Thursday

28th Sep 2023

EU companies banned from selling spyware to repressive regimes

  • The European Parliament wants to clamp down on exports of surveillance technology (Photo: Helena Spongenberg)

European companies selling online surveillance technology have come under increasing criticism from NGOs and the European Parliament after it emerged their products had helped regimes in Iran, Egypt and Libya to clamp down on protesters.

"We need to ask for more transparency from companies before they actually sell these technologies. It's not about sanctions and trade restrictions, it's about making sure the new technologies are not systematically used to repress citizens," Dutch Liberal MEP Marietje Schaake told this website after the European Parliament last month approved banning spyware exports to repressive regimes.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

Following the democratic uprisings in the Arab world, several European companies found themselves under fire from NGOs and the media for being careless about where their technology ends up. French and US technology, for example, had been used extensively by Libya's dictator Moammar Gaddafi for spying on the online activities of opposition activists.

An investigation by the Wall Street Journal into the deserted compound of Gaddafi's secret police in Tripoli found a monitoring centre "lined with posters and English-language training manuals stamped with the name Amesys, a unit of French technology firm Bull SA."

Amesys admits it equipped the monitoring centre in 2008, but insists that it did nothing illegal and points to the rapprochement between Western powers and the Libyan dictator at the time.

"The contract was related to the making available of analysis hardware concerning a small fraction of the Internet lines installed at that time (a few thousand). This did not include either Internet communications via satellite (as used in Internet cafes), encrypted data such as Skype-type communications, or filtering of Web sites. In addition, the hardware used did not allow for the monitoring of either fixed or mobile telephone lines," a statement from the French company reads.

But according to the Wall Street Journal, Amesys "equipped the centre with 'deep packet inspection' technology, one of the most intrusive techniques for snooping on people's online activities." One file seen by the US paper, dating back to February, the early stage of the anti-Gaddafi protests, includes a 16-minute Yahoo chat between a man and a woman, in which he worries that he has become a target as "the Gaddafi forces are writing lists of names." He tells her he will go into hiding and phone her from a new number.

Amesys was also singled out in a recent report by Freedom House, an international NGO promoting freedom on the internet. Italian and British firms are also accused of having sold online spying software to Middle Eastern and North African countries.

"Britain’s Gamma International provided its product FinSpy to Egypt’s security service, which used the product to monitor dissidents’ online activities.  This spyware infects the computers of dissidents and allows the security service to capture key strokes and intercept audio streams, even when the dissidents are using encrypted email or voice communications such as Skype. The Italian company HackingTeam has sold software to security agencies in the Middle East and North Africa that bypasses Skype’s encryption and captures audio streams from a computer’s memory," the paper reads.

HackingTeam's only product is the Remote Control System, which according to its brochure "bypasses protection systems such as antivirus, antispyware and personal firewalls" and tracks emails, SMS-es, online activity and can even record skype calls or regular cellphone calls. The software is designed for police and intelligence services engaged in "digital investigations."

"We only sell RCS to 'authorized' countries, that is, we take into full account international recommendations about embargoes, civil liberties violations, treaties," David Vincenzetti from HackingTeam told this website. He refused to name the countries HackingTeam is selling its product to, citing "confidentiality". Vincenzetti said that they have some 30 customers in 20 countries "without any geographical concentration."

But this kind of response is exactly what MEPs are trying to avoid in the future.

"They always say it's confidential and act under the radar, so we can't share information about the situation on the ground. Currently reporting on dual use technology - which can be used both for tracking down wrong-doers and to repress citizens - is done after the export has taken place. And it depends on member states or companies to report if something went wrong," Schaake notes.

Instead, the European Parliament wants a more "pro-active system" so that when private companies are pressed to reveal private data or if their programmes are misused for surveillance and censorship of citizens, the EU could provide "political support", Schaake says.

"We have to increase the level of knowledge among politicians. There are standard lists of military technology banned for export during an embargo on a country. But this is not updated to include online weapons," she added.

EU commission defends telecoms surveillance law

A controversial EU data retention law is 'necessary' and will not be scrapped, the responsible commissioner said Monday. EU citizens have gained nothing from it, but lost their privacy, NGOs claimed while a group of member states are now facing multi-million euro fines for not implementing the rules.

Pegasus spyware makers grilled by MEPs

"We will not continue to work with a customer that is targeting a journalist illegally," Chaim Gelfand, chief compliance officer of NSO Group told MEPs — but shed little light on EU governments' use of its Pegasus spyware.

Tech industry now spends €113m a year lobbying Brussels

Tech companies have increased their lobbying power and are now spending some €113m a year to influence EU decision-making, up more than 16 percent since 2021, according to a report from NGOs Corporate Europe Observatory and LobbyFacts.

EU lists six tech giants as 'gatekeepers' under new law

A total of 22 "core platform services" provided by these six tech gatekeepers now have until March 2024 to comply with strict new EU rules — aimeed to promote fair competition and give users more power over their devices.

AI will destroy more female jobs than male, study finds

About four percent of global female employment is subject to potential automation through generative AI technologies, compared to only 1.4 percent of male employment. The trend is even more pronounced in high-income countries, a new study reveals.

AI will destroy more female jobs than male, study finds

About four percent of global female employment is subject to potential automation through generative AI technologies, compared to only 1.4 percent of male employment. The trend is even more pronounced in high-income countries, a new study reveals.

Column

EU lobbying clean-up — what happened to that?

Six months after Qatargate, as institutional inertia and parliamentary privileges weigh in, the sense of gravity and collective resolve have all but disappeared. MEPs show little enthusiasm for reform of the rules that today allow them significant outside paid activities.

Latest News

  1. Germany tightens police checks on Czech and Polish border
  2. EU Ombudsman warns of 'new normal' of crisis decision-making
  3. How do you make embarrassing EU documents 'disappear'?
  4. Resurgent Fico hopes for Slovak comeback at Saturday's election
  5. EU and US urge Azerbijan to allow aid access to Armenians
  6. EU warns of Russian 'mass manipulation' as elections loom
  7. Blocking minority of EU states risks derailing asylum overhaul
  8. Will Poles vote for the end of democracy?

Stakeholders' Highlights

  1. International Medical Devices Regulators Forum (IMDRF)Join regulators, industry & healthcare experts at the 24th IMDRF session, September 25-26, Berlin. Register by 20 Sept to join in person or online.
  2. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  3. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  4. International Medical Devices Regulators Forum (IMDRF)Join regulators & industry experts at the 24th IMDRF session- Berlin September 25-26. Register early for discounted hotel rates
  5. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch
  6. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations

Stakeholders' Highlights

  1. International Sustainable Finance CentreJoin CEE Sustainable Finance Summit, 15 – 19 May 2023, high-level event for finance & business
  2. ICLEISeven actionable measures to make food procurement in Europe more sustainable
  3. World BankWorld Bank Report Highlights Role of Human Development for a Successful Green Transition in Europe
  4. Nordic Council of MinistersNordic summit to step up the fight against food loss and waste
  5. Nordic Council of MinistersThink-tank: Strengthen co-operation around tech giants’ influence in the Nordics
  6. EFBWWEFBWW calls for the EC to stop exploitation in subcontracting chains

Join EUobserver

Support quality EU news

Join us