The EU General Data Protection Regulation (GDPR), passed in 2016, limits the ways personal data is collected in terms of legitimate purposes. The European Court of Justice has also made it clear that the mass retention of phone and location data violates the EU’s Charter of Fundamental Human Rights.
Despite this, EU member states continue to subvert, by varying degrees, such protections. Fixated by notions of protecting society from the unsavoury and the criminal, lawmakers continue to flirt and court the mass surveillance properties inherent in such regulations.
A neatly grim example of this arose in July, when the Belgian parliament passed laws mandating the retention of user data by telecommunications and internet providers. This was a second run by the parliament, given the invalidation in April 2021 by the Belgian Constitutional Court of the previous data retention law. That particular statute permitted the storage of every Belgian’s telecom, location and internet metadata for up to 12 months. Those behind the new law, such as the Minister of Justice Vincent Van Quickenborne, claim it to be a targeted measure that preserves privacy; in truth it permits general data surveillance.
No comments:
Post a Comment