<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p> </p>
    <div id="container" class="container font-size5 content-width3">
      <div id="reader-header" class="header" style="display: block;"
        dir="ltr"><a class="moz-txt-link-freetext" href="https://wiki.openrightsgroup.org/wiki/ORG_policy_update/2017-w46">https://wiki.openrightsgroup.org/wiki/ORG_policy_update/2017-w46</a>
        <h1 id="reader-title">ORG policy update/2017-w46 - ORG Wiki</h1>
      </div>
      <hr>
      <div class="content">
        <div id="moz-reader-content" class="line-height4" dir="ltr"
          style="display: block;">
          <div id="readability-page-1" class="page">
            <div id="bodyContent" class="entry-content">
              <div id="mw-content-text" dir="ltr" class="mw-content-ltr"
                lang="en">
                <p>This is ORG's Policy Update for the week beginning
                  13/11/2017.
                </p>
                <p>If you are reading this online, you can also
                  subscribe to the <a rel="nofollow" class="external
                    text"
                    href="https://lists.openrightsgroup.org/listinfo/parliamentary.monitor">email
                    version or unsubscribe</a>.
                </p>
                <h2><span class="mw-headline" id="ORG.E2.80.99s_work">ORG’s
                    work</span></h2>
                <ul>
                  <li>ORG is running a petition against the Government’s
                    proposals to criminalise repeated viewing of online
                    terrorist propaganda and compelling internet
                    companies to police their own networks. [ORG started
                    a petition against the Government’s proposals to
                    criminalise repeated viewing of online terrorist
                    propaganda and compelling internet companies to
                    police their own networks. <a rel="nofollow"
                      class="external text"
href="https://action.openrightsgroup.org/censorship-and-control-are-not-answer-extremism">Sign
                      the petition here!</a></li>
                  <li>In case you couldn’t come to ORGCon, you can now
                    watch the talks online! <a rel="nofollow"
                      class="external text"
href="https://www.youtube.com/watch?v=f6VTrBpE_kA&list=PLY9gENnF8uiXdeFQtEA-Ge0pd7DtAsx4T">Have
                      a look at our YouTube channel</a>.</li>
                </ul>
                <p>Planned local group events:
                </p>
                <ul>
                  <li>Join <a rel="nofollow" class="external text"
                      href="https://www.meetup.com/ORG-Birmingham/events/244878819/">ORG
                      Birmingham</a> on Monday 20 November to learn more
                    about internet filtering in the UK and how you can
                    use the Blocked! tool to help fight the overblocking
                    of websites. </li>
                  <li><a rel="nofollow" class="external text"
                      href="https://www.meetup.com/ORG-Edinburgh/events/244894783/">ORG
                      Edinburhgh</a> is organising a social with ORG’s
                    Policy Director Javier Ruiz on Tuesday 21 November.
                    Join them to discuss some of the work he is leading
                    on, catch up on other areas of work, and discuss
                    news and topics of interest.</li>
                  <li>Join <a rel="nofollow" class="external text"
                      href="https://www.meetup.com/ORG-Cambridge/events/244927140/">ORG
                      Cambridge</a> on Tuesday 5 December for a monthly
                    meetup. They will discuss the current state of
                    digital rights, what they've done in the past month,
                    and what they are planning to do in the upcoming
                    months.</li>
                  <li><a rel="nofollow" class="external text"
                      href="https://www.meetup.com/ORG-Glasgow/events/244234443/">ORG
                      Glasgow</a> will hold their monthly meetup on
                    Thursday 7 December at the Electron Club. You will
                    have an opportunity to discuss current affairs and
                    topics of interest and to generate new ideas for
                    public events and presentations.</li>
                </ul>
                <h2><span class="mw-headline" id="Official_meetings">Official
                    meetings</span></h2>
                <ul>
                  <li>Javier Ruiz attended an event on the <a
                      rel="nofollow" class="external text"
href="http://www.internetpolicystreams.com/index.php/project-activities/item/357-project-workshop-2017-current-issues-in-sdo-decision-making-for-the-internet">Current
                      issues in SDO decision-making for the Internet in
                      Parliament.</a></li>
                </ul>
                <h2><span class="mw-headline" id="UK_Parliament">UK
                    Parliament</span></h2>
                <h3><span class="mw-headline"
                    id="DPBill_debate_in_the_HoL_Committee_continues">DPBill
                    debate in the HoL Committee continues</span></h3>
                <p>The Data Protection Bill (DPBill) was debated in the
                  House of Lords again this week during two sittings.
                  The next Committee sittings are scheduled for Monday
                  20 November and Wednesday 22 November. </p>
                <p>The full list of amendments to be debated next week
                  can be found <a rel="nofollow" class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-V.pdf">here</a>.
                </p>
                <p>The debate this week started with Lords debating
                  these sets of amendments <a rel="nofollow"
                    class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-III%28Rev%29.pdf">1</a>
                  & <a rel="nofollow" class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-IV.pdf">2</a>.
                </p>
                <p>The full transcript is available from here:
                </p>
                <ul>
                  <li>13 November-<a rel="nofollow" class="external
                      text"
href="https://www.theyworkforyou.com/lords/?id=2017-11-13b.1804.1&s=data+protection+bill#g1828.2">
                      1</a>, <a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/lords/?id=2017-11-13b.1849.3&s=data+protection+bill#g1878.0">2</a>,
                    <a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/lords/?id=2017-11-13b.1898.0&s=data+protection+bill#g1917.4">3</a>
                  </li>
                </ul>
                <ul>
                  <li><a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/lords/?id=2017-11-15a.2031.4&s=data+protection+bill#g2088.4">15
                      November</a></li>
                </ul>
                <p>This Committee debated an <a rel="nofollow"
                    class="external text"
href="http://lordsamendments.parliament.uk/?Session=2017-2019&Id=2158&Stage=Committee&Decision=Not-yet-debated&ResultsPerPage=20&Member=1879&CurrentPage=1">amendment</a>
                  tabled by Lord Lucas relating to the processing of
                  personal data under Part 3 of the <a
                    href="https://wiki.openrightsgroup.org/wiki/Digital_Economy_Act_2017"
                    title="Digital Economy Act 2017">Digital Economy Act
                    2017</a> (DEAct). ORG has raised previously concerns
                  about the lack of privacy safeguards in the DEAct and
                  the lack of regulation of age verification providers
                  under Part 3. </p>
                <p><a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/lords/?id=2017-11-13b.1849.3#g1853.0">Lord
                    Stevenson (Labour) pointed out that implementing</a>
                  this amendment would require resolution of many
                  intricacies. He asked the Minister, Lord Ashton of
                  Hyde to clarify the situation on age verification in
                  the DEAct and provide information on the guidance to
                  be issued by the Secretary of State regarding privacy
                  safeguards. The amendment was withdrawn and can still
                  be brought for discussion at later stages. </p>
                <p><a rel="nofollow" class="external text"
                    href="https://goo.gl/9KSpCk">An amendment that would
                    remove exemption on the processing of data for
                    immigration purposes has gathered a cross-party
                    support</a> during the debate. Baroness Williams of
                  Trafford stated that this provision is a necessary and
                  proportionate measure to protect the integrity of the
                  immigration system. She will provide further
                  information in writing on the application of the
                  clause in practice. </p>
                <p>Amendments on the implementation of Article 80(2)
                  allowing independent privacy bodies represent data
                  subject without naming them will likely be debated
                  during the Committee sittings next week. </p>
                <p>At the moment, <a rel="nofollow" class="external
                    text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066%28f%29.pdf">Labour
                    and Lib Dems tabled their amendments</a> that would
                  implement Article 80(2).
                </p>
                <p>Both <a rel="nofollow" class="external text"
href="https://publications.parliament.uk/pa/bills/lbill/2017-2019/0066/18066-V.pdf">amendments
                    are supported by Lib Dems and Labour</a>, however
                  Amendment 184 would cover both processing of data
                  which applies under the General Data Protection
                  Regulation and outside of it, but amendment 185 only
                  covers the processing of data under the GDPR. </p>
                <h4><span class="mw-headline"
                    id="DPBill_scrutiny_by_the_Joint_Committee_on_Human_Rights">DPBill
                    scrutiny by the Joint Committee on Human Rights</span></h4>
                <p>The Joint Committee on Human Rights is scrutinising
                  the DPBill. The Committee is taking written evidence.
                  You can submit your contribution <a rel="nofollow"
                    class="external text"
href="http://www.parliament.uk/business/committees/committees-a-z/joint-select/human-rights-committee/legislative-scrutiny/parliament-2017/data-protection-bill-17-19-/joint-written-submission-form/">here</a>.
                </p>
                <h2><span class="mw-headline"
                    id="Other_national_developments">Other national
                    developments</span></h2>
                <h3><span class="mw-headline"
                    id="Consultation_on_draft_codes_of_practice_for_RIPA">Consultation
                    on draft codes of practice for RIPA</span></h3>
                <p>The <a rel="nofollow" class="external text"
href="https://www.gov.uk/government/consultations/regulation-of-investigatory-powers-act-2000-draft-codes-of-practice">Home
                    Office published a consultation of revised codes of
                    practice of the Regulation of Investigatory Powers
                    Act 2000</a>. The consultation relates to Parts 2
                  and 3 of RIPA. </p>
                <p>These codes set out the processes and safeguards
                  governing the use of investigatory powers by public
                  authorities, including the police and security and
                  intelligence agencies. The consultation seeks
                  representation on their revised draft. </p>
                <p>The consultation closes on 28 December at 11:45 pm.
                </p>
                <h2><span class="mw-headline" id="Europe">Europe</span></h2>
                <h3><span class="mw-headline"
                    id="Schrems_cannot_rely_on_his_consumer_status_for_a_class_action">Schrems
                    cannot rely on his consumer status for a class
                    action</span></h3>
                <p>The <a rel="nofollow" class="external text"
                    href="http://www.europe-v-facebook.org/sk/GA_opinion.pdf">Advocate
                    General Michal Bobek gave his opinion</a> in a case
                  brought forward by Max Schrems against Facebook.
                  Schrems started a legal action against Facebook
                  following Snowden’s revelations of the US surveillance
                  programs. </p>
                <p>It became apparent that data transferred by Facebook
                  from their base in Ireland to the US does not have
                  adequate protections in both countries. As a result,
                  the Safe Harbour data sharing agreement was
                  invalidated and replaced by Privacy Shield. </p>
                <p>In the current case, <a rel="nofollow"
                    class="external text"
href="https://uk.reuters.com/article/us-eu-privacy-facebook-court/austrian-cant-file-facebook-class-action-suit-eu-court-adviser-idUKKBN1DE100">Schrems
                    seeks to represent 25,000 of Facebook users in a
                    collective (class) action in an Austrian court</a>
                  demanding 500 euros per person in damages. </p>
                <p style="display: inline;" class="readability-styled">
                  The opinion by the Advocate General Bobek says that
                  Schrems can rely on his consumer status to sue
                  Facebook Ireland before the Austrian Courts; however,
                  he </p>
                <blockquote>”cannot rely on his consumer status with
                  respect to claims assigned to him by other consumers.”</blockquote>
                <p>Opinions of advocate general are not binding for the
                  <a
                    href="https://wiki.openrightsgroup.org/wiki/European_Court_of_Justice"
                    title="European Court of Justice"
                    class="mw-redirect">European Court of Justice</a>
                  (CJEU) but are predominantly followed by the Court. If
                  the court makes a decision in line with the opinion,
                  it is likely that individual privacy suits against
                  Facebook will not be brought forward due to high court
                  costs. However, Schrems would still be able to set a
                  precedent.
                </p>
                <h2><span class="mw-headline"
                    id="Questions_in_the_UK_Parliament">Questions in the
                    UK Parliament</span></h2>
                <h3><span class="mw-headline"
                    id="Question_on_Internet_and_Terrorism">Question on
                    Internet and Terrorism</span></h3>
                <p>Jim Shannon <a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-11-02.111009.h&s=internet#g111009.r0">asked</a>
                  the Secretary of State for Digital, Culture, Media and
                  Sport, what steps they are taking to prevent online
                  subscription to websites with Islamic extremist
                  content.
                </p>
                <p><a
                    href="https://wiki.openrightsgroup.org/wiki/Matthew_Hancock_MP"
                    title="Matthew Hancock MP">Matthew Hancock MP</a>
                  responded that they are closely working with industry
                  to encourage companies to develop innovative solutions
                  to tackle online radicalisation. The Department is
                  also setting up a new Commission for Countering
                  Extremism to identify whether more powers are needed.
                </p>
                <h3><span class="mw-headline"
                    id="Question_on_pupils.E2.80.99_personal_records">Question
                    on pupils’ personal records</span></h3>
                <p>Darren Jones <a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-10-23.109014.h&s=%22data+protection%22#g109014.q0">asked</a>
                  the Secretary of State for Education, what legal
                  advice the Department has received on meeting data
                  protection requirements for data held on the national
                  pupil database that relates to former pupils with whom
                  schools have no contact.
                </p>
                <p>Nick Gibb responded that the Department seeks advice
                  as necessary. </p>
                <h3><span class="mw-headline"
                    id="Question_on_intellectual_property">Question on
                    intellectual property</span></h3>
                <p>Ben Lake MP <a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-11-02.111049.h&s=%22intellectual+property%22#g111049.r0">asked</a>
                  the Secretary of State for Business, Energy and
                  Industrial Strategy, what representations they have
                  had from the Design, Trade Marks and Brands sectors on
                  the future of the UK’s relationship with the
                  Intellectual Property Office and the EU Intellectual
                  Property Office after Brexit. </p>
                <p><a
                    href="https://wiki.openrightsgroup.org/wiki/Jo_Johnson_MP"
                    title="Jo Johnson MP">Jo Johnson MP</a> responded
                  that they have held extensive discussions with
                  representatives from across the various IP sectors.
                  The future relationship is a matter for negotiation
                  with the EU. In the meantime, the UK will continue to
                  fulfil their obligations under the WIPO Treaties.
                </p>
                <h3><span class="mw-headline" id="Question_on_patents">Question
                    on patents</span></h3>
                <p><a
                    href="https://wiki.openrightsgroup.org/wiki/Barry_Gardiner_MP"
                    title="Barry Gardiner MP">Barry Gardiner MP</a> <a
                    rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-11-03.111264.h&s=patent#g111264.r0">asked</a>
                  the Secretary of State for Business, Energy and
                  Industrial Strategy, whether the UK will participate
                  in the European Unitary Patent and the EU Unified
                  Patent Court after the UK leaves the EU.
                </p>
                <p><a
                    href="https://wiki.openrightsgroup.org/wiki/Jo_Johnson_MP"
                    title="Jo Johnson MP">Jo Johnson MP</a> responded
                  that The Unified Patent Court (UPC) is an
                  international court. It is not an EU court or an EU
                  institution.
                </p>
                <h3><span class="mw-headline"
                    id="Question_on_data_protection">Question on data
                    protection</span></h3>
                <p><a
                    href="https://wiki.openrightsgroup.org/wiki/Paul_Blomfield_MP"
                    title="Paul Blomfield MP">Paul Blomfield MP</a> <a
                    rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-11-07.112162.h&s=Information+Commissioner+ICO#g112162.r0">asked</a>
                  the Secretary of State for Digital, Culture, Media and
                  Sport, what support the Department is providing for
                  small and medium-sized enterprises to prepare for the
                  implementation of the Data Protection Bill and the <a
href="https://wiki.openrightsgroup.org/wiki/General_Data_Protection_Regulation"
                    title="General Data Protection Regulation">General
                    Data Protection Regulation</a>.
                </p>
                <p><a
                    href="https://wiki.openrightsgroup.org/wiki/Matthew_Hancock_MP"
                    title="Matthew Hancock MP">Matthew Hancock MP</a>
                  responded that the Information Commissioner’s Office
                  has various resources on their website. This month the
                  ICO has launched a dedicated helpline service for SMEs
                  and has updated its SME toolkit to reflect the
                  requirements of GDPR.
                </p>
                <h3><span class="mw-headline"
                    id="Question_on_the_NHS_hack">Question on the NHS
                    hack</span></h3>
                <p><a
                    href="https://wiki.openrightsgroup.org/wiki/Emily_Thornberry_MP"
                    title="Emily Thornberry MP">Emily Thornberry MP</a>
                  <a rel="nofollow" class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-11-06.111672.h&s=cyber#g111672.r0">asked</a>
                  the Secretary of State for Foreign and Commonwealth
                  Affairs, what assessment they have made of the recent
                  claim by the head of Microsoft that the Government of
                  North Korea was responsible for the WannaCry cyber
                  attack in May 2017.
                </p>
                <p><a
                    href="https://wiki.openrightsgroup.org/wiki/Boris_Johnson_MP"
                    title="Boris Johnson MP" class="mw-redirect">Boris
                    Johnson MP</a> responded that various sources have
                  attributed the WannaCry campaign to North Korean
                  actors. The National Crime Agency and the National
                  Cyber Security Centre are working with international
                  law enforcement and industry partners to find those
                  responsible. </p>
                <h3><span class="mw-headline"
                    id="Question_on_Internet_safety">Question on
                    Internet safety</span></h3>
                <p>Lord Alton of Liverpool <a rel="nofollow"
                    class="external text"
href="https://www.theyworkforyou.com/wrans/?id=2017-10-31.HL2764.h&s=Digital+Government#gHL2777.q1">asked</a>
                  the Government, why the Government’s Internet Security
                  Strategy Green Paper does not address the issue of
                  definitions. Furthermore, he inquired why using the
                  definition of violence against women from the Criminal
                  Justice and Immigration Act 2008 in the <a
                    href="https://wiki.openrightsgroup.org/wiki/Digital_Economy_Act_2017"
                    title="Digital Economy Act 2017">Digital Economy Act
                    2017</a> is not addressed in the Internet Safety
                  Strategy Green Paper.
                  Lord Ashton of Hyde responded that Part 3 of the
                  Digital Economy Act (2017) requires the Secretary of
                  State for Digital Culture, Media and Sport to produce
                  a report on the effectiveness of age verification
                  measures 12 months after the powers come into force.
                  We will use this review to consider the wider impact
                  and consult on the definitions used in this part of
                  the Act.
                </p>
                <h2><span class="mw-headline" id="ORG_media_coverage">ORG
                    media coverage</span></h2>
                <p><i>See <a
                      href="https://wiki.openrightsgroup.org/wiki/ORG_Press_Coverage"
                      title="ORG Press Coverage">ORG Press Coverage</a>
                    for full details.</i>
                </p>
                <dl>
                  <dt>2017-11-10-Huffington Post-<a rel="nofollow"
                      class="external text"
href="http://www.huffingtonpost.co.uk/myles-jackman/25-million-uk-porn-viewer_b_18490658.html">25
                      Million UK Porn Viewers At Risk Of Their Sexual
                      Preferences Being Leaked</a></dt>
                  <dd>Author: Myles Jackman </dd>
                  <dd>Summary: Op-ed by Myles Jackman on age
                    verification and privacy threats.</dd>
                  <dd>Topics: <a
                      href="https://wiki.openrightsgroup.org/wiki/Privacy"
                      title="Privacy">Privacy</a>, <a
                      href="https://wiki.openrightsgroup.org/wiki/Data_protection"
                      title="Data protection">Data protection</a>, <a
                      href="https://wiki.openrightsgroup.org/wiki/Digital_Economy_Act_2017"
                      title="Digital Economy Act 2017">Digital Economy
                      Act 2017</a></dd>
                  <dt>2017-11-14-The Register-<a rel="nofollow"
                      class="external text"
                      href="https://www.theregister.co.uk/2017/11/14/privacy_pass_protocol/">Privacy
                      Pass protocol promises private perusing</a></dt>
                  <dd>Author: Rebecca Hill</dd>
                  <dd>Summary: Jim Killock quoted on methods to remove
                    cookie tracking being a great idea.</dd>
                  <dd>Topics: <a
                      href="https://wiki.openrightsgroup.org/wiki/Privacy"
                      title="Privacy">Privacy</a></dd>
                  <dt>2017-11-15-Business Insider-<a rel="nofollow"
                      class="external text"
href="http://uk.businessinsider.com/uk-supermarkets-trialling-facial-recognition-yoti-tills-alcohol-2017-11">Two
                      UK supermarkets are trialling facial recognition
                      at the checkout so you can buy alcohol faster</a></dt>
                  <dd>Author: Shona Ghosh</dd>
                  <dd>Summary: Jim Killock quoted on the use of
                    biometrics for everyday security being a worrying
                    trend.</dd>
                  <dd>Topics: <a
                      href="https://wiki.openrightsgroup.org/wiki/Biometrics"
                      title="Biometrics">Biometrics</a></dd>
                </dl>
                <h2><span class="mw-headline" id="ORG_Contact_Details">ORG
                    Contact Details</span></h2>
                <p><a rel="nofollow" class="external text"
                    href="https://www.openrightsgroup.org/people/staff">Staff
                    page</a>
                </p>
                <ul>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#jim">Jim
                      Killock, Executive Director</a></li>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#javier">Javier
                      Ruiz, Policy</a></li>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#ed">Ed
                      Johnson-Williams, Campaigns</a></li>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#lee">Lee
                      Maguire, Tech</a></li>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#myles">Myles
                      Jackman, Legal Director</a></li>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#matthew">Matthew
                      Rice, Scotland Director</a></li>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#slavka">Slavka
                      Bielikova, Policy Officer</a></li>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#mike">Mike
                      Morel, Campaigner</a></li>
                  <li> <a rel="nofollow" class="external text"
                      href="https://www.openrightsgroup.org/people/staff#caitlin">Caitlin
                      Bishop, Campaigns Communication Officer</a></li>
                </ul>
              </div>
            </div>
          </div>
        </div>
      </div>
      <div> </div>
    </div>
    <pre class="moz-signature" cols="72">
</pre>
  </body>
</html>