Feeds

US and EU stitch up airline passenger data deal

And data protection law

5 things you didn’t know about cloud backup

European data protection authorities are choking on their baguettes after seeing the detail of the data-sharing agreement the EU signed with the US on Friday. The passenger name record (PNR) agreement was presented as a formality that had been passed by the respective administrations without so much as a hiccup. But it's proving hard to swallow.

On the face of it, the agreement secured the legal basis for the US to collect personal information about anyone who flies there from Europe. The European Commission, which negotiated the agreement, wanted to ensure European airline passengers were treated fairly after their personal information was collected by US authorities conducting anti-terrorist investigations.

European data protection law prevents data being sent to another country that doesn't have equivalent protections. That's made the old PNR agreement (which was scrapped on a technicality in June by the European Court of Justice) a bone of contention in Brussels, because the US has no equivalent protection.

The new agreement was supposed to have guaranteed the same level of protection, which was in effect a gentleman's agreement, in which the US promised to play ball. The EC said it "trusted" the US would honour the deal.

Indeed, Jonathan Faull, director general of the European Commission directorate for Justice, Freedom and Security, after securing the new agreement last Friday, told journalists that it offered "comparable" protections. The Commission statement on the matter said it held the US to ensuring "equivalent" protection.

But equivalent protections have not been secured, it was revealed in a letter sent by the US Department of Homeland Security to Faull and Irma Ertman, lead negotiator for the European Council's Finnish Presidency, on Friday, after the agreement was struck.

European data protection authorities said they were "amazed" when they saw the letter yesterday because it watered down the new agreement so that it was even weaker than the last.

The contradiction reflects a split in Europe over how well people's personal data should be protected from abuse by the authorities. On the one hand, the data protection authorities and the European Parliament think the US is taking liberties with our data, while they are trying to preserve our liberties with data protection law.

On the other hand, the European Council of Ministers and the Commission are prepared to accept a lower level of protection, at least when striking agreements about sharing data with other countries. It is worth noting that Faull announced on Friday that the EC is planning its own PNR regime, which will collect information about people travelling into Europe from abroad.

Still, the new agreement was only meant to be a stopgap until a proper compromise could be negotiated. The EU purports to covet its data protection law, which states roughly that any data collected about someone should be taken for good reason, only for the specified purpose and only for as long as is reasonably needed.

The US letter shows how the European position has weakened and perhaps gives an indication of how the final agreement, should one be wrought before the new one runs out next June, might be balanced.

The letter, drafted by Stuart Baker, assistant Secretary to the US Department of Homeland Security (DHS), states how the US will interpret the agreement just signed. The old provisions that prevented it sharing data with other agencies have been thrown out. As well as US border control, the FBI, CIA and unspecified other agencies will get access to the data.

The US proposes trawling through passenger data to seek out suspicious-looking characters if it doesn't have a clear idea who it's looking for. It commits to do this "judiciously and with proportionality", though there is no US law to ensure that it does, and the DHS has already announced its intention to share data between civil and security databases.

5 things you didn’t know about cloud backup

More from The Register

next story
BBC: We're going to slip CODING into kids' TV
Pureed-carrot-in-ice cream C++ surprise
6 Obvious Reasons Why Facebook Will Ban This Article (Thank God)
Clampdown on clickbait ... and El Reg is OK with this
Twitter: La la la, we have not heard of any NUDE JLaw, Upton SELFIES
If there are any on our site it is not our fault as we are not a PUBLISHER
Facebook, Google and Instagram 'worse than drugs' says Miley Cyrus
Italian boffins agree with popette's theory that haters are the real wrecking balls
Sit tight, fanbois. Apple's '$400' wearable release slips into early 2015
Sources: time to put in plenty of clock-watching for' iWatch
Facebook to let stalkers unearth buried posts with mobe search
Prepare to HAUNT your pal's back catalogue
Ex-IBM CEO John Akers dies at 79
An era disrupted by the advent of the PC
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?