US spying in Europe: Will it backfire on Google and Facebook?
Loading...
A public backlash against reported US surveillance activities in France, Germany, and Italy could lead to tough new laws that put American technology companies in the tough spot of being forced to defy either US authorities or the European Union.
A new report by the French newspaper Le Monde claims that the National Security Agency (NSA) collected data on 70 million French phone calls and text messages from Dec. 10, 2012 to Jan. 8, 2013, while other reports say the NSA has monitored personal phone calls by German Chancellor Angela Merkel and Italian Premier Enrico Letta.
The revelations have revived EU legislation that would force companies such as 聽Facebook, Yahoo, or Google to get approval from European officials before handing over data on European residents to US law enforcement 鈥 or face enormous fines.
If enacted, there could be sticky situations where 鈥渁 US company would be faced with a valid request for data by US authorities and the EU is saying they can鈥檛 supply it,鈥 says Christopher Wolf, a global privacy law expert at Hogan Lovells in Washington.
But Mr. Wolf and others accuse EU nations of political grandstanding, saying they, too, are conducting mass surveillance 鈥 and it鈥檚 far from clear any new restrictions aimed at US firms would greatly improve Europeans鈥 privacy.
The controversy has its roots in the documents leaked by former NSA contractor Edward Snowden. The reports showed, for instance, that US social media and technology companies had been forced to hand over Europeans鈥 user data, apparently en masse, to the NSA.
Currently, EU law contains a 鈥渟afe harbor鈥 exception for US companies. US companies can operate in Europe by agreeing to protect EU data according to EU standards. But many European politicians are now looking to ratchet up requirements.
鈥淎s parliamentarians, as politicians, as governments we have lost control over our intelligence services. We have to get it back again," Jan Philipp Albrecht, a member of the German Green Party who is tasked with guiding the regulation through the European Parliament, said on Monday.
The greatest difficulty the measure presents for industry 鈥 and individuals 鈥 is the uncertainty it creates, says Chris Boam, an expert on privacy law in Vienna, Va. 鈥淲hat will be the long term impact of what the EU Parliament is thinking about doing? It creates a level of uncertainty that can translate into individuals not pressing 鈥榮end,鈥 or 鈥業 accept,鈥 or 鈥業 buy鈥 鈥 and that鈥檚 not good for business.鈥
As currently written, the measure includes fines that could run as high as $135 million, or 5 percent of a company鈥檚 annual global revenue, replacing a 2 percent cap. But amendments could follow.
"If an allied country spies on France or spies on other European countries, that's totally unacceptable," French interior minister, Manuel Valls told Europe 1 radio. The revelations were 鈥渟hocking 鈥渉e said and would 鈥渞equire explanation.鈥
It鈥檚 possible that, behind closed doors, far less explanation has been required. For his part, US Secretary of State John Kerry has said: 鈥淟ots of countries are engaged in the activity of trying to protect their citizens in the world.鈥
In July, La Monde reported that the French Direction G茅n茅rale de la S茅curit茅 Ext茅rieure collects transmissions from phones and computers in France and between France and other countries, including phone records, text messages, e-mails, and Facebook and Twitter activity, and then stores the information for years. That looks to be the same sort of mass metadata collection the NSA has pursued.
鈥淲e鈥檙e transitioning to what this new world of data surveillance looks like, realizing now that any country that has this capability is pursuing it as far as it can without constitutional or statutory protection for these individuals,鈥 says Danny O鈥橞rien, international director of the Electronic Frontier Foundation, an internet rights group in San Francisco. 鈥淚t鈥檚 shocking that the EU intelligence agencies are doing this, but there鈥檚 a lot less public outcry in a place like France, or even Britain, because it is their own agencies 鈥 not the US 鈥 that is doing it.鈥
Some say the Europeans are not being hypocritical. They suggest what the NSA is doing is far broader in scope and significance.
鈥淚t鈥檚 a false equivalence to say what the NSA was doing in Europe is the same as what France is doing,鈥 says Marc Rotenberg, president of the Electronic Privacy Information Center in Washington. 鈥淚t鈥檚 one thing for intelligence agencies within nations to be spying on actions of diplomats in other countries or uncovering economic intelligence. That goes on. But no one is suggesting that EU countries have the same kind of mass surveillance toward one another or toward the US that the US has toward them.鈥
Yet others say the legal curbs on surveillance are actually far more robust in the US than in Europe. Surveillance in many places in Europe goes on 鈥渨ithout judicial authorization or any need for outside approval, giving the intelligence agencies there free reign,鈥 says Wolf of law firm Hogan Lovells. 鈥淪ay what you will, that鈥檚 not the case for the framework in the US, which provides for much more oversight.鈥
And the US can be a target, too. Various French intelligence officials have for years acknowledged targeting the US for an array of intelligence gathering, including cyberespionage directed at US businesses鈥 proprietary information.
鈥淟ook, the French politicians didn鈥檛 have an option but to respond to domestic political pressures in this case,鈥 says James Lewis, an expert at the Center for Strategic and International Studies in Washington. 鈥淵et we know from classified studies of economic espionage against the US that, while China is far and away the largest single perpetrator, France is in the top four among nations on that list. People have to get over the idea that this is just something the US does all by itself. It鈥檚 a two-way street.鈥澛犅