subject to the regulations that apply to it, and the contract would be just one of the ways in which it fulfils its legal compliance obligation.

However, the obligation of compliance can also be considered to have its legitimate source in the Contract, which in general termes is based on the autonomy of will and all its consequences (contractual freedom, binding force, effect on third parties, etc.), with the Principle of Compliance fitting into it as a second pillar linked to the first pillar, which is the Principle of free Competition.

It is therefore very useful to better understand practices by comparing the technical principles of general Contract Law with Compliance Principles, such as concern for others that contractors may pursue independently of any regulatory requirement (these others who are distant in space and time), preservation of systems, the obligation to provide evidence, etc.

This is the subject of this symposium which, according to the classic dichotomy of contractual formation and contractual execution, revisits the contractual thread based on the founding principles of autonomy and freedoms, binding force and its relativity, the meeting of consents, groups of contracts, and regulatory contracts often drawn up to implement compliance policies. Enforcement and contractual liability under general Contract Law are themselves coloured in a unique way when a compliance concern or goal has been included in the contract or is implied by it.

_____

 

Speakers include:

🎤 Nicolas Bargue professor at Panthéon-Sorbonne University, 

🎤 Marie-Anne Frison-Roche, university professor, editor-in-chief of the Journal of Regulation & Compliance (JoRC) and the European School of Regulation and Compliance (EeRC)

🎤 Julia Heinich, professor at Panthéon-Sorbonne University

 

____

The proceedings of this symposium will form the basis of a specific chapter in the following publications:

📕Compliance and Contracts, forthcoming in the series 📚Regulations & Compliance, co-published by the Journal of Regulation & Compliance (JoRC) and Dalloz.

📘Compliance and Contract, to be published in the 📚Compliance & Regulation  Serie, co-published by the Journal of Regulation & Compliance (JoRC) and Bruylant.

 

🔻 Read the schedule for the event below ⤵️

 

2011, 13 may, n°2011-126 (QPC), Société Système U Centrale Nationale et autre

Full reference: Frison-Roche, M.-A., Due process and Personal Data Compliance Law: same rules, one Goal (CJEU, Order, October 29, 2020, Facebook Ireland Ltd v/ E.C.), Newsletter MAFR - Law, Compliance, Regulation, 1st of November 2020

Read by freely subscribing other news of the Newsletter MAFR - Law, Compliance, Regulation

Read Marie-Anne Frison-Roche's interview in Actu-juridiques about this decision (in French)

 

Summary of the news: 

As part of a procedure initiated for anti-competitive behaviors, the European Commission has three times requested, between the 13th of March and the 11th of November 2019, from Facebook the communication of information, reitarated in a decision in May 2020.  

Facebook contests it alleging that the requested documents would contain sensitive personal information that a transmission to the Commission would make accessible to a too broad number of observers, while "the documents requested under the contested decision were identified on the basis of wideranging search terms, (...) there is strong likelihood that many of those documents will not be necessary for the purposes of the Commission’s investigation". 

The contestation therefore evokes the violation of the principles of necessity and proportionality but also of due process because these probatory elements are collected without any protection and used afterwards. Moreover, Facebook invokes what would be the violation of a right to the respect of personal data of its employees whose the emails are transferred. 

The court reminds that the office of the judge is here constraint by the condition of emergency to adopt a temporary measure, acceptable by the way only if there is an imminent and irreversible damage. It underlines that public authorities benefit of a presumption of legality when they act and can obtain and use personal data since this is necessary to their function of public interest. Many allegations of Facebook are rejected as being hypothetical. 

But the Court analyzes the integrality of the evoked principles with regards with the very concrete case. But, crossing these principles and rights in question, the Court estimates that the European Commission did not respect the principle of necessity and proportionality concerning employees' very sensitive data, these demands broadening the circle of information without necessity and in a disproportionate way, since the information is very sensitive (like employees' health, political opinions of third parties, etc.). 

It is therefore appropriate to distinguish among the mass of required documents, for which the same guarantee must be given in a technique of communication than in a technic of inspection, those which are transferable without additional precaution and those which must be subject to an "alternative procedure" because of their nature of very sensitive personal data. 

This "alternative procedure" will take the shape of an examination of documents considered by Facebook as very sensitive and that it will communicate on a separate electronic support, by European Commission's agents, that we cannot a priori suspect to hijack law. This examination will take place in a "virtual data room" with Facebook's attorneys. In case of disagreement between Facebook and the investigators, the dispute could be solved by the director of information, communication and medias of the Directorate-General for Competition of the European Commission. 

___

We can draw three lessons from this ordinance: 

1. This decision shows that Procedural Law and Compliance Law are not opposed. Some often say that Compliance guarantees the efficacy and that Procedure guarantees fundamental rights, the protection of the one must result in the diminution of the guarantee of the other. It is false. As this decision shows it, through the key notion of sensitive personal data protection (heart of Compliance Law) and the care for procedure (equivalence between communication and inspection procedures; contradictory organization of the examination of sensitive personal data), we see once again that two branches of Law express the same care, have the same objective: protecting people. 
2. The judge is able to immediately find an operational solution, proposing "an alternative procedure" axed around the principle of contradictory and conciliating Commision's and Facebook's interests has shown that it was able to bring alternative solutions to the one it suspends the execution, appropriate solution to the situation and which equilibrate the interest of both parties. 
3. The best Ex Ante is the one which anticipate the Ex Post by the pre-constitution of evidence. Thus the firm must be able to prove later the concern that it had for human rights, here of employees, to not being exposed to sanctioning pubic authorities. This Ex Ante probatory culture is required not only from firms but also from public authorities which also have to give justification of their action. 

 

__________