Current scenes in Brussels after London announces it wants to reach a international data deal w/ the US (and Australia, Brazil, Colombia, Kenya, South Korea, India & Singapore)
Fun fact: while the UK is pursuing these post-Brexit deals (as is its right), if such agreements leads to EU data being transferred to third-party countries that don't have adequacy deals w/ EU, then the UK's own deal w/ the EU could be in jeopardy
Worth remembering that the EU has tried to get a data deal done w/ Australia for years, but Canberra has been unwilling to meet Brussels' demands (as is its right). Also: EU's future data deal w/ US still very much up in the air.
So question I would be asking is: If/when the UK does these data deals, what happens to its data relationship w/ the EU (where 3/4 of its international data flows go to)? How does that work with the very likely chance of data being onpassed via the UK to third-party countries?
How does a UK adequacy regime, with countries that do not have their own deals w/ the EU, work with the UK's existing deal with the EU (which, as a reminder, has a sunset clause that ends in 4 years and must be renewed on the proviso that the UK remains with the EU's sphere)?
I also don't want to be a buzzkill, but in UK's statement on the benefits of these deals, at no point do they mention the importance of upholding people's privacy rights.
I also want to "stay emotionally and socially connected." But they couldn't have stressed privacy rights?
Oh this is fun. @OliverDowden tells the Telegraph that he wants to get rid of cookie banners. Huzzah!
<<question from the back>> So you're doing to rewrite the UK's data protection rules, including the need to get consent before processing personal information?
Oh, oh, more questions: How will you determine what are, and what are not, cookies linked to "high risk" activities? How will getting rid of cookie banners fit in w/ UK's legal guarantees via EU adequacy deal to uphold GDPR-level privacy rules?
<<puts on super geeky hat>> This is what current UK law says about cookies and need for consent. I get it, cookie banners are annoying. But you know what else is annoying? Companies collecting people's information w/o asking them first.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
After talking to folk today, two things have become very clear: UK govt is willing to walk away from its adequacy deal w/ EU; almost no one with power in London understands how privacy regulations work
There is a feeling within part of UK govt that GDPR has been a hindrance to growth (it has not); and that business wants more freedom to “innovate” (most do, but not at expense of privacy rights)
But what is missing is context. The UK’s data protection regimes is decades old, is based on existing (EU-based) global norms and, for the most part, has worked.
Two things are pretty clear. 1) Taliban continue is all over social media. 2) Western far-right groups have embraced the militants' message as their own.
Read all about how that's shaking out in this week's Digital Bridge newsletter 👉 politico.eu/newsletter/dig…
.@Facebook's publication of a new (US-focused) transparency report has again got people talking about how to hold these companies to account.
FWIW, both EU & US officials are (finally) putting pen to paper 👇
.@Apple really screwed the pooch on announcing plans to scan ppl's images for sexually explicit material. But as US & EU officials gather in Washington next week to discuss encryption, the iPhone maker's attempts at finding a middle group btwn privacy & security are worth a look
@vmanancourt Reminder: the underlying issues haven’t really changed since 2015 — when the previous “Safe Harbor” agreement was similarly struck down nyti.ms/3eoZx7G
There's a growing drumbeat (in Washington) that China's new #privacy laws give Chinese citizens' greater protections than in the US -- and that's good enough reason for DC to pursue federal #dataprotection laws.
Let's unpack why that argument doesn't make sense.
<<cue thread>>
So it's true that Beijing is rolling out a comprehensive national #privacy standard that, in its very basic levels, is based on Europe's General Data Protection Regulation. You can read a translation here newamerica.org/cybersecurity-…
It hits all the needs-to-have: greater consent for how data is used, checked. data breach notification requirements, check. potential hefty fines for wrongdoing, check.
Again, at a basic level, it does look like the GDPR.
For everyone wading into the global tax overhaul as G7 ministers meet today — hi, welcome, glad you could make it.
Let’s break down where we are, what are the sticking points, and what may — and may not — be accounced in coming days.
<cue thread>>
OK, first things, first. This is not about tax. At its core are unanswered questions over which govts have the right to tell large (digital) companies what they can and can not do within their jurisdictions.
In short, it's a power play (but I would say that, as a POLITICO hack)
Countries like France & Italy see the likes of @Facebook & @Google making lots of ad revenue within their countries and legitimately question: why is that cash going to Ireland/US and not staying with us? How's that fair?