4 ms·

More in-depth information: https://netzpolitik.org/2021/eu-commission-why-chat-control-is-so-dangerous/ https://netzpolitik.org/2021/eu-commission-why-chat-con

by triska 5y ago

More in-depth information: https://netzpolitik.org/2021/eu-commission-why-chat-control-is-so-dangerous/ https://netzpolitik.org/2021/eu-commission-why-chat-control-... Including for example: "According to a legal opinion by Prof. Dr. Ninon Colneric automated scanning could indeed be illegal. Surveillance without a specific reason or reasonable suspicion is prohibited in the EU due to the fact of its violation of fundamental rights. The European Court of Justice has repeatedly confirmed this view and, for example, reproved the retention of data on a number of occasions. Nevertheless, attempts to revive the data retention zombie with legal tricks have not died down. The demand can be found regularly in council papers of various EU countries. Thus, this type of mass surveillance is still part of the German Telecommunications Act („Telekommunikationsgesetz“), although being currently suspended." The open letter, linked in the article, is also a good read: https://www.patrick-breyer.de/wp-content/uploads/2021/11/20211020_Letter_General_Monitoring.pdf https://www.patrick-breyer.de/wp-content/uploads/2021/11/202... Notably: "Individuals, businesses and government rely on end-to-end encryption to safeguard their personal, commercial and state secrets. The safety of individuals (e.g. witnesses, officials) depends on secure encryption protecting their confidential communications. Backdoors can and will be abused by criminals, foreign intelligence services and forces that seek to destabilise our society. The Commission keeps reiterating its commitment to not generally weaken encryption, but “client-side scanning” would do exactly this." A question I have about this topic: Banks and other organizations, including governments themselves, mandate that specific kinds of information be kept secret. An example of this is the information I need to log in to my bank account. How am I supposed to comply with these requirements if every device I use is compromised?

zoobab 5y ago
Bunnie device to the rescue: https://www.bunniestudios.com/blog/?p=6097 https://www.bunniestudios.com/blog/?p=6097
YetAnotherNick 5y ago
> reproved the retention of data on a number of occasions Source?
- triska 5y ago
  Quoting for example from https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-10/cp200123en.pdf https://curia.europa.eu/jcms/upload/docs/application/pdf/202..., "The Court of Justice confirms that EU law precludes national legislation requiring a provider of electronic communications services to carry out the general and indiscriminate transmission or retention of traffic data and location data for the purpose of combating crime in general or of safeguarding national security": "Thus, in the judgment of 8 April 2014, Digital Rights Ireland and Others (C-293/12 and C-594/12) (see Press Release No 54/14), the Court declared Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC (OJ 2006 L 105, p. 54), invalid on the ground that the interference with the rights to respect for private life and to the protection of personal data, recognised by the Charter of Fundamental Rights of the European Union (‘the Charter'), which resulted from the general obligation to retain traffic data and location data laid down by that directive was not limited to what was strictly necessary. In the judgment of 21 December 2016, Tele2 Sverige and Watson and Others (C-203/15 and C-698/15) (see Press Release No 145/16), the Court then interpreted Article 15(1) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) (OJ 2002 L 201, p. 37), as amended by Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 (OJ 2009 L 337, p. 11) ('the directive on privacy and electronic communications')."

by triska 5y ago

zoobab 5y ago

Bunnie device to the rescue: https://www.bunniestudios.com/blog/?p=6097 https://www.bunniestudios.com/blog/?p=6097

YetAnotherNick 5y ago

> reproved the retention of data on a number of occasions Source?

triska 5y ago
Quoting for example from https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-10/cp200123en.pdf https://curia.europa.eu/jcms/upload/docs/application/pdf/202..., "The Court of Justice confirms that EU law precludes national legislation requiring a provider of electronic communications services to carry out the general and indiscriminate transmission or retention of traffic data and location data for the purpose of combating crime in general or of safeguarding national security": "Thus, in the judgment of 8 April 2014, Digital Rights Ireland and Others (C-293/12 and C-594/12) (see Press Release No 54/14), the Court declared Directive 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of public communications networks and amending Directive 2002/58/EC (OJ 2006 L 105, p. 54), invalid on the ground that the interference with the rights to respect for private life and to the protection of personal data, recognised by the Charter of Fundamental Rights of the European Union (‘the Charter'), which resulted from the general obligation to retain traffic data and location data laid down by that directive was not limited to what was strictly necessary. In the judgment of 21 December 2016, Tele2 Sverige and Watson and Others (C-203/15 and C-698/15) (see Press Release No 145/16), the Court then interpreted Article 15(1) of Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) (OJ 2002 L 201, p. 37), as amended by Directive 2009/136/EC of the European Parliament and of the Council of 25 November 2009 (OJ 2009 L 337, p. 11) ('the directive on privacy and electronic communications')."