Saturday

2nd Dec 2023

France 'got its way' as Portugal ends e-Privacy deadlock

  • Member states had spent four years trying to agree on a common approach (Photo: EUobserver)

EU ambassadors have reached a compromise on the e-Privacy reform after four years of deadlock - paving the way to start negotiations with the European Parliament on the final text.

"The path to the council position has not been easy, but we now have a mandate that strikes a good balance between solid protection of the private life of individuals and fostering the development of new technologies and innovation," said Portuguese minister for infrastructure and housing, Pedro Nuno Santos, on Wednesday (10 February), whose country holds the EU's rotating presidency,

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

The new e-Privacy regulation, proposed by the European Commission back in 2017, aims to harmonise legislation across the bloc and protect users from data retention and behavioural-tracking techniques, such as cookies.

But the agreement reached by member states this week has been harshly criticised by civil society for allowing "mass surveillance" under national data retention laws - permitting this was an important issue for France.

The new law will update the existing framework from 2002, which was amended in 2009, requiring prior consent for using cookies - and receiving the name of EU Cookies Law.

Cookies serve many functions, from storing a username and password to monitoring users' online habits to target advertising.

The council position establishes that the access to the terminal equipment of website users, needed for setting cookies, is, in principle, only allowed with consent.

However, the compromise also introduces new exceptions, for example, when installing security updates, measuring audiences, or updating software.

The new regulation also extends confidentiality rules for traditional telecommunications providers, to internet-based services such as WhatsApp or Zoom, and services involving an automated transfer of data, such as fitness trackers and other 'Internet of Things' devices.

As a result, any interference, including listening to, monitoring and processing of data by anyone other than the end-user would be prohibited.

France vs Germany

While the parliament's committee responsible for the e-Privacy reform quickly reached a position, member states have spent four years trying to agree a common approach.

That is explained partly by the fact that France has been fighting to ensure that mass surveillance is legal (under national data-retention legislation), while Germany had been advocating for strong privacy safeguards.

"One side decided to protect privacy, while the other wanted to turn the e-Privacy reform into a surveillance toolkit," said Estelle Massé from NGO Access Now, warning that the outcome of the council's negotiations shows that "France got its way".

"France's proposed language, aimed at giving more discretion to public authorities to retain and use data, got added in the final proposal," she added.

Portugal is the ninth successive EU presidency to have been working on e-Privacy.

The council and the parliament now can start negotiations on the final text - what could last months since the MEPs position dates back to the last parliamentary term and lobbying is expected to intensify.

This regulation builds on top of the requirements established under the bloc's data protection rules (GDPR), securing the privacy of electronic communications, whether they contain personal data or not.

Shortcomings

However, privacy activists and some MEPs have criticised the reform for not being aligned with essential principles of GDPR, such as 'privacy-by-design' and by default (data protection through technology design) - which has been deleted in the council text.

"Not ensuring privacy-by-design [and] by default would be terrible as it would legalise the current dominant tracking of people and having faulty devices to communicate, which would not guarantee the right to privacy and confidentiality of communications," said Diego Naranjo from the Brussels-based NGO European Digital Rights.

Green MEP Patrick Breyer, for his part, slammed the proposal, arguing that "EU governments are trying to hijack this reform to legalise mandatory and voluntary data-retention and forced tracking of our online activities".

"There must be no watering down of the current communications data protection," he added, warning that negotiating on these basics make no sense at all.

Brussels Bytes

EU e-privacy proposal risks breaking 'Internet of Things'

EU policymakers need to clarify that the e-privacy should not apply to most Internet of Things devices. The current proposal require explicit user consent in all cases - which is not practical.

EU to announce new mandatory rules on child sexual content

The European Commission is set to propose new legislation requiring companies to detect, report and remove child sexual abuse content. The rules come amid other moves by the EU's police agency Europol to develop AI targeting encryption.

Platform workers could face 'robo-firing' under EU's AI rules

The platform workers directive, currently under negotiation, could create "ambiguity" on the processing of personal data by the platform and would also violate the GDPR by including the use of so-called robo-firing, research shows.

No mass scanning in EU online child-abuse bill, MEPs agree

MEPs agreed on new rules for online service and hosting providers to improve the protection of children online, but also to ensure the privacy of internet users — a balance that was missing from the EU Commission's proposal.

Latest News

  1. Israel's EU ambassador: 'No clean way to do this operation'
  2. Brussels denies having no 'concern' on Spain's amnesty law
  3. Dubai's COP28 — a view from the ground
  4. Germany moves to criminalise NGO search-and-rescue missions
  5. Israel recalls ambassador to Spain in new diplomatic spat
  6. Migrant return bill 'obstructed' as EU states mull new position
  7. Paris and Berlin key to including rape in gender-violence directive
  8. What are the big money debates at COP28 UN climate summit?

Stakeholders' Highlights

  1. Nordic Council of MinistersArtist Jessie Kleemann at Nordic pavilion during UN climate summit COP28
  2. Nordic Council of MinistersCOP28: Gathering Nordic and global experts to put food and health on the agenda
  3. Friedrich Naumann FoundationPoems of Liberty – Call for Submission “Human Rights in Inhume War”: 250€ honorary fee for selected poems
  4. World BankWorld Bank report: How to create a future where the rewards of technology benefit all levels of society?
  5. Georgia Ministry of Foreign AffairsThis autumn Europalia arts festival is all about GEORGIA!
  6. UNOPSFostering health system resilience in fragile and conflict-affected countries

Stakeholders' Highlights

  1. European Citizen's InitiativeThe European Commission launches the ‘ImagineEU’ competition for secondary school students in the EU.
  2. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste
  3. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  4. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  5. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch
  6. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations

Join EUobserver

Support quality EU news

Join us