Slashdot Mirror
Patriot Act vs. the EU's Data Protection Directive
itwbennett writes "Last week, Microsoft warned that under the Patriot Act the company may be compelled to hand over European customers' data on its new cloud service to U.S. authorities — and also to keep the data transfer secret. This, of course, runs counter to the European Data Protection Directive, which states that organizations must inform users when they disclose personal information. 'Microsoft can already transfer E.U. data to the U.S. under the Safe Harbor agreement. But legal experts have warned that this agreement is hardly worth the paper it's written on,' writes IDG News Service's Jennifer Baker. 'There are seven principles of Safe Harbor, including reasonable data security, and clearly defined and effective enforcement. However all this is nullified if the Patriot Act is invoked.'"
Seriously, why can't we get rid of it?
The internet short circuited two jurisdictions causing paradoxical rift in cyberlegalspace.
Korma: Good
It will end in tears.
This means war! EU vs US. Let's see who's got the chops.
...win again.
I'm someone interested in releasing my software.
I've worked on this software for about 1 year my time, and done things I think are "research" in their newness.
Releasing any software in the U.S. is basically opening me up to a multitude of unfounded lawsuits and I become a target for corporate espionage - why do I bother.
As a euro developer - I must confess that the U.S. is looking less and less interesting as a revenue source.
All the "steal people's data" and the "we control domains" - why on earth would I think about building a business in this piranha pool?
Ok lets ask an easier question.... ... Who doesn't have access to my personal data ?
+ fc6f c098 c2be 29c2 bac2 8ac3 adc2 83c3 9b4e c2a7 ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...
+ 48a1 ef1f c39f 5137 c3bd 17c3 adc3 ad0b 6139 c2a0
+ 1692 12ee c2a6 c38c 3dc2 88c2 981f c294 1602 c2a5
+ b5bc a4e7 c396 1618 c2b6 c393 c2aa c38e c3b0 57c2
+ f34d 88ea 1969 c28a c382 c29e c2a6 c3ae c3b3 c392
+ dc0e d26a 40c3 a12e c38f c3a9 c3aa 3c57 c398 6e39
+ 5974 9e97 c2ac c3b1 3ec2 9dc2 8913 c3b4 47c2 82c3
+ 3ae0 b948 c297 c2b5 61c3 8f7b 530a c28f c288 0d57
+ 53c2 3960 c2a2 c39c c38a c2a7 414c 6bc3 ba6c 0732
+ 37f7 1b70 c397 c2ac c280 c3bb c29b c3a4 5635 c292
+ a620 385c 49c2 9506 61c3 b6c2 b7c2 bb75 c3b2 04c3
+ ab2f 455b 70c2 9d16 38c3 abc3 8872 c290 5051 c2a7
+ 86c3 d3ec c28f 2bc3 bdc2 b5c3 b933 4e43 2ec2 99c3
+ 0243 c71c c2ae c38d 74c3 b163 58c2 b1c2 bd3c 46c2
+ 46f9 9f4a c3a0 c299 c2b4 c394 1f79 c280 c2be c29a
+ f696 3250 c287 0825 c393 c3a6 c2a7 3a12 31c3 bac3
+ a041 7d39 48c2 84c2 a446 c284 c289 5b15 31c2 b118
+ 3ce9 e371 51c2 94c2 ac46 c2b4 60c2 a2c3 8a61 c2a9
+ 5c44 b0da 33c2 8a26 c288 7ac2 b168 c286 c281 c394
+ e1e6 0084 2bc3 96c2 96c2 bfc3 ac64 0923 2bc3 9534
+ fbb7 c8f1 c2b4 c382 60c3 bfc3 8fc2 b83d 41c3 a3c3
+ 6057 17ff c2a4 420a c2a7 54c3 9ec2 9f50 c296 c38a
There are specific exceptions for 'National Security' in both the European directive and each country's implementation (eg the Data Protection Act in the UK).
So all the US needs to do is find a shill (the UK government would be my guess at their first choice) who will declare that they need to export 'this' data as a matter of 'National Security' (honest!) and Microsoft and in the clear and the US get what they want.
Bad analogies are like waxing a monkey with a rainbow.
Hard to imagine people still cling to the idea that we must give up our freedoms to protect us from the people who hate us for our freedoms.
-- Prepared at the direction of, or to be sent to Legal Counsel, in anticipation of litigation. Attorney Client Pri
This is not an issue of the US government wanting information and needing a shill to send it to them. It is simply a matter of Microsoft, as a U.S.-based corporation having to turn over information on all its dealings with extra-nationals at the U.S. government's request. Euro privacy law would prohibit some of that and since Microsoft makes use of European systems, this falls under Euro privacy law. It is a horrible mess but the U.S. law will trump the EU law because...
... the data is also in the U.S." If the EU bothers MS over it, there will be several amicus curiae from virtually every other company based in the US and likely the US gov't as well. ... if it even gets that far (and it won't).
Microsoft is a U.S. company. Would your solution help smooth things over for Microsoft? Yes. Is it necessary? No. Safe harbor, as noted in the article, lets MS transfer everything to the U.S. anyway (meaning the data is now on U.S. servers subject... only to U.S. law). If MS gets sued, one of their in-house counsel will waltz over to the EU and say, "hi, we're subject to U.S. law first... didn't you guys see that in the terms of service and eula? Oh, and
The USA is screwing the only friends they have left over (again)...
So whats the news again?
While MS's concerns are a legally valid interpretation, this seems like childish behavior where they have come late to a party and create obstacles for their competitors.
For the rest of the world it's the Transferring Restricted Access Information To Obstruct Rights act or TRAITOR act
You know, every time I see a story about some business "gone wrong" due to involvement with China, I usually hold my tongue because what I want to say is that doing business with US based companies can be every bit as problematic as doing business with a Chinese company. And the problem doesn't start or end with the PATRIOT act. It goes on and on and on due to all sorts of problems such as software patents, the DMCA and more.
Things that are legal in other countries are illegal here and will get you screwed over if you happen to have a connecting flight here. We've seen that story play out before too. Heck, for that matter, you don't even have to do business with a US company -- recall the guy who was accused of some sort of illegal thing by Cisco which resulted in the arrest and imprisonment of some guy in Canada? Yeah, the USDOJ was unable to produce the evidence it has promised from the beginning.
So yeah... there you go. The US is the new China whether anyone wants to believe it or not.
Can we just overthrow our fucking peeping-tom government already and put up something suitably less needy, greedy and pervy in its place? The government needs to go back to the point of being TOO FUCKING AFRAID of pissing off its populace to entertain shit like this.
I figure a little violent revolution with a few thousand politicoes executed publicly and messily ought to give us another 1-200-ish years of peace.
Chas - The one, the only.
THANK GOD!!!
I learned a bit about the Patriot Act when buying a house. Prior to the Patriot Act you had to disclose sufficient financial information to the bank for them to take the risk of the loan. You had to prove you had the down payment, provide a credit report, and appraise the house. But they didn't really care where or how you got the money. But under the Patriot Act you have to provide an audit trail for all of your assets. For example, you must show where you got your down payment from and where it was for the past 6 months, etc. In my case I sold stocks so I had to show tons of statements prove that the money really came from those stocks, not some other place.
It was fairly creepy. I felt like I was depositing money in a bank and the government required proof that I didn't get the money by selling drugs. It really slowed things down and complicated it. I used to watch TV shows where the police had ridiculous access to people's information, but I see now how that is happening. I can imagine a time when the government can track every dollar - where it goes and where it came from.
All Microsoft has to do is have Microsoft EU run a cloud data center for EU-based data. Microsoft EU, even though ultimately owned by Microsoft (US), is a different company and is not subject to the Patriot Act regulations (no European Company is). Conversely, when an EU-based company does business int eh US (and hosts data there) they become subject to the Patriot Act and may have to deliver up data to the US.
And the government here in the UK wonder why people dont want to do their fucking census?!?!
We moved to an EU country two years ago after having grown up in the US. I think it was the best decision I ever made. The US is nowhere near as "free" as most Americans think it is.
After all the money is the property of the government that issued it.
Give to Caesar what is Caesar's
and thanks to the Patriot Act we are almost back in the cold war mentality (fear). Everyone was in fear of commies. You could point someone out as a commie and the government boys would take them for a 'ride'. If you could not prove satisfactorily that you were not a commie there was a problem...
Although the Patriot Act does give a much wider range of activities that should be hunted out (not just commies) and the government agencies now have a much broader field to play with you on.
O_o
Some great politicians we have there, keeping a watch over our safety ??
If bars don't serve drunk people, then McDonald's shouldn't serve fat people...
*sigh*
EU countries also have the ability to access pretty much everything they like in the interest of national security. Some European nations even allow government access to data for police work without a court order. And they don't ask questions whether the data involved comes from Europeans or US citizens.
So I really don't see what the fuss is about. The only reason this matters more in the EU->US direction is because there are a lot more US companies that EU citizens like to use than the other way around. But that's hardly America's fault or problem.
Dude, Obama is a Republican, not a socialist. Let's see: ...
1) Obama caves in to EVERY demand of the Republican party.
2) His healthcare reform is basically Romneycare.
3) Obama continues Bush's policies on torture and covering up government crimes.
If Obama were a socialist, you'd have a single-payer healthcare system right now.
Wrong.
In the US if a corporation has your data it's now their data and they can do whatever the hell they like with it.
In Europe they have to have permission (possibly implied but explicit if it's 'sensitive' like medical records) to hold and process your data.
They have to register what they plan on doing with the data and tell you when you agree- so they can't suddenly decide they're going to use the information you provided to make a travel booking to start marketing cars. Nor can they suddenly decide they are going to process it overseas.
SafeHarbour and similar schemes are automatically OK either- you still have to declare that you will be using them to the Information Commissioner and it's entirely up to you to ensure that you still conform to data protection laws- just using SafeHarbour doesn't let you off the hook it's just easier to get permission to use it.
Superficially your final point is valid- but only if you ignore your poor internal human rights- you still had legally sanctioned racial segregation in the 60s! And their record since then isn't exactly the model of a democratic freedom loving Government.
I'd go as far as saying that the 'bad habits' European democracies have picked up recently have been caught from the US.
Bad analogies are like waxing a monkey with a rainbow.
It should read "SafeHarbour and similar schemes are NOT automatically OK either-"
Bad analogies are like waxing a monkey with a rainbow.
[blockquote]Your point being? The US is a sovereign nation. Of course, it is going to have strategies for defending its interests.[/blockquote]
I have just two questions for you:
- firstly do you think morality and ethics have any value or does might make right and it's the duty of every government to force it's will upon others if it's capable of doing so?
- second do you think the US Government is doing this for the good of it's citizens or the good of a bunch of corporations who make large donations?
Bad analogies are like waxing a monkey with a rainbow.
t2t10 fantasises that "While European nations were busy raping and pillaging across the globe, American was mostly farming and building up an industrial base."
Really? So the US wasn't busy wiping out the indigenous populations by both direct military means but also using biological weapons (blankets infected with small pox)?
They weren't making unprovoked attacks on other nations: Britain (War of 1812), Spain (repeatedly) and Mexico. If we'd applied the same standards to the US then as was applied to Germany after WW2 your leaders would have been hanged as well for carrying out wars of aggression.
The US fought a civil war because so many of you thought it was the moral and ethical thing to do to keep millions of other human beings enslaved in order to maintain their life-style.
And of course you were also busy discriminating against your own citizens, quite legally, until the middle of the 20th. And still are but not with quite the same degree of overt legal sanction- what proportion of the prison population in your country is black? How much more likely is a black-man to be executed for a crime compared to a white-man who commits the same crime?.
I think you're looking at your country's history through rose tinted glasses. The US has, through out it's history, been an opportunistic bully.
Bad analogies are like waxing a monkey with a rainbow.
Safe Harbour is a joke. It basically amounts to an agreement by one country not to apply their own laws to the data handed over to it from another country.
The process and compliance are unsupervised and there is no clear cut penalty for a breach.
Many government departments and local councils rely on foreign data processing companies these days and our data is habitually transferred across boarders for processing. Their public statements about data protection are demonstrably false as a result.
As usual European politicians are either too lazy to to care or, equally likely, they want it that way in order to have a proxy spy on their own citizens.
The SWIFT agreement was already a scandal. Although the EU demanded and obtained some reciprocity in the agreement it still is against the data protection directive. But I guess the really trick here is the "in secret" part. If it really is in secret than laws are only needed when/if you're found.
we still need to run all of Bin Laden's playbook.
track every dollar - where it goes and where it came from.
Taxes. And taxes.
The state's right debate was entirely to do with the southern state's 'right' to allow slavery.
Bad analogies are like waxing a monkey with a rainbow.
I'll see your atheist bias and raise your one Adolf Hitler (Atheist) and a Joseph Stalin (Atheist) and put in the pot the 10s of millions of people the murdered.
Religion in general , even Christianity in particular, possibly hasn't been a protector of liberties but the biggest criminals against humanity have been atheists.
Bad analogies are like waxing a monkey with a rainbow.