Archive | EU

EU to adopt EU-US Privacy Shield shotrly

Privacy Shield—the much maligned replacement to the Safe Harbour deal between the European Union and the US—looks set to be approved by national representatives on Friday, Ars understands.

The scheme, which will allow the transfer of personal data from the EU to the US despite privacy and data protection concerns, has faced an uphill battle. Brussels officials who negotiated the deal on behalf of the EU have been desperate to push it through in the face of criticism from the European Data Protection Supervisor, national data protection authorities, and the European Parliament, in order to give some legal certainty to companies that rely on transatlantic data flows. (…)

The agreement is expected to be formally adopted by the European Commission next Monday, followed by the deal being inked by justice commissioner Vera Jourová and US secretary of commerce Penny Pritzker on Tuesday.

Jennifer Baker in Ars Technica: Privacy Shield to be dragged across finish line—sources »

0

Next up: EU e-Privacy Directive

The EU General Data Protection Regulation (GDPR) and the Data Protection Directive for Law Enforcement Agencies (LEDP) have now been approved — after being watered down as the result of an unprecedented lobbying campaign.

Next up is the EU e-Privacy Directive. EDRi explains…

The e-Privacy Directive contains specific rules on data protection in the area of telecommunication in public electronic networks. It is hugely important, as it is the only EU legislation that regulates confidentiality of communications. (…)

Specifically, the ePrivacy Directive regulates aspects related to the right to confidentiality of communications and the right to freedom of expression.

Once again, we can expect a massive lobby campaign to weaken citizens rights.

To get up to date with what is at stake, read this blog post from EDRi:

• e-Privacy Directive revision: An analysis from the civil society »

/ HAX

0

EU to end Bitcoin anonymity

Today, the European Commission has released details on the new EU Anti-Money Laundering Directive – aiming at combating terrorist financing. Among the details, we find some disturbing news on digital currencies such as Bitcoin:

Tackling terrorist financing risks linked to virtual currencies: to prevent misuse of virtual currencies for money laundering and terrorist financing purposes, the Commission proposes to bring virtual currency exchange platforms and custodian wallet providers under the scope of the Anti-Money Laundering Directive. These entities will have to apply customer due diligence controls when exchanging virtual for real currencies, ending the anonymity associated with such exchanges;

Gah!

Anonymity is not a crime!

But then, again, this is not really about terrorism. It’s about giving the government control over your money.

Then we have this blow to all those terrorists shopping around for missiles…

Tackling risks linked to anonymous pre-paid instruments (e.g. pre-paid cards): the Commission also proposes to minimise the use of anonymous payments through pre-paid cards, by lowering thresholds for identificationfrom €250 to €150 and widening customer verification requirements. Proportionality has been taken into account, with particular regard paid to the use of these cards by financially vulnerable citizens;

Again, this will only make life more complicated for ordinary, law-abiding citizens.

And there will be cross-border control of all bank accounts:

Give Financial Intelligence Units swift access to information on the holders of bank- and payment accounts, through centralised registers or electronic data retrieval systems.

“Centralised registers.” Like in total control.

This might come in handy for our governments when the next Euro crisis calls for a citizen haircut – like when Cyprus confiscated parts of people’s bank savings.

Your money is no longer yours. You are no longer free.

/ HAX

European Commission:
• Commission strengthens transparency rules to tackle terrorism financing, tax avoidance and money laundering »
• Questions and Answers: Anti-money Laundering Directive »

Related reading: Bargeld ist Freiheit »

2

EU rushing new directive on combating terrorism

Joe McNamee, Executive Director of European Digital Rights (EDRi) on the new EU Directive on “combating terrorism”:

Speed is being prioritised over quality. The calculation appears to be that it is better for the EU to be seen to be doing “something” rather than taking its time to adopt legislation that is actually fit for purpose.

EDRi: Rush to “fight terrorism” threatens our fundamental rights and security »

0

Data Protection: Is the EU just incompetent or… evil?

According to usually well informed sources the Council of the European Union (the member states representatives) is ready to greenlight the so called EU US Privacy Shield.

The Privacy Shield is supposed to replace the previous Safe Harbour agreement on protection of personal data being transferred from the EU to the US. The latter was used in a sloppy way by US companies and it did not offer sufficient protection against US mass surveillance. The European Parliament has frequently called for the Safe Harbour agreement to be revoked – and finally the European Court of Justice (ECJ) invalidated it on grounds that it did not respect European citizens right to privacy.

Since then, the EU and US have been working hard to secure a new agreement – the Privacy Shield.

The problem is that the Privacy Shield, ruffly speaking, has the same problems as the Safe Harbour agreement. So much so that the ECJ have found that it ought to look into the matter once again. (The Max Schrems case, part 2.)

So, why is the EU so eager to give the Privacy Shield its approval? First off all both the EU and the US is under pressure from Big Data to get this stumbling block out of the way. Second, some US government agencies are getting quite frustrated. Third, the EU screwed up in the negotiations, but hopes that no one will notice (!) if they hurry to adopt the agreement.

In other words, protection of European citizens data and privacy has not been an EU priority. The Council (and the Commission) seems to be more interested in good relations with the NSA and Big Data.

Is the EU just incompetent or… evil?

/ HAX

Links:
• Previous blog post on the EU US Privacy Shield, with many useful links »
• The latest leaked EU documents (PDF) »
• Reuters: EU, United States agree on changes to strengthen data transfer pact »
• German IT Law: Data flows to the US: Why the EU Model Clauses may soon be no longer state of the art »
• The Irish Times: Data protection groups seek to join key High Court case »
• NSA Mass Surveillance: US Government wants to intervene in European Facebook-Case (PDF) »

Thanks to Amelia Andersdotter and Dataskydd.net for digging up relevant links and documents.

1

European Parliament in new attempt to introduce web blocking

Tomorrow the Europeans Parliaments civil liberties (LIBE) committee will vote on new EU regulation to combat terrorism.

In the committee, German MEP Monika Hohlmeier (EPP) has introduced an amendment stating that member states “may take all necessary measures to remove or to block access to web pages publicly inciting to commit terrorist offences”.

EP LIBE meeting documents »

In a comment in Ars Technica, EDRi says…

“This leaves the door wide open for private companies to police content and very likely over-block or delete any content they are unsure about,” EDRi (European Digital Rights) head Joe McNamee told Ars. He added that European law requires that any blocking or content restriction measures “must be provided for by law, subject to initial judicial control and periodic review.”

If adopted in the LIBE committee, this proposal will be voted in plenary, probably as soon as 4-7 July.

Jennifer Baker in Ars Technica: Web content blocking squeezed into draft EU anti-terrorism law »

EDRi: Terrorism and internet blocking – is this the most ridiculous amendment ever? »

terrorism_directive_20160620-768x379

/ HAX

0

Corporatism vs. free speech

Politics should stick to lawmaking. Companies should stick to making business.

When the two mix, the result is usually damaging. Politicians lose their focus on principles, their mandate from the voters and the public good. Companies who lobby for subsidies and (often competition reducing) special laws will find themselves worse of in the long run, as they detach from the realities of the market.

Nevertheless, politicians and businessmen are often involved in mutual back-scratching.

Lately, the political EU-apparatus and big data companies have ganged up to curb free speech. The EU, Facebook, Twitter, Youtube and Microsoft have decided on a mutual approach to keep back hate speech and religious radicalisation on the net.

In other words, the EU encourages private companies to censor statements on the Internet that the politicians do not approve of.

If you are to limit free speech at all — the rules must be clearly set out in law. If there should be any censorship at all — it must be decided in a court of law, in accordance with the laws. And if anyone is being censored — there must be a possibility to appeal the decision.

All these three principles are being thrown out in the EU-Big Data agreement.

And there is nothing you can do about it. Having signed e.g. various social networks terms and conditions, you have essentially given up your rights.

From a political point of view, the EU is acting in a deceptive way. When there are no legal means to censor voices they would like to silence – they turn to private companies to do what they themselves cannot accomplish. (It’s just like when US authorities had PayPal, credit card companies, and the banks to throttle the stream of donations to Wikileaks.)

The EU is short-circuiting the rule of law and democracy itself – in order to curb the people’s civil rights.

This is totally unacceptable.

/ HAX

2

EDRi on hate speech, social media, EU and the rule of law

On 31 May, the European Commission, together with Facebook, YouTube (Google), Twitter and Microsoft, agreed a “code of conduct” on fighting hate speech.

In a society based on the rule of law, private companies should not take the lead in law enforcement, theirs should always have only a supporting role – otherwise this leads to arbitrary censorship of our communications. (…)

In practice, as illegal activity will be banned by terms of service, it will never be “necessary” to check a report against the law. (…)

In the code of conduct, there is not a single mention about the essential role of judges in our democratic societies. There is no mention about the enforcement of the law by public authorities. At each crucial point where law should be mentioned, it is not.

EDRi: Guide to the Code of Conduct on Hate Speech »

0

Big Government and Big Data fighting over control of your online activities. Blockchain is the obvious alternative.

For many years, the EU has taken many small steps towards introducing an EU ID card: eIDAS. (Or at least a strict common EU standard for nationally issued ID cards.)

An ID card proving the holders identity is one thing. (However, a mandatory ID card as such is a very controversial concept in some member states.) One interesting point is if there is going to be a common personal EU identification number. Another is what information the cards chip will contain and how it is going to be used. No doubt, an EU ID card can be used as a very effective tool for various forms of Big Brotherism.

It is in the light of the EU slowly trying to introduce a common, mandatory ID card that various EU schemes should be scrutinised.

Last week some sites, e.g. Breitbart London ran this story: The European Commission Wants You To Log Into Social Media Accounts With Govt-Issued ID Cards »

Well, that might be a bit oversimplified. What the EU suggests is that it should be possible to use national (EU harmonised) ID cards to log into various online platforms instead of logging in using e.g. Facebook or Google. Thus giving you the possibility of being controlled by Big Government or Big Data.

Giving people a possibility to choose is a good idea, as such. But I’m not sure that I would like Big Government or Big Data to have the control over my online life.

And you should be very suspicious! The moment there is an established platform for online registration (or signing transactions) with an EU approved ID card – this system can be rolled out all over the place. For example, the EU would love to have a system where you have to use your ID card to be able to log on to the Internet. I have met several people in the EU apparatus promoting that idea.

But how should you go about if you don’t want nor Big Government or Big Data to be in control of your online activities?

Actually, it can be done quite easily – by using Blockchain technology, decentralised solutions, and open source software. Ideal, there should be a couple of different such ID providers, competing with each other over providing competent privacy protection.

(All of this might even be possible to achieve using the already existing Bitnation World Citizen ID.)

This can be one of those forks in the road of history: Do we want our online activities to be controlled by Big Government and Big Brother, by Big Data – or a decentralised system with a high level of security, respecting users right to privacy and controlled by no one?

/ HAX

Links:
• The European Commission Wants You To Log Into Social Media Accounts With Govt-Issued ID Cards »
• EU: Communication on Online Platforms and the Digital Single Market Opportunities and Challenges for Europe »

1