Slashdot Mirror


EU Demands Explicit Geo-Location Permissions

judgecorp writes "Apple, Google and employers are already contravening new European Union rules that will require companies to get explicit permission from users before any geo-location data can be used to track them, whether for the purposes of targeted advertising or monitoring employee behavior. This could be the start of the next big privacy argument. The hopes of companies planning to use geo-location data to push products and services to mobile device users have taken a beating in the European Union, following a pronouncement from the European Data Protection Supervisor, Peter Hustinx."

20 of 69 comments (clear)

  1. yea fuktard. by unity100 · · Score: 5, Informative

    because eu + legislation is bad, people in europe have higher health standards, quality standards, and standard of living than the rest of the world.

    http://en.wikipedia.org/wiki/Human_Development_Index

    1. Re:yea fuktard. by infolation · · Score: 2

      Although hopefully, here in the UK, more attention will be paid to this ruling than the retention of innocent citizen's biometric data ruling made a short while ago.

  2. They don't like the competition by Anonymous Coward · · Score: 2, Funny

    Just because the EU wants to spy on its subjects doesn't mean they like companies doing the same.

  3. Nice - this is going to be fun to watch by WegianWarrior · · Score: 2, Informative

    I like the wording of that directive: "If telecom operators want to use base station data in order to supply a value-added service to a customer, according to the revised e-privacy directive they must obtain his or her prior consent. They must also make sure the customer is informed about the terms of such processing."

    Not simply consent, but informed consent. Nice... it's going to be fun to see Google, Apple et.al. trying to explain to users with no grip on the technical side of things the how and why of geo-location. Still, I'm sure most of them will happily sign up for targeted advertisements if it means their favorite app still work...

    Also I note that "Company Devices" can no longer be used for anything but tracking. This will mean that companies can no longer check if truck drivers follows the rules about rest periods, nor can they check to see if they are speeding... which might (probably will) lead to more tired truckers driving way to fast to meet deadlines. Unintended consequence, I hope.

    --
    Everything in the world is controlled by a small, evil group to which, unfortunately, no one you know belongs.
    1. Re:Nice - this is going to be fun to watch by Anonymous Coward · · Score: 5, Informative

      i can put your mind at rest concerning the truck drivers: trip recorders are mandatory for trucks and have been for decades (at least in Germany, but i'm pretty sure that this is an EU directive). police are allowed to check these anytime. these recorders do not store any geo data, but speed and driver working hours.

    2. Re:Nice - this is going to be fun to watch by lucian1900 · · Score: 2

      I'm pretty sure Google's opt-in on Android as it is now can be considered to offer informed consent.

    3. Re:Nice - this is going to be fun to watch by Inda · · Score: 2

      Same in the UK but every lorry driver I've ever spoke to says these can be hacked and worked around.

      Exercise for the reader: google tachograph hacks

      --
      This post contains benzene, nitrosamines, formaldehyde and hydrogen cyanide.
  4. I am very glad the EU is on this. by Barryke · · Score: 2

    Any argument that this stifles innovation is invalid, if the product is good enough people will gladly share their geo location.
    I for one will share my location with Google, as long as it promises to not share it with 3th parties.

    Disclosure: I am dutch.

    --
    Hivemind harvest in progress..
    1. Re:I am very glad the EU is on this. by pla · · Score: 2

      I for one will share my location with Google, as long as it promises to not share it with 3th parties.

      I would say that forms the real problem here - Not controls on whether or not someone's Android can track them, but what Google can do with that data.

      A handful of companies each knowing a bit about my day's activities doesn't add up to squat. When weak protections allow those companies to share data about us without our permission, BAM, suddenly every marketing scumbag in the world knows what time we shit in the morning and how long it takes.

      "Would you like a free trial of Ex Lax?"

  5. Already in Android? by AmiMoJo · · Score: 4, Interesting

    When you install an Android app it asks for permission if it wants to use your location data. Isn't that exactly what they are asking for?

    Android itself asks for permission the first time you use the phone.

    --
    const int one = 65536; (Silvermoon, Texture.cs)
    SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    1. Re:Already in Android? by Gideon+Wells · · Score: 3, Informative

      Many apps on the iPhone do so as well. The phone itself, no.

      --
      by Anonymous Coward: I, for one, welcome the shift from car analogies to pizza analogies. um.. overlords?
    2. Re:Already in Android? by captainpanic · · Score: 4, Insightful

      There are always companies that are one step ahead of regulations. For example companies that are cleaner than strictly necessary.
      Still, it's a good idea to have the regulations to protect citizens / consumers.

      The fact that some companies already ask for consent now shows that this new regulations are totally reasonable.

    3. Re:Already in Android? by AmiMoJo · · Score: 2

      Thinking about it a bit more Android asks more than once, and app permissions differentiate between knowing approximate location (via mobile masts) and exact location via GPS.

      The following all have their own opt-in for using location data:

      - Google search via the on-phone app
      - Google's search website via in-browser location sharing
      - Google Maps/Navigation app
      - Anonymous wifi location reporting (to update their database of hotspots)

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  6. Insane by Jimpqfly · · Score: 2

    "require companies to get explicit permission" => yes, and so what ? the user will see a nice popup when starting the phone, and if he doesn't accept the terms and conditions, he won't be able to use the phone ? crap...

    1. Re:Insane by rich_hudds · · Score: 3, Insightful

      The request would have to be pretty specific, not a catch all for any future application you install.

      For a purchase such as a phone you would have to make the user accept the request before they made the purchase, or you'd have to make the phone work still work when the user said no.

      Not crap. Good.

  7. Wanted: words with whiskers... by AliasMarlowe · · Score: 5, Informative

    When you install an Android app it asks for permission if it wants to use your location data. Isn't that exactly what they are asking for?

    It's something, but it's not enough merely to say that it needs to access item X. The legislation requires that it also say what item X will be used for, and in an informative way. The consent given must be "specific and informed" in each case. Moreover, it was stated that "consent cannot be obtained freely through mandatory acceptance of general terms and conditions, nor through opt-out possibilities" which blows a hole in many of the current slimy practices involving EULAs and suchlike, or defaulting to opt-in.

    Producing weasel words which look just enough like informing the customer, but without really doing so (or preferably cunningly misinforming or misleading the customer into complacency), is a skill which will likely be in greater demand.

    --
    Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  8. Next step - repeal the data retention directive? by Jeppe+Salvesen · · Score: 5, Insightful

    Good move, EU. Now you just gotta repeal the data retention directive, and then you'll regain some credibility on privacy matters!

    --

    Stop the brainwash

  9. Re:Government too? by peppepz · · Score: 2
    It is assumed that data collected by governments will be stored according to the law, and that it will only be accessible to the public authorities, and only with a warrant from the judicial authority.

    The same can't be said for the data collected by private entities: even if they do their best, as a corporation, to honour the privacy of user data, the risk of single malevolent employees abusing their position to access the data needs to be taken into account.

    About surveillance filming: at least in my country, the presence of video-recording equipment is notified by signs, so in theory you are never filmed without knowing. By the way, sometimes the signs itself are as useful as the real cameras, as a deterrent; fake surveillance cameras are quite common, too.

  10. Re:Fucking Awesome by Intrepid+imaginaut · · Score: 2

    Sometimes I think the only rules that really need to be reformed in the US are those surrounding lobbyists, campaign contributions, and campaign funding.

  11. Re:Government too? by Midnight+Thunder · · Score: 2

    Would you feel the same if the person at the next table stared at you the whole time you were eating your meal?

    --
    Jumpstart the tartan drive.