Tuesday

12th Dec 2017

Focus

EU proposes tougher privacy rules for online messaging

  • Messaging services are facing tougher privacy rules (Photo: Nicolas Nova)

The EU commission is tightening privacy rules on messaging services like WhatsApp, Skype and web-based email.

On Tuesday (10 January), it proposed to overhaul the e-privacy directive to bridge the gap between traditional telephone operators and the broadly US-based instant messaging services.

Thank you for reading EUobserver!

Subscribe now for a 30 day free trial.

  1. €150 per year
  2. or €15 per month
  3. Cancel anytime

EUobserver is an independent, not-for-profit news organization that publishes daily news reports, analysis, and investigations from Brussels and the EU member states. We are an indispensable news source for anyone who wants to know what is going on in the EU.

We are mainly funded by advertising and subscription revenues. As advertising revenues are falling fast, we depend on subscription revenues to support our journalism.

For group, corporate or student subscriptions, please contact us. See also our full Terms of Use.

If you already have an account click here to login.

The current directive, last reformed in 2009, only covers telecom operators. The reform expands the rules to online services, gives people more control over intrusive cookies, and evolves the directive into a much more powerful regulation.

The EU commission says the reforms are also needed because over 90 percent of people in an EU survey want their emails and online messaging to remain confidential.

The proposal involves giving people the choice to opt in or out of services provided by so-called Over-The-Top (OTT) applications such as WhatsApp or Facebook Messenger. But it also claims to open up new business opportunities for more traditional telecom operators by allowing them to commercialise data that was previously off limits.

"Consent of the user is paramount," EU digital economy commissioner Andrus Ansip told reporters.

Ansip said the new rules would not only apply to traditional services like voice calls or SMS, but also to internet based communication services "or future based services that allow any type of communication".

Consent will be required for anything from so-called metadata - the details of when and where a call was placed - to the content of communications.

Email providers like Gmail regularly scan people's emails to help target adverts. Cookies are also required to provide Google's translation services of those emails.

The Commission says the same services will now have to provide "effective consent", giving people a more readily available option of saying no instead of having to read through the small print in the terms and conditions.

Gmail will also only be able to process the bare minimum of data needed to provide the email service for free.

It means today's email scanning will be banned unless the user agrees. But saying no to email scans only prevents adverts from being personalised or relevant to the user. It does not stop adverts.

Consent won't be needed for everything. Things like remembering shopping histories and filling in online forms will be exempted.

One Finnish web developer recently discovered a "phishing" attack that specifically targets auto-fill, reported the Guardian.

The developer found that some browsers like Google Chrome's auto-fill can be tricked into giving away personal information like email addresses through an auto-fill function that is not disabled by default.

Brussels-based consumer lobby group Beuc argues that the Commission's proposal should have blocked cookies by default.

“Consumers must have an alternative to being under 24/7 commercial surveillance when using digital services," said Beuc director Monique Goyens.

Some are not happy, fearing it will cut into their advertising revenues.

"The approach to extend historic telephony rules to new services does not reflect today’s market realities," said the Brussels-based American Chamber of Commerce to the EU.

Firms that break the rules could end up paying fines of up to 4 percent of their global turnover.

The Brussels-executive is hoping to have the new rules up and running by the time the EU's data protection regulation, agreed last year, is fully operational by May 2018.

Data protection regulation and e-privacy

EU commission officials say their is no overlap between e-privacy and the general data protection regulation.

They note that the regulation deals with processing of personal data, while e-privacy covers communication between people.

OTTs under the old data protection rules were also able use a "legitimate interest" clause to process data without people's consent. The new rules remove that clause.

The EU's digital economy in 2015 was worth €272 billion.

EU trying to salvage US deal on data privacy

Privacy safeguards for EU citizens' personal data that is sent to the United States remains exposed to abuse, due to the lack of oversight and the shift towards increased surveillance under president Trump.

Analysis

Suddenly, digital single market doesn't 'need' EU agency

EU digital commissioner Gabriel downplayed the rejection of the commission's plan for a strong EU telecommunications watchdog, highlighting that the elements of the digital single market are not set in stone.

Analysis

Suddenly, digital single market doesn't 'need' EU agency

EU digital commissioner Gabriel downplayed the rejection of the commission's plan for a strong EU telecommunications watchdog, highlighting that the elements of the digital single market are not set in stone.

News in Brief

  1. EU bank delays gas pipeline decision
  2. Hungary's leftwing parties join Jobbik in anti-Orban protest
  3. Barnier: EU will not accept UK backtracking on Brexit deal
  4. Puigdemont to return to Catalonia if elected
  5. Commission approves EasyJet partial takeover of Air Berlin
  6. EU medical command centre due next year
  7. Auditors: EU 'green' farm payments fail ecology criteria
  8. Austria gas explosion creates Italian energy 'emergency'

Stakeholders' Highlights

  1. ACCACFOs Risk Losing Relevance If They Do Not Embrace Technology
  2. UNICEFMake the Digital World Safer for Children & Increase Access for the Most Disadvantaged
  3. European Jewish CongressWelcomes Recognition of Jerusalem as the Capital of Israel and Calls on EU States to Follow Suit
  4. Mission of China to the EUChina and EU Boost Innovation Cooperation Under Horizon 2020
  5. European Gaming & Betting AssociationJuncker’s "Political" Commission Leaves Gambling Reforms to the Court
  6. AJC Transatlantic InstituteAJC Applauds U.S. Recognition of Jerusalem as Israel’s Capital City
  7. EU2017EEEU Telecom Ministers Reached an Agreement on the 5G Roadmap
  8. European Friends of ArmeniaEU-Armenia Relations in the CEPA Era: What's Next?
  9. Mission of China to the EU16+1 Cooperation Injects New Vigour Into China-EU Ties
  10. EPSUEU Blacklist of Tax Havens Is a Sham
  11. EU2017EERole of Culture in Building Cohesive Societies in Europe
  12. ILGA EuropeCongratulations to Austria - Court Overturns Barriers to Equal Marriage

Latest News

  1. Last chance for Poland to return property to its rightful owners
  2. Commission attacks Tusk on 'anti-European' migrant plan
  3. Volkswagen tells EU: we will fail on our recall promise
  4. EU will not start Brexit future talks before March
  5. Bitcoin risky but 'limited phenomenon', says EU
  6. Panama Papers - start of sensible revolution in EU tax affairs?
  7. Lebanon crisis overshadows EU aid for Syrian refugees
  8. New Polish PM brings same old government

Stakeholders' Highlights

  1. Centre Maurits CoppietersCelebrating Diversity, Citizenship and the European Project With Fundació Josep Irla
  2. European Healthy Lifestyle AllianceUnderstanding the Social Consequences of Obesity
  3. Union for the MediterraneanMediterranean Countries Commit to Strengthening Women's Role in Region
  4. Bio-Based IndustriesRegistration for BBI JU Stakeholder Forum about to close. Last chance to register!
  5. European Heart NetworkThe Time Is Ripe for Simplified Front-Of-Pack Nutrition Labelling
  6. Counter BalanceNew EU External Investment Plan Risks Sidelining Development Objectives
  7. EU2017EEEAS Calls for Eastern Partnership Countries to Enter EU Market Through Estonia
  8. Dialogue PlatformThe Turkey I No Longer Know
  9. World Vision7 Million Children at Risk in the DRC: Donor Meeting to Focus on Saving More Lives
  10. EPSU-Eurelectric-IndustriAllElectricity European Social Partners Stand up for Just Energy Transition
  11. European Friends of ArmeniaSignature of CEPA Marks a Fresh Start for EU-Armenia Relations
  12. Nordic Council of MinistersNordic Energy Ministers Pledge to Work More Closely at Nordic and EU Level