3 ms·

The European Union has some rules on personal data which are worth reading: http://ec.europa.eu/justice/data-protection/ http://ec.europa.eu/justice/data-prote

• Silhouette 10y ago
  There's also an interesting difference in philosophy here: the EU and its member states have, reasonably consistently, been moving in a direction of more privacy and safeguards for personal data in recent years, and this has been significantly influenced by a perception that the tech industry can't or won't self-regulate to a level that was in the spirit of the previous laws. Now, the EU doesn't always get this right. Some of the rules already agreed at that level, which will in due course become enforceable in member states, are obviously awkward or outright broken to anyone familiar with the actual technologies involved. There are some obvious contradictions (a cynic might use the word "hypocrisy") particularly in areas around potential surveillance by government agencies. Still, compared to the kind of laissez-faire attitude adopted particularly in the US, the EU is practically living in a different world, and the difference is getting wider almost by the day. Moreover, I suspect a significant fraction of the US public would prefer a more EU-style arrangement (witness the arguments in the EFF report here). Obviously a lot of US businesses would not, though others, particularly those whose reputations rely more directly on being secure or trustworthy in some sense, might disagree. Unfortunately, given the lobbyist-centric and partisan nature of current US politics, it seems inevitable that this fundamental divide will cause increasing amounts of grief all round, and the unknowns are more about who will be hurt more.
  • bigbugbag 10y ago
    To my knowledge those privacy and safeguard were there since the beginning, originating in a 1978 french law passed in reaction to a government attempt to create a centralized database of all french citizen. This law created the french CNIL[1] in charge of data protection, the first of its kind but soon to be replicated in other countries. In 1980 work began on a data protection directive[2] which would pass 15 years later after giving birth to 1981's Convention for the protection of individuals with regard to automatic processing of personal data[3] At the turn of the 2000's through lobbying of various industries and government (including the french government) reversed direction and managed to pass a data retention directive at the European level. This got challenged at all steps from locals to the highest European Court of Justice which invalidated the directive for being contrary to fundamental human rights. This didn't happened by chance, it took years of dedication and hard work to get there. And it got the attention of a bunch of very dedicated internet geeks who got themselves into politics to defend the internet and privacy. This gave rise to association of people such as la quadrature du net[4] who has been active at the national level up to the European level. So now the politicians at the European level have a significant amount of backup from concerned citizens and netizens who provide all technical knowledge and background required to understand the significance of technical piece of legislation. But a most significant difference with the US is World War 2 took place in Europe. (which kinda gave birth to the EU as to prevent Germany and France going to war again a joined union of coal and steel production deal was made which laid the foundation for the European union[5]. The point is Europe and in particular Germany one of the most influential country in the European Union has first hand experience of what the effect of mass surveillance can be and the importance of privacy. WW2 and nazism industrial attempt at genocide explains why the french were outraged by the government attempt at a centralized database of french citizen identified by social security numbers, and why Germany opposed the data retention directive. The situation is a bit different in the US, when google or the like publicly oppose a bill they're defending their own interest not the general public. When an individual organize people to successfully oppose a bill, he gets pushed to suicide under government pressure probably using the data the govt agencies have on him as Aaron Schwartz story shows. There's also the economic standpoint, most of the major internet companies are from the US so it makes sense for the EU to defend their population from those and maybe give an advantage to European companies while on the other hand the US has no foreign market dominant companies to defend from and instead has incentive to protect those companies and further extend their domination. Different histories, different incentives hence different approaches to privacy. [1]: https://en.wikipedia.org/wiki/Commission_nationale_de_l%27informatique_et_des_libert%C3%A9s https://en.wikipedia.org/wiki/Commission_nationale_de_l%27in... [2]: https://en.wikipedia.org/wiki/Convention_for_the_protection_of_individuals_with_regard_to_automatic_processing_of_personal_data https://en.wikipedia.org/wiki/Convention_for_the_protection_... [3]: https://en.wikipedia.org/wiki/Data_Protection_Directive https://en.wikipedia.org/wiki/Data_Protection_Directive [4]: https://www.laquadrature.net/en https://www.laquadrature.net/en [5]: https://en.wikipedia.org/wiki/European_Coal_and_Steel_Community https://en.wikipedia.org/wiki/European_Coal_and_Steel_Commun... and https://en.wikipedia.org/wiki/Schuman_Declaration https://en.wikipedia.org/wiki/Schuman_Declaration