Search
Content type: Examples
On March 24 the German Bundestag passed a comprehensive amendment to the Infection Protection Act that authorises the Federal Ministry of Health to implement measures for medical care without the consent of the Federal Council. These include the ability to impose curfews and travel restrictions, override patent protection for medical products, and issue ordinances creating other exceptions to the law. The Federal Data Protection Commissioner criticised the proposals because he doubted whether…
Content type: Examples
Biometrics companies are offering free services to essential businesses, remote workforces, and government agencies administering benefits claims during the coronavirus pandemic. Among them are Redrock Biometrics, which is waiving its licence fee for palm print recognition for essential businesses; Daon, which is offering free access to its multi-factor biometrics-based authentication platform, "IdentityX", to all new customers; PrivyID is offering a month of free digital signature service to…
Content type: Examples
The UK's National Health Service is collaborating with Palantir to launch a data platform that will track the movement of critical staff and materials; it will, for the first time, give ministers a dashboard showing the first-ever comprehensive view of the entire health care system. The data Palantir gathers into a data store from across the health sector will not include individual patient data; instead, it will include A&E capacity, calls to the NHS 111 hotline, and the number and…
Content type: Examples
After the British government announced a national lockdown, Derbyshire Police used drones to capture footage of people rambling, walking their dogs, and taking photos in the Peak District. The move was widely criticised as heavy-handed and counter-productive; however, the government followed up by saying that people should stay near their homes for exercise and not travel unnecessarily and granting police new powers to enforce the lockdown.
Source: https://www.bbc.co.uk/news/uk-england-…
Content type: Examples
Researchers at Germany's Robert Koch Institute and Fraunhofer Heinrich Hertz Institute are working on an app that uses Bluetooth connections between smartphones and is compliant with GDPR to anonymously save the distance and duration of contact between people on the smartphone to make it possible to digitally reconstruct infection chains. The idea is being copied from Singapore's TraceTogether app, which detects other users who have also installed the app. If someone tests positive, they can…
Content type: Examples
The Local Government Association has argued that councils should not have to comply with freedom of information requests during the coronavirus crisis. Greater Manchester police followed suit, saying that police in non-critical roles were being reallocated to operational policing and would not answer FOI requests "until further notice".
Source:
https://www.theguardian.com/politics/live/2020/mar/23/uk-coronavirus-live-news-latest-boris-johnson-minister-condemns-people-ignoring-two-metre-…
Content type: Examples
On March 14 a group of immigrant advocacy groups wrote to the government asking for the Home Office to release all 1,500 to 2,000 detainees in order to protect them from a coronavirus outbreak in the UK's seven removal centres and two short-term holding centres.. On March 21, the Home Office said it had released 300 of the detainees. The charity Detention Action launched a legal action to compel the Home Office to release the most vulnerable detainees and test all detainees. The Home Office…
Content type: Examples
Researchers at the University of Oxford are working with the UK government on an app similar to the smartphone tracking system China developed to alert people who have come in contact with someone infected with the coronavirus. The British app, which would be associated with the country's National Health Service,, would rely on the public volunteering to share their location data out of a sense of civic duty rather than, as in China, compulsion. The service would not publish the movements of…
Content type: Examples
UK: O2 shares aggregated location data with government to test compliance with distancing guidelines
Mobile network operator O2 is providing aggregated data to the UK government to analyse anonymous smartphone location data in order to show people are following the country's social distancing guidelines, particularly in London, which to date accounts for about 40% of the UK's confirmed cases and 30% of deaths. The project is not designed to monitor individuals. Lessons from the impact on London of travel restrictions could then be applied in the rest of the country. The government says it has…
Content type: Examples
BT, owner of UK mobile operator EE, is in talks with the government about using its phone location and usage data to monitor whether coronavirus limitation measures such as asking the public to stay at home are working. The information EE supplies would be delayed by 12 to 24 hours, and would provide the ability to create movement maps that show patterns. The data could also feed into health services' decisions, and make it possible to send health alerts to the public in specific locations.…
Content type: News & Analysis
In the last few days, PI and its Network have been recording and documenting the measures being proposed by various governments, international institutions and companies to help contain the spread of Covid-19.
In a recent development, the Guardian have reported that the UK government is the latest to seek to use mobile phone location and other traffic data from telecommunication operators to help with measures the government may develop next as part of the response to Covid-19.
It comes…
Content type: Examples
The coronavirus action plan announced on March 3, alongside many measures for managing the NHS in the crisis, will also allow the Investigatory Powers Commissioner to appoint judicial commissioners (JCs) on a temporary basis in the event that there are insufficient JCs available to operate the system under the Investigatory Powers Act 2016. The Home Secretary, at the request of the Investigatory Powers Commissioner, will also be allowed to vary the time allowed for urgent warrants to be…
Content type: Examples
A new surveillance system to detect cases of COVID-19 in England was established by Public Health England (PHE) and the NHS to strengthen existing systems and to prepare for and prevent wider transmission of the virus. Some NHS hospitals have been asked to take part in the plan, which involves testing samples from patients with severe respiratory infections who do not meet the current definition for COVID-19 in intensive care units (ICU) and Severe Respiratory Failure (ECMO) Centres. …
Content type: Examples
The German mobile operator Deutsche Telekom announced in a press conference on RKI Live that it had passed on, anonymised, its users' movement data to the Robert-Koch Institute to study the extent to which the population would follow the government's restrictions. RKI president Lothar Wieler said this data is also available for purchase, but was given to RKI at no charge.
Source: https://frask.de/coronavirus-deutscher-mobilfunkbetreiber-gibt-bewegungsdaten-weiter/
Content type: Examples
A Hamburg geotracking startup called Ubilabs is working with the Hannover School of Medicine on a data analysis platform that could track people who have tested positive for the coronavirus and their contacts, Der Tagesspiegel reported on Tuesday; this type of tracking would require individuals' consent to have a legal basis for processing.
Source: https://www.nytimes.com/reuters/2020/03/11/technology/11reuters-health-coronavirus-privacy-explainer.html
Content type: Examples
A review of European privacy laws considers whether the tracking and monitoring methods China used to shut down the COVID-19 epidemic are in compliance with GDPR. The French data protection authority CNIL says employers are not allowed to take mandatory temperature readings from employees or visitors or require them to fill out compulsory medical questionnaires. Italy passed emergency legislation requiring anyone who has recently stayed in an at-risk area to notify health authorities. Germany…
Content type: Case Study
Every one of us has an expectation to be legally protected in the same way, to have access to the same human rights, and to be able to defend those rights in court.
However, for trans and non-binary people, this has not always been the case – and in many places around the world it still isn’t the case. The lack of legal recognition for their gender has had significant consequences.
If the law does not recognise you as the person that you are and treats you as someone you are not then you…
Content type: News & Analysis
Today Advocate General (AG) Campos Sánchez-Bordona of the Court of Justice of the European Union (CJEU), issued his opinions (C-623/17, C-511/18 and C-512/18 and C-520/18) on how he believes the Court should rule on vital questions relating to the conditions under which security and intelligence agencies in the UK, France and Belgium could have access to communications data retained by telecommunications providers.
The AG addressed two major questions:
(1) When states seek to impose…
Content type: Press release
Today the Advocate General (AG) of the Court of Justice of the European Union (CJEU), Campos Sánchez-Bordona, issued his opinion on how he believes the Court should rule on vital questions relating to the conditions under which security and intelligence agencies in the UK, France and Belgium could have access to communications data retained by telecommunications providers.
The AG advises the following:
The UK’s collection of bulk communications data violates EU law.
The French and Belgium…
Content type: News & Analysis
*Photo by Michelle Ding on Unsplash
Pat Finucane was killed in Belfast in 1989. As he and his family ate Sunday dinner, loyalist paramilitaries broke in and shot Pat, a high profile solicitor, in front of his wife and children.
The Report of the Patrick Finucane Review in 2012 expressed “significant doubt as to whether Patrick Finucane would have been murdered by the UDA [Ulster Defence Association] had it not been for the different strands of involvement by the…
Content type: Long Read
*Photo by Kristina Flour on Unsplash
The British government needs to provide assurances that MI5’s secret policy does not authorise people to commit serious human rights violations or cover up of such crimes
Privacy International, along Reprieve, the Committee on the Administration of Justice, and the Pat Finucane Centre, is challenging the secret policy of MI5 to authorise or enable its so called “agents” (not MI5 officials) to commit crimes here in the UK.
So far we have discovered…
Content type: Press release
Privacy International, Open Rights Group, the Institute for Strategic Dialogue, Fair Vote, Who Targets Me? and Demos have today written to all the main UK political parties, demanding that they are transparent with the public about how they are using voters’ personal data in their electioneering. Twitter's announcement yesterday of their ban on political advertising is just the latest wake up call to politicians about the risks to democracy of personal data driven microtargeting of political…
Content type: Examples
In February 2019, the UK Home Office told the Independent Chief of Borders and Immigration that it was planning to build a system that could check and confirm an individual's immigration status in real time to outside organisation such as employers, landlords, and health and benefits services. Lawyers and human rights campaigners expressed concerns that the project had received no scrutiny or public discussion, and that the Home Office's record suggested the result would be to unfairly lock…
Content type: Examples
In January 2019 the UK Home Office announced it would collaborate with France to overhaul its regime for suspicious activity reports in order to fight money laundering. In 2018, the number of SARs filed with the National Crime Agency rose by 10% to nearly 464,000. Banks, financial services, lawyers, accountants, and estate agents are all obliged to file SARs if they suspect a person or organisation is involved in money laundering, terrorist finance, or other suspicious activity. The system has…
Content type: Examples
In 2018, the UK Department of Education began collecting data for the schools census, a collection of children's data recorded in the national pupil database and including details such as age, address, and academic achievements. The DfE had collected data on 6 million English children when, in June 2018, opposition led the department to halt the project, which critics said was an attempt to turn schools into internal border checkpoints. In January 2019, however, in an answer to a Parliamentary…
Content type: Examples
In September 2018, at least five local English councils had developed or implemented a predictive analytics system incorporating the data of at least 377,000 people with the intention of preventing child abuse. Advocates of these systems argue that they help councils struggling under budget cuts to better target their limited resources. The Hackney and Thurrock councils contracted the private company Xantura to develop a predictive model for them; Newham and Bristol have developed their own…
Content type: Examples
In October 2018, in response to questions from a committee of MPs, the UK-based Student Loans Company defended its practice of using "public" sources such as Facebook posts and other social media activity as part of the process of approving loans. In one case earlier in the year, a student was told that a parent's £70 Christmas present meant the student did not qualify for a maintenance loan without means testing because it meant the student was not estranged from their family. SLC insisted…
Content type: Examples
In November 2018 the UK's Equality and Human Rights Commission warned that asylum seekers have been deterred from seeking medical help in Scotland and Wales since the UK government began forcing the English NHS to charge upfront in 2017 and by fears that medical personnel will comply with Home Office orders to forward their data. The commission, along with health charities and the Labour and LibDem political parties, called for the policy to be suspended. The Home Office policy of moving asylum…
Content type: Examples
The Home Office Christmas 2018 announcement of the post-Brexit registration scheme for EU citizens resident in the UK included the note that the data applicants supplied might be shared with other public and private organisations "in the UK and overseas". Basing the refusal on Section 31 of the Freedom of Information Act, the Home Office refused to answer The3Million's FOI request for the identity of those organisations. A clause in the Data Protection Act 2018 exempts the Home Office from…
Content type: Examples
In December 2018, a report, "Access to Cash", written by the former financial ombusdsman Natalie Ceeney and independent from but paid for by the cash machine network operator Link, warned that the UK was at risk of sleepwalking into a cashless society and needed to protect an estimated 8 million people (17% of the British population) who would become disadvantaged as a result. Although cash used halved between 2007 and 2017, and debit cards passed cash in share of retail transactions in 2017,…