Sunday

26th Mar 2017

Interview

Facebook, Skype challenged in EU over spy affair

  • Facebook opened a subsidiary in Ireland which is subject to EU data protection laws (Photo: Spencer E Holtaway)

A group of Austrians, led by law student Max Schrems, has challenged the EU-based subsidiaries of Apple, Facebook, Microsoft, Skype and Yahoo on data privacy following revelations that they allowed US intelligence services to search to Europeans' data.

Schrems is no novice when it comes to tackling Internet giants.

Dear EUobserver reader

Subscribe now for unrestricted access to EUobserver.

Sign up for 30 days' free trial, no obligation. Full subscription only 15 € / month or 150 € / year.

  1. Unlimited access on desktop and mobile
  2. All premium articles, analysis, commentary and investigations
  3. EUobserver archives

EUobserver is the only independent news media covering EU affairs in Brussels and all 28 member states.

♡ We value your support.

If you already have an account click here to login.

In 2011 he launched the initiative Europe vs. Facebook, asking the US company to show him all the data they have on him. It turned out to be 1,222 pages of data from three years of Facebook use. Schrems' move eventually triggered some improvements in the company's privacy policy.

"The most interesting thing is that here in Europe we have laws on data protection, but we don't enforce them," Schrems told this website on Wednesday (17 July).

Schrems has filed complaints with the data protection offices in Ireland for Facebook and Apple, in Luxembourg for Skype and Microsoft, and in Germany for Yahoo.

The five companies were mentioned by fugitive whistleblower Edward Snowden, a former CIA contractor who revealed that a massive surveillance programme (Prism) allows US intelligence services to sift through emails, read chats and listen to Skype conversations of anyone in the world.

"All these companies have set up subsidiaries in Europe to avoid taxes. They are on EU soil, so they have to abide by EU law, which says it is illegal to forward data if you cannot guarantee it is going to safe hands.

He also noted that in Europe the US authorities cannot apply a so-called gag order, which in US prohibits these companies on giving any information about Prism.

"Here they have to say what they do with the data and demonstrate it is safe," Schrems said.

All three national data protection offices have already sent questions to the companies based on Schrems' complaint.

"The European subsidiaries are legally responsible for the servers in the US, even though they don't process any data. They are trying to exploit the legal system in Europe to pay as little tax as possible, that's why they use this construction. So now we use this construction as well, to make them stick to EU law," the Austrian student said.

His hopes lie with the German data protection office, because the Irish one, he says, has so far proven to be a mere "rubberstamping office" for big companies.

"We don't know about Luxembourg yet, but if the Germans look into it, the Irish will also have to do something," Schrems said.

He explained that his first case filed in Ireland against Facebook with the data protection commission is still ongoing.

The whole exercise is not so much about "fighting the companies", but rather checking whether European data protection really works.

"I studied in Silicon Valley and there were companies coming to the classroom not knowing there is a European among them.

"They were saying it very bluntly: yes, Europe has strong data protection rules, but if you just pretend to respect them, you're fine. No way can they find out what we are doing on our servers and even if they do, it will take them at least 10 years to enforce anything."

The EU is currently revamping its data protection rules - a process that until now only Brussels aficionados have been following.

But with the Prism scandal in the news all over Europe, the EU data protection law is likely to get more media attention, Schrems predicts.

German Chancellor Angela Merkel on Sunday said she wants the law to move ahead and to uphold the stricter German standards on data protection.

"This is a good thing. Lobbying is so intense and uneven on this law - Facebook alone has hired five lobbyists for this in Brussels, while on the other side, NGOs have maybe one person who also has to cover other topics too. And MEPs rarely go the extra mile of asking some independent experts or academics about it," Schrems said.

The European Commission earlier this week also said it wants to see the bill move faster through the European Parliament - where it is currently stuck - and come into force by May 2014.

MEPs want to scrap US data agreements

Frustrated MEPs want the EU to scrap data protection agreements with the US as they mount pressure on the member states to start negotiations on the EU data protection reforms.

Analysis

More hype than substance in EU counter-terror plans

The 22 March anniversary of the Brussels bombing will trigger a lot of soul searching. But EU counter-terrorism strategies over the past 10 years have been crisis-driven with little follow through or oversight.

Stakeholders' Highlights

  1. European Gaming & Betting Association60 Years Rome Treaty – 60 Years Building an Internal Market
  2. Malta EU 2017New EU Rules to Prevent Terrorism and Give More Rights to Victims Approved
  3. European Jewish Congress"Extremists Still Have Ability and Motivation to Murder in Europe" Says EJC President
  4. European Gaming & Betting AssociationAudiovisual Media Services Directive to Exclude Minors from Gambling Ads
  5. ILGA-EuropeTime for a Reality Check on International Day for the Elimination of Racial Discrimination
  6. UNICEFHuman Cost to Refugee and Migrant Children Mounts Up One Year After EU-Turkey Deal
  7. Malta EU 2017Council Adopts New Rules to Improve Safety of Medical Devices
  8. Nordic Council of MinistersNordic Energy Research: How to Reach 100 Percent Renewable Energy
  9. Party of European SocialistsWe Must Renew Europe for All Europeans
  10. MEP Tomáš ZdechovskýThe European Commission Has Failed in Its Fight Against Food Waste
  11. ILGA-EuropeEP Recognises Discrimination Faced by Trans & Intersex People
  12. Nordic Council of Ministers25 Nordic Bioeconomy Cases for Sustainable Change