Sunday

30th Apr 2017

Focus

EU companies banned from selling spyware to repressive regimes

  • The European Parliament wants to clamp down on exports of surveillance technology (Photo: Helena Spongenberg)

European companies selling online surveillance technology have come under increasing criticism from NGOs and the European Parliament after it emerged their products had helped regimes in Iran, Egypt and Libya to clamp down on protesters.

"We need to ask for more transparency from companies before they actually sell these technologies. It's not about sanctions and trade restrictions, it's about making sure the new technologies are not systematically used to repress citizens," Dutch Liberal MEP Marietje Schaake told this website after the European Parliament last month approved banning spyware exports to repressive regimes.

Dear EUobserver reader

Subscribe now for unrestricted access to EUobserver.

Sign up for 30 days' free trial, no obligation. Full subscription only 15 € / month or 150 € / year.

  1. Unlimited access on desktop and mobile
  2. All premium articles, analysis, commentary and investigations
  3. EUobserver archives

EUobserver is the only independent news media covering EU affairs in Brussels and all 28 member states.

♡ We value your support.

If you already have an account click here to login.

Following the democratic uprisings in the Arab world, several European companies found themselves under fire from NGOs and the media for being careless about where their technology ends up. French and US technology, for example, had been used extensively by Libya's dictator Moammar Gaddafi for spying on the online activities of opposition activists.

An investigation by the Wall Street Journal into the deserted compound of Gaddafi's secret police in Tripoli found a monitoring centre "lined with posters and English-language training manuals stamped with the name Amesys, a unit of French technology firm Bull SA."

Amesys admits it equipped the monitoring centre in 2008, but insists that it did nothing illegal and points to the rapprochement between Western powers and the Libyan dictator at the time.

"The contract was related to the making available of analysis hardware concerning a small fraction of the Internet lines installed at that time (a few thousand). This did not include either Internet communications via satellite (as used in Internet cafes), encrypted data such as Skype-type communications, or filtering of Web sites. In addition, the hardware used did not allow for the monitoring of either fixed or mobile telephone lines," a statement from the French company reads.

But according to the Wall Street Journal, Amesys "equipped the centre with 'deep packet inspection' technology, one of the most intrusive techniques for snooping on people's online activities." One file seen by the US paper, dating back to February, the early stage of the anti-Gaddafi protests, includes a 16-minute Yahoo chat between a man and a woman, in which he worries that he has become a target as "the Gaddafi forces are writing lists of names." He tells her he will go into hiding and phone her from a new number.

Amesys was also singled out in a recent report by Freedom House, an international NGO promoting freedom on the internet. Italian and British firms are also accused of having sold online spying software to Middle Eastern and North African countries.

"Britain’s Gamma International provided its product FinSpy to Egypt’s security service, which used the product to monitor dissidents’ online activities.  This spyware infects the computers of dissidents and allows the security service to capture key strokes and intercept audio streams, even when the dissidents are using encrypted email or voice communications such as Skype. The Italian company HackingTeam has sold software to security agencies in the Middle East and North Africa that bypasses Skype’s encryption and captures audio streams from a computer’s memory," the paper reads.

HackingTeam's only product is the Remote Control System, which according to its brochure "bypasses protection systems such as antivirus, antispyware and personal firewalls" and tracks emails, SMS-es, online activity and can even record skype calls or regular cellphone calls. The software is designed for police and intelligence services engaged in "digital investigations."

"We only sell RCS to 'authorized' countries, that is, we take into full account international recommendations about embargoes, civil liberties violations, treaties," David Vincenzetti from HackingTeam told this website. He refused to name the countries HackingTeam is selling its product to, citing "confidentiality". Vincenzetti said that they have some 30 customers in 20 countries "without any geographical concentration."

But this kind of response is exactly what MEPs are trying to avoid in the future.

"They always say it's confidential and act under the radar, so we can't share information about the situation on the ground. Currently reporting on dual use technology - which can be used both for tracking down wrong-doers and to repress citizens - is done after the export has taken place. And it depends on member states or companies to report if something went wrong," Schaake notes.

Instead, the European Parliament wants a more "pro-active system" so that when private companies are pressed to reveal private data or if their programmes are misused for surveillance and censorship of citizens, the EU could provide "political support", Schaake says.

"We have to increase the level of knowledge among politicians. There are standard lists of military technology banned for export during an embargo on a country. But this is not updated to include online weapons," she added.

EU commission defends telecoms surveillance law

A controversial EU data retention law is 'necessary' and will not be scrapped, the responsible commissioner said Monday. EU citizens have gained nothing from it, but lost their privacy, NGOs claimed while a group of member states are now facing multi-million euro fines for not implementing the rules.

Europol wants to host EU cyber crime centre

The EU's joint policy body, Europol, is angling to host a new European cyber crime centre, with the European Commission due next year to decide where to put its new defence against online threats.

EU struggling to fight cyber crime

Faced with increasing cyber attacks, the EU is looking at a new law criminalising the use of 'zombie' computers and is setting up a 'cyber crime' agency and special teams of IT firefighters. But specialists and data privacy defenders remain unconvinced.

The EU and cyber security

Cloud computing, smartphones, viruses attacking nuclear plants. In the October Focus, the EUobserver turns its attention to cyber security and EU's attempts to set up rules for safer navigation on the internet.

'There's a computer worm in your nuclear centrifuge'

With the discovery of Stuxnet, a computer worm believed to have been developed by the US government to shut down a nuclear plant in Iran, European companies like Siemens are coming under increased pressure to secure software operating 'critical infrastructure' such as power plants or water treatment facilities.

News in Brief

  1. Vote of no confidence prepared against Spanish PM
  2. Syria to buy Russian anti-missile system
  3. Germany seeks partial burka ban
  4. Libya has no plan to stop migration flows
  5. EU has no evidence of NGO-smuggler collusion in Libya
  6. Poland gets 'final warning' on logging in ancient forest
  7. Commission gives Italy final warning on air pollution
  8. Romania and Slovenia taken to court over environment policies

Stakeholders' Highlights

  1. European Healthy Lifestyle AllianceCharlotte Hornets' Nicolas Batum Tells Kids to "Eat Well, Drink Well, Move!"
  2. ECR GroupSyed Kamall: We Need a New, More Honest Relationship With Turkey
  3. Counter BalanceParliament Sends Strong Signal to the EIB: Time to Act on Climate Change
  4. ACCARisks and Opportunities of Blockchain and Shared Ledgers Technologies in Financial Services
  5. UNICEFRace Against Time to Save Millions of Lives in Yemen
  6. Nordic Council of MinistersDeveloping Independent Russian-Language Media in the Baltic Countries
  7. Swedish EnterprisesReform of the European Electricity Market: Lessons from the Nordics, Brussels 2 May
  8. Malta EU 2017Green Light Given for New EU Regulation to Bolster External Border Checks
  9. Counter BalanceCall for EU Commission to Withdraw Support of Trans-Adriatic Pipeline
  10. ACCAEconomic Confidence at Highest Since 2015
  11. European Federation of Allergy and Airways60%-90% of Your Life Is Spent Indoors. How Does Poor Indoor Air Quality Affect You?
  12. European Gaming and Betting AssociationCJEU Confirms Obligation for a Transparent Licensing Process

Latest News

  1. EU boasts unity on Brexit talks
  2. May’s election juggernaut
  3. EPP scolds Orban over university and NGO laws
  4. Oxford-Studie besorgt über 'Schrott' News in Frankreich
  5. Alte Freundschaft zwischen Le Pen und Putin
  6. EP chief faces questions after homophobic 'summit'
  7. EU signals Northern Ireland could join if united with Ireland
  8. One year later: EU right to open internet still virtual

Stakeholders' Highlights

  1. Nordic Council of MinistersNordic Region and the US: A Time of Warlike Rhetoric and Militarisation?
  2. European Free AllianceEFA MEPs Vote in Favor of European Parliament's Brexit Mandate
  3. Mission of China to the EUXinhua Insight: China to Open up Like Never Before
  4. World VisionViolence Becomes New Normal for Syrian Children
  5. International Partnership for Human RightsTime to Turn the Tide and End Repression of Central Asia's Civil Society
  6. European Free AllianceAutonomia to Normalnosc - Poland Urged to Re-Grant Autonomy to Silesia
  7. UNICEFHitting Rock Bottom - How 2016 Became the Worst Year for #ChildrenofSyria
  8. Malta EU 2017Green Light Given for New EU Regulation to Bolster External Border Checks
  9. ACCAG20 Citizens Want 'Big Picture' Tax Policymaking, According to Global Survey
  10. Belgrade Security ForumCall for Papers: European Union as a Global Crisis Manager - Deadline 30 April
  11. European Gaming & Betting Association60 Years Rome Treaty – 60 Years Building an Internal Market
  12. Malta EU 2017New EU Rules to Prevent Terrorism and Give More Rights to Victims Approved