From tech giant Facebook to libraries and schools, organizations are now subject to the world’s most far-reaching data privacy regulation in a crackdown aimed at protecting people from losing control over their personal information.
It has occupied thousands of lawyers, taken years of planning and triggered billions of e-mails.
Mess up now and you can expect very little tolerance, said European Data Protection Board chair Andrea Jelinek, the Austrian in charge of policing the EU’s General Data Protection Regulation (GDPR), which took effect on Friday.
“If there are reasons to warn we will warn; if there are reasons to reprimand we will do that; and if we have reasons to fine, we are going to fine,” Jelinek, 57, told reporters ahead of the big day.
Asked about criticism that some regulators are more lenient than others, she said that “it was like that in the past, but it should not continue in the future.”
Privacy has moved from a niche topic to one of the biggest headaches for top bosses such as Facebook founder Mark Zuckerberg, who last week was grilled by EU lawmakers about how the data of about 87 million users and their friends may have been shared with a consulting firm with links to then-US presidential candidate Donald Trump’s US presidential campaign.
The pressure has been increasing on firms using or processing EU personal data in the run-up to the deadline. Privacy regulators across Europe for the first time get equal rights and responsibilities, and the same powers to mete out fines of as much as 4 percent of worldwide annual sales for serious violations.
Not everyone is willing to wait for Jelinek and regulators to flex their new powers.
Austrian lawyer Max Schrems, who has taken on Facebook many times and won a landmark EU court ruling in 2015, filed four complaints on Friday under the new rules, accusing Google, Facebook and also WhatsApp and Instagram of forcing users to agree to new privacy policies.
“Facebook has even blocked accounts of users who have not given consent,” Schrems said in an e-mailed statement. “In the end, users only had the choice to delete the account or hit the ‘agree’ button — that’s not a free choice, it more reminds of a North Korean election process.”
The 30-year-old’s group called “noyb” — for none of your business — filed what are likely the first GDPR complaints with national regulators in Belgium, France, Austria and Germany.
“We have prepared for the past 18 months to ensure we meet the requirements of the GDPR,” Facebook’s chief privacy officer Erin Egan said in an e-mailed statement. “We have made our policies clearer, our privacy settings easier to find and introduced better tools for people to access, download, and delete their information.”
Facebook’s “work to improve people’s privacy doesn’t stop on May 25,” Egan said.
EU nations will have to apply the same rules across the bloc, and give their data regulators complete independence.
“We don’t like to see any deviations which will go beyond the rules and spirit” of the rules, EU Justice Commissioner Vera Jourova said earlier in the month.
Facebook would dodge the tough new sanctions under the updated EU rules if any violations in the Cambridge Analytica case are proven because the rules do not apply retroactively.
Still, if companies “don’t stop on Friday, we can get them,” said Jelinek who leads Austria’s data privacy agency as well as board of regulators drawn from across the EU’s 28 nations.
She said she was expecting a big pile of complaints to be filed from day one of the new rules.
Regulators would “try to do our best” to deal with all complaints, she said.
She expects it would not be even two months until the first probes will be opened, but there would not be any fines right away.
Officials would not just be “popping in” to companies to slap a fine on them, she said.
“We are talking to the businesses, we have legal procedures to fulfill, we have to give them the opportunity to talk with us too,” she said.
It will be the start of a new era for everyone: “We are at the beginning of a journey, which we’re going to make together through the field of data protection,” she added.
The last few years have seen a “paradigm shift in awareness of data protection issues,” said Andrew Dyson, a lawyer at DLA Piper in London.
“You can’t open a newspaper without reading about the latest data breach, social media scandal or unethical marketing campaign. There is regulation, but it’s from a different era and increasingly looking toothless and out of date. The GDPR will reset the balance,” he said.
Companies “that get this right will establish high ethical standards, enhanced levels of consumer trust and be able to unlock the value of data,” he said. “Those who get it wrong face wrath of regulators, disgruntled customers and big constraints on digital innovation.”
Late last month, Beijing introduced changes to school curricula in the Inner Mongolia Autonomous Region, requiring certain subjects to be taught in Mandarin rather than Mongolian. What is Chinese President Xi Jinping (習近平) seeking to gain from sending this message of pernicious intent? It is possible that he is attempting cultural genocide in Inner Mongolia, but does Xi also have the same plan for the democratic, independent nation of Mongolia? The controversy emerged with the announcement by the Inner Mongolia Education Bureau on Aug. 26 that first-grade elementary-school and junior-high students would in certain subjects start learning with Chinese-language textbooks, as
There are worrying signs that China is on the brink of a major food shortage, which might trigger a strategic contest over food security and push Chinese President Xi Jinping (習近平), already under intense pressure, toward drastic measures, potentially spelling trouble for Taiwan and the rest of the world. China has encountered a perfect storm of disasters this year. On top of disruption due to the COVID-19 pandemic, torrential rains have caused catastrophic flooding in the Yangtze River basin, China’s largest agricultural region. Floodwaters are estimated to have already destroyed the crops on 6 million hectares of farmland. The situation has been
On Sept. 8, at the high-profile Ketagalan security forum, President Tsai Ing-wen (蔡英文) urged countries to deal with the China challenge. She said: “It is time for like-minded countries, and democratic friends in the Indo-Pacific region and beyond, to discuss a framework to generate sustained and concerted efforts to maintain a strategic order that deters unilateral aggressive actions.” The “Taiwan model” to deal with the COVID-19 pandemic provides an alternative to China’s authoritarian way of handling it. Taiwan’s response to the health crisis has made it evident that countries across the world have much to learn from Taiwan’s best practices and if
Midday in Manhattan on Wednesday, September 16, was sunny and mild. Even with the pandemic’s “social distancing” it was a perfect day for “al fresco” dining with linen tablecloths and sidewalk potted palms outside one of New York City’s elegant restaurants. Two members of the press, outfitted with digital SLR cameras and voice recorders, were dispatched by The Associated Press to cover a rare outdoor diplomatic meeting on one of these New York streets. American diplomat Kelly Craft, Chief of the United States Mission to the United Nations, lunched in the open air with Taiwan’s ambassador-ranked representative in New York, James