ePrivacy
Filter by...
-
CSA Regulation Document Pool
This document pool contains updates and resources on the EU's proposed 'Regulation laying down rules to prevent and combat child sexual abuse' (CSA Regulation)
Read more
-
Get your extra reading on “cookie consent” and AdTech done
On 22 February, the Belgian Data Protection Authority (DPA) made a decision regarding complaints about the Internet Advertising Bureau Europe (IAB Europe) "consent framework". This is a commonly used cookie pop-up asking for "consent" to be tracked.
Read more
-
A beginner’s guide to EU rules on scanning private communications: Part 2
Vital EU rules on human rights and on due process protect all of us from unfair, arbitrary or discriminatory interference with our privacy by states and companies. As we await the European Commission’s proposal for a law which we fear may make it mandatory for online chat and email services to scan every person’s private messages all the time, which may constitute mass surveillance, this blog explores what rights-respecting investigations into child sexual abuse material (CSAM) should look like instead.
Read more
-
A beginner’s guide to EU rules on scanning private communications: Part 1
In July 2021, the European Parliament and EU Council agreed temporary rules to allow webmail and messenger services to scan everyone’s private online communications. In 2022, the European Commission will propose a long-term version of these rules. In the first installment of this EDRi blog series on online ‘CSAM’ detection, we explore the history of the file, and why it is relevant for everyone’s digital rights.
Read more
-
Tinkering with keys weakens encryption
Politicians sometimes claim to have the solution to "the problem of encryption". They think encryption is important, but they also want the police to be able to read along. Therefore they propose to "just" add an extra key and "leave the encryption untouched". But is it?
Read more
-
Final push needed for a strong ePrivacy Regulation
Today EDRi and 17 civil rights organisations reiterate our support for the much-needed efforts to upgrade Europe’s ePrivacy legislation.
Read more
-
iSpy with my little eye: Apple’s u-turn on privacy sets a precedent and threatens everyone’s security
Apple has just announced significant changes to their privacy settings for messaging and cloud services: first, it will scan all images sent by child accounts; second, it will scan all photos as they are being uploaded to iCloud. With these changes, Apple is threatening everyone’s privacy, security and confidentiality.
Read more
-
Council of Europe’s Actions Belie its Pledges to Involve Civil Society in Development of Cross Border Police Powers Treaty
As the Council of Europe’s flawed cross border surveillance treaty moves through its final phases of approval, time is running out to ensure cross-border investigations occur with robust privacy and human rights safeguards in place. The treaty’s drafting process has been deeply flawed, with civil society groups, defense attorneys, and even data protection regulators largely sidelined.
Read more
-
It’s official. Your private communications can (and will) be spied on
On 6 July, the European Parliament adopted in a final vote the derogation to the main piece of EU legislation protecting privacy, the ePrivacy Directive, to allow Big Tech to scan your emails, messages and other online communications.
Read more
-
Data retention, location data, cookie banners: the ePrivacy Regulation is coming
Besides cookies, the purpose of the ePrivacy Directive is to regulate a much wider area: it contains specific data protection provisions for electronic communications data, in particular content data, traffic metadata, and location data that accrues when using the internet or talking on the phone. Importantly, it also regulates if and to what extent public authorities can access this data: Article 15 of the Directive provides that restrictions of the data protection provisions need to constitute "a necessary, appropriate and proportionate measure within a democratic society to safeguard national security".
Read more
-
Surveillance-based advertising: An industry broken by design and by default
Most online advertising today relies on huge amounts of personal data extracted from people without their knowledge. EDRi’s new guide book “Targeted Online” sheds light on this opaque data industry and explores how EU law should regulate it. This is the first blog post in a new series dedicated to the EU’s proposed Digital Services Act and Digital Markets Act.
Read more
-
ePrivacy strikes back
“And when we woke up, the ePrivacy Regulation was still there”, could be the EU bubble version of the famous micro-tale. Four years after the main text protecting privacy and confidentiality of people in the EU was proposed, Member States have finally given the green light to finalise the adoption. But, where will this lead us?
Read more