Information Policy

EU threatens suspension of data deal with US

The European Commission raised the stakes in the confrontation with the US over data protection, and menaced suspending the bilateral deal on access to data, known as Safe Harbour, if Washington did not strengthen its security provisions by the summer. 

Continue reading "EU threatens suspension of data deal with US " »

Posted at 02:22 PM in Legal , Privacy/Security | Permalink | TrackBack (0)

Reblog (0) | | | | | Digg This | Save to del.icio.us

The second UN World Public Sector Report 2003, stresses that even in today’s Information and Communication Technology (ICT)-rich environment, it will not be ICT by itself that redirects and re-shapes the functions of governments and makes them somehow different or better. However, ICT can certainly contribute to changes in the ways in which governments operate. More importantly, it can force us to collectively re-examine some of the fundamental building blocks of the organization of human society.

January 28th, 2014 was Data Privacy Day (also known as Data Protection Day), an international festival of our right to control our own personal information and to protect our communications from unchecked surveillance.

It's not been a great year for either belief. Since last year's celebration, the Snowden revelations have exposed how vulnerable private information is from unwarranted inspection by the surveillance state. At the same time, we've seen reports of incident after incident of major privacy breaches at the hands of criminals from large companies. Our personal data seems less secure than ever.

Data Privacy Day is on January 28th in commemoration of the day the Council of Europe opened the snappily-titled "Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data" for signatures. The 1985 convention dedicates a separate section to the importance of data security, saying:

Appropriate security measures shall be taken for the protection of personal data stored in automated data files against accidental or unauthorized destruction or accidental loss as well as against unauthorized access, alteration or dissemination.

"Appropriate security measures" increasingly means defending personal data not just from cybercriminals and accidental disclosure, but from a menagerie of state actors using their own considerable powers of collection. That means that these days, a company that respects your privacy should be making efforts not just to encrypt data as it flows across the Net, but also lock down the same data when it is at rest.

It also means they should be considering whether they should be collecting that data at all. The Convention speaks of ensuring data collection should be "not excessive" for its purpose. But whatever the purpose, the larger the data stockpile you build, the more vulnerable it becomes.

It's expensive and difficult to keep personal data private from adversaries like Russian and Chinese hackers or the NSA and GCHQ. And it gets worse, as companies hoard greater and greater amounts of unnecessary and intrusive information. Companies may insist they take steps to protect their users' data, but the best form of data security is simply not collecting that information in the first place.

Supporting Data Privacy is something that most people can get behind, and activists and corporations alike are happy to highlight it as a goal. Europeans have used the day to pointedly note how delayed Europe's own data protection reforms have been. The EU's Justice Commissioner, Viviane Reding, has responded with a lengthy memo spelling out their intention to pursue data protection as a policy, including Europe's intention to push back against US spying.

The aftershocks of the Snowden revelations worldwide means 2014 will be the most promising opportunity for data privacy regulation and reform in years. But without understanding that data privacy means data security, those regulations will oversee an infrastructure too filled with holes to keep data really safe. We need to make sure that encryption works, and that our governments aren't creating insecure backholes in standards and software that will eliminate what protection we can provide.

We need to also make sure that politicians don't increase the vulnerability of our data by increasing the amount of data that is kept. Already, regulators have started framing "data retention", the compulsory storage of private data for far longer than is necessary, as the solution to law enforcement and national security access to personal data. Data retention is the opposite of data protection. It raises the chances of the catastrophic loss of privacy, with no benefit for the people it endangers.

It's been a bad year for data protection. Perhaps 2014 is when we start fixing the data privacy problems that 2013 highlighted. It'll take more than one day, though, to ensure that those fixes don't make matters worse.

Source: https://www.ifex.org/international/2014/01/29/data_privacy_day/

Most governments are embarking in open data policies and strategies, based on the assumption that data will contribute to economic development in their region. This will certainly happen in the long run, but before that public sector organizations will have to bear the cost of providing open data and of dealing with their unplanned or unintended use, which can and will challenges established policies and processes. It is probably time for not only opening date, but also being open about how to deal with the inevitable change that the use of open data will drive: yet another reason why open government should not be perceived – as it is now – as a separate initiative, but should become the normal course of business, entrenched in everything governments do.

Link: http://blogs.gartner.com/andrea_dimaio/2014/01/21/open-data-can-and-will-shift-the-power-balance

By Catherine Stupp

A few weeks ago, internet privacy activists in Turkey began expressing alarm over newly proposed amendments to the law already governing the country’s internet activity.

If implemented, the changes would serve to increase the government’s already strong hold over the internet. Taking to social media and posting critical declarations on their websites, opponents of the law braced themselves for another debate over censorship in Turkey. Protests held on 18 January drew the attention of the riot police, who responded with pepper spray and water cannons. Despite this, some freedom of speech activists insist that the most effective resistance to censorship will be promoting internet security.

Sudan: The E-Government at the Crossroads ICT Technology re-shapes the functions of governments and societies

The second UN World Public Sector Report 2003, stresses that even in today’s Information and Communication Technology (ICT)-rich environment, it will not be ICT by itself that redirects and re-shapes the functions of governments and makes them somehow different or better. However, ICT can certainly contribute to changes in the ways in which governments operate. More importantly, it can force us to collectively re-examine some of the fundamental building blocks of the organization of human society.

On Data Privacy Day, our personal information is less secure than ever

January 28th, 2014 was Data Privacy Day (also known as Data Protection Day), an international festival of our right to control our own personal information and to protect our communications from unchecked surveillance.

It's not been a great year for either belief. Since last year's celebration, the Snowden revelations have exposed how vulnerable private information is from unwarranted inspection by the surveillance state. At the same time, we've seen reports of incident after incident of major privacy breaches at the hands of criminals from large companies. Our personal data seems less secure than ever.

Data Privacy Day is on January 28th in commemoration of the day the Council of Europe opened the snappily-titled "Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data" for signatures. The 1985 convention dedicates a separate section to the importance of data security, saying:

Appropriate security measures shall be taken for the protection of personal data stored in automated data files against accidental or unauthorized destruction or accidental loss as well as against unauthorized access, alteration or dissemination.

"Appropriate security measures" increasingly means defending personal data not just from cybercriminals and accidental disclosure, but from a menagerie of state actors using their own considerable powers of collection. That means that these days, a company that respects your privacy should be making efforts not just to encrypt data as it flows across the Net, but also lock down the same data when it is at rest.

It also means they should be considering whether they should be collecting that data at all. The Convention speaks of ensuring data collection should be "not excessive" for its purpose. But whatever the purpose, the larger the data stockpile you build, the more vulnerable it becomes.

It's expensive and difficult to keep personal data private from adversaries like Russian and Chinese hackers or the NSA and GCHQ. And it gets worse, as companies hoard greater and greater amounts of unnecessary and intrusive information. Companies may insist they take steps to protect their users' data, but the best form of data security is simply not collecting that information in the first place.

Supporting Data Privacy is something that most people can get behind, and activists and corporations alike are happy to highlight it as a goal. Europeans have used the day to pointedly note how delayed Europe's own data protection reforms have been. The EU's Justice Commissioner, Viviane Reding, has responded with a lengthy memo spelling out their intention to pursue data protection as a policy, including Europe's intention to push back against US spying.

The aftershocks of the Snowden revelations worldwide means 2014 will be the most promising opportunity for data privacy regulation and reform in years. But without understanding that data privacy means data security, those regulations will oversee an infrastructure too filled with holes to keep data really safe. We need to make sure that encryption works, and that our governments aren't creating insecure backholes in standards and software that will eliminate what protection we can provide.

We need to also make sure that politicians don't increase the vulnerability of our data by increasing the amount of data that is kept. Already, regulators have started framing "data retention", the compulsory storage of private data for far longer than is necessary, as the solution to law enforcement and national security access to personal data. Data retention is the opposite of data protection. It raises the chances of the catastrophic loss of privacy, with no benefit for the people it endangers.

It's been a bad year for data protection. Perhaps 2014 is when we start fixing the data privacy problems that 2013 highlighted. It'll take more than one day, though, to ensure that those fixes don't make matters worse.

Source: https://www.ifex.org/international/2014/01/29/data_privacy_day/

Open Data Can and Will Shift the Power Balance

Most governments are embarking in open data policies and strategies, based on the assumption that data will contribute to economic development in their region. This will certainly happen in the long run, but before that public sector organizations will have to bear the cost of providing open data and of dealing with their unplanned or unintended use, which can and will challenges established policies and processes. It is probably time for not only opening date, but also being open about how to deal with the inevitable change that the use of open data will drive: yet another reason why open government should not be perceived – as it is now – as a separate initiative, but should become the normal course of business, entrenched in everything governments do.

Link: http://blogs.gartner.com/andrea_dimaio/2014/01/21/open-data-can-and-will-shift-the-power-balance

Turkey’s internet law following nebulous drafting process

By Catherine Stupp

A few weeks ago, internet privacy activists in Turkey began expressing alarm over newly proposed amendments to the law already governing the country’s internet activity.

If implemented, the changes would serve to increase the government’s already strong hold over the internet. Taking to social media and posting critical declarations on their websites, opponents of the law braced themselves for another debate over censorship in Turkey. Protests held on 18 January drew the attention of the riot police, who responded with pepper spray and water cannons. Despite this, some freedom of speech activists insist that the most effective resistance to censorship will be promoting internet security.