Thursday

26th May 2022

France 'got its way' as Portugal ends e-Privacy deadlock

  • Member states had spent four years trying to agree on a common approach

EU ambassadors have reached a compromise on the e-Privacy reform after four years of deadlock - paving the way to start negotiations with the European Parliament on the final text.

"The path to the council position has not been easy, but we now have a mandate that strikes a good balance between solid protection of the private life of individuals and fostering the development of new technologies and innovation," said Portuguese minister for infrastructure and housing, Pedro Nuno Santos, on Wednesday (10 February), whose country holds the EU's rotating presidency,

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

The new e-Privacy regulation, proposed by the European Commission back in 2017, aims to harmonise legislation across the bloc and protect users from data retention and behavioural-tracking techniques, such as cookies.

But the agreement reached by member states this week has been harshly criticised by civil society for allowing "mass surveillance" under national data retention laws - permitting this was an important issue for France.

The new law will update the existing framework from 2002, which was amended in 2009, requiring prior consent for using cookies - and receiving the name of EU Cookies Law.

Cookies serve many functions, from storing a username and password to monitoring users' online habits to target advertising.

The council position establishes that the access to the terminal equipment of website users, needed for setting cookies, is, in principle, only allowed with consent.

However, the compromise also introduces new exceptions, for example, when installing security updates, measuring audiences, or updating software.

The new regulation also extends confidentiality rules for traditional telecommunications providers, to internet-based services such as WhatsApp or Zoom, and services involving an automated transfer of data, such as fitness trackers and other 'Internet of Things' devices.

As a result, any interference, including listening to, monitoring and processing of data by anyone other than the end-user would be prohibited.

France vs Germany

While the parliament's committee responsible for the e-Privacy reform quickly reached a position, member states have spent four years trying to agree a common approach.

That is explained partly by the fact that France has been fighting to ensure that mass surveillance is legal (under national data-retention legislation), while Germany had been advocating for strong privacy safeguards.

"One side decided to protect privacy, while the other wanted to turn the e-Privacy reform into a surveillance toolkit," said Estelle Massé from NGO Access Now, warning that the outcome of the council's negotiations shows that "France got its way".

"France's proposed language, aimed at giving more discretion to public authorities to retain and use data, got added in the final proposal," she added.

Portugal is the ninth successive EU presidency to have been working on e-Privacy.

The council and the parliament now can start negotiations on the final text - what could last months since the MEPs position dates back to the last parliamentary term and lobbying is expected to intensify.

This regulation builds on top of the requirements established under the bloc's data protection rules (GDPR), securing the privacy of electronic communications, whether they contain personal data or not.

Shortcomings

However, privacy activists and some MEPs have criticised the reform for not being aligned with essential principles of GDPR, such as 'privacy-by-design' and by default (data protection through technology design) - which has been deleted in the council text.

"Not ensuring privacy-by-design [and] by default would be terrible as it would legalise the current dominant tracking of people and having faulty devices to communicate, which would not guarantee the right to privacy and confidentiality of communications," said Diego Naranjo from the Brussels-based NGO European Digital Rights.

Green MEP Patrick Breyer, for his part, slammed the proposal, arguing that "EU governments are trying to hijack this reform to legalise mandatory and voluntary data-retention and forced tracking of our online activities".

"There must be no watering down of the current communications data protection," he added, warning that negotiating on these basics make no sense at all.

Brussels Bytes

EU e-privacy proposal risks breaking 'Internet of Things'

EU policymakers need to clarify that the e-privacy should not apply to most Internet of Things devices. The current proposal require explicit user consent in all cases - which is not practical.

EU to announce new mandatory rules on child sexual content

The European Commission is set to propose new legislation requiring companies to detect, report and remove child sexual abuse content. The rules come amid other moves by the EU's police agency Europol to develop AI targeting encryption.

EU reaches deal on flagship cybersecurity law

The European Parliament and EU member states have reached an agreement over new rules intended to protect Europe's public and private critical entities from cyberattacks.

Stakeholder

The CPDP conference wants multidisciplinary digital future

During the Computers, Privacy and Data Protection (CPDP) conference, many high-level discussions will touch upon the dynamics of decision-making in the design of new technologies, including the importance of inclusion, diversity, and ethics perspectives within these processes.

EU Commission won't probe 'Pegasus' spyware abuse

The European Commission says people should file their complaints with national authorities in countries whose governments are suspected of using an Israeli-made Pegasus spyware against them.

News in Brief

  1. Dutch journalists sue EU over banned Russia TV channels
  2. EU holding €23bn of Russian bank reserves
  3. Russia speeds up passport process in occupied Ukraine
  4. Palestinian civil society denounce Metsola's Israel visit
  5. Johnson refuses to resign after Downing Street parties report
  6. EU border police has over 2,000 agents deployed
  7. Dutch tax authorities to admit to institutional racism
  8. Rutte calls for EU pension and labour reforms

Stakeholders' Highlights

  1. Nordic Council of MinistersNordic delegation visits Nordic Bridges in Canada
  2. Nordic Council of MinistersClear to proceed - green shipping corridors in the Nordic Region
  3. Nordic Council of MinistersNordic ministers agree on international climate commitments
  4. UNESDA - SOFT DRINKS EUROPEEfficient waste collection schemes, closed-loop recycling and access to recycled content are crucial to transition to a circular economy in Europe
  5. UiPathNo digital future for the EU without Intelligent Automation? Online briefing Link

Latest News

  1. EU summit will be 'unwavering' on arms for Ukraine
  2. Orbán's new state of emergency under fire
  3. EU parliament prevaricates on barring Russian lobbyists
  4. Ukraine lawyer enlists EU watchdog against Russian oil
  5. Right of Reply: Hungarian government
  6. When Reagan met Gorbachev — a history lesson for Putin
  7. Orbán oil veto to deface EU summit on Ukraine
  8. France aims for EU minimum-tax deal in June

Join EUobserver

Support quality EU news

Join us