Buivids (C-345/17): Is Posting Your Own Video on YouTube a Household Activity?
Not when anyone can watch it. The EU Court of Justice held that uploading a video of identifiable police officers to YouTube without restricting access makes personal data available to an indefinite number of people, so the household exemption does not apply. It may still qualify as journalism, a question for the national court.
Case Summary
| Court | Court of Justice of the European Union (Second Chamber) |
|---|---|
| Case | C-345/17, Sergejs Buivids (intervener: Datu valsts inspekcija) |
| Decided | 14 February 2019 |
| Referred by | Augstākā tiesa (Supreme Court), Latvia |
| Law applied | Directive 95/46/EC, Articles 3 and 9; now Art. 2(2)(c) and Art. 85 GDPR |
| Original measure | Latvian data protection agency found an infringement and asked for the video to be removed |
Background
Sergejs Buivids was giving a statement at a Latvian police station in administrative proceedings brought against him. He filmed it on a digital camera and posted the video on YouTube; officers could be seen and heard carrying out their duties (judgment, paras. 15 to 16, 32, 35).
On 30 August 2013, the Latvian data protection agency found he had broken national data protection law by not telling the officers the purpose of the processing, and asked him to remove the video. He said he wanted to expose what he saw as unlawful police conduct. Two administrative courts dismissed his challenge; the second noted he had not indicated his aim in publishing and found no journalistic purpose. The Supreme Court then referred the case (paras. 17 to 27).
The Court’s Reasoning on the Household Exemption
Recording people’s images on a camera’s memory is automated processing, and doing it only once makes no difference (paras. 35 to 36). Because the video went on a site where anyone could watch and share it, without any access restriction, it reached an indefinite number of people and so was not a purely personal or household activity (para. 43). Filming public officials on duty does not take the processing outside the law either (paras. 44 to 45).
The Court then opened a different door. Journalism is read broadly: you do not need to be a professional journalist, and publishing on YouTube does not rule it out. But not everything posted online is journalism, and the exemption applies only if the sole aim is to disclose information, opinions or ideas to the public, and only as far as strictly necessary (paras. 55 to 64). That balance now sits in Art. 85 GDPR and Recital 153.
Timeline
Amber marks the decisive decision or ruling.
| Date | Event |
|---|---|
| The Latvian data protection agency finds an infringement and asks for the video to be removed | |
| The Regional Administrative Court dismisses his appeal, finding no journalistic purpose shown | |
| The Latvian Supreme Court refers two questions to the CJEU | |
| Oral hearing before the Court of Justice | |
| Advocate General Sharpston delivers her Opinion | |
| The Court rules the upload falls under data protection law but may be journalism |
Why This Case Still Matters
Buivids applied the household-exemption test directly to a video-sharing platform, and it drew sharp debate. Some commentators argued it stretches data protection law over ordinary social media use (SCL, February 2019); others defended the reasoning and argued the law itself needs updating (SCL, June 2019). Either way, the ruling confirms that non-professionals can rely on the journalism exemption when their sole aim is to inform the public.
Two things in the record shaped the outcome. The Court relied on the fact that access to the video was not restricted (para. 43). And the regional court had found that Mr Buivids had not explained his purpose, which made it impossible to weigh freedom of expression against the officers’ privacy (para. 21). Restricting the audience, or clearly stating the public-interest reason for publishing, are the two levers the reasoning identifies. The Court also listed factors a court weighs, including the publication’s contribution to public debate and the steps taken to limit intrusion (para. 66).
Frequently Asked Questions
Does filming police officers fall under data protection law?
It can. The Court held that recording police officers in a police station and publishing the video online falls within data protection law. There is no exception for public officials, and information recorded in a professional context can still be personal data (paras. 44 to 47).
Why was the YouTube upload not a household activity?
Because Mr Buivids published the video on a site where users can watch and share videos, without restricting access. That made the officers’ personal data available to an indefinite number of people (para. 43).
Does recording someone only once count as processing?
Yes. The Court said the fact that the recording was made on a single occasion has no bearing on whether data protection law applies. It covers any operation that constitutes processing (para. 36).
Can a private individual rely on the journalism exemption?
Yes, in principle. The Court said journalism is read broadly, applies to every person engaged in it, and is not ruled out by publishing on YouTube. But not all online publication is journalism: the sole purpose must be disclosing information, opinions or ideas to the public (paras. 52 to 58).
Who decides whether the video was journalism?
The national court. The Court of Justice gave the criteria but left it to the Latvian court to decide whether the recording and publication had the sole aim of informing the public, and whether any exemption was strictly necessary (paras. 59 and 68 to 69).
Hosting user videos or publishing citizen footage? Uploads, takedown requests and journalism claims all land on the platform or publisher eventually. A DPO can help you set a clear policy for handling them.
Sources
- CJEU, Case C-345/17 Buivids, judgment of 14 February 2019
- Full judgment text, Buivids (C-345/17)
- Society for Computers & Law, Buivids: a further over-extension of the domestic purposes exemption? (February 2019)
- Society for Computers & Law, The Buivids Debate: why the CJEU decision isn’t wrong and why the GDPR is out of date (June 2019)
- Regulation (EU) 2016/679 (GDPR), Recital 18 and Article 2(2)(c): official text