<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
<div class="moz-forward-container">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<a id="reader-domain" class="domain"
href="https://wiki.openrightsgroup.org/wiki/ORG_policy_update/2017-w43"
moz-do-not-send="true">https://wiki.openrightsgroup.org/wiki/ORG_policy_update/2017-w43</a>
<div id="container" class="container font-size5 content-width3">
<div id="reader-header" class="header" style="display: block;"
dir="ltr">
<h1 id="reader-title">ORG policy update/2017-w43 <br>
</h1>
</div>
<hr>
<div class="content">
<div id="moz-reader-content" class="line-height4" dir="ltr"
style="display: block;">
<div id="readability-page-1" class="page">
<div id="bodyContent" class="entry-content">
<div id="mw-content-text" dir="ltr"
class="mw-content-ltr" lang="en">
<p>This is ORG's Policy Update for the week beginning
23/10/2017. </p>
<p>If you are reading this online, you can also
subscribe to the <a rel="nofollow" class="external
text"
href="https://lists.openrightsgroup.org/listinfo/parliamentary.monitor"
moz-do-not-send="true">email version or
unsubscribe</a>. </p>
<h2><span class="mw-headline" id="ORG.E2.80.99s_work">ORG’s
work</span></h2>
<ul>
<li>ORG started a petition against the Government’s
proposals to criminalise repeated viewing of
online terrorist propaganda and compelling
internet companies to police their own networks. <a
rel="nofollow" class="external text"
href="https://action.openrightsgroup.org/censorship-and-control-are-not-answer-extremism"
moz-do-not-send="true">Sign the petition here!</a></li>
<li>Save the date for ORGCon 2017 - it will take
place on Saturday 4 November at Friends House on
Euston Road in London. We have a second smaller
event planned on Sunday 5 November at Theater
Delicatessen. This year is all about the Digital
Fightback. Confirmed speakers include Graham
Linehan, Noel Sharkey, Helen Lewis, Jamie Bartlett
and Nanjira Sambuli. <a rel="nofollow"
class="external text"
href="https://orgcon.openrightsgroup.org/"
moz-do-not-send="true">Tickets are on sale now</a>!</li>
</ul>
<p>Planned local group events: </p>
<ul>
<li>Join <a rel="nofollow" class="external text"
href="https://www.meetup.com/ORG-Birmingham/events/244094596/"
moz-do-not-send="true">ORG Birmingham</a> for a
Halloween social on 30 October. Fancy dress is
encouraged! They will be organising some spooky
games and activities before heading to a pub.</li>
<li>Next <a rel="nofollow" class="external text"
href="https://www.meetup.com/ORG-Glasgow/events/243941706/"
moz-do-not-send="true">ORG Glasgow</a> monthly
meetup will be on 2 November. The local group will
discuss new ideas for public events and
presentations.</li>
<li><a rel="nofollow" class="external text"
href="https://www.meetup.com/ORG-Cambridge/events/243809653/?_cookie-check=G0Ea0u1ZOdmm-_eD"
moz-do-not-send="true">ORG Cambridge</a> will
have their monthly meetup on 7 November. Join them
for a discussion on the current state of digital
rights, what they have done in the past month, and
what they are planning to do in the upcoming
months.</li>
</ul>
<h2><span class="mw-headline" id="Official_meetings">Official
meetings</span></h2>
<ul>
<li>Javier Ruiz attended a VIRT-EU advisory board
meeting. </li>
<li>Javier Ruiz attended a roundtable meeting with
the Cabinet Office to discuss the codes of
practice for data sharing in the Digital Economy
Act.</li>
</ul>
<h2><span class="mw-headline" id="UK_Parliament">UK
Parliament</span></h2>
<h3><span class="mw-headline"
id="Data_Protection_Bill_will_be_in_the_HoL_Committee_on_30_November">Data
Protection Bill will be in the HoL Committee on 30
November</span></h3>
<p>Last week saw the <a
href="https://wiki.openrightsgroup.org/wiki/Data_Protection_Bill_2017"
title="Data Protection Bill 2017"
moz-do-not-send="true">Data Protection Bill 2017</a>
(DPBill) read the second time in the House of Lords.
The Bill will continue in the Committee next week
(30 November) when Lords will discuss the Bill and
amendments in more detail. The up-to-date list of
submitted amendments can be found <a rel="nofollow"
class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-I.pdf"
moz-do-not-send="true">here</a>. </p>
<p>The list includes amendments that would introduce
Article 80(2) of the <a
href="https://wiki.openrightsgroup.org/wiki/General_Data_Protection_Regulation"
title="General Data Protection Regulation"
moz-do-not-send="true">General Data Protection
Regulation</a> into to the DPBill. ORG has
previously argued for the implementation of the
Article in the DPBill. Our <a rel="nofollow"
class="external text"
href="https://www.openrightsgroup.org/ourwork/reports/open-rights-group-briefing-on-the-data-protection-bill-hol-second-reading"
moz-do-not-send="true">briefing</a> has more
details. </p>
<p>The article would allow independent privacy bodies
to bring complaints on behalf of consumers without
the need of a named data subject. This provision
could be instrumental in investigating harmful data
processing practices. </p>
<p>During the Second Reading, the implementation of
Article 80(2) received cross-party support from a
number of peers. Both <a rel="nofollow"
class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-I.pdf"
moz-do-not-send="true">Labour and Lib Dems tabled
their amendments</a> allowing for Article 80(2)
protections in the DPBill. </p>
<p>The Labour amendment is, however, only for
processing that applies to GDPR. This is a good
start but it is necessary to get the same power for
independent privacy bodies for processing that does
not apply to GDPR. ORG intends to work closely with
Peers to develop that language. </p>
<p><a rel="nofollow" class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066%28f%29.pdf"
moz-do-not-send="true">Lib Dems tabled an
amendment</a> proposed by ORG that would cover
data processing outside of GDPR. </p>
<p>Other outstanding issues in the Bill that need to
be addressed include: </p>
<ul>
<li>Too wide exemption for processing of data for
immigration purposes removes any obligation on the
collector to provide information to the
individual, before during, or after collection, or
to abide by the seven data protection principles.
The exemption also removes the right for the
individual to request the information held about
them from a data controller.</li>
<li>The lack of <a rel="nofollow" class="external
text"
href="http://amberhawk.typepad.com/amberhawk/2017/10/dp-bills-new-immigration-exemption-can-put-eu-citizens-seeking-a-right-to-remain-at-considerable-dis.html"
moz-do-not-send="true">a “representative”</a>.
Originally, the EU’s General Data Protection
Regulation covers the processing of personal data
of EU data subjects by data controllers
(companies) not established in the EU. In such
circumstances, the EU requires companies who are
based outside of the EU but wish to offer services
to people in the EU to establish a representative
in a Member State. Without a “representative” it
will be impossible to enforce all rights and
obligations on non-UK companies offering services
to the people in the UK if something goes wrong.</li>
<li>One of the conditions for processing special
categories of personal data is “substantial public
interest”, however, the Bill does not include a
definition of substantial public interest.</li>
<li>National Security Certificates - provisions in
the Bill include even wider exemptions than those
in the current Data Protection Act.</li>
<li>Unfettered powers for cross-border transfers of
personal data by intelligence agencies without
appropriate levels of protection.</li>
</ul>
<p>An amendment has been tabled by Lib Dems already
dealing with the omission of the representative in
the UK and should be debated in one of the Committee
sittings. </p>
<h2><span class="mw-headline"
id="Other_national_developments">Other national
developments</span></h2>
<h3><span class="mw-headline"
id="Epson_delete_competing_eBay_ink_listings_citing_patent_infringement">Epson
delete competing eBay ink listings citing patent
infringement</span></h3>
<p>New <a rel="nofollow" class="external text"
href="https://www.theinquirer.net/inquirer/news/3019801/epson-orders-resellers-to-stop-selling-third-party-ink-on-ebay-in-patent-row"
moz-do-not-send="true">reports from affected
resellers show that compatible ink cartridges are
being removed by Epson</a> from eBay. The eBay’s <a
rel="nofollow" class="external text"
href="http://pages.ebay.com/seller-center/listing/create-effective-listings/vero-program.html#m17-1-tb2"
moz-do-not-send="true">Verified Rights Owner
programme</a> (VeRO) allows rightsholders to
remove listings that they “believe may infringe on
their intellectual property rights”. </p>
<p>Epson are alleging that certain compatible ink
cartridges infringe their patents GB2433473 and
amendment GB2465293. The alleged infringement
concerns the alignment of chip contacts on their
cartridges. </p>
<p>eBay do not appear to require an actual proof of
infringement, for example, a decision of the court,
but accept Epson’s word as a trusted company. </p>
<p>We are concerned that eBay is allowing
rightsholders to easily claim infringement but
resellers appear to be unable to assert the legality
of their products and listings. It is also
concerning that Epson opted to act against resellers
and did not contact the manufacturers first. </p>
<p>It is unclear if there is any merit to the Epson’s
claim that these compatible cartridges infringe
their patents but using patents in this way would
undermine the legal regime that protects the
production of compatible products such as ink
cartridges. </p>
<p>For <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/blog/2017/epson-delete-ebay-listings-citing-patent-claims"
moz-do-not-send="true">more information or to get
in touch read our blog</a>. </p>
<h2><span class="mw-headline" id="Europe">Europe</span></h2>
<h3><span class="mw-headline"
id="ePrivacy_report_has_been_passed_by_the_European_Parliament">ePrivacy
report has been passed by the European Parliament</span></h3>
<p>Last week, the <a
href="https://wiki.openrightsgroup.org/wiki/European_Parliament"
title="European Parliament" moz-do-not-send="true">European
Parliament</a>’s Committee for Civil Liberties
(LIBE) voted on a <a rel="nofollow" class="external
text"
href="https://edri.org/eprivacy-directive-document-pool/"
moz-do-not-send="true">revised ePrivacy proposal</a>
which included new privacy-enhancing amendments. The
LIBE’s report was voted on in the Parliament's
Plenary by all MEPs. </p>
<p>It is important the revised ePrivacy rules maintain
at the minimum the same level of protection that is
offered to the EU citizens by the General Data
Protection Regulation. The ePrivacy is a specialised
legislation which complements the more general GDPR
legislation. This means that <a rel="nofollow"
class="external text"
href="https://iapp.org/news/a/will-the-eprivacy-reg-overshadow-the-gdpr-in-the-age-of-iot/"
moz-do-not-send="true">when the two regulations
contain rules for the same situation</a>, the
ePrivacy rules should take precedence. If the levels
of protection provided by the two legislations
differ, the ePrivacy is likely to end up in front of
the <a
href="https://wiki.openrightsgroup.org/wiki/European_Court_of_Justice"
title="European Court of Justice"
class="mw-redirect" moz-do-not-send="true">European
Court of Justice</a> which could invalidate the
rules. </p>
<p>European Parliament (EP) also decided on a proposal
to confirm (or not) the Parliament’s mandate to
negotiate the e-Privacy Regulation with the Council
of the European Union. The MEPs supported the
mandate for trilogues on ePrivacy and endorsed
citizens rights: 318 for, 280 against and 18
abstentions. </p>
<p>The date for negotiations with the Council is yet
to be confirmed. </p>
<h2><span class="mw-headline"
id="Questions_in_the_UK_Parliament">Questions in
the UK Parliament</span></h2>
<h3><span class="mw-headline"
id="Question_on_data_protection">Question on data
protection</span></h3>
<p>Chris Stephens <a rel="nofollow" class="external
text"
href="https://www.theyworkforyou.com/wrans/?id=2017-10-12.107616.h&s=%22data+protection%22#g107616.r0"
moz-do-not-send="true">asked</a> the Chancellor of
the Exchequer, what work the Department has been
undertaking in respect of the General Data
Protection Regulation. </p>
<p><a
href="https://wiki.openrightsgroup.org/wiki/Mel_Stride_MP"
title="Mel Stride MP" moz-do-not-send="true">Mel
Stride MP</a> responded that the HMRC has a
project underway on business readiness for the GDPR.
The Department has appointed a Data Protection
Officer. </p>
<h3><span class="mw-headline"
id="Question_on_data_privacy_legislation">Question
on data privacy legislation</span></h3>
<p>Stephen Timms <a rel="nofollow" class="external
text"
href="https://www.theyworkforyou.com/wrans/?id=2017-09-14.105171.h&s=%22data+protection%22#g105171.r0"
moz-do-not-send="true">asked</a> the Minister for
the Cabinet Office, what assessment they have made
of the effect on UK data privacy legislation of not
incorporating into UK law Article 8 of the EU
Charter of Fundamental Rights. </p>
<p><a
href="https://wiki.openrightsgroup.org/wiki/Caroline_Nokes_MP"
title="Caroline Nokes MP" moz-do-not-send="true">Caroline
Nokes MP</a> responded that the removal of the
Charter from UK law should not affect the
substantive rights that individuals already benefit
from in the UK when their data are processed.
Individuals will benefit from the rights set out in
the Data Protection Bill and the General Data
Protection Regulation. </p>
<h3><span class="mw-headline"
id="Question_on_the_US_surveillance">Question on
the US surveillance</span></h3>
<p>Lord Laird <a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-10-09.HL1753.h&s=Electronic+Surveillance"
moz-do-not-send="true">asked</a> the Government
what steps they have taken in relation to the
surveillance of European citizens’ data through the
US Prism programme. </p>
<p>Baroness Williams of Trafford responded that
Parliament has enacted the <a
href="https://wiki.openrightsgroup.org/wiki/Investigatory_Powers_Act_2016"
title="Investigatory Powers Act 2016"
moz-do-not-send="true">Investigatory Powers Act
2016</a> which completely overhauls and updates
the legal regime, safeguards and oversight which
govern the intelligence agencies’ use of
surveillance powers. </p>
<h3><span class="mw-headline"
id="Question_on_the_EU_Charter_of_Fundamental_Rights">Question
on the EU Charter of Fundamental Rights</span></h3>
<p>Tom Brake <a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-10-16.107942.h&s=%22data+protection%22#g107942.r0"
moz-do-not-send="true">asked</a> the Secretary of
State for Exiting the European Union if they will
publish the assessment undertaken by his Department
into the areas in EU law which will comprise the
Charter of Fundamental Rights. </p>
<p><a
href="https://wiki.openrightsgroup.org/wiki/Robin_Walker_MP"
title="Robin Walker MP" moz-do-not-send="true">Robin
Walker MP</a> responded that the Department has no
plans to publish such an assessment. </p>
<h3><span class="mw-headline"
id="Question_on_pupils.E2.80.99_personal_records">Question
on pupils’ personal records</span></h3>
<p>Mike Kane MP <a rel="nofollow" class="external
text"
href="https://www.theyworkforyou.com/wrans/?id=2017-10-16.108061.h&s=%28internet+OR+cyber+OR+computer+OR+web+OR+surveillance+OR+copywrite+OR+%22data+sharing%22%29#g108061.r0"
moz-do-not-send="true">asked</a> the Secretary of
State for Education, how many pupils' data has been
(a) requested by and (b) given to the Home Office
under the data sharing agreement with her Department
for purposes including immigration enforcement in
each month in 2017. </p>
<p>Kane further asked when the Department plans to
publish the data sharing agreement with the Home
Office regarding monthly transfers of national pupil
data for purposes of immigration enforcement. </p>
<p>Nick Gibb responded that the Department does not
currently routinely publish all underlying data
sharing agreements. Where interested parties have
specifically requested access to data shares (e.g.
under Freedom of Information) they have been
provided with the Memorandum of Understanding in
place with the Home Office. The Department will be
publishing a full overview of all routine personal
level data sharing, including the Home Office data
sharing in December. </p>
<h2><span class="mw-headline" id="ORG_media_coverage">ORG
media coverage</span></h2>
<p><i>See <a
href="https://wiki.openrightsgroup.org/wiki/ORG_Press_Coverage"
title="ORG Press Coverage"
moz-do-not-send="true">ORG Press Coverage</a>
for full details.</i> </p>
<dl>
<dt>2017-10-19-Lexology-<a rel="nofollow"
class="external text"
href="https://www.lexology.com/library/detail.aspx?g=9dc003f8-0d9e-4e13-ae35-834e73d6c9ab"
moz-do-not-send="true">House of Lords publishes
briefing on Data Protection Bill</a></dt>
<dd> Author: Cynthia O’Donoghue & Kirill
Albrecht</dd>
<dd>Summary: ORG mentioned in relation to the Data
Protection Bill 2017.</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Data_protection"
title="Data protection" moz-do-not-send="true">Data
protection</a></dd>
<dt>2017-10-23-Newsweek-<a rel="nofollow"
class="external text"
href="http://www.newsweek.com/fbi-encryption-christopher-wray-apple-whatsapp-690523"
moz-do-not-send="true">FBI Chief Says Encryption
Is ‘Huge Problem’</a></dt>
<dd>Author: Anthony Cuthbertson</dd>
<dd>Summary: Jim Killock quoted on backdoors being
put into encrypted services would make millions of
ordinary people less secure online. </dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Encryption"
title="Encryption" moz-do-not-send="true">Encryption</a></dd>
<dt>2017-10-24-<a rel="nofollow" class="external
text"
href="https://www.bit-tech.net/news/tech/which-calls-for-an-data-protection-bill-amendment/1/"
moz-do-not-send="true">Which? calls for a Data
Protection Bill amendment</a></dt>
<dd>Author: Gareth Halfacree</dd>
<dd>Summary: Jim Killock quoted on the UK neglecting
consumer protection in the General Data Protection
Regulation by not adopting Article 80(2) in the
Data Protection Bill 2017.</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Data_protection"
title="Data protection" moz-do-not-send="true">Data
protection</a></dd>
<dt>2017-10-24-IT Pro-<a rel="nofollow"
class="external text"
href="http://www.itpro.co.uk/data-protection/29797/why-this-missing-piece-of-the-uks-data-protection-bill-threatens-consumer"
moz-do-not-send="true">Why this missing piece of
the UK's Data Protection Bill 'threatens
consumer rights'</a></dt>
<dd>Author: Dale Walker</dd>
<dd>Summary: Jim Killock quoted on the UK neglecting
consumer protection in the General Data Protection
Regulation by not adopting Article 80(2) in the
Data Protection Bill 2017.</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Data_protection"
title="Data protection" moz-do-not-send="true">Data
protection</a></dd>
<dt>2017-10-25-The Inquirer-<a rel="nofollow"
class="external text"
href="https://www.theinquirer.net/inquirer/news/3019801/epson-orders-resellers-to-stop-selling-third-party-ink-on-ebay-in-patent-row"
moz-do-not-send="true">Epson orders resellers to
stop selling third-party ink on eBay in patent
row</a></dt>
<dd>Author: Chris Merriman </dd>
<dd>Summary: ORG quoted on Epson requesting removal
of compatible ink cartridge listings from eBay. </dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Copyright"
title="Copyright" moz-do-not-send="true">Copyright</a>,
<a
href="https://wiki.openrightsgroup.org/wiki/Patent"
title="Patent" class="mw-redirect"
moz-do-not-send="true">Patent</a></dd>
<dt>2017-10-25-EFF-<a rel="nofollow" class="external
text"
href="https://www.eff.org/deeplinks/2017/10/epson-using-its-ebay-trusted-status-make-competing-ink-sellers-vanish"
moz-do-not-send="true">Epson is Using its eBay
"Trusted Status" to Make Competing Ink Sellers
Vanish</a></dt>
<dd>Author: Cory Doctorow</dd>
<dd>Summary: ORG quoted on Epson requesting removal
of compatible ink cartridge listings from eBay. </dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Copyright"
title="Copyright" moz-do-not-send="true">Copyright</a>,
<a
href="https://wiki.openrightsgroup.org/wiki/Patent"
title="Patent" class="mw-redirect"
moz-do-not-send="true">Patent</a></dd>
<dt>2017-10-26-Newsclick-<a rel="nofollow"
class="external text"
href="https://newsclick.in/police-follows-hollywood-pre-crime-has-become-reality"
moz-do-not-send="true">Police Follows Hollywood:
Pre-Crime Has Become a Reality</a></dt>
<dd>Author: Surangya Kaur</dd>
<dd>Summary: Jim Killock quoted on pre-crime
detection systems fail to meet any test of
proportionality and threaten privacy rights.</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Surveillance"
title="Surveillance" class="mw-redirect"
moz-do-not-send="true">Surveillance</a></dd>
<dt>2017-10-27-The Real News-<a rel="nofollow"
class="external text"
href="http://therealnews.com/t2/story:20306:British-Government-Wants-to-Criminalize-Web-Use"
moz-do-not-send="true">British Government Wants
to Criminalize Web Use</a></dt>
<dd>Author: Aaron Maté</dd>
<dd>Summary: Interview with Jim Killock on new
Government initiatives to censor the Internet.</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Online_censorship"
title="Online censorship" class="mw-redirect"
moz-do-not-send="true">Online censorship</a></dd>
</dl>
<h2><span class="mw-headline" id="ORG_Contact_Details">ORG
Contact Details</span></h2>
<p><a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff"
moz-do-not-send="true">Staff page</a> </p>
<ul>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#jim"
moz-do-not-send="true">Jim Killock, Executive
Director</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#javier"
moz-do-not-send="true">Javier Ruiz, Policy</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#ed"
moz-do-not-send="true">Ed Johnson-Williams,
Campaigns</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#lee"
moz-do-not-send="true">Lee Maguire, Tech</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#myles"
moz-do-not-send="true">Myles Jackman, Legal
Director</a></li>
<li>Matthew Rice, Scotland Director</li>
<li>Slavka Bielikova, Policy Officer</li>
<li>Mike Morel, Campaigner</li>
<li>Caitlin Bishop, Campaigns Communication Officer</li>
</ul>
</div>
</div>
</div>
</div>
</div>
<div> </div>
</div>
</div>
</body>
</html>