The hybrid nature of horizontality in EU Data Protection Law: the Charter, the Regulation and the Court of Justice of the EU

Authors

DOI:

https://doi.org/10.5380/rinc.v12i3.100151

Keywords:

fundamental rights, horizontal effect, personal data protection, European Union Law, digital governance

Abstract

This article analyses the horizontal effect of the fundamental right to data protection enshrined in Article 8 of the EU Charter of Fundamental Rights. Moving beyond abstract doctrinal debates, it adopts a functional and institutional perspective grounded in the architecture of EU data protection law. It proposes a tripartite analytical framework – direct, indirect, and state-mediated effect – and argues that Article 8 synthesises these models within a structurally hybrid system of enforceability. This hybrid model is operationalised through the General Data Protection Regulation, which embeds fundamental rights in private relationships via legislative design, decentralised implementation, and regulatory oversight. The Court of Justice complements this model through purposive interpretation, affirming rights enforceability even in the absence of a general doctrine of horizontal effect. The article concludes that the horizontal application of Article 8 is not an exception to verticality but a structural necessity in a digital order increasingly shaped by private regulatory power.

Author Biography

Graça Canto Moniz, Universidade Lusófona – Centro Universitário de Lisboa

Professora Associada da Faculdade de Direito da Universidade Lusófona – Centro Universitário de Lisboa (Lisboa, Portugal). Titular da South EU Google Data Governance Chair na Universidade NOVA de Lisboa. Doutora em Direito pela Universidade NOVA de Lisboa.

References

ALEXY, Robert. A Theory of Constitutional Rights. Oxford: Oxford University Press, 2002.

BARAK, Aharon. Human dignity: the constitutional value and the constitutional right. Cambridge: Cambridge University Press, 2015.

BIEKER, Felix. The right to data protection: individual and structural dimensions of data protection in EU law. Cham: Springer, 2022.

CALLIES, Christian. Dimensions of fundamental rights – duty to respect versus duty to protect. In: PÜNDER, Hermann; WALDHOFF, Christian (ed.). Debates in German public law. Oxford: Hart Publishing, 2014. p. 27-43.

COHEN, Julie E. Between truth and power: the legal constructions of informational capitalism. Oxford: Oxford University Press, 2019.

COURT OF JUSTICE OF THE EUROPEAN UNION (CJEU). Case C-131/12, Google Spain SL and Google Inc v Agencia Española de Protección de Datos (AEPD) and Mario Costeja González. Judgment of 13 May 2014. EU:C:2014:317.

CRAIG, Paul; DE BÚRCA, Gráinne. EU law: text, cases, and materials. 6. ed. Oxford: Oxford University Press, 2015.

CURTIN, Deirdre. Challenging executive dominance in European democracy. Modern Law Review, London, v. 77, n. 1, p. 1-32, Jan./Mar. 2014.

DE GREGORIO, Giovanni. The rise of digital constitutionalism in the European Union. European Law Journal, Oxford, v. 27, n. 1, p. 1–25, Jan./Feb. 2021.

EUROPEAN DATA PROTECTION SUPERVISORY. Study on the essence of the fundamental rights to privacy and to protection of personal data. 2022.

EUROPEAN UNION. Charter of Fundamental Rights of the European Union. Art. 8(1).

EUROPEAN UNION. Regulation (EU) 2016/679 (GDPR). Official Journal of the European Union, Luxembourg, L 119/1, 4 May 2016.

FRANTZIOU, Eleni. The horizontal effect of the EU Charter of Fundamental Rights: a constitutional analysis. Oxford: Oxford University Press, 2023.

GARDBAUM, Stephen. The “horizontal effect” of constitutional rights. Michigan Law Review, Michigan, v. 102, p. 387-459, Jan./Feb. 2003.

GELLERT, Raphaël. The risk-based approach to data protection. Oxford: Oxford University Press, 2020.

HABERMAS, Jürgen. Between facts and norms. Cambridge: Polity Press, 1996.

KOKOTT, Juliane; SOBOTTA, Christoph. The distinction between privacy and data protection in the jurisprudence of the CJEU and the ECHR. In: HIJMANS, H.; KRANENBORG, H. (ed.). Data protection 2014: how to restore trust? Contributions in honour of Peter Hustinx. Cambridge: Intersentia, 2014. p. 83–95.

LYNSKEY, Orla. Courts, regulation, and data protection in the EU. European Constitutional Law Review, Cambridge, v. 17, n. 4, p. 527-530, Oct./Dec. 2021.

MONIZ, Graça Canto. DPIAs and fundamental rights governance. Information & Communications Technology Law, Abingdon, advance online publication, 2025. Available at: https://doi.org/10.1080/13600834.2025.2495441. Accessed: 19 May 2025.

RIBEIRO, Gonçalo de Almeida. The effects of fundamental rights in private disputes. In: COLLINS, Hugh (org.). European contract law and the Charter of Fundamental Rights. Cambridge: Intersentia, 2017.

SILVA, Jorge Pereira da. Deveres do Estado de proteção de direitos fundamentais. Lisboa: Universidade Católica Editora, 2015.

ZUBOFF, Shoshana. The age of surveillance capitalism: the fight for a human future at the new frontier of power. London: Profile Books, 2019.

Downloads

Published

2025-10-30

How to Cite

CANTO MONIZ, Graça. The hybrid nature of horizontality in EU Data Protection Law: the Charter, the Regulation and the Court of Justice of the EU. Revista de Investigações Constitucionais, [S. l.], v. 12, n. 3, p. e522, 2025. DOI: 10.5380/rinc.v12i3.100151. Disponível em: https://revistas.ufpr.br/rinc/article/view/100151. Acesso em: 24 dec. 2025.

Issue

Section

Original articles