Saturday

2nd Dec 2023

EU commission defends telecoms surveillance law

  • Data retention 'is here to stay', says the EU commission (Photo: Helena Spongenberg)

A controversial EU data retention law is 'necessary' and will not be scrapped, despite data privacy issues and constitutional court rebuttals in several member states, which now face multi-million-euro fines for not having implemented the legislation, the commissioner responsible said Monday (18 April).

"Data retention has proven useful in criminal investigations, but there is need for improvement as regards the design of the directive so that it better respects both the security and the privacy of our citizens," home affairs commissioner Cecilia Malmstrom said during a press conference.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

She recalled that the law was agreed upon somewhat hastily, in 2005, following the Madrid and London bombings, this being the first evaluation of how member states are applying the directive, five years after it came into force.

Under current provisions, internet and mobile phone providers are required to store - between six months and two years - details on who makes a call or sends an email, when and where, with police and intelligence services being then able to 'track calls back' and email traffic of serious crime suspects.

But in practice, as the European Commission admits in its report, the use of data retention varies greatly across the bloc. The law is not being applied in Germany, Romania, Sweden, Austria or the Czech Republic as it was blocked either by the respective constitutional courts or the parliament. In Poland conversely, data is stored the longest, police make the most inquiries to telecom providers and the country's national law does not specify that it should be used only for serious crimes, leaving room for journalists to be spied on to determine their sources, or for civil cases such as divorces.

Malmstrom insisted that the information provided by EU governments - despite being patchy and different from country to country - "indicates that data retention subject to EU regulation is indeed a necessary measure," so that investigators, telecom companies and citizens can have clear rules on the scope, duration and data privacy provisions.

She cited three success stories: fraudsters being caught by police after they called elderly people in Hungary and Poland pretending to be a relative in need of money; a gangster boss convicted in 2009 in connection with the seizure of heroin smuggled from Afghanistan to the UK valued at almost €40 million; and the dismantling of an international paedophile network of 70,000 members.

"If we didn't have EU rules on this, data retention would not disappear. Member states would almost certainly maintain their rules on compulsory retention and operators would retain data for commercial purposes," Malmstrom said.

Infringement procedures

That may be true for Poland, but it also means that the five countries where data retention has not been enacted are forced to do so, despite hostile public opinion and - in the case of Germany, the Czech Republic and Romania - constitutional court rulings. Infringement procedures have already started against Germany and Sweden.

In the case of Sweden, Malmstrom's home country, a court verdict is due in the coming year and could impose penalties of more than €40,000 for each day of delayed implementation, which would amount to several million euros.

Even if the commission admits that the law needs improvements, especially since it does not cover data protection at all, leaving it up to member states to attach such provisions, Malmstrom said the amendments could take several years, and in the meantime, member states need to apply the current law.

"The European Commission did not invent this directive, it was asked for by member states and applies to all 27 countries. We can't be arbitrary in its application. We can't make any exceptions. The law has to be followed," she insisted.

The commission's report sent shock waves through the data protection community and MEPs dealing with this dossier.

"It is difficult to explain why the commission continues to ignore some fundamental facts about data retention. There is still no evidence that this limitation of privacy is necessary in order to fight serious crime effectively. On the contrary, the experience of the member states that live without blanket data retention proves the opposite," Katarzyna Szymielewicz from Panoptykon, a Polish data protection NGO told this website.

The Polish activist is also "puzzled" about the commission's claims that there are "no concrete examples of serious breaches of privacy."

"In Poland, we have witnessed a few loud scandals with the use of billing and geo-location data for tracking journalistic sources or 'reconstructing' political affairs," she said.

German NGOs also reacted forcefully.

"The EU must no longer force blanket and indiscriminate telecommunications data retention on its member states, but prohibit such laws in favour of expedited preservation and targeted collection of traffic data that is needed for a specific investigation," AK Vorrat, a German working group on data retention, recommends.

EU citizens have gained nothing

European Digital Rights (EDRi), an umbrella organisation for digital civil rights, also ran its parallel assessment of the data retention law and concluded that EU citizens have gained nothing from it, but lost their privacy.

"In 2010, the average European had their traffic and location data logged in a telecommunications database once every six minutes," EDRi flags up.

And according to the European Data Protection Supervisor, data retention is "the most privacy-invasive instrument ever adopted by the European Union."

The only logical consequence, following the publication of the report, would be to repeal the law, German Green MEP Jan Phillip Albrecht said.

"This evaluation makes clear that the EU data retention directive is completely disproportionate, allowing for the far-reaching retention of telecommunications data with no real justification," he added.

"The data retention directive was and remains an excessive knee-jerk response to terrorist attacks in Europe. There is no evidence that the far-reaching retention of data has led to any concrete results beyond compromising civil liberties," he continued.

But commission officials are very far from such a view. "The EU data retention directive is here to stay," one official told journalists on Monday, under condition of anonymity.

EU companies banned from selling spyware to repressive regimes

European companies selling online surveillance technology have come under increasing criticism from NGOs and the European Parliament after it emerged their products had helped regimes in Iran, Egypt and Libya to clamp down on protesters.

Brussels denies having no 'concern' on Spain's amnesty law

The Spanish government remains secretive about its negotiations with pro-independence Catalans, but claims the EU Commission has "zero concerns" about their proposed amnesty law for Catalan separatists. The EU executive denies that.

Opinion

Dubai's COP28 — a view from the ground

Discussion of the biggest existential threat humanity has ever faced is barely mentioned on billboards or signage in Dubai — yet visitors are made aware quite quickly that t world rugby sevens tournament is imminent.

Opinion

Dubai's COP28 — a view from the ground

Discussion of the biggest existential threat humanity has ever faced is barely mentioned on billboards or signage in Dubai — yet visitors are made aware quite quickly that t world rugby sevens tournament is imminent.

Opinion

'Pay or okay?' — Facebook & Instagram vs the EU

Since last week, Mark Zuckerberg's Meta corporation is forcing its European users to either accept their intrusive privacy practices — or pay €156 per year to access Facebook and Instagram without tracking advertising.

Latest News

  1. Israel's EU ambassador: 'No clean way to do this operation'
  2. Brussels denies having no 'concern' on Spain's amnesty law
  3. Dubai's COP28 — a view from the ground
  4. Germany moves to criminalise NGO search-and-rescue missions
  5. Israel recalls ambassador to Spain in new diplomatic spat
  6. Migrant return bill 'obstructed' as EU states mull new position
  7. Paris and Berlin key to including rape in gender-violence directive
  8. What are the big money debates at COP28 UN climate summit?

Stakeholders' Highlights

  1. Nordic Council of MinistersArtist Jessie Kleemann at Nordic pavilion during UN climate summit COP28
  2. Nordic Council of MinistersCOP28: Gathering Nordic and global experts to put food and health on the agenda
  3. Friedrich Naumann FoundationPoems of Liberty – Call for Submission “Human Rights in Inhume War”: 250€ honorary fee for selected poems
  4. World BankWorld Bank report: How to create a future where the rewards of technology benefit all levels of society?
  5. Georgia Ministry of Foreign AffairsThis autumn Europalia arts festival is all about GEORGIA!
  6. UNOPSFostering health system resilience in fragile and conflict-affected countries

Stakeholders' Highlights

  1. European Citizen's InitiativeThe European Commission launches the ‘ImagineEU’ competition for secondary school students in the EU.
  2. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste
  3. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  4. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA
  5. Nordic Council of MinistersGlobal interest in the new Nordic Nutrition Recommendations – here are the speakers for the launch
  6. Nordic Council of Ministers20 June: Launch of the new Nordic Nutrition Recommendations

Join EUobserver

Support quality EU news

Join us