3 ms·
The link to the document because this post is a pretty undetailed blogspam: https://cdn.netzpolitik.org/wp-upload/2024/06/2024-05-22-Recommendation-HLG-Going-Da
by izacus 2y ago
The link to the document because this post is a pretty undetailed blogspam: https://cdn.netzpolitik.org/wp-upload/2024/06/2024-05-22-Recommendation-HLG-Going-Dark-c.pdf https://cdn.netzpolitik.org/wp-upload/2024/06/2024-05-22-Rec...
In general, most of the document is set as a "information collection" proposal from different "expert working groups" (expert names redacted). It's mostly proposing standardizing who collects data, what data is collected, jointly buying surveillance software/technology and in general harmonizing EU-state laws when it comes to that.
However, AGAIN there's the outright demand to collect and expose data:
22. Implementing lawful access by design in all relevant technologies in line with the needs expressed by law enforcement, ensuring at the same time strong security and cybersecurity and providing for the full respect of legal obligations on lawful access. According to the HLG, law enforcement authorities should contribute to the definition of requirements, but it should not be their role to impose specific solutions on companies so that they can provide lawful access to data for criminal investigative purposes without compromising security. To that end, experts recommend developing a technology roadmap that brings together technology, cybersecurity, privacy, standardisation and security experts and ensures adequate coordination e.g. potentially through a permanent structure.
also two new fun things:
33. Developing a mechanism to ensure that Member States can enforce sanctions against noncooperative Electronic Communications Services54, and that such measures act as a
deterrent against those entities. Both administrative and criminal law measures should be
available and should be applied depending on whether a provider is merely non-cooperative
or is deliberately hosting activities of a criminal nature.
34. Harmonising at EU level criminal law measures to enforce cooperation, including
imprisonment. The same should apply to non-cooperative hosting providers (in addition to
Electronic Communications Services) to ensure that such companies, when hosting
communication services of a criminal nature, adequately comply with the judicial orders they
receive. [The coherence of this recommendation with the rules established by the Digital
Services Act Regulation should be further assessed]
They seem to be seeking to make sure that every EU member state enshrines data collection in their law (even ones that are more privacy obeying) and punish companies which refuse to implement backdoors into communication systems.
- Hizonner 2y agoCollect, expose, do it in a convenient format so law enforcement doesn't have to do any work, do 99 percent of the technical standards work to determine what that format is, make sure that it works for any every kind of system or service (including ones not yet invented)... and somehow magically put in all these back doors without reducing security.