Policy Observatory

GCHQ datasharing with the NSA deemed unlawful

Sat 7 Feb 2015, 17:20

Two years after Edward Snowden’s allegations concerning mass surveillance, the Investigatory Powers Tribunal, the UK intelligence agencies complaints tribunal, has ruled that the manner in which the UK’s GCHQ shared intelligence from the US National Security Agency was unlawful.

In a brief ruling that follows a lengthy and more complex one in December, the tribunal at the same time announced its view that previous legal defects have been corrected, and that it is now satisfied that GCHQ is acting lawfully. At least, that is what you might think the IPT has decided. But in the peculiar point at which the law, intelligence and secrecy mix, things are not always what they seem.

Tags: data sharing, GCHQ, Snowden revelations, NSA, intelligence agencies, privacy, unlawful, surveillance

FCC vote means Internet providers need permission to share your data

Sat 29 Oct 2016, 13:08

Under the new FCC rules, ISPs will have to inform consumers about what information is collected and how it is used and shared, and identify the types of entities with which the ISP shares the data. Most important, ISPs will be required to obtain consumers' permission — what the commission calls "opt-in consent" — to share the information.

Tags: opt-in consent, data protection, data sharing, data collection, FCC, ISP, Internet

Indian privacy case against WhatsApp gains momentum

Tue 17 Jan 2017, 11:00

A privacy lawsuit against WhatsApp in India over its new data sharing policy has got momentum with the country’s top court seeking responses from Facebook, WhatsApp and the federal government.

The privacy policy of WhatsApp at launch in 2010 did not allow sharing of user data with any other party, and after Facebook announced its acquisition of the messaging app in 2014, it was “publicly announced and acknowledged” by WhatsApp that the privacy policy would not change, according to the petition filed by Indian users of WhatsApp.

WhatsApp sparked off a furore last year when it said it would be sharing some account information of users with Facebook and its companies, including the mobile phone numbers they verified when they registered with WhatsApp. The sharing of information will enable users to see better friend suggestions and more relevant ads on Facebook, it added.

Tags: data sharing, personal data, privacy policy, India, court case

German DPA prohibits mass data sharing between WhatsApp and Facebook

Thu 27 Apr 2017, 13:42

The Hamburg Commissioner for Data Protection today announced a decision prohibiting Facebook and Facebook-owned Whatsapp from sharing data from their respective users. The commission did note that it would still be possible to create a process for WhatsApp users to opt into sharing their data declared illegal an automatic massive transfer.

Tags: DPA decision, Germany, data sharing

Netherlands: Sharing of travel data violated students’ privacy

Wed 6 Sep 2017, 18:20

Translink, the company responsible for the Dutch public transport card “OV-chipkaart” had been passing student travel data to the Education Executive Agency responsible for student finance in the Netherlands (DUO). DUO uses this data to figure out whether students who claim to live on their own – and therefore receive a supplementary grant – actually still live with their parents. A court ruled that this was violating students’ privacy.

Tags: data sharing, court ruling, Netherlands, privacy, student data

Investigation shows Dutch companies share customer data without consent

Sat 11 Nov 2017, 19:07

Research by the Dutch Consumers Association shows that multiple companies share customer data with Facebook without consent for more targeted advertising. Sharing such information without permission is prohibited in the Netherlands under the Data Protection Act, as confirmed by the Personal Data Authority (AP). Yet, not all companies concerned have stopped sharing data, arguing it is a common practice under companies advertising online. They claim to encrypt their data, making it impossible for Facebook to use it. According to the AP, it is not relevant whether or not the data is encrypted.

Tags: consumer protection, data protection, DPA, encryption, online adversiting, Netherlands, Facebook, consent, data sharing