Europe’s approach to privacy is notoriously scattershot, with the media and users often reacting — or overreacting — to a constant stream of new rules, regulations and proposals. Sometimes there’s more heat than light, but at other points the consternation seems justified. Take the example of recent uproar in France, where last month the government introduced new data retention rules that have Internet users and businesses up in arms.
Under the new system, sites must keep a record of every visitor’s username, email address and password for a year. Plus they have to keep a file of every time the user interacted with the site, and what they did. Oh, and if they’ve got them, their postal addresses and phone numbers, too. All of it, for 12 months.
The files are then to be made available, on request, to all sort of enforcement agencies: the police, fraud investigators, tax officers, social security officials.
Unsurprisingly, perhaps, this has been seen as an invasion of privacy by individuals and an unfair burden by Internet companies — who aren’t keen on so much personal information being required by the government. So what are they doing? Challenging the law in court.
This week, the French Association of Internet Community Services, ASIC, said it is going to the country’s highest court to challenge the rule. The action is supported by a large number of companies — 26 in total — including American giants like Google and eBay, as well as homegrown French services like DailyMotion. They argue that it’s invasive, expensive and was brought in without any real consultation.
“Several elements are problematic,” said Benoit Tabaka, ASIC’s general secretary. “This is a shocking measure.”
This report in Le Figaro also points out their argument that it doesn’t seem to have been conducted in accordance with the broad data retention directives put in place by Europe’s wider administration.
Whatever the outcome, it’s another example of Europe’s inconsistent approach to privacy — for example demanding that people have the chance to erase their digital footprints (”the right to be forgotten”) while at the same time asking search engines to anonymize data after six months.
In general, the continent’s attitude seems to be toward a high degree of personal privacy, but the rapid rise of the Internet has left governments confused, concerned and powerless. Combined with legislation brought in to try and prevent terrorist attacks, this has created a confusing mishmash of approaches — though few as drastic as the French example.