Portfolio blogger

Wednesday, July 27, 2016

The Schrems-Facebook saga continues

The Irish High Court turns to the European Court of Justice with a reference to preliminary ruling in the second case of the Austrian law student Maximilian Schrems against Facebook.
In the first, the European Curt of Justice invalidated in its judgment the "Safe Harbour" agreement between the U.S. and the EU. (Other "adequacy decisions" declaring that countries comply with European data protection principles, can be found here.)
This system enabled U.S. companies to self-certify and register at the U.S. Department of Commerce that they comply with EU data protection rules.
Based on the Snowden revelations, the European Court of Justice found that the "indiscriminate and mass surveillance" of the U.S. government agencies and the lack of legal redress for EU citizens (which redress was ensured for U.S. citizens) against illegitimate use of data by them is not compatible with EU data protection principles and therefore the Commission decision that companies participating in this arrangement don't have the right to use EU citizens' personal data based on this was invalidated.
An alternative was that the U.S. companies commit themselves through "standard contractual clauses" defined by the European Commission to ensure the same protection as if they were obliged by European Law. This is now also attacked before the Irish High Court, who decided to refer a question to the European Court of Justice. This was announced early June but the question is not available yet on the Court website.
Meanwhile the Irish High Court also endorsed some requests to testify in front of it as "Amicus Curiae". The U.S. also received this right. The representative of the U.S. will testify under oath and is not bound by U.S. secrecy laws.
The 8th June actually the European member states endorsed the "Privacy shield", the system intended to replace the "Safe Harbour". The U.S. ensured the adequate legal redress also for European citizens and thus - apart from the question of how indiscriminate and mass character the U.S. surveillance has - the main problem was declared solved.
The arrangement had no smooth ride neither in the U.S., where the republicans introduced last minute amendments to the bill, weakening its guarantees, nor in the EU, where the so-called "Article 29 working party", the community of national Data Protection Authority chiefs (which will become the European Data Protection Board, a much more powerful and institutionalised group after the entering into force in May 2018 of the new General Data Protection Regulation - a post about that will follow) and the European Data Protection Supervisor requested changes to the already agreed text and of course this was very difficult to make the U.S. swallow. Certainly, this "Privacy shield" will also be tested in courts. However, the changes in U.S. law will also influence the decision on the standard contract clauses, as their government environment has changed.
One interesting aspect of the U.S. rules on personal data access of the government is that they are valid in principle to subsidiaries of U.S. companies, even to companies outside the U.S. who have a subsidiary or important operations in the U.S.  This was, however weakened when Microsoft won a case in Ireland, and thus does not have to disclose data to U.S. authorities.
The opinion of the EDPS on the "Privacy shield" can be found here.

Tuesday, January 26, 2016

Why does the EU finance the Orban regime?

I hear this question more and more often. The Hungarian government plans to use all EU funds available for the 2014-2020 programming cycle till 2019 (mainly before the 2018 parliamentary elections and the 2019 municipal elections. This may mean 6 billion euros every year or even more
These amounts help to keep the system running. They amount to about 4% of GDP at the moment, may be as much as 6% according to the ambition plans, thus they are the source of the 2-3% growth (and may increase it to 4-5% per year in the future) with which the goverment boosts.
Apart from the legal problems which hinder the decrease or withdrawal of these funds, the workings and the logic of the EU does not enable to withdraw them.
I do not agree, by the way, that these funds should be withdrawn. These are used for good purposes, beyond some publicity actions like fancy pavements on the main squares of villages, fountains and other, well publicised useless projects. They make it possible to revamp the university clinics in Budapest, a lot of seqage and other utilities reconstruction in the slums and in rural cities, technology and building improvements for schools, transport reconstruction and renewal (all these are concrete projects taking place). And without the EU, the "small circles of liberty" we still have, would not excist or be much more limited. The Orbán (FIDESZ) government retreated on the media law, on forced premature retirement of judges, publicity taxes killing the biggest independent TV-station and much more.
It is still worth understanding, how the EU works. It is not a superstate (it is supranational, true, but neither a state, nor super), it is rather a co-operation framework. The Commission is more a regulatory agency then a government, inparticular not in the sense of the executive branch of most European parliamentary democracies (where the party or coalition giving the executive is also in majority in the Parliament and thus, as the goverment implements the party programme in theory, it is able to gain every vote in the parliament.
I do not think the basics need explanation here: the European Parliament has no governing party or coalition, all decisions require approval from the Council, which consists of the heads of state or government (the head of the executive according to the legal system of each country) of the member states, Commission implementing decisions (very limited and only possible when the directive or regulation voted by the Parliament and the Council foresees it) are reached through consultation with committees of experts of the member states and are subject to validation by the legislative (although ex post).
In my view the EU has three, relatively distinct coordination domains (not identical to the pre-Lisbon three pillars, though not unrelated):
First the common market - this requires a lot of harmonisation concerning product standards, like quality and security requirements. I would classify the land-based and porduction agricultural support and agricultural market regulation measures here. Trade and competition issues also belong here.
Secondly political co-operation which is first of all a way to increase the weight of Europe in the world compared to tis individual member states. Of course for this we have to talk with one voice- therefore a harmonisation of opinions is necessary, sometimes some countries have to accept that their opinions are not represented - of course this only works if there are common goals. This is the practical reason why this only works when there are shared values (of course all political co-operation requires common values an the values of Europe are noble and on the long term they ensure a lot of benefits, but let's stay on a practical ground.
Thirdly, the interest of good co-operation and the common values also lead to the recognition that too big deviations in the level of development are unfavourable and thus it is in the interest of the richer countries to help the poorer ones to develop, to approach them in living standards, technical and social level. The structural funds are the means for that. Let us not go into the debate how much of thesse funds are used in the donor countries as goods and services are provided in exchange and similarly an argument could be brought up that the awarding and managing authorities both also have an interest to favour local suppliers. Formally speaking there is no possibility to promote neither donor country nor local suppliers, but if one of these is possible, the other is also.
This interest of leveling is independent whether a country "behaves well" in the political arena. Legally it is clearly separated, but it is also not practical - a higher level of economic development and integration can also foster sharing of values but not the other way: cutting funds leads to resentment and even lower sharing of values.
We do not like the practice of the government in Hungary that economic support depends on whether someone agrees with the politics of the government - why do we expect that from the EU? We have to solve our problems ourselves, not rely on blackmail by outsiders to do it for us.

Sunday, January 10, 2016

Both the Council of the EU and the LIBE Committee of the European Parliament accepted the compromise text of the new General Data Protection Regulation which will be formally voted on plenary and then in the Council early 2016 to come into force in 2018.
The compromise text is available here.

Some important issues (based on the first analyses http://www.ashfords.co.uk/the-new-eu-general-data-protection-regulation-is-finally-here/; http://www.natlawreview.com/article/general-eu-data-protection-regulation-bullet-points)

The most publicised change is maybe the formal inclusion of the "right to be forgotten" : that even when processing (mainly in the case of publishing) date was legitimate originally, with time the interest of privacy of the data subject may override the interest of processing (the public to know, for example).
All companies processing data of residents of the EU are subject to the regulation, whether seated in the EU or not.
Some points enhance the responsibility of the controllers (who determine the prupose and means of the data processing and are primarily responsible for it and usually most interested also) and processors (who act on instructions of the controller). The latter are explicitly responsible for their actions and can directly (without instruction of the controller) be instructed by the courts or by the data protection authorities.
Nomination of a data protection officer, stricter rules for consent of the data subjects to processing their data, the risks to the data subjects must be assessed before processing their data - with reasonable limits of proportionality. This risk analysis gives companies the possibility on the other hand to define themselves what security measures are adequate.
The research community noticed with relief that those points which they thought would hinder scientific (mainly medical) research were softened. However, there are restrictions: pseudonymised data remain personal data, for example with the resulting responsibility and rules to be complied with.
The much heralded "one stop shop" - making it easier for the data subjects to complain in case of cross-boarder processing of their data - gave some way to convenience of the authorities but basically stayed in the text.
A compromise was found between the Parliament (who wanted 5% of turnover) and the Council (who wanted 2) about maximum fines: it will be 4%.
Privacy by design is another new concept enshrined in the new regulation.
Transfer of data, possibility to base processing personal data on legitimate interest of the controller and data portability (the possibility of the data subject to request transmitting his/her data to another controller, for example in the case of changing a service provider) is also better defined.

Friday, November 27, 2015

Security vs liberties (and privacy)

No surprise that after all attacks by terrorists the cry for more surveillance, more intrusion into the privacy (of prospective terrorist, of course) is demanded. Gladio (stay behind) maybe already knew that...
There are several problems with this, I only want to reflect on one of them.
Some demands simply do not make sense or their sense is not spelled out. Some are exaggerated (simpler to ask for everything then setting clear limits). And these excesses discredit also the justified requirements for measures.
A lot of noise is made around free travel within the Schengen area and  passenger name records for flights. Should we add to this high-speed trains? Are really movements between countries in the Schengen zone the danger? Or just movement through rapid transport? To intercept all cars on the boarders would mean such a disturbance which may not justify itself.
Not quite independently, draconic measures are in demand after the attacks - and attacks are not so frequent. Thus, sometimes these measures become more lax, routine takes their edge by the time the next attack is being prepared.
On the other hand, think about the measures in airline security, the seemingly ridiculous limitation on liquids. Everybody could invent ways to circumvent them. However, since their introduction, no attack occurred on airplanes by circumventing them. By the way, the European Commission, feeling the ridicule, wanted to abolish them, but national security experts resisted.
Security measures prevented the attackers to enter the stadium in Paris and wreak much greater havoc then what they did.
These measures are inconvenient, but not a significant intrusion into our privacy. Significant intrusions are required with the argument that they help to track down prospective terrorists, to follow their movements and explore their plans. However, when two of the attackers of Paris were auditioned by Belgian police and left free, it is difficult to justify how more information or information on more people could have helped.
What is really missing, is not more data, but more analysis of these data, drawing conclusions and acting on these conclusions - and these conclusions are better to be sound as arresting innocent people on basis of data analysis would again discredit the whole exercise.

Saturday, October 24, 2015

Why does the refugee crisis boost the popularity of the Hungarian government?

It is commonplace that the inability of the European Union and its governments to manage the refugee crisis and even to explain the complexities which prevent them to find the solution ("For every complex problem there is an answer that is clear, simple, and wrong" - H.L.Mencke) helps extremist to increase their popularity. But the Hungarian government is not an extremist (it just uses extreme statements to lure voters from the far right), was not able to manage the crisis within its own country correctly and there is no "mainstream" (real) force which could be blamed for being soft.
The explanation can be found in the attitudes and communication messages.
It is clear that people are worried, there are real and imaginary reasons behind that. And we know, that people are looking for messages that reinforce their attitudes, not which contradict them (as we know from Klapper). And this they find in media which are either promoting the government's or Jobbik's (the extreme right party) point of view. hey just exaggerate a little, and by that reinforce the fears, add food by transmitting seemingly true information about an even bigger danger (spreading diseases, being terrorists, refugees being financed by obscure forces, be it the Islamic State to conquer Europe or the Jews or Americans wanting to bring down Europe - not being disturbed by the contradiction between these two messages, throwing away food, etc. etc.). As soon as the danger is perceived, all actions are justified to keep these people far, to incarcerate, humiliate them, send them anywhere but not here. And the effectivity of these measures is not questioned. It is also useless that after two days, all of these menaces prove to be untrue, based on falsified evidence or certified by "experts" who have no expertise and were eventually agents of the communist system. The message is there and all previous wrongdoing is excused, news about continuing or new scandals ignored.
However, the increase in popularity does not compensate for the total loss suffered since the tentative to introduce and Internet tax. And the Hungarians are still in favour of an European solution, as surveys show.

Sunday, July 5, 2015

Miscellaneous

Although Sunday evening isn't the best time to blog, the last weeks were so full that it is worth reviewing some of the events.
As I write this, the first exit polls are out on the Greek referendum: they predict a narrow win for the "No" while the official data an overwhelming "No". No is no, so what is the difference? Well, an overwhelming "No" would give a much stronger mandate for the government (as counts progress, it seems "No" is over 60% - oh wait, what for?
No one knows (pun not intended). We will see, what the Greek government does - they also had several proposals on the table, the last two or three maybe not so far from the proposal of the Troika - which is off the table but probably would be acceptable for them again.
While we wait to see, let's talk about Hungary (and also about the U.S. Supreme Court). It's Pride weekend, and just before it, the SCOTUS (official abbreviation of the Court) ruled that same-sex couples have a right to marriage. And this stirs waves in Hungary. OK, the decision to save Obamacare by correcting the badly written law is not so relevant, but that Hungarian facebookers totally ignored the other decision (from early June) about a threat on Facebook, is somewhat surprising. A man was writing on Facebook (apparently in a rap poem - according to experts it was disastrously bad) about wanting to see his ex-wife killed. He was condemned by a court, and actually isn't off the hook due to the Supreme Court's verdict. But the verdict reinforced the "clear and present danger" principle. If the husband really wanted to have her wife killed and called others who could do it to do it, he is guilty (my simplistic interpretation). But if he did not really want it (here the "literary" expression comes into play), or it was unrealistic that anybody do it, he is protected by the freedom of speech.
Meanwhile Hungary is receiving almost as many refugees (asylum seekers) as Italy. And the government wants to seal off the Serbian boarder by a big and strong fence, costing 22 bn forints (itself sufficient to feed 14 thousand refugees for a year - although the decision to accept or reject their demand for asylum should be decided within months and a lot of them go further to the west). Let's forget about the money for the fake "National consultation" and the outraging publicity campaign.
What is more important that first a collection was started to counter the government giant poster campaign. The estimated cost was 3 million forints (as compared to a hundred times as much for the government giant posters), but within a week or so, ten times as much was donated by private individuals.
Then real actions started to emerge: groups of volunteers sacrificed their free time to help them, information leaflets were translated and printed (why only by volunteers? - the link is there, you can see what vital information it contains), food, drink (there is a heat wave also in Hungary) clothes, toys for children, medicines, blankets etc. etc. collected. The coordination runs of Facebook, even between groups in different locations to try to warn when a bigger group is due to arrive (they have to travel usually changing at least once but sometimes more - see also the leaflet). But the group is kept closed to exclude those who would only post rude comments (I see them on posts on articles dealing with the problem).
I should close now on an optimistic note - it is heartwarming what these, mostly young people do and tell about the solidarity they encounter - people bringing donations, coming to help, travelling dozens of kilometres to go to help.

Thursday, June 11, 2015

Luxembourg voted...


Luxembourg missed a big chance. Not the Luxembourgers, but their government, parties and NGOs (the least these latter, but still).
The referendum held Sunday (7th June) contained three questions:
The decrease of the voting age to 16 years
The right of foreign citizens who have been living ten years in Luxembourg and had voted already once on a local or European election (which is a right of every European citizen who lives in another EU country than of which he/she is citizen) to vote also in the Luxembourg national elections.
The limitation of the mandate of members of government to two cycles (ten years).
The result was a triple "no".
After the vote, commentators emphasised that the surveys before the vote already predicted the result but not such an overwhelming majority of negative votes. It took a day for the comments by those to appear, who regretted the result.
Before, apart from some newspaper articles and very few posters (mainly from the liberal Democratic Party), the campaign was just simmering on low heat.
Of course the first and the third questions were less important, but not totally unimportant.
Some background: Luxembourg has been governed for some twenty years, till the snap elections in autumn 2013 by a government presided by Jean-Claude Juncker. The economic success, quality of life and European prestige of the country show that not without results. However, the Juncker-government showed signs of fatigue in the last period and more than 50% of the citizens surveyed before the elections wanted change (and still most voters voted for Juncker's Christian Socialist Party, but not enough to give it a majority and so a three-party coalition took over the wheel). So limiting the mandate of ministers clearly had no real supporting experience.
I had an interesting discussion with a Luxembourger (affiliated to one of the opposition parties at that time) who regretted that in spite of the support of the government, only a little above 60% of Luxembourgers voted in favour of the European Constitution (which then lost out in France and the Netherlands). When I tried to joke with my eastern European mind that the government support was probably counter-productive, she vehemently denied that possibility. Some commentators actually also ascribed the failure to the late start of the government's campaign.
The "no" to decreasing the voting age will certainly be a negative message to youngsters interested in the public affairs (or politics) of their country. The society being maybe even more aged than elsewhere in Europe (a bigger part of the younger working population not being a citizen), this can also be explained-
The real failure, however, was on the question of the voting right for "foreigners".
Almost half of the people living in Luxembourg are "foreigners", i.e. living in Luxembourg but not Luxembourgish citizens. Add to this (although they were not affected by the referendum question) about 150 thousand (more than 40% of the workforce) people coming over across the boarder every day to work in the country. This gave the main argument of the partisans of the "yes": almost half of the inhabitants affected by Luxembourg politics have no right to influence it.
Luxembourg society is actually not xenophobe (therefore the surprise and disappointment of many about the result). I have to tell also that friendliness towards foreigners stops at a certain level – to me this is a natural compensation for good relationship on the surface but I have no proof for it. And the language question taints the picture. This is maybe the first factor in explaining the result: to become a citizen is not very difficult – residence of 7 years which is less than the 10 in the proposal for voting rights, participation in three courses (no exam, just participation) and a not too high level of knowledge of the local language, a franco-german dialect. So the real difference in conditions is the knowledge of the language. The official languages in the country, however, are three, they include German and French, and still most of the official correspondence is in French.
But in my opinion, the one of the real problems was that until recently, the direction favoured by the political actors to integrate foreigners was to ease the acquisition of citizenship (decreasing required time of residence to 5 years, there were even voices that a lower level of language exam could be accepted, maybe under additional conditions) and a proposal for a law was also submitted to the parliament (the Chamber of deputies, as it is called). So the change in direction left probably many wondering why to give vote to those who are not eligible or do not want to acquire citizenship. My two-element sample (which is not much, I know), two people from totally distinct backgrounds) says, though that they would be interested to influence Luxembourg politics but not take up citizenship and they have valid reasons for that.
The other problem is that it is never easy to move people – in particular conservatively minded people; and the Luxembourgers are conservative – to accept radical changes. And that’s what I missed most, was the explanation of the basics. "Democratic deficit" was the slogan. But apparently people who are "inside the fence" will not let others in just because they are told they should. And no one explained why the voting right could benefit them, and in particular not what is at stake concerning the relationship between Luxembourgers (again: a lot of retired people; and a lot of them working for the administration) and the "foreigners" who actually produce a big chunk of their pension and the resources for government expenditures, including a well-developed social system and the salaries of administration staff. There is a "country branding" campaign going on – no one thought about the impact on the country brand of the result? But this can be considered as blackmail: no other country ever asked this question and these are not considered not foreigner-friendly just because they didn’t ask, while Luxembourg created itself a problem by asking, as the “no” answer can be interpreted in a way that they do not want to give this right to foreigners who live and produce in – and for - their country.
The dominant opposition party, the Christian Socialists were campaigning in favour of a "no". No arguments were heard, my suspicion is that they simply wanted to hit the government – as revenge that after the last elections they were left out of government in spite that they sent the most deputies to the Chamber and in the hope that this speeds up their return to power as the popularity of the government is fading. What is interesting is that practically the biggest group of people who would gain voting rights are the Portuguese workers, most of whom, coming from a rural area, would vote Christian.
The Christian Socialists exploited their "victory" at least in a positive way: they submitted a proposal for a law easing the conditions to gain citizenship. So far, so good, let's see what follows. But a lot of soul-searching and discussion cannot be saved – as the Association for Migration and Integration put it: the discussion is not finished, it is just launched by the result.