<div dir="ltr"><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">La Quadrature du Net</b> <span dir="ltr"><<a href="mailto:contact@laquadrature.net">contact@laquadrature.net</a>></span><br>Date: Thu, Apr 7, 2016 at 11:08 PM<br>Subject: [opennetcoalition] Open Letter from the OLN to the WP29 and the European Parliament on the Privacy Shield<br>To: <a href="mailto:opennetcoalition@laquadrature.net">opennetcoalition@laquadrature.net</a><br><br><br>
<table align="center" bgcolor="#FFF" border="0" cellpadding="0" cellspacing="0" width="700px">
<tbody>
<tr>
<td align="center" valign="top" width="100%">
<div>
<div>
<div> </div>
</div>
<div>Press Release</div>
</div>
<p><b>Tags :</b> PRIVACY SHIELD, SAFE HARBOR, WP29, PRIVACY, DATA PROTECTION</p>
<p>La Quadrature du Net — For immediate release</p>
<p>Permanent link: <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=510&qid=46114" target="_blank">https://www.laquadrature.net/en/open-letter-oln-wp29-privacy-shield</a></p>
<h1>Open Letter from the OLN to the WP29 and the European Parliament on the Privacy Shield</h1>
<p>Paris, 7 April 2016 — <strong>The Privacy Shield, a framework for personal data transfers towards US-based companies, is currently under negotiation. This new agreement follows the invalidation of the Safe Harbor by the European Court of Justice (ECJ), who ruled that it did not uphold a substantially equivalent protection for personal data of people protected under European law, and suggested new measures to address it. Since the draft Privacy Shield does not take these measures into account, the resulting agreement is bound to reduce the fundamental rights of Europeans.</strong></p>
<h3>Joint communiqué from the <i>Observatoire des Libertés et du Numérique</i> (Freedoms and Digital Observatory)<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=511&qid=46114" title="The Observatoire des Libertés et du Numérique includes: Amnesty International France, the Cecil, Creis-Terminal, the Human Rights League, the Syndicat de la magistrature, the Syndicat des Avocats de France and La Quadrature du Net." target="_blank">1</a></h3>
<blockquote>
<p>Dear Mrs President,<br>
Dear Mr President,<br>
Dear Members of the LIBE Committee,</p>
<p>Following its signature by the European Commission in 2000, the Safe Harbor agreement<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=512&qid=46114" title="The decision of the 20 July 2000 by the European Commission: http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32000D0520&from=EN" target="_blank">2</a> was supposed to certify that transaltantic companies complied with data protection standards of similar effect as the European standards, despite the scepticism from the WP29 especially regarding US law. Edward Snowden's revelations in 2013<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=513&qid=46114" title="Article in French newspaper Le Monde on Snowden: https://www.laquadrature.net/en/node/8925 " target="_blank">3</a> showed the world the scope of US surveillance using the Patriot Act, concerning data processed and hosted on their territory (or on foreign ground) by international companies.</p>
<p>Consequently, on the 6 October 2015, the ECJ has invalidated the Safe Harbor with its Schrems ruling<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=514&qid=46114" title="To read the decision see: http://curia.europa.eu/juris/document/document.jsf?text=&docid=169195&pageIndex=0&doclang=en&mode=req&dir=&occ=first&part=1&cid=293038" target="_blank">4</a>. This ruling set the basis for a new agreement, by laying down the minimum criteria that the Commission should follow.</p>
<p>Unfortunately, the new agreement's draft, called the Privacy Shield<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=515&qid=46114" title="See the draft of the Privacy Shield: http://ec.europa.eu/justice/data-protection/files/privacy-shield-adequacy-decision_en.pdf" target="_blank">5</a>, does not include all the guarantees deemed necessary by the ECJ. If signed as it is today, the agreement would joepardise the protection of fundamental rights to data protection and to privacy, required by the Court of justice.</p>
<p>In particular, the ECJ highlighted the following points:</p>
<ul>
<li>the need that such an agreement should foresee the<em>"possibility for an individual to pursue legal remedies in order to <strong>have access</strong> to personal data relating to him, or to <strong>obtain the rectification or erasure</strong>of such data"</em><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=516&qid=46114" title="Paragraph 95 of the above mentioned Schrems ruling." target="_blank">6</a>. This possibility does not exist in the draft agreement, that merely bemoans the weakness of existing legal remedies<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=517&qid=46114" title="Paragraphs 98 and 99 of the aforementioned draft Privacy Shield." target="_blank">7</a>, or merely refers to some US laws allowing access requests for information from US federal agencies, without the possibility for rectification<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=518&qid=46114" title="Paragraphs 96 to 104 of the draft Privacy Shield." target="_blank">8</a>. To address this lacuna, the draft agreement should at least lay down the <strong>specific conditions</strong> for national data protection authorities to suspend transfers<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=519&qid=46114" title="Mentioned in point 44 of the draft agreement" target="_blank">9</a>;</li>
<li>such possibility must be accompanied by "the <strong>existence of effective legal protection against interference</strong>"<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=520&qid=46114" title="Paragraph 89 of the Schrems ruling." target="_blank">10</a>. In theory, the draft Privacy Shield sets up a ombudsman in the US to deal with requests by European authorities investigating surveillance cases. But in practice, its independence has been called into question<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=521&qid=46114" title="http://www.ombudsman.europa.eu/en/resources/otherdocument.faces/en/64157/html.bookmark" target="_blank">11</a> by the European Ombudsman<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=522&qid=46114" title="Indeed, Annex III of the draft Privacy Shield establishes the mandate of the Ombudsman, but does not include the obligation to inform the European authority whether the individual who requested the investigation is indeed under surveillance or not. By the same token, it does not include an obligation to inform the authority on how the violation against the natural person's privacy was ended, in case of illegal surveillance." target="_blank">12</a>. Furthermore, the competences of the
Ombudsman should not be limited to surveillance;</li>
<li>the Court's <strong>fundamental opposition to mass surveillance</strong>. The Court has also required that the soon-to-be agreement would not allow "public authorities to have access on a generalised basis to the content of electronic communications"<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=523&qid=46114" title="Paragraph 94 of the Schrems ruling." target="_blank">13</a>, nor the retention "on a generalised basis, storage of all the personal data of all the persons whose data has been transferred from the European Union to the United States"<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=524&qid=46114" title="Paragraph 93 of the Schrems ruling." target="_blank">14</a>. However, the commitments made by the US refer to six<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=525&qid=46114" title="Paragraph 61 of the draft Privacy Shield." target="_blank">15</a> purposes allowing them to keep on proceeding to the undiscriminated collection of data from users of services such as those provided by Google or Facebook. The Commission explicitly underlines in the draft of the agreement that access to collected data will be strictly limited to specific and legitimate national defence
purposes<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=526&qid=46114" title="Paragraph 63 of the draft Privacy Shield." target="_blank">16</a>. However, this is not reflected at all in any law or political commitment made by the US.</li>
</ul>
<p>The ECJ had invalidated the Safe Harbor, for it did not protect the data transferred to the US from Europe against American mass surveillance. But the European Commission is about to accept a new agreement that does not provide better protection of Europeans' personal data. Similarly, the European Commission refused to investigate the national security policies of Member States in terms of mass data collection, thus going against all decisions of the ECJ<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=527&qid=46114" title="Digital Rights ruling (http://curia.europa.eu/juris/document/document.jsf?text=&docid=150642&pa... ) and Schrems ruling
(http://curia.europa.eu/juris/document/document.jsf?text=&docid=169195&pa... )." target="_blank">17</a>.</p>
<p>Finally, the <strong>legal value</strong> of this text is only relative, and largely based on political promises that the up-coming presidential elections might sweep away<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=528&qid=46114" title="Video of D. Trump on his first decisions if he was to be elected president of the USA: https://www.youtube.com/watch?v=8HmLxrbIrjc&t=0m9s" target="_blank">18</a>, as some MEPs pointed out during the expert hearing at the European Parliament of 17 March. Therefore, this agreement, that is not ratified by the US Congress, gives absolutely no guarantees to people whose personal data is being transferred to the US.</p>
<p><em><strong>L'Observatoire des Libertés et du Numérique (OLN) supports the reservations made by the WP29 and the European Parliament, and calls to maintain the pressure on the European Commission in order to incite it to produce a legal analysis on the compliance of the draft with existing European legislation on data protection<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=529&qid=46114" title="This analysis should be carried out in light of the "Safe Harbor" ruling (already mentioned), of the 1995 Directive on Data Protection, of the upcoming Regulation on Data Protection, and of the Charter of Fundamental Rights of the
EU." target="_blank">19</a>. On this basis, the OLN calls for resuming negotiations with US authorities in order to properly examine the compliance of existing transfers.</strong></em></p>
<p><em><strong>This draft agreement is dangerous and does not live up to the standards of the protection of fundamental rights in Europe. As it is now, there is no doubt that the text would once again be challenged and invalidated by the ECJ, resulting in a legal instability that undermines trust in the digital economy. Going back to the negotiation table is hence crucial for the protection of our fundamental rights!</strong></em></p>
</blockquote>
<ul>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=530&qid=46114" target="_blank">1.</a> The <i>Observatoire des Libertés et du Numérique</i> includes: <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=531&qid=46114" target="_blank">Amnesty International France</a>, the <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=532&qid=46114" target="_blank">Cecil</a>, <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=533&qid=46114" target="_blank">Creis-Terminal</a>, the <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=534&qid=46114" target="_blank">Human Rights League</a>, the <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=535&qid=46114" target="_blank"></i><i>Syndicat de la magistrature</a>, the <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=536&qid=46114" target="_blank"></i><i>Syndicat des Avocats de France</a> and La Quadrature du Net.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=537&qid=46114" target="_blank">2.</a> The decision of the 20 July 2000 by the European Commission: <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=538&qid=46114" title="http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32000D0520&from=EN" target="_blank"><font color="red"><b>MailScanner has detected a possible fraud attempt from "www.laquadrature.net" claiming to be</b></font> http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32000D0520&from=EN</a></li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=539&qid=46114" target="_blank">3.</a> Article in French newspaper Le Monde on Snowden: <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=540&qid=46114" title="https://www.laquadrature.net/en/node/8925" target="_blank">https://www.laquadrature.net/en/node/8925</a></li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=541&qid=46114" target="_blank">4.</a> To read the decision see: <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=542&qid=46114" title="http://curia.europa.eu/juris/document/document.jsf?text=&docid=169195&pageIndex=0&doclang=en&mode=req&dir=&occ=first&part=1&cid=293038" target="_blank"><font color="red"><b>MailScanner has detected a possible fraud attempt from "www.laquadrature.net" claiming to be</b></font> http://curia.europa.eu/juris/document/document.jsf?text=&docid=169195&pageIndex=0&doclang=en&mode=req&dir=&occ=first&part=1&cid=293038</a></li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=543&qid=46114" target="_blank">5.</a> See the draft of the Privacy Shield: <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=544&qid=46114" title="http://ec.europa.eu/justice/data-protection/files/privacy-shield-adequacy-decision_en.pdf" target="_blank"><font color="red"><b>MailScanner has detected a possible fraud attempt from "www.laquadrature.net" claiming to be</b></font> http://ec.europa.eu/justice/data-protection/files/privacy-shield-adequacy-decision_en.pdf</a></li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=545&qid=46114" target="_blank">6.</a> Paragraph 95 of the above mentioned Schrems ruling.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=546&qid=46114" target="_blank">7.</a> Paragraphs 98 and 99 of the aforementioned draft Privacy Shield.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=547&qid=46114" target="_blank">8.</a> Paragraphs 96 to 104 of the draft Privacy Shield.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=548&qid=46114" target="_blank">9.</a> Mentioned in point 44 of the draft agreement</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=549&qid=46114" target="_blank">10.</a> Paragraph 89 of the Schrems ruling.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=550&qid=46114" target="_blank">11.</a> <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=551&qid=46114" title="http://www.ombudsman.europa.eu/en/resources/otherdocument.faces/en/64157/html.bookmark" target="_blank"><font color="red"><b>MailScanner has detected a possible fraud attempt from "www.laquadrature.net" claiming to be</b></font> http://www.ombudsman.europa.eu/en/resources/otherdocument.faces/en/64157/html.bookmark</a></li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=552&qid=46114" target="_blank">12.</a> Indeed, Annex III of the draft Privacy Shield establishes the mandate of the Ombudsman, but does not include the obligation to inform the European authority whether the individual who requested the investigation is indeed under surveillance or not. By the same token, it does not include an obligation to inform the authority on how the violation against the natural person's privacy was ended, in case of illegal surveillance.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=553&qid=46114" target="_blank">13.</a> Paragraph 94 of the Schrems ruling.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=554&qid=46114" target="_blank">14.</a> Paragraph 93 of the Schrems ruling.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=555&qid=46114" target="_blank">15.</a> Paragraph 61 of the draft Privacy Shield.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=556&qid=46114" target="_blank">16.</a> Paragraph 63 of the draft Privacy Shield.</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=557&qid=46114" target="_blank">17.</a> Digital Rights ruling (<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=558&qid=46114" title="http://curia.europa.eu/juris/document/document.jsf?text=&docid=150642&pageIndex=0&doclang=en&mode=lst&dir=&occ=first&part=1&cid=201247" target="_blank"><font color="red"><b>MailScanner has detected a possible fraud attempt from "www.laquadrature.net" claiming to be</b></font> http://curia.europa.eu/juris/document/document.jsf?text=&docid=150642&pa...</a> ) and Schrems ruling (<a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=542&qid=46114" title="http://curia.europa.eu/juris/document/document.jsf?text=&docid=169195&pageIndex=0&doclang=en&mode=req&dir=&occ=first&part=1&cid=293038" target="_blank"><font color="red"><b>MailScanner has detected a possible fraud attempt from "www.laquadrature.net" claiming to be</b></font> http://curia.europa.eu/juris/document/document.jsf?text=&docid=169195&pa...</a> ).</li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=559&qid=46114" target="_blank">18.</a> Video of D. Trump on his first decisions if he was to be elected president of the USA: <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=560&qid=46114" title="https://www.youtube.com/watch?v=8HmLxrbIrjc&t=0m9s" target="_blank"><font color="red"><b>MailScanner has detected a possible fraud attempt from "www.laquadrature.net" claiming to be</b></font> https://www.youtube.com/watch?v=8HmLxrbIrjc&t=0m9s</a></li>
<li><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=561&qid=46114" target="_blank">19.</a> This analysis should be carried out in light of the "Safe Harbor" ruling (already mentioned), of the <a href="tel:1995" value="+661995" target="_blank">1995</a> Directive on Data Protection, of the upcoming Regulation on Data Protection, and of the Charter of Fundamental Rights of the EU.</li>
</ul>
<h2>About La Quadrature du Net</h2>
<p>La Quadrature du Net is an advocacy group that defends the rights and freedoms of citizens on the Internet. More specifically, it advocates for the adaptation of French and European legislations to respect the founding principles of the Internet, most notably the free circulation of knowledge.</p>
<p>In addition to its advocacy work, the group also aims to foster a better understanding of legislative processes among citizens. Through specific and pertinent information and tools, La Quadrature du Net hopes to encourage citizens' participation in the public debate on rights and freedoms in the digital age.</p>
<p>La Quadrature du Net is supported by French, European and international NGOs including the Electronic Frontier Foundation, the Open Society Institute and Privacy International.</p>
<p>List of supporting organisations: <a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=562&qid=46114" target="_blank">https://www.laquadrature.net/en/they-support-la-quadrature-du-net</a></p>
<h2>Press contact and press room</h2>
<p><a href="mailto:contact@laquadrature.net" target="_blank">contact@laquadrature.net</a> – +33 (0)972 294 426</p>
<p><a href="http://www.laquadrature.net/sites/all/modules/civicrm/extern/url.php?u=563&qid=46114" target="_blank">https://www.laquadrature.net/en/press-room</a></p>
</td>
</tr>
</tbody>
</table>
<span class="HOEnZb"><font color="#888888">
</font></span><span class="HOEnZb"><font color="#888888">
</font></span><table align="center" width="700px" cellpadding="0" cellspacing="0" border="0" bgcolor="#fff">
<tbody><tr>
<td width="100%" valign="top" align="center">
<div>
<em>To unsubscribe, <a href="http://www.laquadrature.net/civicrm/mailing/optout?reset=1&jid=152&qid=46114&h=1b8b9b8bba9122dd" target="_blank">click here</a></em><span class="HOEnZb"><font color="#888888"><br>
<em><div><span><span>La Quadrature du Net</span><br><span>60, rue des Orteaux</span><br><span>Paris</span>, <span>75020</span><br></span></div></em>
</font></span></div><span class="HOEnZb"><font color="#888888">
</font></span></td></tr></tbody></table><span class="HOEnZb"><font color="#888888">
<img src="http://www.mailscanner.info/images/1x1spacer.gif" width="1" height="1" alt="Web Bug from http://www.laquadrature.net/sites/all/modules/civicrm/extern/open.php?q=46114" /></font></span><br>_______________________________________________<br>
Opennetcoalition mailing list<br>
<a href="mailto:Opennetcoalition@laquadrature.net">Opennetcoalition@laquadrature.net</a><br>
<a href="https://lists.laquadrature.net/cgi-bin/mailman/listinfo/opennetcoalition" rel="noreferrer" target="_blank">https://lists.laquadrature.net/cgi-bin/mailman/listinfo/opennetcoalition</a><br>
<br></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div>Check out the Commons Transition Plan here at: <a href="http://commonstransition.org" target="_blank">http://commonstransition.org</a> </div><div><br></div>P2P Foundation: <a href="http://p2pfoundation.net" target="_blank">http://p2pfoundation.net</a> - <a href="http://blog.p2pfoundation.net" target="_blank">http://blog.p2pfoundation.net</a> <br><br><a href="http://lists.ourproject.org/cgi-bin/mailman/listinfo/p2p-foundation" target="_blank"></a>Updates: <a href="http://twitter.com/mbauwens" target="_blank">http://twitter.com/mbauwens</a>; <a href="http://www.facebook.com/mbauwens" target="_blank">http://www.facebook.com/mbauwens</a><br><br>#82 on the (En)Rich list: <a href="http://enrichlist.org/the-complete-list/" target="_blank">http://enrichlist.org/the-complete-list/</a> <br></div></div></div></div>
</div>