Monday

11th Dec 2023

EU commission defends telecoms surveillance law

  • Data retention 'is here to stay', says the EU commission (Photo: Helena Spongenberg)

A controversial EU data retention law is 'necessary' and will not be scrapped, despite data privacy issues and constitutional court rebuttals in several member states, which now face multi-million-euro fines for not having implemented the legislation, the commissioner responsible said Monday (18 April).

"Data retention has proven useful in criminal investigations, but there is need for improvement as regards the design of the directive so that it better respects both the security and the privacy of our citizens," home affairs commissioner Cecilia Malmstrom said during a press conference.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

She recalled that the law was agreed upon somewhat hastily, in 2005, following the Madrid and London bombings, this being the first evaluation of how member states are applying the directive, five years after it came into force.

Under current provisions, internet and mobile phone providers are required to store - between six months and two years - details on who makes a call or sends an email, when and where, with police and intelligence services being then able to 'track calls back' and email traffic of serious crime suspects.

But in practice, as the European Commission admits in its report, the use of data retention varies greatly across the bloc. The law is not being applied in Germany, Romania, Sweden, Austria or the Czech Republic as it was blocked either by the respective constitutional courts or the parliament. In Poland conversely, data is stored the longest, police make the most inquiries to telecom providers and the country's national law does not specify that it should be used only for serious crimes, leaving room for journalists to be spied on to determine their sources, or for civil cases such as divorces.

Malmstrom insisted that the information provided by EU governments - despite being patchy and different from country to country - "indicates that data retention subject to EU regulation is indeed a necessary measure," so that investigators, telecom companies and citizens can have clear rules on the scope, duration and data privacy provisions.

She cited three success stories: fraudsters being caught by police after they called elderly people in Hungary and Poland pretending to be a relative in need of money; a gangster boss convicted in 2009 in connection with the seizure of heroin smuggled from Afghanistan to the UK valued at almost €40 million; and the dismantling of an international paedophile network of 70,000 members.

"If we didn't have EU rules on this, data retention would not disappear. Member states would almost certainly maintain their rules on compulsory retention and operators would retain data for commercial purposes," Malmstrom said.

Infringement procedures

That may be true for Poland, but it also means that the five countries where data retention has not been enacted are forced to do so, despite hostile public opinion and - in the case of Germany, the Czech Republic and Romania - constitutional court rulings. Infringement procedures have already started against Germany and Sweden.

In the case of Sweden, Malmstrom's home country, a court verdict is due in the coming year and could impose penalties of more than €40,000 for each day of delayed implementation, which would amount to several million euros.

Even if the commission admits that the law needs improvements, especially since it does not cover data protection at all, leaving it up to member states to attach such provisions, Malmstrom said the amendments could take several years, and in the meantime, member states need to apply the current law.

"The European Commission did not invent this directive, it was asked for by member states and applies to all 27 countries. We can't be arbitrary in its application. We can't make any exceptions. The law has to be followed," she insisted.

The commission's report sent shock waves through the data protection community and MEPs dealing with this dossier.

"It is difficult to explain why the commission continues to ignore some fundamental facts about data retention. There is still no evidence that this limitation of privacy is necessary in order to fight serious crime effectively. On the contrary, the experience of the member states that live without blanket data retention proves the opposite," Katarzyna Szymielewicz from Panoptykon, a Polish data protection NGO told this website.

The Polish activist is also "puzzled" about the commission's claims that there are "no concrete examples of serious breaches of privacy."

"In Poland, we have witnessed a few loud scandals with the use of billing and geo-location data for tracking journalistic sources or 'reconstructing' political affairs," she said.

German NGOs also reacted forcefully.

"The EU must no longer force blanket and indiscriminate telecommunications data retention on its member states, but prohibit such laws in favour of expedited preservation and targeted collection of traffic data that is needed for a specific investigation," AK Vorrat, a German working group on data retention, recommends.

EU citizens have gained nothing

European Digital Rights (EDRi), an umbrella organisation for digital civil rights, also ran its parallel assessment of the data retention law and concluded that EU citizens have gained nothing from it, but lost their privacy.

"In 2010, the average European had their traffic and location data logged in a telecommunications database once every six minutes," EDRi flags up.

And according to the European Data Protection Supervisor, data retention is "the most privacy-invasive instrument ever adopted by the European Union."

The only logical consequence, following the publication of the report, would be to repeal the law, German Green MEP Jan Phillip Albrecht said.

"This evaluation makes clear that the EU data retention directive is completely disproportionate, allowing for the far-reaching retention of telecommunications data with no real justification," he added.

"The data retention directive was and remains an excessive knee-jerk response to terrorist attacks in Europe. There is no evidence that the far-reaching retention of data has led to any concrete results beyond compromising civil liberties," he continued.

But commission officials are very far from such a view. "The EU data retention directive is here to stay," one official told journalists on Monday, under condition of anonymity.

EU companies banned from selling spyware to repressive regimes

European companies selling online surveillance technology have come under increasing criticism from NGOs and the European Parliament after it emerged their products had helped regimes in Iran, Egypt and Libya to clamp down on protesters.

Agenda

Final EU summit of 2023 plus rule of law in Spain This WEEK

EU leaders will gather in Brussels for their final summit of 2023, with a tough agenda that includes Ukraine, the Middle East, enlargement, and the revision of the EU budget, including €50bn financial aid for Kyiv.

Opinion

Why this week's EU summit must agree a new budget deal

There are claims by some member states that there are pots of unused cash sloshing around in the EU's coffers. This is simply untrue. By European Parliament budget rapporteur MEPs Jan Olbyrcht and Margarida Marques.

Analysis

How Moldova is trying to control tuberculosis

Moldova, Europe's poorest country, is working hard to combat tuberculosis. The country wants to be tuberculosis-free by 2030, at the same time as joining the EU. That's quite a challenge.

Feature

Sudanese fleeing violence find no haven in Egypt or EU

Since the cycle of violence started earlier this year in Sudan, more than six million people have been displaced. With increasingly fewer safe areas within the country, thousands have been forced to flee to neighbouring countries — especially Egypt.

Opinion

How should EU reform the humanitarian aid system?

The example of Ukraine illustrates that donors like the EU should be more ambitious about the localisation of aid. And this funding to local actors needs to be predictable, flexible, and longer than the typical one-year funding cycle.

Latest News

  1. Final EU summit of 2023 plus rule of law in Spain This WEEK
  2. Why this week's EU summit must agree a new budget deal
  3. How Moldova is trying to control tuberculosis
  4. Many problems to solve in Dubai — honesty about them is good
  5. Sudanese fleeing violence find no haven in Egypt or EU
  6. How should EU reform the humanitarian aid system?
  7. EU suggests visa-bans on Israeli settlers, following US example
  8. EU ministers prepare for all-night fiscal debate

Stakeholders' Highlights

  1. Nordic Council of MinistersJoin the Nordic Food Systems Takeover at COP28
  2. Nordic Council of MinistersHow women and men are affected differently by climate policy
  3. Nordic Council of MinistersArtist Jessie Kleemann at Nordic pavilion during UN climate summit COP28
  4. Nordic Council of MinistersCOP28: Gathering Nordic and global experts to put food and health on the agenda
  5. Friedrich Naumann FoundationPoems of Liberty – Call for Submission “Human Rights in Inhume War”: 250€ honorary fee for selected poems
  6. World BankWorld Bank report: How to create a future where the rewards of technology benefit all levels of society?

Stakeholders' Highlights

  1. Georgia Ministry of Foreign AffairsThis autumn Europalia arts festival is all about GEORGIA!
  2. UNOPSFostering health system resilience in fragile and conflict-affected countries
  3. European Citizen's InitiativeThe European Commission launches the ‘ImagineEU’ competition for secondary school students in the EU.
  4. Nordic Council of MinistersThe Nordic Region is stepping up its efforts to reduce food waste
  5. UNOPSUNOPS begins works under EU-funded project to repair schools in Ukraine
  6. Georgia Ministry of Foreign AffairsGeorgia effectively prevents sanctions evasion against Russia – confirm EU, UK, USA

Join EUobserver

Support quality EU news

Join us