Friday

19th Jul 2019

Investigation

UK unlawfully copying data from EU police system

  • UK not part of Schengen, but its abuse of Schengen systems put people at risk, report said (Photo: Khairil Zhafri)

The United Kingdom has been illegally copying classified personal information from a database reserved for members of the passport-free Schengen travel zone.

It has shared the information with US companies and it is demanding to keep access to the database after it leaves the EU next year.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... or join as a group

  • Travellers at risk of being targeted over bogus and illegal information (Photo: Curt Smith)

An internal EU document, seen by EUobserver, listed years of violations by British authorities following restricted access to the Schengen Information System (SIS), an EU-run database used by police to track down undocumented migrants, missing people, stolen property, or suspected criminals.

The UK never joined the Schengen area, which includes 26 other European countries most of whom are EU members, but has been given some access to SIS since 2015.

British mismanagement and manipulation of the Schengen system also meant that "persons sought for arrest for instance even for terrorism related activities by Schengen Associated Countries cannot be detected upon entry to the UK," said the "restricted" EU document.

The British authorities copied the data and handed it over to border police despite the fact that some of the information contained was not only incorrect but entirely out of date, it added.

That meant that innocent people visiting or living in the UK run the risk of being flagged for violations they never committed from data that was unlawfully copied.

The 29-page document, drafted by Schengen experts from EU states and from the European Commission, said the UK violations "constitute serious and immediate risks to the integrity and security of SIS data as well as for the data subjects."

The UK also ignored alerts issued by other EU states, it said, so that "vehicles stolen on the territory of another member state and located in the UK are not seized."

A team of Schengen experts warned the UK already in 2015 to curb its abuses, but it did not comply.

At the same time, the British government is demanding use of the database following the UK's exit from the European Union next year.

Spot checks by the same team of Schengen experts composed from various member states and the European Commission documented the full range of violations in early November last year after visiting government offices, police stations, and airports in places like Warrington, Heathrow, Hampshire, Southampton and Kent.

Around half the checks were surprise visits.

They found, among other things, "that some major deficiencies in the legal, operational, and technical implementation of SIS identified during the evaluation of 2015 were not effectively remedied and still persist."

Examples abounded.

The UK has made numerous full and partial copies of SIS, increasing the risk of data breach and of having it unlawfully shared with other authorities around the world.

SIS contains information on nearly 500,000 non-EU citizens denied entry into Europe, as well as over 100,000 missing people, and some 36,000 criminal suspects. The Brits alone are said to have run some 539 million SIS checks last year.

Some of these copies were unlawfully stored on back-up laptops at airports and ports. Other copies were held at government offices. Other still were held by private contractors like CGI, a US-Canadian company, as well as IBM and ATOS, which were hired by the UK government to run the systems.

CGI now manages a SIS copy that included photographs, fingerprints and European Arrest Warrants. IBM manages a copy used by the UK's national border targeting centre as a service for the UK Home Office, which it then stores at a data centre owned by ATOS.

"Entrusting the management of the SIS technical copies to private contractors poses increased risks in terms of physical and logical data security, especially since the private contractors in the UK are not only hosting the systems but also implement changes to the system," the EU experts' report noted.

US companies holding such sensitive data may also be required to hand it over to the US government given demands by the USA Patriot Act, warned the EU document.

Meanwhile, the UK was using partial SIS data with a variety of national systems.

These included the Warning Index, which cross-references incoming travellers against national lists of known criminals and terrorists.

The Warning Index is held and managed by Fujitsu, a private contractor, on behalf of the UK Home Office, and is running at six UK airports.

The index is also one of the biggest violators of the SIS data and "constitutes an unlawful copying of SIS data", the EU report said.

Flagged alerts for arrests were not made available at the UK borders, complicating efforts by its own border guards from spotting returning foreign terrorist fighters.

Semaphore, a system used to capture inbound and outbound passenger information supplied by airlines and shipping companies, also has access to SIS as does the UK's central national database known as IDENT1.

IDENTI1 contains information like fingerprints and palm prints from people arrested by the British police. Those prints are then matched against records held by SIS.

IT security system threatens EU rights

EU commission wants to link up all information systems on security, border, and migration, drawing a rebuke from own rights agency.

EU proposes yearly rule of law 'reports'

EU states ought to undergo a yearly "Rule of Law Review Cycle" to help stop countries such as Hungary, Poland, and Romania from backsliding on EU norms, the European Commission has said.

EU defends US data pact, as Facebook court case opens

An Austrian privacy campaigner vs Facebook over the future of data transfers to the US case opened at the European Court of Justice in Luxembourg on Tuesday. The European Commission, meanwhile, says the Privacy Shield pact is working fine.

Stalling on VAT reform costing billions, says Commission

German media outlet Correctiv, along with other newsrooms, have revealed how criminals annually cheat EU states out of billions in VAT fraud. The EU Commission says solutions exist - but member states refuse to budge on tax unanimity.

Stakeholders' Highlights

  1. UNESDAUNESDA reduces added sugars 11.9% between 2015-2017
  2. International Partnership for Human RightsEU-Uzbekistan Human Rights Dialogue: EU to raise key fundamental rights issues
  3. Nordic Council of MinistersNo evidence that social media are harmful to young people
  4. Nordic Council of MinistersCanada to host the joint Nordic cultural initiative 2021
  5. Vote for the EU Sutainable Energy AwardsCast your vote for your favourite EUSEW Award finalist. You choose the winner of 2019 Citizen’s Award.
  6. Nordic Council of MinistersEducation gets refugees into work
  7. Counter BalanceSign the petition to help reform the EU’s Bank
  8. UNICEFChild rights organisations encourage candidates for EU elections to become Child Rights Champions
  9. UNESDAUNESDA Outlines 2019-2024 Aspirations: Sustainability, Responsibility, Competitiveness
  10. Counter BalanceRecord citizens’ input to EU bank’s consultation calls on EIB to abandon fossil fuels
  11. International Partnership for Human RightsAnnual EU-Turkmenistan Human Rights Dialogue takes place in Ashgabat
  12. Nordic Council of MinistersNew campaign: spot, capture and share Traces of North

Latest News

  1. EU goes on holiday as new UK PM arrives This WEEK
  2. Survey: Half of EU staff 'don't know' ethics rules
  3. Von der Leyen signals soft touch on migrants, rule of law
  4. Timmermans: von der Leyen will be tough on rule of law
  5. Timmermans trolls 'idiot' Brexit negotiators
  6. Rudderless Europe: Will real Germany please stand up?
  7. PiS & Fidesz claim credit for von der Leyen victory
  8. Von der Leyen faces gender battle for commission posts

Stakeholders' Highlights

  1. Nordic Council of MinistersLeading Nordic candidates go head-to-head in EU election debate
  2. Nordic Council of MinistersNew Secretary General: Nordic co-operation must benefit everybody
  3. Platform for Peace and JusticeMEP Kati Piri: “Our red line on Turkey has been crossed”
  4. UNICEF2018 deadliest year yet for children in Syria as war enters 9th year
  5. Nordic Council of MinistersNordic commitment to driving global gender equality
  6. International Partnership for Human RightsMeet your defender: Rasul Jafarov leading human rights defender from Azerbaijan
  7. UNICEFUNICEF Hosts MEPs in Jordan Ahead of Brussels Conference on the Future of Syria
  8. Nordic Council of MinistersNordic talks on parental leave at the UN
  9. International Partnership for Human RightsTrial of Chechen prisoner of conscience and human rights activist Oyub Titiev continues.
  10. Nordic Council of MinistersNordic food policy inspires India to be a sustainable superpower
  11. Nordic Council of MinistersMilestone for Nordic-Baltic e-ID
  12. Counter BalanceEU bank urged to free itself from fossil fuels and take climate leadership

Join EUobserver

Support quality EU news

Join us