Search
Content type: Examples
The Dutch data protection authority has fined Uber €10 million for failing to inform drivers how long it retains their data or how it secures it when sending it to countries outside the EEA, and hindering drivers' access to their data by making requests unnecessarily complicated. The fine follows a complaint filed by 170 French drivers with a human rights organization, which complained to the French data protection authority, which forwarded It to the Netherlands, where Uber has its European…
Content type: Examples
Uber Eats delivery drivers in northern French cities went on strike on October 22, 2023 to protest falling wages since the platform changed its policies to effectively reduce its per-kilometre compensation. Drivers complain the platform is less transparent since the changes.https://actu.fr/economie/livreurs-uber-eats-en-greve-dans-le-nord-ils-denoncent-une-baisse-de-leur-remuneration_60249320.html Publication: Lille Actu
Content type: Examples
French data protection agency CNIL has fined Amazon's French warehouse management unit €32 million, or about 3% of its turnover, for its "excessively intrusive" surveillance of the performance of its thousands of staff. The system relied on data collected from the scanners warehouse staff use to process packages. CNIL said the surveillance placed workers under continuous pressure and forced them to justify absences, as the scanners timed inacctivity to the second and also penalised workers for…
Content type: Examples
The Argentinian startup Nippy offers delivery drivers access to rest stops including free coffee, phone charging stations, and toilets in return for downloading its app and allowing it to sell the data the app collects to partners in insurance, financial services, and telecommunications. The result is to give companies like Mastercard and Movistar insight into gig workers' income in the areas where Nippy operates in Argentina, Mexico, and the Dominican Republic. The services Nippy's rest stops…
Content type: Examples
An administrative court in Montreil, France issued a preliminary ruling ordering the Paris-based Distance Learning Institute to suspend its use of the e-proctoring platform TestWe, which uses facial recognition and algorithmic analysis to monitor students.Video and sound analysis track students' eye movements and their surroundings, a practice the court ruled disproportionate. The case was brought by a group of students represented by La Quadrature du Net and casts doubt on the legality of…
Content type: Examples
Four French trade unions representing drivers signed an agreement with ride-hailing platforms to provide drivers with a minimum income and provide greater transparency regarding suspending and terminating drivers. Platforms must now give drivers a chance to respond before deactivating their accounts and must provide compensation based on previous income if an account's suspension proves unjustified. https://www.bfmtv.com/economie/entreprises/vtc-nouvel-accord-entre-plateformes-et-syndicats…
Content type: Examples
The French minister of national education and youth has advised schools not to use the free versions of Microsoft Office 365 and Google Workspace because French public procurement contracts require payment. Paid versions may be allowed if they do not violate data protection rules, including a 2020 French ruling that cloud services that store data in the US are not compliant with GDPR.
https://www.theregister.com/2022/11/22/france_no_windows_google/
Writer: Thomas Claburn
Publication: The…
Content type: Examples
In a preliminary ruling, the administrative court of Montreuil suspended the use of algorithmic e-proctoring software called TestWe after students at the Institute of Distant Study of the University of Paris 8 brought a legal case, assisted by La Quadrature du Net. The plaintiffs argued that the software failed to comply with GDPR because the software failed to comply with data minimisation standards and its visual and audio surveillance was disproportionate to the intended purpose. A final…
Content type: Advocacy
Privacy International responded to the consultation on the proposed data protection bill (the "Bill") to reform the current law 25.326
We welcome the continued efforts by Argentina to provide protections for the right to privacy, already enshrined in the Constitution of Argentina. PI welcomes the main objective of the Bill, namely to regulate the processing of personal data in order to guarantee fully the exercise of data subjects’ rights in accordance with Article 43 of the Constitution (…
Content type: Examples
By the end of its first three weeks of availability, the French contact tracing app, “StopCovid”, had seen 1.9 million downloads. Of these, only 68 people had entered a positive COVID-19 test result, and only 14 were notified that they might have been exposed, according to the French junior minister for digital affairs, Cédric O. He attributed the app’s uninstallation by 460,000 people to a “decline in concern” about the epidemic in France.
https://www.politico.eu/article/french-contact-…
Content type: Examples
A new requirement to wear wear masks in public in order to curb the spread of the coronavirus poses a problem in France and Belgium, where laws prohibit wearing face coverings, with health as the only allowed exception.
In France, where the law was passed in 2010, between 2011 and 2017 1,830 Muslim women were fined for wearing veils and 145 were warned. The law does not state how to distinguish when face coverings are worn for health reasons rather than religious belief.
This leaves…
Content type: Examples
France has been testing AI tools with security cameras supplied by the French technology company Datakalab in the Paris Metro system and buses in Cannes to detect the percentage of passengers who are wearing face masks. The system does not store or disseminate images and is intended to help authorities anticipate future oubreaks.
https://www.theguardian.com/world/2020/jun/18/coronavirus-mass-surveillance-could-be-here-to-stay-tracking
Writer: Oliver Holmes, Justin McCurry, and Michael Safi…
Content type: Examples
The French data protection authority, CNIL, has examined the French contact tracing app and ruled that it is not fully compliant with the provisions of GDPR and the French data protection law. CNIL’s primary complaint was that the app transferred the news that a user had been infected to all their contacts, not just those who had been in recent proximity, and the privacy policy was insufficiently specific about the categories of data that were being processed and its recipients. Finally, the…
Content type: Examples
By the end of March 2021 Eurostar will roll out a facial verification system in which passengers will send a scan of their passport and a selfie so that when boarding they can prove their identity by walking through a camera-lined “biometric” corridor instead of presenting their documents. The Department for Transport is funding the system as part of a £9.4 million competition to revolutionise rail travel and is being developed by the British company iProov in partnership with Eurostar and the…
Content type: Examples
The lives of residents in French and Scottish nursing homes have been put in danger by the homes’ use of Dahua and Hikvision fever scanning cameras. The homes are violating ISO standards for such cameras: they have been incorrectly installed in front of large windowed doors, the staff are not given sufficient time to acclimate after coming in from outdoors, and the cameras deliver incorrect readings when the forehead is obscured by hair or a hat.
https://ipvm.com/reports/hikua-nursing
Writer:…
Content type: Video
The incorporation of new technologies to electoral processes is a phenomenon with a global and exponential growth. Despite its benefits, online campaigning is not without challenges, and can pose threats to transparency and equity in electoral competition. Given the role of elections as foundational pillars of the democratic system and a key gateway for the exercise of fundamental civil rights, these implications must be assessed with care and through specific tools.
We at PI, together…
Content type: News & Analysis
In September 2019, PI published the report Your Mental Health for Sale. Our investigation looked into popular mental health websites and their data sharing practices.
Our findings suggest that, at the time of the research, most websites we looked at were using third party tracking for advertising purposes, sometimes relying on programmatic advertising technologies such as Real Time Bidding (RTB), sharing personal data with potentially thousands of actors. Some websites were also found sharing…
Content type: Examples
As part of their preparations to ease the lockdown, French authorities have added AI tools into the CCTV cameras in the Paris Metro to detect the number of passengers who are wearing face masks. The system is also being used in outdoor markets and buses in Cannes. Although it is mandatory to wear a mask on public transport in France, the software won't be used to identify, rebuke, or fine people, and the system has not proved as contentious as contact tracing. The data protection regulator CNIL…
Content type: Examples
France, like the UK, opted to develop its own contact tracing app. "StopCovid", using a centralised design developed by the Pan-European Privacy-Preserving Proxity Tracing (PEPP-PT) group, which created a framework called ROBust and the privacy-presERving proximity Tracing protocol (ROBERT). French ministers have defended the decision to choose ROBERT rather than the decentralised options, DP3T or Apple's and Google's jointly developed API, saying that the app is not intended to monitor…
Content type: Examples
The lower house of the French parliament paved the way for the launch of the government's independently-developed contact tracing app. The minister in charge, technology minister Cedric O, praised the app, developed by companies such as Orange and Dassault Systemes, as a French project "with the excellence but also the panache and some would say the stubbornness which characterises our country". O added that although 22 other countries have opted to use the Google/Apple platform, it was not a…
Content type: Examples
The French government asked Apple to change the way its phones handle Bluetooth in order to accommodate the design of its contact tracing app. Downloading and installing the app will be voluntary, but the app will use a centralised design in which the data will be fed into a government server for processing.
Source: https://www.zdnet.com/article/france-asks-apple-to-relax-iphone-security-for-coronavirus-tracking-app-development/
Writer: Charlie Osborne
Publication: ZDNet
Content type: Examples
The French telecom operator Orange is repurposing its 2013 Flux Vision, which allowed cities and tourist destinations to see their visitors' travel flows, to answer European Commissioner Thierry Breton's call for the EU's mobile operators to provide their location data to fight the pandemic through population monitoring. The French data protection regulator, CNIL, is suggesting that the data is anonymised and therefore legal to use. However, in order to provide the service Orange must first…
Content type: Examples
The former Big Brother reality TV star Matías Schrank was arrested by the Cybercrime division of the Misiones provincial police, after publishing tweets that claimed that Eduardo Rovira, the president of the Misiones legislature, had contracted COVID-19 on his recent trip to Thailand and was reckless in not immediately going into quarantine but continuing to hold meetings with other high-level government officials. Schrank was charged under Article. 211 of the Criminal Code, which…
Content type: Examples
The Argentinian company Urbetrack is developing a "Cuidate en casa" (Take Care of Yourself at Home) app that it will pitch to government agencies throughout the country. The goal is to contribute to remediating the health crisis by helping enforce quarantine. The plan is that users will download the app and complete a form with their personal details as chosen by the local authority. The app will then generate a "radial geofence" defined by the local authority, within which the user must stay.…
Content type: Examples
The Argentinian Ministry of Transport, working with the state-owned satellite company ARSAT and the telecoms regulator,ENACOM, proposed to the Executive on 31 March 2020 a platform that uses cell tower data to track people on public transport and ensure they comply with quarantine laws. By 28 March, the Ministry of Security had detained 13,006 people for violating the rules. The government believes that although compliance is high, it will deteriorate if quarantine is extended much longer…
Content type: Examples
The San Francisco-based big data company Grandata has created a heat map to show which areas of Argentina are best complying with the quarantine lockdown. Grandata used an "anonymised" dataset collected from apps that provide third parties with geolocation information. The heat map shows if an individual has moved more than 100 meters from the place where they spend most of their time, apparently without taking into account the socio-economic contexts of different cities, where individuals…
Content type: Examples
Argentina's Public Prosecutor's Office will start installing an app on the smartphones of those who violate government-ordered quarantine in the cities of Santa Fé and Rosario. The app will be installed by the province's Criminal Investigation Agency to track those who are under criminal investigation for violating quarantine. The app will send reports to the the MPA investigation office and coordinated by the Attorney General's Office. Individuals will be required to sign a document…
Content type: Examples
On March 23, Argentina's immigration agency, Dirección Nacional de Migraciones (DNM), announced that anyone arriving in the country would be required to install the free COVID-19 Ministry of Health app on their phone for 14 days to ensure they comply with quarantine rules in order to protect the population. The Office of the Chief of Staff had instructed the DNM to adopt this policy when it launched the app, also on March 23. Since launch, the number of unnecessary permissions the app requests…
Content type: Examples
The self-testing web app issued by Argentina's Secretariat of Public Innovation asks for national ID number, email and phone as mandatory fields in order to submit the test. The Android version requires numerous permissions: calendar, contacts, geolocation data (both network-based and GPS), microphone, camera, full network access; change audio settings, run at startup; draw over other apps, prevent device from sleeping.
Sources:
https://www.argentina.gob.ar/coronavirus/app
https://play.…