International Implications of the EU General Data Protection Regulation

By Lexi Rubow

In April 2013, the European Parliament is expected to finish drafting a new tech privacy regulation, titled the “General Data Protection Regulation” (GDPR). The regulation is intended to be a comprehensive reform to the current directive on data protection, passed in 1995 (95/46/EC). The European Commission proposed the legislation in January 2012, and the first draft regulation was published in January 2013. Currently, the European Parliament and European Council are reviewing the draft. As the European Union represents a very substantial technology market, the regulation has garnered a great deal of attention from private technology companies and non-European governments alike.

Through this regulation, the EU intends to improve upon its current privacy regime, which is segmented and results in confusion and inconsistency when technology companies operate in more than one EU country. Further, technology has evolved considerably since the 1995, creating new issues regarding data collection and aggregation that the current directive does not address.

The proposed legislation seeks to improve the consistency in privacy law across member states. It does so in two ways. First it creates a regulation, rather than a directive. The 1995 law was passed as a directive, which requires each member state to achieve a certain result, but leaves the means of achieving that result up to the determination of each member state. In contrast, the GDPR has been introduced as a regulation, which means that the scheme it lays out would be binding on all member states in its entirety.  Second, the GDPR would assign a Data Protection Authority (DPA) to technology companies doing business in multiple member states. Rather than being liable for fines in every member state individually, these companies would answer to their DPA, according to its “main establishment.” Third, the regulation would create a system of oversight that makes sure that different DPAs apply the laws in the same way.

The provisions of the proposed regulation are as follows:

  • Companies acquiring data must be more transparent, informing the consumer about the purposes of data collection, consequences of not providing data, and the period for which the data will be retained.
  • Consumers must be allowed to access their data and transfer it from one service provider to another.
  • If a data breach occurs, the company must notify the appropriate DPA within 24 hours of the breach, if possible.
  • “Right to Be Forgotten” provision: This gives users the option to wipe the slate clean by deleting their personal data if there is “no legitimate grounds for retaining it.” This provision is geared towards young people who unwisely share incriminating data on social media profiles that may affect their ability to obtain a job later.

Violation of the regulation may result in penalties up to 1 million Euros or 2% of the global annual turnover of the company.

US tech companies and media, as well as the US government, are strongly opposed to the proposed regulation. For example, Google’s Global Privacy Counsel, Peter Fleischer, has warned that this regulation will “stifle innovation.” He is particularly concerned about the “right to be forgotten” provision, calling it a violation of free speech “more pernicious than book burning.” In similarly hyperbolic speech, Time Magazine likens the “right to be forgotten” provision to the “memory hole” in 1984, equating the 1984 government practice of cleansing history by destroying unpleasant records to allowing people to manage their online biographical presence. While some consumer protection groups have expressed their support for the proposed regulation, President Obama has sided with the media and technology companies, fearful that the US tech industry will suffer as a result of the EU’s increased restrictions.

This difference of opinion is characteristic of an ongoing tension between Europe and the United States as to the relative importance of freedom of expression and the right of privacy. While the United States has a long civil history of resisting government surveillance and other forms of invasion of privacy by the government, in most other contexts the First Amendment right to free speech reigns as supreme. Regulations restricting businesses’ ability to retain consumer data are seen as an encroachment of freedom of speech and privacy concerns are only allowed to prevail in certain circumstances, such as medical records. The histrionic language used by Fleischer and Time Magazine exemplify the American tendency to fear government censorship far more than private company intrusion.

Europe’s policies, on the other hand, are driven by the conception of privacy as a civil and human right. The protection of personal data is even explicitly recognized by Article Eight of the EU’s Charter of Fundamental Rights. Thus, rather than viewing freedom of expression as paramount, Europe seeks to protect its citizens’ private data, with narrow exceptions where data collection without permission is deemed acceptable.

While this conflict between the US’s constitution, which seeks to protect citizens by limiting the government’s power, and Europe, which generally seeks to protect citizens through affirmative government intervention and legislation, has existed for a long time, the conflict is particularly acute in the realm of technology law, which blurs national borders and often results in the cohabitation of regimes in the cybersphere. In this context, companies of one nation must comply with multiple regimes at once. As a result, they often choose to comply with the most stringent regulations, so that they don’t have to worry about modifying their policies for each sphere or accidentally violating a law.

Thus, since the EU comprises approximately one third of sales for US technology companies, the regulations passed in the EU will likely have great effect on the United States, as technology companies move to comply. US technology companies and the US Commerce Department have realized this significance and have sent lobbyists to Brussels, where the European Parliament is based. On the one hand, implementing privacy regulations in this way gives the EU more leverage to influence the international privacy law regime than it would through traditional harmonization-oriented treaties. In traditional negotiations the United States often demands to be exempted from certain provisions, as it did when accepting the Berne Convention, where it cannot determine the course of the legislation outright. However, since these regulations do affect consumers worldwide, at some point the international community may need to address these issues at the global scale.

The Record: This Week in Review

SCOTUS’ first sale doctrine ruling and its impact on foreign relations

Last week the United States Supreme Court held in Kirtsaeng v. John Wiley & Sons, Inc. that The “first sale” doctrine, which allows the owner of a copyrighted work to sell or otherwise dispose of that copy as he wishes, applies to copies of a copyrighted work lawfully made abroad. Supap Kirtsaeng, a Thai national, and U.S. student, arranged for family and friends to buy Wiley’s far reduced, differentially priced textbooks in Thailand and ship them to him in the US, where he resold them for a profit. The Supreme Court upheld Kirtsaeng’s right to sell over Wiley’s desire to limit exportation without its authorization. Commentators have since occupied themselves with unpacked the ruling’s ramifications for foreign trade, extraterritoriality, and TRIPS.

The 20th Willem C. Vis International Commercial Arbitration Moot

The 20th Willem C. Vis International Commercial Arbitration Moot, one of the most prestigious international moot court competitions for law students in the world, is taking place this week in Vienna, Austria. Aside from various law firms and universities, pre-moot hosts have included the Bahrain Chamber for Dispute Resolution, the International Centre for Dispute Resolution, The New York City Bar Association, the Brazilian Bar Association, The Chinese European Arbitration Centre, The Florida Bar International Law Section, and the Permanent Court of Arbitration. Best wishes to our Berkeley team who is competing in Vienna this week, including lead blog editor Brittney Lovato and Amy Belsher, Holly Hoch, and Aditi Fruitwala.

Technology and Economic Development

Last week, WIPO reported a showing that international filings for patents, trademarks, and industrial designs under WIPO-administered intellectual property systems continuing to grow in 2012, which they find correlated with development. The World Bank held a “Big Data Exploration” in D.C., aiming to improve their use of technology, big data, and data collaboration to evaluate poverty measurement and anti-corruption projects. The UN Sustainable Development Solutions Network presented in Berlin called for tapping into “worldwide technological know-how in the private sector and civil society, in order to develop and implement practical solutions,” which “[c]ompanies contribute through innovative business models, technologies and services to the long-term success of sustainable development.” This week, UNCTAD, The Nambian Ports Authority, and Port of Cork, Ireland facilitated a course on “Technical Management and Human Resources Development” to improve infrastructure maintenance, purchasing tasks, and human resource development policies and needs analyses.

Calling for the Release of Five Jordanian Students Who Were Detained Based on Accusations of “Devil Worship”

On March 26, 2013, the Human Rights Watch (HRW) released an article calling for the release of five Al al-Bayt university students in Jordan who have been detained since March 12, 2013. The students were viciously attacked by a student mob based on disputed allegations that the accused students engaged in “devil worship” and desecrated manuscripts of the Quran by flushing them down the toilet. The accused students deny all allegations, and the Jordanian authorities have not brought formal charges. Moreover, a newspaper report indicated that a special investigative unit found no evidence that supports the allegations. The HRW pointed out that Jordan is bound by international law to protect individuals who express their beliefs through peaceful means and prevent arbitrary detention. Additionally, the HRW called on Jordanian authorities to investigate and prosecute the attackers who injured the accused students.

Tensions in Xinjiang, China Continue as 20 Accused of Separatism are Sentenced

The New York Times reported that 20 accused of religious extremism and separatist activity in the Chinese province of Xinjiang faced sentences ranging from five years to life in prison. While the Chinese language report did not mention the ethnic background of the accused, the article claimed that their distinctive names strongly indicated that they were part of the Uighur minority, which is a Muslim ethnic group. Tensions in the Xinjiang region previously led to riots in 2009 after members of the Uighur community suffered attacks and arrest after their protest killed nearly 200 Han Chinese. Representatives of the Human Rights Watch questioned the sentences issued for the accused because the Chinese government frequently makes accusations of terrorist activity and separatist movements to “discredit legitimate Uighur grievances.”

UN Conference Ends Without Agreement on Arms Trade Treaty

The 193 UN Member States failed to reach an agreement at the Final United Nations Conference on the Arms Trade Treaty (ATT), which ended on March 28, 2013. The proposed treaty would have established common standards, facilitating better regulation on the international conventional arms trade. Secretary-General Ban is hopeful that the Member States will continue to work towards a more unified regulation of conventional arms.

Obama Nominates General Breedlove for NATO Supreme Allied Commander

Obama announced Air Force General Philip Breedlove as his nomination for NATO Supreme Allied Commander. General Breedlove has served on assignments in Germany, Italy, Spain and South Korea, and, according to President Obama, “has established ‘trust and deep relations’ with NATO allies.” The North Atlantic Council has approved of the nomination, so Breedlove’s appointment will become official once it is confirmed by the Senate.

The Record: This Week in Review

Human Rights Watch Finds Israeli Airstrikes in Gaza Violated the Laws of War

Human Rights Watch has sent detailed information to the IDF about numerous airstrikes in Gaza that may have violated the Laws of War.  The airstrikes, at least 18 of them, were carried out during fighting in November 2012 and were the result of Human Rights investigations.  The IDF has said that it is conducting “operational debriefings” of the attacks and will have completed its investigation sometime in February.

UN Security Council Set to Approve Sending Peacekeepers to Mali

Although the Malian government has expressed concerns about the presence of UN peacekeepers in the country (it fears the strengthening of a split between northern and southern Mali) it looks as though the UN Security Council will be approving the deployment of about 6,000 peacekeepers in the coming weeks.  The move comes after French troops have already secured much of the country from Islamist rebels.  Some issues that still remain to be worked out is how this UN peacekeeping force will interact with the UN backed African military force (AFISMA) which is currently fighting alongside French troops.

ICC Orders Extradition of Libyan Spy Chief

 Abdullah al-Senussi, Gadaffi’s ex spy chief, has requested that he be tried by the International Court of Court in the Hague.  He has been denied access to his British lawyer and the ICC, along with other human rights organizations, have expressed concern about his ability to receive a fair trial in the new Libya, which suffers from a weak central government and lack of rule of law.  Libyan leaders however have a vested interest in trying Gadaffi’s family members and supporters in country in order to gain credibility among their own population.

U.N. Sanctions North Korea for Latest Nuclear Tests

Tensions mounted this week with North Korea conducting additional nuclear tests, resulting in tightened sanctions from the U.N. Security Council.  However, nuclear capability concerns are drawing attention away from human rights issues within North Korea.  Current estimations put the number of persons currently held in North Korea prison camps at 200,000, where they suffer torture, rape and slave labor.  Both the United States and Japan will support additional inquiries into human rights violations in North Korea.

Human Rights Watch Report on Yemen

The Human Rights Watch released a report titled “Unpunished Massacre – Yemen’s Failed Response to the “Friday of Dignity” Killings” calling attention to the inadequate investigation and prosecution of those responsible. The massacre resulted in the deaths of 45 protesters, including University students and children, and implicated the involvement of several government officials.

Australian’s Prisoner X

The New York Times reported further details regarding the mysterious death of Mr. Ben Zygier, an Australian citizen also known as “Prisoner X,” who was being held in an Israeli maximum security prison.  Israel’s Justice Ministry issued a statement denying any violation of Mr. Zygier’s rights during the secret imprisonment or criminal proceedings. Mr. Zygier was incarcerated in 2010 and suspected by the Australian government of spying for Israel.

Abuse of Canadian Women Exposed

Human Rights Watch has published a report exposing police abuse of indigenous women and children in Canada.  The report details police brutality, threats of arrest, and shaming.  The British Columbia legislature recently established an investigative unit to further explore “police-related incidents involving death or serious harm.”  The concern is that the majority of the abuse faced is not covered by the definition of “serious harm” and more needs to be done by the Canadian government to protect women and children.

Australia Accused of Human Rights Violations 

Australia has been accused of human rights violations involving 23 Indonesian minors.  They were incorrectly housed in adult prisons where they were sexually harassed by the prison guards.  Jailed between 2008 and 2011, they were originally smuggled into Australia and have since been returned to Indonesia.

Jamaica in Final Stages of Accepting $ 750 million IMF Loan

Jan Kees Martijn, Head of the International Monetary Fund million to Jamaica, stated it has reached a “staff-level agreement” with Jamaica on a $ 750 million loan. Jamaica, which derives most of its GDP from tourism and other services, has seen a decline in its economy over the last thirty years. This loan is intended to reduce Jamaica’s “medium-term financing needs” and to contribute to its “debt sustainability,” Martijn said, but the loan still needs to be approved by the IMF’s executive board—scheduled to be completed by the end of March.

Three International Organizations Collaborate for the First Time

The World Health Organization, the World Intellectual Property Organization, and the World Trade Organization released a book, “Promoting Access to Medical Technologies and Innovation: Intersections between Public Health, Intellectual Property and Trade,” marking the first time that these three organizations have come together to tackle some of the most pressing issues involving medicine and health. The book examines a range of issues related to these fields, uncovers powerful studies, and most notably, provides tools for future development and success of medical technologies and innovations.