<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p> </p>
<div class="moz-forward-container">
<p> </p>
<div id="container" class="container font-size5 content-width3">
<div id="container" class="container font-size5 content-width3"><a
class="moz-txt-link-freetext"
href="https://wiki.openrightsgroup.org/wiki/ORG_policy_update/2017-w45"
moz-do-not-send="true">https://wiki.openrightsgroup.org/wiki/ORG_policy_update/2017-w45</a>
<div id="container" class="container font-size5
content-width3"><br>
<h1>ORG policy update/2017-w45 - ORG Wiki</h1>
<hr>
<div class="content">
<div id="moz-reader-content" class="line-height4"
dir="ltr" style="display: block;">
<div id="readability-page-1" class="page">
<div id="bodyContent" class="entry-content">
<div id="mw-content-text" dir="ltr"
class="mw-content-ltr" lang="en">
<p>This is ORG's Policy Update for the week
beginning 06/11/2017. </p>
<p>If you are reading this online, you can also
subscribe to the <a rel="nofollow"
class="external text"
href="https://lists.openrightsgroup.org/listinfo/parliamentary.monitor"
moz-do-not-send="true">email version or
unsubscribe</a>. </p>
<h2><span class="mw-headline"
id="ORG.E2.80.99s_work">ORG’s work</span></h2>
<ul>
<li>ORG is running a petition against the
Government’s proposals to criminalise repeated
viewing of online terrorist propaganda and
compelling internet companies to police their
own networks. <a rel="nofollow"
class="external text"
href="https://action.openrightsgroup.org/censorship-and-control-are-not-answer-extremism"
moz-do-not-send="true">Sign the petition
here!</a></li>
<li>We have written to the <a
href="https://wiki.openrightsgroup.org/wiki/Intellectual_Property_Office"
title="Intellectual Property Office"
moz-do-not-send="true">Intellectual Property
Office</a> regarding <a rel="nofollow"
class="external text"
href="https://www.openrightsgroup.org/blog/2017/epson-delete-ebay-listings-citing-patent-claims"
moz-do-not-send="true">takedowns of
Epson-compatible ink cartridges on eBay</a>
due to an alleged patent infringement. We are
concerned that eBay is giving protection to
only one party in this dispute. Read the
letter <a rel="nofollow" class="external
text"
href="https://www.openrightsgroup.org/ourwork/correspondence/letter-to-the-intellectual-property-office-regarding-guidance-on-ebay-takedowns-based-on-an-alleged-patent-infringement-of-comaptible-products"
moz-do-not-send="true">here</a>.</li>
</ul>
<p>Planned local group events: </p>
<ul>
<li>Join <a rel="nofollow" class="external
text"
href="https://www.meetup.com/ORG-Birmingham/events/244878819/"
moz-do-not-send="true">ORG Birmingham</a> on
Monday 20 November to learn more about
internet filtering in the UK and how you can
use the Blocked! tool to help fight the
overblocking of websites. </li>
<li><a rel="nofollow" class="external text"
href="https://www.meetup.com/ORG-Edinburgh/events/244894783/"
moz-do-not-send="true">ORG Edinburhgh</a> is
organising a social with ORG’s Policy Director
Javier Ruiz on Tuesday 21 November. Join them
to discuss some of the work he is leading on,
catch up on other areas of work, and discuss
news and topics of interest.</li>
<li>Join <a rel="nofollow" class="external
text"
href="https://www.meetup.com/ORG-Cambridge/events/244927140/"
moz-do-not-send="true">ORG Cambridge</a> on
Tuesday 5 December for a monthly meetup. They
will discuss the current state of digital
rights, what they've done in the past month,
and what they are planning to do in the
upcoming months.</li>
<li><a rel="nofollow" class="external text"
href="https://www.meetup.com/ORG-Glasgow/events/244234443/"
moz-do-not-send="true">ORG Glasgow</a> will
hold their monthly meetup on Thursday 7
December at the Electron Club. You will have
an opportunity to discuss current affairs and
topics of interest and to generate new ideas
for public events and presentations.</li>
</ul>
<h2><span class="mw-headline"
id="Official_meetings">Official meetings</span></h2>
<ul>
<li>Jim Killock attended a hearing at the <a
href="https://wiki.openrightsgroup.org/wiki/European_Court_of_Human_Rights"
title="European Court of Human Rights"
moz-do-not-send="true">European Court of
Human Rights</a> in Strasbourg regarding a
case started in 2013 challenging the legality
of top-secret mass surveillance programs
revealed by Edward Snowden. You can watch the
hearing <a rel="nofollow" class="external
text"
href="http://echr.coe.int/Pages/home.aspx?p=hearings&w=5817013_07112017&language=en"
moz-do-not-send="true">here</a>.</li>
<li>Matthew Rice attended a meeting with
National Records Scotland today about the use
of Administrative Data in the Scottish census.</li>
</ul>
<h2><span class="mw-headline" id="UK_Parliament">UK
Parliament</span></h2>
<h3><span class="mw-headline"
id="2nd_DPBill_debate_in_the_HoL_Committee">2nd
DPBill debate in the HoL Committee</span></h3>
<p>The Data Protection Bill (DPBill) was debated
in the House of Lords during the second
Committee sitting this week. The next Committee
sitting is scheduled for Monday 13 November. </p>
<p>The full list of amendments to be debated next
week can be found <a rel="nofollow"
class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-III.pdf"
moz-do-not-send="true">here</a>. </p>
<p>Peers started the debate with this set of <a
rel="nofollow" class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-II%28rev%29.pdf"
moz-do-not-send="true">amendments</a>. </p>
<p>The full transcript is available from here - <a
rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/lords/?id=2017-11-06a.1578.0&s=data+protection+bill#g1606.1"
moz-do-not-send="true">1</a>, <a
rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/lords/?id=2017-11-06a.1621.6&s=data+protection+bill#g1641.1"
moz-do-not-send="true">2</a>, <a
rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/lords/?id=2017-11-06a.1657.0&s=data+protection+bill#g1679.0"
moz-do-not-send="true">3</a>. </p>
<p>This Committee sitting did not include a debate
on the processing of data for immigration
purposes and it is likely to be debated on
Monday. The draft Bill removes any obligation on
the collector to provide information to the
individual, before during, or after collection,
or to abide by the seven data protection
principles. The exemption also removes the right
for the individual to request the information
held about them from a data controller. <a
rel="nofollow" class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-II.pdf"
moz-do-not-send="true">Amendments</a> (pdf)
have been tabled to address these issues. </p>
<p>Amendments regarding other issues raised by
ORG, such as the implementation of Article 80(2)
allowing independent privacy bodies represent
data subject without naming them will be debated
in some of the last Committee sittings at the
end of the month. </p>
<p>At the moment, <a rel="nofollow"
class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066%28f%29.pdf"
moz-do-not-send="true">Labour and Lib Dems
tabled their amendments</a> that would
implement Article 80(2). </p>
<p>While the Lib Dem amendment would cover both
processing of data which applies under the
General Data Protection Regulation and outside
of it, the Labour amendment only covers the
processing of personal data under the GDPR. </p>
<p>Other issues such as the <a rel="nofollow"
class="external text"
href="http://amberhawk.typepad.com/amberhawk/2017/10/dp-bills-new-immigration-exemption-can-put-eu-citizens-seeking-a-right-to-remain-at-considerable-dis.html"
moz-do-not-send="true">missing
“representative” of foreign companies</a> in
the UK will also be debated since an amendment
correcting the issue has been tabled already. </p>
<h4><span class="mw-headline"
id="Data_protection_amendment_for_the_DEAct">Data
protection amendment for the DEAct</span></h4>
<p>Lord Lucas tabled an <a rel="nofollow"
class="external text"
href="http://lordsamendments.parliament.uk/?Session=2017-2019&Id=2158&Stage=Committee&Decision=Not-yet-debated&ResultsPerPage=20&Member=1879&CurrentPage=1"
moz-do-not-send="true">amendment relating to
the processing of personal data under Part 3</a>
of the <a
href="https://wiki.openrightsgroup.org/wiki/Digital_Economy_Act_2017"
title="Digital Economy Act 2017"
moz-do-not-send="true">Digital Economy Act
2017</a>. Part 3 of the DEAct deals with
online pornography and creates a requirement for
a website with pornographic content to implement
an age verification method. ORG has raised
previously concerns about the lack of privacy
safeguards in the DEAct and the lack of
regulation of age verification providers. </p>
<p>The amendment submitted by Lord Lucas would
amend the DEAct and deal with some of the
privacy and data protection issues in it. The
amendment allows the age verification regulator
to publish a regulation relating to the
processing of personal data instead of guidance.
This change makes enforcement more
straightforward and does not imply that good
data protection practice is voluntary. </p>
<p>The amendment should be debated next week. </p>
<h2><span class="mw-headline"
id="Other_national_developments">Other
national developments</span></h2>
<h3><span class="mw-headline"
id="ECtHR_hearing_on_mass_surveillance_by_the_GCHQ">ECtHR
hearing on mass surveillance by the GCHQ</span></h3>
<p>A landmark case was heard this week at the <a
href="https://wiki.openrightsgroup.org/wiki/European_Court_of_Human_Rights"
title="European Court of Human Rights"
moz-do-not-send="true">European Court of Human
Rights</a> (ECtHR) in Strasbourg <a
rel="nofollow" class="external text"
href="https://theintercept.com/2017/11/07/uk-surveillance-case-european-court-human-rights/"
moz-do-not-send="true">challenging the
legality of mass surveillance programs</a>
revealed by Edward Snowden in 2013. </p>
<p>Three separate legal challenges brought by ORG
and other organisations, including Amnesty
International, Privacy International, the
American Civil Liberties Union, Big Brother
Watch, and the Irish Council for Civil
Liberties, led to the hearing. </p>
<p>The case was heard by a panel of 10 judges. The
case handles complaints related to violations of
the <a
href="https://wiki.openrightsgroup.org/wiki/European_Convention_on_Human_Rights"
title="European Convention on Human Rights"
moz-do-not-send="true">European Convention on
Human Rights</a> (ECHR). The UK is bound by
the decision of the ECtHR even after Brexit
because it is not an EU court. </p>
<p>The human rights organisations argued that the
British agencies (<a
href="https://wiki.openrightsgroup.org/wiki/GCHQ"
title="GCHQ" class="mw-redirect"
moz-do-not-send="true">GCHQ</a>) using the
surveillance programs such as <a
href="https://wiki.openrightsgroup.org/wiki/Tempora"
title="Tempora" moz-do-not-send="true">Tempora</a>
or <a
href="https://wiki.openrightsgroup.org/wiki/PRISM"
title="PRISM" moz-do-not-send="true">PRISM</a>
violate four key rights protected under the
convention: the right to privacy, the right to a
fair trial, the right to freedom of expression,
and the right not to be discriminated against. </p>
<p>The Government presented arguments to the court
that using surveillance systems to collect and
store communications is not itself a violation
of privacy. They claimed that privacy is only
violated when a human analyst reads or listens
to individual messages or calls. </p>
<p>The 10 judges will have to assess whether the
mass surveillance programs’ invasion of privacy
is necessary, proportionate and in accordance
with the law. </p>
<p>Judgment is expected to be delivered in six
months time. </p>
<p>More on the case can be found out on the <a
rel="nofollow" class="external text"
href="https://www.privacynotprism.org.uk/"
moz-do-not-send="true">Privacy not Prism</a>
website. </p>
<h2><span class="mw-headline"
id="International_developments">International
developments</span></h2>
<h3><span class="mw-headline"
id="Facebook_asks_for_nudes_to_fight_revenge_porn">Facebook
asks for nudes to fight revenge porn</span></h3>
<p>Facebook has revealed that they are piloting a
new <a rel="nofollow" class="external text"
href="https://www.theguardian.com/technology/2017/nov/07/facebook-revenge-porn-nude-photos"
moz-do-not-send="true">initiative in Australia
to tackle revenge porn</a>. They want their
users to submit their nude photographs to
Facebook so they could block them if they are
posted by someone else. </p>
<p>Facebook users who are worried that their
intimate, nude or sexual images will be
published by someone else on the platform, can
submit these pictures through the Messenger app.
The pictures will then be “hashed” - converted
into a unique digital fingerprint that can be
used to identify and block any attempts to
re-upload that same image. </p>
<p>The Australian pilot requires users to first
fill in an online form through the e-safety
commissioner’s website describing their
concerns. Then they will be asked to send the
images to themselves on Messenger and the
e-safety commissioner notifies Facebook.
Following the notification, an analyst will
access the image and hash it. </p>
<p>The images are supposed to be stored for a
short period of time before Facebook will be
deleting them. </p>
<p>Hashing has also been used to stop images
relating to child sexual exploitation or
extremism. It is unlikely that the use of this
technology will stop revenge porn altogether.
Often, victims of revenge porn do not have
access to images themselves but continue to be
threatened by their publication. Likewise,
images can be only linked to on Facebook instead
of being published there directly. </p>
<p>Users who submit their images are also <a
rel="nofollow" class="external text"
href="http://www.dazeddigital.com/science-tech/article/38003/1/facebook-wants-your-nudes-to-tackle-revenge-porn"
moz-do-not-send="true">exposing themselves to
a risk of security breaches and having their
images leaked</a> that way. It is also unclear
how Facebook are processing and storing the
images. Facebook should commit to the highest
levels of transparency on how they process and
store nude images to ensure their users of
protecting their privacy. </p>
<h2><span class="mw-headline"
id="Questions_in_the_UK_Parliament">Questions
in the UK Parliament</span></h2>
<h3><span class="mw-headline"
id="Question_on_offensive_online_content">Question
on offensive online content</span></h3>
<p>Alex Chalk MP <a rel="nofollow"
class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-10-26.110025.h&s=%28internet+OR+cyber+OR+computer+OR+web+OR+surveillance+OR+copywrite+OR+%22data+sharing%22%29#g110025.r0"
moz-do-not-send="true">asked</a> the Secretary
of State for Digital, Culture, Media and Sport,
what steps the Government is taking to protect
people from offensive and defamatory online
broadcasting. </p>
<p><a
href="https://wiki.openrightsgroup.org/wiki/Matthew_Hancock_MP"
title="Matthew Hancock MP"
moz-do-not-send="true">Matthew Hancock MP</a>
responded that online TV channels which are
licensed by Ofcom must comply with rules in the
Ofcom Broadcasting Code on harmful or offensive
content. Video-on-demand services within UK
jurisdiction are subject to higher level rules
which focus on the harmful material. </p>
<p>More broadly, the Government intends to
implement a range of options to counter internet
harms in the Digital Charter. </p>
<h3><span class="mw-headline"
id="Question_on_electronic_surveillance">Question
on electronic surveillance</span></h3>
<p>Lord Laird <a rel="nofollow" class="external
text"
href="https://www.theyworkforyou.com/wrans/?id=2017-10-26.HL2629.h&s=Electronic+Surveillance"
moz-do-not-send="true">asked</a> the
Government, what steps they have taken to
examine the legal status of Privacy Shield. </p>
<p>Lord Ashton of Hyde responded that any
examination of the legal status of matters
concerning the EU-US Privacy Shield would be a
matter for the CJEU in the face of a legal
challenge being brought against it by Max
Schrems. </p>
<h2><span class="mw-headline"
id="ORG_media_coverage">ORG media coverage</span></h2>
<p><i>See <a
href="https://wiki.openrightsgroup.org/wiki/ORG_Press_Coverage"
title="ORG Press Coverage"
moz-do-not-send="true">ORG Press Coverage</a>
for full details.</i> </p>
<dl>
<dt>2017-11-07-Sky News-<a rel="nofollow"
class="external text"
href="https://news.sky.com/story/uk-pornographers-fear-age-verification-laws-may-harm-business-11116453"
moz-do-not-send="true">UK pornographers fear
age verification laws may harm business</a></dt>
<dd>Author: Alexander J. Martin</dd>
<dd>Summary: Myles Jackman quoted on age
verification for porn websites being an
enormous privacy risk to viewers.</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Digital_Economy_Act_2017"
title="Digital Economy Act 2017"
moz-do-not-send="true">Digital Economy Act
2017</a>, <a
href="https://wiki.openrightsgroup.org/wiki/Privacy"
title="Privacy" moz-do-not-send="true">Privacy</a></dd>
<dt>2017-11-07-The Guardian-<a rel="nofollow"
class="external text"
href="https://www.theguardian.com/world/2017/nov/07/uk-intelligence-agencies-face-surveillance-claims-in-european-court"
moz-do-not-send="true">UK intelligence
agencies face surveillance claims in
European court</a></dt>
<dd>Author: Owen Bowcott</dd>
<dd>Summary: ORG mentioned in relation to the
ECtHR hearing of a joint case against mass
surveillance. </dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Surveillance"
title="Surveillance" class="mw-redirect"
moz-do-not-send="true">Surveillance</a></dd>
<dt>2017-11-07-The Independent-<a rel="nofollow"
class="external text"
href="http://www.independent.co.uk/news/uk/politics/mass-spying-snowden-echr-ripa-investigatory-powers-act-gchq-cia-leaks-a8042701.html"
moz-do-not-send="true">Safeguards on
Britain's mass spying programme 'clearly
defective'</a></dt>
<dd>Author: Jon Stone</dd>
<dd>Summary: ORG mentioned in relation to the
ECtHR hearing of a joint case against mass
surveillance. </dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Surveillance"
title="Surveillance" class="mw-redirect"
moz-do-not-send="true">Surveillance</a></dd>
<dt>2017-11-07-The Inquirer-<a rel="nofollow"
class="external text"
href="https://www.theinquirer.net/inquirer/news/3020530/ehjc-to-weigh-up-uk-surveillance-laws"
moz-do-not-send="true">ECHR to weigh up
lawfulness of UK's 'wide-ranging'
surveillance powers</a></dt>
<dd>Author: Dave Neal</dd>
<dd>Summary: ORG mentioned in relation to the
ECtHR hearing of a joint case against mass
surveillance. </dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Surveillance"
title="Surveillance" class="mw-redirect"
moz-do-not-send="true">Surveillance</a></dd>
<dt>2017-11-08-Dazed Digital-<a rel="nofollow"
class="external text"
href="http://www.dazeddigital.com/science-tech/article/38003/1/facebook-wants-your-nudes-to-tackle-revenge-porn"
moz-do-not-send="true">Facebook wants your
nudes to tackle revenge porn</a></dt>
<dd>Author: Anna Cafolla</dd>
<dd>Summary: Myles Jackman quoted on the
Facebook’s initiative to tackle revenge porn
being riven with privacy and security risks. </dd>
<dd>Topics:<a
href="https://wiki.openrightsgroup.org/wiki/Online_censorship"
title="Online censorship"
class="mw-redirect" moz-do-not-send="true">Online
censorship</a>, <a
href="https://wiki.openrightsgroup.org/wiki/Data_protection"
title="Data protection"
moz-do-not-send="true">data protection</a></dd>
<dt>2017-11-08-The Sun-<a rel="nofollow"
class="external text"
href="https://www.thesun.co.uk/tech/4872073/soon-youll-have-to-enter-personal-details-to-watch-porn-and-it-could-open-you-up-to-blackmail-legal-expert-claims/"
moz-do-not-send="true">PORN FEARS Soon
you’ll have to enter personal details to
watch porn and it could open you up to
blackmail, legal expert claims</a></dt>
<dd>Author: Margi Murphy</dd>
<dd>Summary: Myles Jackman quoted on age
verification for porn websites being an
enormous privacy risk to viewers.</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Digital_Economy_Act_2017"
title="Digital Economy Act 2017"
moz-do-not-send="true">Digital Economy Act
2017</a>, <a
href="https://wiki.openrightsgroup.org/wiki/Privacy"
title="Privacy" moz-do-not-send="true">Privacy</a></dd>
<dt>2017-11-09-The Guardian-<a rel="nofollow"
class="external text"
href="https://www.theguardian.com/commentisfree/2017/nov/09/the-guardian-view-on-data-protection-privacy-is-not-enough"
moz-do-not-send="true">The Guardian view on
data protection: privacy is not enough</a></dt>
<dd>Summary: ORG mentioned in relation to the
implementation of Article 80(2) in the DPBill.
</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Data_protection"
title="Data protection"
moz-do-not-send="true">Data protection</a></dd>
<dt>2017-11-09-Mail on Sunday-<a rel="nofollow"
class="external text"
href="http://www.mailonsunday.co.uk/news/article-5068071/Porn-viewers-soon-verify-age.html"
moz-do-not-send="true">Porn websites will
soon force users to enter their personal
details to prove their age - triggering
fears of new blackmail risk</a></dt>
<dd>Author: Paddy Dinham</dd>
<dd>Summary: Myles Jackman quoted on age
verification for porn websites being an
enormous privacy risk to viewers.</dd>
<dd>Topics: <a
href="https://wiki.openrightsgroup.org/wiki/Digital_Economy_Act_2017"
title="Digital Economy Act 2017"
moz-do-not-send="true">Digital Economy Act
2017</a>, <a
href="https://wiki.openrightsgroup.org/wiki/Privacy"
title="Privacy" moz-do-not-send="true">Privacy</a></dd>
</dl>
<h2><span class="mw-headline"
id="ORG_Contact_Details">ORG Contact Details</span></h2>
<p><a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff"
moz-do-not-send="true">Staff page</a> </p>
<ul>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#jim"
moz-do-not-send="true">Jim Killock,
Executive Director</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#javier"
moz-do-not-send="true">Javier Ruiz, Policy</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#ed"
moz-do-not-send="true">Ed Johnson-Williams,
Campaigns</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#lee"
moz-do-not-send="true">Lee Maguire, Tech</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#myles"
moz-do-not-send="true">Myles Jackman, Legal
Director</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#matthew"
moz-do-not-send="true">Matthew Rice,
Scotland Director</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#slavka"
moz-do-not-send="true">Slavka Bielikova,
Policy Officer</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#mike"
moz-do-not-send="true">Mike Morel,
Campaigner</a></li>
<li> <a rel="nofollow" class="external text"
href="https://www.openrightsgroup.org/people/staff#caitlin"
moz-do-not-send="true">Caitlin Bishop,
Campaigns Communication Officer</a></li>
</ul>
</div>
</div>
</div>
</div>
</div>
<div> </div>
</div>
<div> </div>
</div>
<div class="content">
<div id="moz-reader-content" class="line-height4" dir="ltr"
style="display: block;">
<div id="readability-page-1" class="page">
<div id="bodyContent" class="entry-content">
<div id="mw-content-text" dir="ltr"
class="mw-content-ltr" lang="en"> </div>
</div>
</div>
</div>
</div>
<div> </div>
</div>
</div>
</body>
</html>