Thursday

9th Feb 2023

Exclusive

Breton's firm hosted unlawful copy of EU police data

  • The UK carried out 514m SIS search queries in 2016, the second-highest most among all EU states (Photo: nolifebeforecoffee)

Atos, the company recently led by France's choice candidate for European Commissioner, hosted unlawful partial copies of EU police data on behalf of the United Kingdom.

The firm's now former chief executive, Thierry Breton, is slated to head Europe's industrial policy following his nomination to the commissioner post, a move recently approved by European Commission president-elect Ursula von der Leyen.

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

A confidential document obtained by EUobserver lists years of abuse by UK authorities in the way they handle the Schengen Information System (SIS), an EU-run database used by police to track down undocumented migrants, missing people, stolen property, or suspected criminals.

Although not a member of the passport-free Schengen area, the UK has been granted restricted access since 2015 on the premise it would respect the rules.

Despite this restricted access, the UK carried out over 514 million SIS queries in 2016, the second-highest among all EU states.

A spot check exercise in November 2017 by a team of Schengen experts from EU states and from the European Commission found that the UK had also made a significant number of full or partial copies of the SIS.

"Three of the SIS copies are administered by different private companies in their own premises or in rented premises," notes the report.

Among them is Breton's ATOS, which had allowed IBM to store a partial technical copy of SIS known as Semaphore on its premises.

The copy contained alerts for arrests, checked against inbound and outbound passenger information, supplied by airlines and shipping companies.

"This technical copy is managed by a private contractor IBM in the premises of another private contractor - ATOS," notes the report.

The report says such copies should never be entrusted to third parties like private contractors because it increases the risk it will be leaked, stolen or misused.

Another worry is that the UK-based private contractors not only host the systems but have administrator access rights, which also violates SIS management rules.

ATOS, IBM and the US-Canadian firm CGI all had access to SIS in some shape or form.

The United Kingdom is also a member of the elite intelligence sharing network known as 'Five Eyes', which includes the United States.

The Patriot Act, a counterterrorism law passed in the wake of the September 11 attacks on the World Trade Centre, gave US intelligence and law enforcement agencies wide powers in gaining access to data.

The issue was raised with the UK authorities, who claim neither IBM nor CGI would be obliged to comply with a US request to access the SIS data.

They argued that although IBM operates the service for the UK Home Office, it is the Home Office that owns the hardware and intellectual property rights.

It also says IBM operates services from a data centre, rented by the Home Office, but owned by ATOS.

But companies, under certain US Patriot Act provisions, are also banned from notifying the data subject or the data protection authority in Europe should US authorities request access to the personal details of an EU national.

Asked if the UK had given the European Commission any guarantees that it was not sharing the data with the Americans, EU commissioner for security Julian King remained elusive.

Instead, he said a rolling programme of engagement with member states on how they secure data according to the rules do sometimes raise some issues and some concerns.

"We pursue those concerns with the countries involved. I have to say that those conversations, which remain private, are very effective," he told EUobserver last week (30 October).

ATOS was also asked to comment but forwarded the query to the UK Home Office, which told EUobserver they do not respond to leaked documents.

"The UK has some of the highest levels of data protection safeguards globally and we are fully committed to meeting our legal obligations," said the Home Office spokesperson.

ATOS, in a post publication email, added that they "supply only a secure room within our site on behalf of the client and have no technical access to the (SIS) data whatsoever."

This article was updated on Tuesday (5 November) at 10:40 to add a post-publication statement from Atos.

Investigation

UK unlawfully copying data from EU police system

The British government is abusing EU travel security systems, making and using illegal copies of outdated information, and putting innocent people at risk of being red-flagged.

Agenda

Iran, Brexit test 'geopolitical' commission This WEEK

The EU foreign affairs chief attempts to salvage whatever is left of the Iran nuclear deal by inviting the Iranian foreign minister to Brussels - while the EU commission president heads to London for Brexit talks.

Commission defends Breton's Atos over police data

The European Commission defended Atos for hosting EU police data, despite its own public guidelines that state operational and technical copies should not be entrusted to third parties. Atos former CEO Thierry Breton is set to become a European commissioner.

Romanian president and PM at war over commission pick

The president has publicly scolded the prime minister over picking a new name for Romania's EU commissioner candidate - a week ahead of the formation of a new government in Bucharest. Premier Viorica Dancila has hit back on Facebook.

MEPs slam UK for violating EU police database

EUobserver's revelations of how the UK violates and abuses an EU police database sparked heated debate in the European Parliament's civil liberties committee - as the European Commission refused to respond to questions given the confidentiality of the leaked document.

EU threatens legal action against UK over commissioner

The European Commission has started an infringement proceeding against the United Kingdom for failing to nominate a commissioner-candidate. The new commission, which wants to launch on 1 December, first requires a commissioner from each of the 28 EU states.

Polish backpedal on windfarms put EU funds at risk

Draft legislation in Poland aimed at relaxing some of Europe's strictest laws surrounding onshore wind-turbines has been derailed by a surprise last minute amendment, which could put Poland back on a collision course with the EU.

Opinion

Why the new ECHR Ukraine-Russia ruling matters

The ECHR ruled that Russia was in "effective control" of separatist regions of Eastern Ukraine from 11 May 2014. In doing so, the court has formally acknowledged the inter-state character of the conflict and Russia's culpability for human rights abuses.

Latest News

  1. MEPs agree to fossil loophole in EU green building directive
  2. Racist algorithms and AI can't determine EU migration policy
  3. EU leaders attempt to hash out response to US green subsidies
  4. Russian diplomats in EU: unpaid wages, low morale
  5. Eight EU states press for more Turkey-style migrant swap deals
  6. EU buries head deeper in sand over Israel's apartheid
  7. Polish MEP also went on freelance Azerbaijan trip
  8. Why Europe's interminable compromises are a virtue

Stakeholders' Highlights

  1. EFBWWEU Social Dialogue review – publication of the European Commission package and joint statement of ETUFs
  2. Oxfam InternationalPan Africa Program Progress Report 2022 - Post Covid and Beyond
  3. WWFWWF Living Planet Report
  4. EFBWWEFBWW Executive Committee report on major abuses, labour crime and subcontracting
  5. European Parliamentary Forum for Sexual & Reproductive Rights (EPF)Launch of the EPF Contraception Policy Atlas Europe 2023. 8th February. Register now.
  6. Europan Patent OfficeHydrogen patents for a clean energy future: A global trend analysis of innovation along hydrogen value chains

Stakeholders' Highlights

  1. Forum EuropeConnecting the World from the Skies calls for global cooperation in NTN rollout
  2. European Committee of the RegionsRe-Watch EURegions Week 2022
  3. Nordic Council of MinistersCOP27: Food systems transformation for climate action
  4. Friedrich Naumann Foundation European DialogueGender x Geopolitics: Shaping an Inclusive Foreign Security Policy for Europe
  5. Obama FoundationThe Obama Foundation Opens Applications for its Leaders Program in Europe
  6. Nordic Council of MinistersLarge Nordic youth delegation at COP15 biodiversity summit in Montreal

Join EUobserver

Support quality EU news

Join us