6 ms·

Swedish data brokers claim journalists' legal protection to evade EU law

72 points by dotcoma 3y ago

hackburg 3y ago
[dead]
eesmith 3y ago
> Personal data used by gangs and criminals. One example of what the public sale of data by companies like MrKoll can lead to is illustrated by a “Guardian” report about rival gangs using data brokers to learn the geographical location of their opponents to carry out attacks. I remember reading that Guardian report when it was linked here on HN, at https://news.ycombinator.com/item?id=39334413 https://news.ycombinator.com/item?id=39334413. As I complained then, it gave no evidence that gangs used data brokers to get this information, only writing "Experts say criminals are being greatly helped by a 248-year-old law, forming part of Sweden’s constitution." Who are those experts? Where is the evidence that the bombers used a data broker to find their target, or that removing this information from the public would have changed anything?
- amelius 3y ago
  What I want to know is: who wants those data brokers to exist? And if those data brokers became owned by Chinese or Russian entities, would that change the answer?
  - lillecarl 3y ago
    Employers. Not too long ago you could Google my name, the first result was MrKoll and an exclamationmark on my name. You could then pay 10$ and get access to my legal history involving minor possession of drugs and DUI. Now all my relatives know... Yep this is pretty fucked, we also have our taxation calendar available for anyone to look up my declared income. These systems and laws of openness worked great before the Internet, you'd have to call every court in the country to request access to my full legal history, and call the taxation office about my declared income. Now it's just 10$ away from anyone curious
    - eecc 3y ago
      You get a notification when your data is accessed, and by whom?
      - rightbyte 3y ago
        No, unless it includes a credit score. These companies are shady and don't follow the law as intended. They would need your permission to store the data in the first place. Hence the journalism "workaround". Proper background checks for criminality are done by the police, who hands the paper to the person the check is done on, and can only be done for roles for which the police are allowed to do those checks for. Like banking and teachers.
      - Pinus 3y ago
        No. The idea here is that the workings of the public authorities should be open to scrutiny. Hence, all documents (correspondence, working documents, the lot!) are public, except those that are explicitly made secret, and it takes national-security level issues to do that. The authorities are not even allowed to ask who’s asking. The first problem is that even material on individuals, collected by the authorities, becomes public. This generally went unnoticed for a couple of hundred years, as you still had to know which documents there were, go around and ask whichever authority held the documents, and probably pay at cost for copies. Now we have the Internet, which has led to the second problem. Several data brokers have started to request all data there is, and then index, repackage, and sell it on the Internet, drastically lowering the threshold to request all the juicy stuff on anyone. Now, that is obviously against the GDPR, but the law allows anyone to become a journalist, who play by different rules, by saying "I am a journalist!" and paying a token fee. So, to summarize: Openness, intended to keep tabs on those in power, and which has historically been somewhat tamed by practical barriers has, those barriers torn down by the Internet, become uncomfortably open.
        eecc 3y ago
        Oh right, I get it. As an Italian we always spoke with admiration about this transparency regarding tax, but I always thought the request and the requesting party was also annotated and made available. What you describe is fairly blunt and alarming.
  - 7734128 3y ago
    It certainly shouldn't. It's just public data, that anyone from any nation could both access and provide. I don't mind these services and I think the recent development where they are blamed for enabling the violence is just a stupid distraction. The domestic terrorists we have would certainly still be a problem and would hardly stop their attacks if we got rid of our very useful public data laws. The current politics are working hard on removing all the fundamental data laws of my country, beginning with making massive energy rebates confidential last spring.
    - ftrobro 3y ago
      Regarding electricity tax returns, not making the names public was a very good idea because of course some newspapers had headlines like "Look at how high tax returns some rich bastards got, it's a scandal, they could never use that much electricity just in their private homes!" the day after the anonymized sums of the tax returns were made public. Which just showed the ignorance of those journalists, because private taxes are much higher than corporate taxes so why would anyone want to pay privately for electricity used by a company? Nobody applied for tax returns, the sums were based on how much they had paid in electricity taxes. And companies got the tax returns too, just a few months later. One of those who got high private tax returns came out publicly and explained that his company was of the type "enskild firma" which means that it uses his person number, it's not a limited company. And apparently Skatteverket had treated all companies of that type as if they were private citizens. But of course most people just remember headlines, so if the headline had been "Look at person XX, that rich bastard got this much in tax returns!" you had probably remembered that but not the later explanation that it was his company that got tax returns.
      - actionfromafar 3y ago
        The idea with this temporary relief was to help home-owners keep their homes warm during the first winter of the Russian invasion of Ukraine. Many mechanisms could have worked for this purpose. A fixed amount for instance. Or an upper limit on a tax cut. Remember, the idea was to keep a typical home warm. Instead there was a tax cut with no upper limit. So the affluent heating outdoor pools in the middle of winter also got relief, not just home-owners on the brink of ruin trying to heat their old house. In the big scheme of things, probably not a big deal, but interventions by the state should appear (and be) as fair as possible, lest people will loose faith in the system.
  - rightbyte 3y ago
    > who wants those data brokers to exist? Some employers and recruiting firms, to do background checks. I think they more or less funds the market.
  - Pinus 3y ago
    I’m not sure anybody really wants them to exist (except themselves, obviously). Current law, more or less by accident, allows them to exist, and since this touches on the principle of openness in public administration, which is a bit of a holy cow here, any changes are unthinkable. My guess is that this situation will persist until slightly after it becomes completely unsustainable, at which point everyone will suddenly have been advocating for a change for the last decade.
- otikik 3y ago
  I found this other article which mentions "Ransomware-as-a-Service Gangs" [1]. I think the meaning of the word is "group of people engaging in criminal behavior", not necessarily "a group of gansters", a.k.a "street criminals". In addition to that, police uses data brokers information regularly, and there's plenty of evidence of it. Example from the first google search page: [2]. Whether or not you consider them to be "just another gang" is dependent on your personal opinions and how corrupt your local police force is. [1] https://www.securityweek.com/access-brokers-and-ransomware-service-gangs-tighten-relationships/ https://www.securityweek.com/access-brokers-and-ransomware-s... [2] https://issues.org/data-brokers-police-surveillance/ https://issues.org/data-brokers-police-surveillance/
  - eesmith 3y ago
    ... okay, but how is any of that relevant? The Guardian article was about a bombing of the relative of a gang leader, which also killed a woman living nearby. The implication was that public name->address lookup played an important role in that bombing, so should be curtailed in order to prevent similar future events. My complaint is the article presented no evidence supporting that implication. This linked-to page uses the Guardian article to support their position, but I don't think the Guardian article has any substance. FWIW, Sweden is one of the countries which requires you to register your address with the government. The Swedish police already have the name->address information and don't need a data broker for it.
    - ftrobro 3y ago
      The Swedish government doesn't check that the registered address is correct, and if someone you don't know chooses to register at your address then you won't know about it, and even if you did there's no way for you to get rid of that registration. There has been cases of police breaking down doors and rushing in to apartments just because some criminal had registered himself on that address, even though the people who lived there had never heard of that person.
      - Pinus 3y ago
- boxed 3y ago
  They don't need the data brokers. You can just call up the tax office on the phone and ask for someones address or person number. You get it, no questions asked. The article is very confused about this. There are two separate issues: 1. the principle of free information ("freedom of information" in the US is super weak compared do Swedens much older laws) 2. Doing stuff with this data on a large scale and in bulk. This is where data brokers come in. This is also not needed for the gangs.
- rob74 3y ago
  Well, of course having everyone's address publicly available greatly helps everyone who wants to find out someone's address (for whatever purpose). I don't think you need experts (or evidence) to come to that conclusion... I mean, this Swedish openness is nice (and I wish some parts, like salaries not being secret, were adopted elsewhere too), but your address being publicly available is an anachronism, like the phone books that used to contain everyone's phone number, and will eventually have to go.
  - eesmith 3y ago
    Thing is, the linked-to noyb piece doesn't even characterize the Guardian article correctly. This piece says: "a “Guardian” report about rival gangs using data brokers to learn the geographical location of their opponents to carry out attacks". The Guardian piece says "reports at the time said it could have been a neighbour related to a gang member." That's the location of the relative of their opponents. And "could have" indicates uncertainty. Has the investigation since then determined why the bombing took place, and if a data broker or public data was at all relevant? The Guardian piece only conjectures, yet noyb seems to think it's a solid foundation. This makes me distrust noyb's ability to support their position - making a mountain out of a molehill. For that matter, how did the bombers know that gang leader had a relative, and that relative's name? Is one's family tree information also public in Sweden, or did the bombers know it from some other means? Like, did the gang members grow up together before joining different gangs, so knew each others' extended family? In that case, public access to the data would be irrelevant.
  - alkonaut 3y ago
    Salaries aren't public I believe. You can see someone's taxable income. If you work one single full time job, the figure would probably be close to the total comp however. But for e.g. someone who works two half time jobs you can't see which employer paid what, only the taxable income (iirc).
- mongrelion 3y ago
  I don't know if this is going to help you answer your questions but here is some background information: 1. In Sweden you must be registered at an address for all purposes (taxes, health care, official communications, etc.). 2. On websites like MrKoll's, all you need is a phone number to find someone's home address (you can also find someone's phone number using their home address). Based on these two facts, all the bomber planning the attack needs is a phone number to find out the address. If the victim is using a burner phone (which, by the way, have become illegal in Sweden since 2023, now all "kontantkort" or anonymous simcards can't be anonymous, they have to be registered to someone's name, and you can only do that with a valid ID), they can otherwise target one of their family members. > Where is the evidence that the bombers used a data broker to find their target The writing is on the wall. This is a free service. Why wouldn't they? > removing this information from the public would have changed anything? The problem is that these companies (like MrKoll there are others) are abusing the media license they have been granted, not only violating rights that have been well established in the EU (which Sweden is a part of) but also they are making an already vulnerable population even more vulnerable. Grandmas and Granpas are being targeted by scammers with all sorts of schemes, and where do they get phone numbers and also a quick profile of the target? via these websites. So yeah, removing this information from the public would change something, perhaps not necessarily to the gang wars, but for sure for the safety of the public in general (gang family members would be harder to find).
  - lou1306 3y ago
    Phone number? Heck if you know their first name, city of residence, and approximate age that's already enough in most cases.
    - alkonaut 3y ago
      Didn't most countries have phone books where peoples names, phone numbers and some times address would be listed? And weren't those phone books usually quite complete? Were they opt in then so that phone book sales people asked you to list your number? (Swedish phonebooks were opt-out). Were you offered any kind of compensation then for allowing your number/address to be listed there?
stareatgoats 3y ago
Noyb.eu is right here, the (extreme lack of) privacy laws in Sweden is out of tune with modern technology, and the fact that you can pretend to be a journalistic endeavor compounds it. Moreover, this situation by extension could threaten the vital protection that (real) journalists must have, like protection against having to disclose their sources etc. That is, if the law is misused in this way, someone will surely get the bright idea that the law must be thrown out in its entirety.
- suddenclarity 3y ago
  > the fact that you can pretend to be a journalistic endeavor Isn't that the core of the issue? Who decides what is journalism? MrKoll is mentioned in the article but there are identical databases that originally were used to track the political opposition and are now partly accessible for selected "journalists", among others. Should those databases exist because they make their own rules on who is a journalist? What about a user posting a comment on Reddit or Flashback that used MrKoll for the information? Is that journalism, making MrKoll a journalistic database? This legal battle might have a major impact on Swedish newspapers.
  - stareatgoats 3y ago
    > Isn't that the core of the issue? Who decides what is journalism? There are several issues at play here I think, but to take one: Who decides? As long as journalists enjoy certain judicial privileges it is natural that the democratic state grants these certifications. This is not controversial in Nordic countries as it might be elsewhere. Journalism has a well defined meaning in language. The concept has been interpreted extremely liberally up to now in Sweden. This can be carefully tightened without trespassing into undemocratic territory. The alternative - that anyone can register as a journalistic business without any certification will likely result in those privileges being removed. This is the real danger here.
cynicalsecurity 3y ago
This is absolutely appalling. I can't believe such blatant violation of privacy and human rights is happening in Sweden.
- boxed 3y ago
  The article is quite confused about how Swedish law has worked for hundreds of years. Address, person numbers (which encode birthday), income, these are all public records. Have been for over a hundred years. It's not a big deal or scandal. In combination with our freedom of information laws (which actually are that, unlike the ones in the US that are super weak), these make it quite easy for journalists to find and expose corruption. For en example read https://en.wikipedia.org/wiki/Jan_Guillou#The_IB_affair https://en.wikipedia.org/wiki/Jan_Guillou#The_IB_affair
  - lou1306 3y ago
    The problem I see is companies harvesting these records and profiting from making them available over the Internet. Maybe just add a rate limit to how many such requests a single entity may apply for?
    - boxed 3y ago
      That's how the state does it yea.
  - veeti 3y ago
    The word "Stockholm syndrome" has never been more appropriate.
    - Jensson 3y ago
      Open information makes societies more efficient, it isn't only a bad thing. There isn't much bad you can do with that information since every system assumes it is open, most of the bad things that can happen with such information comes from the assumption that it is private so companies starts to use it as proof that you are you.
chmod775 3y ago
What stood out to me most is the existence of a "media license". Wouldn't letting the government decide who qualifies as media go against the idea of free press? Just get rid of that nonsense. No more problems.
- acadapter 3y ago
  It's in the constitution. If you register as a publisher (ansvarig utgivare), a different set of free speech laws are used (freedom of press). This is probably the "license" they're mentioning.
- apienx 3y ago
  Ironically, Sweden has the world's first Freedom of the Press Act. It's even been designated a "Memory of the World" by UNESCO: https://unesco.se/tryckfrihetsforordningen-utsedd-till-varldsminne-av-unesco/ https://unesco.se/tryckfrihetsforordningen-utsedd-till-varld... What you're asking for will not be easy to enact. In a monarchy, the concept of "natural rights" remains somewhat culturally foreign.
  - geon 3y ago
    > In a monarchy, the concept of "natural rights" remains somewhat culturally foreign. How do you figure? The monarch is just a symbolical position. It carries no political power.
- yxhuvud 3y ago
  > Just get rid of that nonsense. No more problems. What the license in question does is that it makes the publisher potentially liable for publishing stuff that shouldn't be published rather than the journalist for writing it. That license is not the problem.
- bertil 3y ago
  Hi, I'm a journalist. I’ve found your passwords and social security number. No need to ask how. Do I have the right to sell those to anyone who wants?
Kiro 3y ago
I don't know how this would actually fix anything. You can get the same information on a person by simply calling the tax authorities since it's public information in Sweden. MrKoll is just publishing it on a website.
- mongrelion 3y ago
  Perhaps this is more security by obscurity but making it easier on criminals to find your personal information is not necessarily a good thing. Imagine being a criminal and now you want to find your victim's personal information and you directly call Skatteverket... Less compelling than going to hitta.se from a public, open wifi network
  - eqvinox 3y ago
    > making it easier on criminals to find your personal information This can also work to the victim's benefit: any information publicly accessible from these records is automatically unsuitable for identity theft and the likes. If e.g. a tax ID number is in these records (no idea if that's the case), some company asking for that number to establish authenticity/authorization won't have any ground to stand on if it gets called into question. That said it's probably possible to make inferences, i.e. knowing what company someone works for might make it possible to guess security questions (e.g. "what was your first boss' name?")
    - Kiro 3y ago
      Social security number is public information as well and it's never used for authentication so you're right. You normally identify yourself using BankID, which is issued by your bank and tied to your phone. Identity theft is still possible but requires much more intricate methods.
- alkonaut 3y ago
  Having information be public on request (e.g. from courts) is important. But the step from making individual bits of information public via request from authorities, to making it indexed/published/searchable for anyone in the world through a private company is quite a big one. This privacy/security by obscurity you get from having to fill out forms or call a court isn't something one can just argue doesn't mean anything because public-vs-nonpublic is the only measure.
LAC-Tech 3y ago
I think when historians look back on this period of history, they will have interesting things to say about journalists, their extra rights that other citizens are not afforded, their immense power, and their complete lack of accountability.
Puts 3y ago
I actually think this is a beautiful thing with GDPR. Because technically platforms like Facebook could just consider themself a Publisher and then they wouldn't have to bother with the GDPR. But that would also mean that they would need to have a chief editor personally responsible for all the racism, hate and abuse on the platform. So the reason they they have to deal with the GDPR is because they don't want to take responsibility for all the shit published. So how much they may hate GDPR – they hate taking responsibility for their content even more.
- vasco 3y ago
  Not that you said it, and maybe I'm wrong but I don't think they have any philosophical preference, this is probably a calculation between the cost of implementing features to make existing systems GDPR compatible vs hiring a magnitude more content moderators plus whatever perceived impact they think they'd have on user retention if there was way more moderation which will also have loads of false positives.
bdhcuidbebe 3y ago
as a swede, thank you noyb for messing with this
AtNightWeCode 3y ago
A thing not mentioned in the article is that most of the example data is also available directly from the authorities. Not as easily accessed perhaps. However, these services also keep data not available like old convictions. There are other lawsuits regarding that.
whywhywhywhy 3y ago
Why should journalists have different legal protections than non-journalists anyway when all a journalist is in 2024 is someone with a twitter or substack account

72 points by dotcoma 3y ago

[dead]

> Personal data used by gangs and criminals. One example of what the public sale of data by companies like MrKoll can lead to is illustrated by a “Guardian” report about rival gangs using data brokers to learn the geographical location of their opponents to carry out attacks. I remember reading that Guardian report when it was linked here on HN, at https://news.ycombinator.com/item?id=39334413 https://news.ycombinator.com/item?id=39334413. As I complained then, it gave no evidence that gangs used data brokers to get this information, only writing "Experts say criminals are being greatly helped by a 248-year-old law, forming part of Sweden’s constitution." Who are those experts? Where is the evidence that the bombers used a data broker to find their target, or that removing this information from the public would have changed anything?

amelius 3y ago
What I want to know is: who wants those data brokers to exist? And if those data brokers became owned by Chinese or Russian entities, would that change the answer?
- lillecarl 3y ago
  Employers. Not too long ago you could Google my name, the first result was MrKoll and an exclamationmark on my name. You could then pay 10$ and get access to my legal history involving minor possession of drugs and DUI. Now all my relatives know... Yep this is pretty fucked, we also have our taxation calendar available for anyone to look up my declared income. These systems and laws of openness worked great before the Internet, you'd have to call every court in the country to request access to my full legal history, and call the taxation office about my declared income. Now it's just 10$ away from anyone curious
  - eecc 3y ago
    You get a notification when your data is accessed, and by whom?
    - rightbyte 3y ago
      No, unless it includes a credit score. These companies are shady and don't follow the law as intended. They would need your permission to store the data in the first place. Hence the journalism "workaround". Proper background checks for criminality are done by the police, who hands the paper to the person the check is done on, and can only be done for roles for which the police are allowed to do those checks for. Like banking and teachers.
    - Pinus 3y ago
      No. The idea here is that the workings of the public authorities should be open to scrutiny. Hence, all documents (correspondence, working documents, the lot!) are public, except those that are explicitly made secret, and it takes national-security level issues to do that. The authorities are not even allowed to ask who’s asking. The first problem is that even material on individuals, collected by the authorities, becomes public. This generally went unnoticed for a couple of hundred years, as you still had to know which documents there were, go around and ask whichever authority held the documents, and probably pay at cost for copies. Now we have the Internet, which has led to the second problem. Several data brokers have started to request all data there is, and then index, repackage, and sell it on the Internet, drastically lowering the threshold to request all the juicy stuff on anyone. Now, that is obviously against the GDPR, but the law allows anyone to become a journalist, who play by different rules, by saying "I am a journalist!" and paying a token fee. So, to summarize: Openness, intended to keep tabs on those in power, and which has historically been somewhat tamed by practical barriers has, those barriers torn down by the Internet, become uncomfortably open.
      - eecc 3y ago
        Oh right, I get it. As an Italian we always spoke with admiration about this transparency regarding tax, but I always thought the request and the requesting party was also annotated and made available. What you describe is fairly blunt and alarming.
- 7734128 3y ago
  It certainly shouldn't. It's just public data, that anyone from any nation could both access and provide. I don't mind these services and I think the recent development where they are blamed for enabling the violence is just a stupid distraction. The domestic terrorists we have would certainly still be a problem and would hardly stop their attacks if we got rid of our very useful public data laws. The current politics are working hard on removing all the fundamental data laws of my country, beginning with making massive energy rebates confidential last spring.
  - ftrobro 3y ago
    Regarding electricity tax returns, not making the names public was a very good idea because of course some newspapers had headlines like "Look at how high tax returns some rich bastards got, it's a scandal, they could never use that much electricity just in their private homes!" the day after the anonymized sums of the tax returns were made public. Which just showed the ignorance of those journalists, because private taxes are much higher than corporate taxes so why would anyone want to pay privately for electricity used by a company? Nobody applied for tax returns, the sums were based on how much they had paid in electricity taxes. And companies got the tax returns too, just a few months later. One of those who got high private tax returns came out publicly and explained that his company was of the type "enskild firma" which means that it uses his person number, it's not a limited company. And apparently Skatteverket had treated all companies of that type as if they were private citizens. But of course most people just remember headlines, so if the headline had been "Look at person XX, that rich bastard got this much in tax returns!" you had probably remembered that but not the later explanation that it was his company that got tax returns.
    - actionfromafar 3y ago
      The idea with this temporary relief was to help home-owners keep their homes warm during the first winter of the Russian invasion of Ukraine. Many mechanisms could have worked for this purpose. A fixed amount for instance. Or an upper limit on a tax cut. Remember, the idea was to keep a typical home warm. Instead there was a tax cut with no upper limit. So the affluent heating outdoor pools in the middle of winter also got relief, not just home-owners on the brink of ruin trying to heat their old house. In the big scheme of things, probably not a big deal, but interventions by the state should appear (and be) as fair as possible, lest people will loose faith in the system.
- rightbyte 3y ago
  > who wants those data brokers to exist? Some employers and recruiting firms, to do background checks. I think they more or less funds the market.
- Pinus 3y ago
  I’m not sure anybody really wants them to exist (except themselves, obviously). Current law, more or less by accident, allows them to exist, and since this touches on the principle of openness in public administration, which is a bit of a holy cow here, any changes are unthinkable. My guess is that this situation will persist until slightly after it becomes completely unsustainable, at which point everyone will suddenly have been advocating for a change for the last decade.
otikik 3y ago
I found this other article which mentions "Ransomware-as-a-Service Gangs" [1]. I think the meaning of the word is "group of people engaging in criminal behavior", not necessarily "a group of gansters", a.k.a "street criminals". In addition to that, police uses data brokers information regularly, and there's plenty of evidence of it. Example from the first google search page: [2]. Whether or not you consider them to be "just another gang" is dependent on your personal opinions and how corrupt your local police force is. [1] https://www.securityweek.com/access-brokers-and-ransomware-service-gangs-tighten-relationships/ https://www.securityweek.com/access-brokers-and-ransomware-s... [2] https://issues.org/data-brokers-police-surveillance/ https://issues.org/data-brokers-police-surveillance/
- eesmith 3y ago
  ... okay, but how is any of that relevant? The Guardian article was about a bombing of the relative of a gang leader, which also killed a woman living nearby. The implication was that public name->address lookup played an important role in that bombing, so should be curtailed in order to prevent similar future events. My complaint is the article presented no evidence supporting that implication. This linked-to page uses the Guardian article to support their position, but I don't think the Guardian article has any substance. FWIW, Sweden is one of the countries which requires you to register your address with the government. The Swedish police already have the name->address information and don't need a data broker for it.
  - ftrobro 3y ago
    The Swedish government doesn't check that the registered address is correct, and if someone you don't know chooses to register at your address then you won't know about it, and even if you did there's no way for you to get rid of that registration. There has been cases of police breaking down doors and rushing in to apartments just because some criminal had registered himself on that address, even though the people who lived there had never heard of that person.
    - Pinus 3y ago
boxed 3y ago
They don't need the data brokers. You can just call up the tax office on the phone and ask for someones address or person number. You get it, no questions asked. The article is very confused about this. There are two separate issues: 1. the principle of free information ("freedom of information" in the US is super weak compared do Swedens much older laws) 2. Doing stuff with this data on a large scale and in bulk. This is where data brokers come in. This is also not needed for the gangs.
rob74 3y ago
Well, of course having everyone's address publicly available greatly helps everyone who wants to find out someone's address (for whatever purpose). I don't think you need experts (or evidence) to come to that conclusion... I mean, this Swedish openness is nice (and I wish some parts, like salaries not being secret, were adopted elsewhere too), but your address being publicly available is an anachronism, like the phone books that used to contain everyone's phone number, and will eventually have to go.
- eesmith 3y ago
  Thing is, the linked-to noyb piece doesn't even characterize the Guardian article correctly. This piece says: "a “Guardian” report about rival gangs using data brokers to learn the geographical location of their opponents to carry out attacks". The Guardian piece says "reports at the time said it could have been a neighbour related to a gang member." That's the location of the relative of their opponents. And "could have" indicates uncertainty. Has the investigation since then determined why the bombing took place, and if a data broker or public data was at all relevant? The Guardian piece only conjectures, yet noyb seems to think it's a solid foundation. This makes me distrust noyb's ability to support their position - making a mountain out of a molehill. For that matter, how did the bombers know that gang leader had a relative, and that relative's name? Is one's family tree information also public in Sweden, or did the bombers know it from some other means? Like, did the gang members grow up together before joining different gangs, so knew each others' extended family? In that case, public access to the data would be irrelevant.
- alkonaut 3y ago
  Salaries aren't public I believe. You can see someone's taxable income. If you work one single full time job, the figure would probably be close to the total comp however. But for e.g. someone who works two half time jobs you can't see which employer paid what, only the taxable income (iirc).
mongrelion 3y ago
I don't know if this is going to help you answer your questions but here is some background information: 1. In Sweden you must be registered at an address for all purposes (taxes, health care, official communications, etc.). 2. On websites like MrKoll's, all you need is a phone number to find someone's home address (you can also find someone's phone number using their home address). Based on these two facts, all the bomber planning the attack needs is a phone number to find out the address. If the victim is using a burner phone (which, by the way, have become illegal in Sweden since 2023, now all "kontantkort" or anonymous simcards can't be anonymous, they have to be registered to someone's name, and you can only do that with a valid ID), they can otherwise target one of their family members. > Where is the evidence that the bombers used a data broker to find their target The writing is on the wall. This is a free service. Why wouldn't they? > removing this information from the public would have changed anything? The problem is that these companies (like MrKoll there are others) are abusing the media license they have been granted, not only violating rights that have been well established in the EU (which Sweden is a part of) but also they are making an already vulnerable population even more vulnerable. Grandmas and Granpas are being targeted by scammers with all sorts of schemes, and where do they get phone numbers and also a quick profile of the target? via these websites. So yeah, removing this information from the public would change something, perhaps not necessarily to the gang wars, but for sure for the safety of the public in general (gang family members would be harder to find).
- lou1306 3y ago
  Phone number? Heck if you know their first name, city of residence, and approximate age that's already enough in most cases.
  - alkonaut 3y ago
    Didn't most countries have phone books where peoples names, phone numbers and some times address would be listed? And weren't those phone books usually quite complete? Were they opt in then so that phone book sales people asked you to list your number? (Swedish phonebooks were opt-out). Were you offered any kind of compensation then for allowing your number/address to be listed there?

stareatgoats 3y ago

Noyb.eu is right here, the (extreme lack of) privacy laws in Sweden is out of tune with modern technology, and the fact that you can pretend to be a journalistic endeavor compounds it. Moreover, this situation by extension could threaten the vital protection that (real) journalists must have, like protection against having to disclose their sources etc. That is, if the law is misused in this way, someone will surely get the bright idea that the law must be thrown out in its entirety.

suddenclarity 3y ago
> the fact that you can pretend to be a journalistic endeavor Isn't that the core of the issue? Who decides what is journalism? MrKoll is mentioned in the article but there are identical databases that originally were used to track the political opposition and are now partly accessible for selected "journalists", among others. Should those databases exist because they make their own rules on who is a journalist? What about a user posting a comment on Reddit or Flashback that used MrKoll for the information? Is that journalism, making MrKoll a journalistic database? This legal battle might have a major impact on Swedish newspapers.
- stareatgoats 3y ago
  > Isn't that the core of the issue? Who decides what is journalism? There are several issues at play here I think, but to take one: Who decides? As long as journalists enjoy certain judicial privileges it is natural that the democratic state grants these certifications. This is not controversial in Nordic countries as it might be elsewhere. Journalism has a well defined meaning in language. The concept has been interpreted extremely liberally up to now in Sweden. This can be carefully tightened without trespassing into undemocratic territory. The alternative - that anyone can register as a journalistic business without any certification will likely result in those privileges being removed. This is the real danger here.

cynicalsecurity 3y ago

This is absolutely appalling. I can't believe such blatant violation of privacy and human rights is happening in Sweden.

boxed 3y ago
The article is quite confused about how Swedish law has worked for hundreds of years. Address, person numbers (which encode birthday), income, these are all public records. Have been for over a hundred years. It's not a big deal or scandal. In combination with our freedom of information laws (which actually are that, unlike the ones in the US that are super weak), these make it quite easy for journalists to find and expose corruption. For en example read https://en.wikipedia.org/wiki/Jan_Guillou#The_IB_affair https://en.wikipedia.org/wiki/Jan_Guillou#The_IB_affair
- lou1306 3y ago
  The problem I see is companies harvesting these records and profiting from making them available over the Internet. Maybe just add a rate limit to how many such requests a single entity may apply for?
  - boxed 3y ago
    That's how the state does it yea.
- veeti 3y ago
  The word "Stockholm syndrome" has never been more appropriate.
  - Jensson 3y ago
    Open information makes societies more efficient, it isn't only a bad thing. There isn't much bad you can do with that information since every system assumes it is open, most of the bad things that can happen with such information comes from the assumption that it is private so companies starts to use it as proof that you are you.

chmod775 3y ago

What stood out to me most is the existence of a "media license". Wouldn't letting the government decide who qualifies as media go against the idea of free press? Just get rid of that nonsense. No more problems.

acadapter 3y ago
It's in the constitution. If you register as a publisher (ansvarig utgivare), a different set of free speech laws are used (freedom of press). This is probably the "license" they're mentioning.
apienx 3y ago
Ironically, Sweden has the world's first Freedom of the Press Act. It's even been designated a "Memory of the World" by UNESCO: https://unesco.se/tryckfrihetsforordningen-utsedd-till-varldsminne-av-unesco/ https://unesco.se/tryckfrihetsforordningen-utsedd-till-varld... What you're asking for will not be easy to enact. In a monarchy, the concept of "natural rights" remains somewhat culturally foreign.
- geon 3y ago
  > In a monarchy, the concept of "natural rights" remains somewhat culturally foreign. How do you figure? The monarch is just a symbolical position. It carries no political power.
yxhuvud 3y ago
> Just get rid of that nonsense. No more problems. What the license in question does is that it makes the publisher potentially liable for publishing stuff that shouldn't be published rather than the journalist for writing it. That license is not the problem.
bertil 3y ago
Hi, I'm a journalist. I’ve found your passwords and social security number. No need to ask how. Do I have the right to sell those to anyone who wants?

Kiro 3y ago

I don't know how this would actually fix anything. You can get the same information on a person by simply calling the tax authorities since it's public information in Sweden. MrKoll is just publishing it on a website.

mongrelion 3y ago
Perhaps this is more security by obscurity but making it easier on criminals to find your personal information is not necessarily a good thing. Imagine being a criminal and now you want to find your victim's personal information and you directly call Skatteverket... Less compelling than going to hitta.se from a public, open wifi network
- eqvinox 3y ago
  > making it easier on criminals to find your personal information This can also work to the victim's benefit: any information publicly accessible from these records is automatically unsuitable for identity theft and the likes. If e.g. a tax ID number is in these records (no idea if that's the case), some company asking for that number to establish authenticity/authorization won't have any ground to stand on if it gets called into question. That said it's probably possible to make inferences, i.e. knowing what company someone works for might make it possible to guess security questions (e.g. "what was your first boss' name?")
  - Kiro 3y ago
    Social security number is public information as well and it's never used for authentication so you're right. You normally identify yourself using BankID, which is issued by your bank and tied to your phone. Identity theft is still possible but requires much more intricate methods.
alkonaut 3y ago
Having information be public on request (e.g. from courts) is important. But the step from making individual bits of information public via request from authorities, to making it indexed/published/searchable for anyone in the world through a private company is quite a big one. This privacy/security by obscurity you get from having to fill out forms or call a court isn't something one can just argue doesn't mean anything because public-vs-nonpublic is the only measure.

LAC-Tech 3y ago

I think when historians look back on this period of history, they will have interesting things to say about journalists, their extra rights that other citizens are not afforded, their immense power, and their complete lack of accountability.

Puts 3y ago

I actually think this is a beautiful thing with GDPR. Because technically platforms like Facebook could just consider themself a Publisher and then they wouldn't have to bother with the GDPR. But that would also mean that they would need to have a chief editor personally responsible for all the racism, hate and abuse on the platform. So the reason they they have to deal with the GDPR is because they don't want to take responsibility for all the shit published. So how much they may hate GDPR – they hate taking responsibility for their content even more.

vasco 3y ago
Not that you said it, and maybe I'm wrong but I don't think they have any philosophical preference, this is probably a calculation between the cost of implementing features to make existing systems GDPR compatible vs hiring a magnitude more content moderators plus whatever perceived impact they think they'd have on user retention if there was way more moderation which will also have loads of false positives.

bdhcuidbebe 3y ago

as a swede, thank you noyb for messing with this

AtNightWeCode 3y ago

A thing not mentioned in the article is that most of the example data is also available directly from the authorities. Not as easily accessed perhaps. However, these services also keep data not available like old convictions. There are other lawsuits regarding that.

whywhywhywhy 3y ago

Why should journalists have different legal protections than non-journalists anyway when all a journalist is in 2024 is someone with a twitter or substack account