Menu
Telcos should only retain metadata to fight serious crime, EU judge says

Telcos should only retain metadata to fight serious crime, EU judge says

The legal opinion threatens the UK's Investigatory Powers Bill, say digital rights campaigners

Governments may order telcos to retain customer data, but only to fight serious crime, a top European Union judge has advised.

Lobby groups European Digital Rights (EDRi) and Privacy International welcomed the recommendation, saying it adds to a growing body of legal opinion opposing mass data retention. It could even, said Privacy International, derail the U.K.'s Investigatory Powers Bill, introduced in March by Theresa May, then home secretary and now prime minister.

Advocate General Henrik Saugmandsgaard Øe advised that a general obligation to retain data may be compatible with EU law, but cautioned that laws imposing such obligations should respect personal privacy and impose strict controls on access to the retained data, its security, and the period it is kept. Furthermore, such obligations can only be justified when strictly necessary in the fight against serious crime.

Øe gave his opinion Tuesday on two cases before the Court of Justice of the EU challenging data retention laws in Sweden and the U.K. Such opinions are only advisory but are often followed by the full court, which is now beginning its deliberations on the cases.

The CJEU was called on to rule on legal questions referred by national courts in Sweden and the U.K. regarding the retention of telecommunications metadata: information about who contacted whom, when, how, and for how long. Such information can be useful in investigating crimes, but its mass retention without good reason is considered by some a breach of privacy rights.

That was the view of the CJEU when, in 2014, it struck down the 2006 EU Data Retention Directive in a case involving Digital Rights Ireland.

However, since then, EU member states have continued to introduce or enforce data retention legislation in conflict with the CJEU's ruling, according to EDRi.

"It is time for EU member states to start respecting the law. It is time for the European Commission to do its job to ensure that the law is respected," EDRi executive director Joe McNamee said via email. "Data retention is an extreme measure which can only be implemented if the criteria repeatedly laid down by the court are respected."

Privacy International general counsel Caroline Wilson Palow hopes the CJEU will follow the advocate general's opinion, which she sees as a serious blow to the U.K.'s Investigatory Powers Bill, she said via email.

The mass surveillance powers the bill would introduce go far beyond the tackling serious crime that the advocate general sees as acceptable.

"They would give a range of public bodies, not just the police and intelligence agencies, the power to access the personal data of innocent people, often without any form of warrant," she wrote.

The fate of the Investigatory Powers Bill depends on a number of factors. The upper house of the U.K.'s parliament, the House of Lords, still has a final say in its content.

Beyond that, even if the CJEU declares its surveillance powers illegal under EU law, there remains the question of whether the U.K. will remain part of the EU for long enough for it to matter. In the wake of the June 23 "Brexit" referendum vote, Prime Minister May plans to lead the U.K. out of the EU and, perhaps, beyond the reach of the CJEU's rulings.

Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Featured

Slideshows

Educating from the epicentre - Why distributors are the pulse checkers of the channel

Educating from the epicentre - Why distributors are the pulse checkers of the channel

​As the channel changes and industry voices deepen, the need for clarity and insight heightens. Market misconceptions talk of an “under pressure” distribution space, with competitors in that fateful “race for relevance” across New Zealand. Amidst the cliched assumptions however, distribution is once again showing its strength, as a force to be listened to, rather than questioned. Traditionally, the role was born out of a need for vendors and resellers to find one another, acting as a bridge between the testing lab and the marketplace. Yet despite new technologies and business approaches shaking the channel to its very core, distributors remain tied to the epicentre - providing the voice of reason amidst a seismic industry shift. In looking across both sides of the vendor and partner fences, the middle concept of the three-tier chain remains centrally placed to understand the metrics of two differing worlds, as the continual pulse checkers of the local channel. This exclusive Reseller News Roundtable, in association with Dicker Data and rhipe, examined the pivotal role of distribution in understanding the health of the channel, educating from the epicentre as the market transforms at a rapid rate.

Educating from the epicentre - Why distributors are the pulse checkers of the channel
Kiwi channel reunites as After Hours kicks off 2017

Kiwi channel reunites as After Hours kicks off 2017

After Hours made a welcome return to the channel social calendar last night, with a bumper crowd of distributors, vendors and resellers descending on The Jefferson in Auckland to kickstart 2017. Photos by Maria Stefina.

Kiwi channel reunites as After Hours kicks off 2017
Arrow exclusively introduces Tenable Network Security to A/NZ channel

Arrow exclusively introduces Tenable Network Security to A/NZ channel

Arrow Electronics introduced Tenable Network Security to local resellers in Sydney last week, officially launching the distributor's latest security partnership across Australia and New Zealand. Representing the first direct distribution agreement locally for Tenable specifically, the deal sees Arrow deliver security solutions directly to mid-market and enterprise channel partners on both sides of the Tasman.

Arrow exclusively introduces Tenable Network Security to A/NZ channel
Show Comments