Tempus fugit II …..

Time flees as the Latin tag says (perhaps more commonly recognised as ‘Time Flies’) and it certainly seems to be the case with Data Retention.

It seems just a short time ago that we were watching the progress of the Directive through the European parliamentary system, from introduction through discussion (is that really the right word for the actions of the UK Presidency in 2005?) to amendment and then to final acceptance and transposition to national law.

In the UK we were there at the beginning, transposing the first parts to apply to fixed line and mobile telephony. 18 months later came the inclusion of Internet data. The interesting bits were the differences between national transpositions - some elected for retention for as little as 6 months, others for 12 and some for as long as 24 months (but would have liked longer). The UK opted to allow for reimbursement of capital expenditure and the provision in relation to Internet data seems to pay only slight compliance - requiring retention of data only where the national authorities deem that it is necessary.

Some member states have only brought data retention within national law in recent months - Portugal in August 2009, Italy at the end of 2009 and Poland only at the beginning of 2010 (UK, 1st phase Sept 2006, 2nd phase March 2008). There remain a number of member states where data retention has still not been applied - Austria, Belgium, Greece, Ireland, Luxembourg, Romania, Sweden - so much for the idea of ensuring a common approach to law enforcement.

But, time flies. The implementation of the Data Retention Directive provided for an evaluation of the Directive. The time has now come for that evaluation and a number of conferences and meetings have taken place. The results of evaluation will be published later in the year, probably in October 2010. After that, the Commission will begin the processes that will lead to proposals for a revised Directive, probably by the end of 2011 with expected implementation by 2014.

It is too early to say what that new Directive may include, but undoubtedly there will be pressure to expand the range of retained data to include a wider range of Information society services - The Crusher would expect to see pressure for the inclusion of social networking data and web site access. There may be some agreement on a reduction in the range of the approved time scales -although as most members currently retain for 12 months this is unlikely to affect the majority (including the UK).

The evaluation report from the Commission does include some interesting data relating to the number of requests for access to retained data in 2008.

Clearly there are wide variations in the raw number of requests with France and the UK heading the number of actual requests. Of course, both have fairly high populations so it is reasonable that there should be a large number of requests. But, when the figures are compared against the national populations the data requests become more interesting. the right hand column shows the number of data requests per 100,000 of population. Under this order, Lithuania shows a massive 2239 requests per 100K with the UK behind France at a much lower 769. Yet Cyprus only requests data at the rate of 3 per 100,000!

Of course, there will be variations in what is perceived as relevant crime and the use of data to locate rather than to determine specific use. It may well be that the larger number of requests are being used more as a location tool than as a more detailed investigatory procedure. But, the figure for Lithuania is so much greater than others it does rather beg the question what use is being made of retained data in that small state? Perhaps there remains an investigatory throwback to a prevous regime - although the lower (far lower) figures for neighbouring Estonia and Latvia may negate that suggestion.

Interesting data - it will be interesting to watch what comes out of the Commission in late summer/autumn 2010.

Tempus fugit …..

Where does the time go? It seems only just a few weeks ago that we were discussing the ramifications of the proposal for a European Data Retention Directive. The reality is that this was now five years ago and the major discussions took place during the UK Presidency of the European Union in the second half of 2005.

We are now fast approaching the date set within the Directive for the European Commission to report to the European Parliament and the Council on the working of the Directive and its impact on the economic operators and consumers. The date for the submission of the evaluation is 15th September 2010 - just 6 months away now. As a result of the evaluation, the Commission will determine whether it is necessary to amend the provisions, particularly in relation to the nature of the data to be retained and the period of retention. The results of evaluation must be made public.

In the background to the imminent evaluation there are some interesting developments and it is clear that the Directive has not yet been applied across all member states of the European Union.

On March 2nd, the German Constitutional Court ruled that the implementation of the Directive in Germany was in contravention of the German Constitution. Der Spiegel reported on Wednesday 3rd March that the Court had ruled that data collected and retained under the (now unconstitutional) law was to be deleted with immediate effect and that strict controls were to be brought into place before the law could be re-introduced. The case has taken some two years to progress but was brought as a class action on behalf of some 35,000 German citizens who argued that the new law went too far.

The court agreed and said that there was insufficient clarity in the reasons for the retention of data and that there were insufficient safeguards on the data once retained. A key point here is that the Constitutional Court has struck down the German implementation of the Data Retention Directive, not the Directive itself. The German government must now look at the decision of the Court and consider the safeguards that must be put into place before it can draft a new law and introduce that. It is certain that there will now be intense public scrutiny.

Belgium also faces an interesting period, particularly as it is scheduled to take over the rotating Presidency later in the year and will be ‘in the hot seat’ when the evaluation of the Directive is due to be presented. The transposition of the Directive into national (Belgian) law has taken some time and there has been considerable and vocal opposition to the Government proposals. The proposals went much further than provided for within the Directive including banking data and use of the data beyond what may be determined as ’serious crime’. The Belgian proposals also called for the retention of data at the maximum period (24 months) provided for within the Directive. The initial proposals attracted a negative response from the Belgian data protection agency, an almost unheard of situation - although that eventually was turned around to a more positive response when the proposals were watered down time scales pulled back to a more standard 12 months.

The Belgian proposals have not yet completed the parliamentary process. In the last couple of months, Belgian ministers have been trying to reach consensus with stakeholder groups to see if they can bring forward a new law before June. That is an important date - the rotating Presidency comes to Belgium on 1st July and the government wants to prevent the country from critiscism about their failure to implement whilst they are also supposed to be leading discussions on evaluation.

It is clear that some Belgian politicians had been awaiting the outcome of the case before the German constitutional court. That is now clear - it remains to be seen how this may affect the Belgian transposition.

In the run up to an election …..

We know that a General Election is coming in the UK. The current government is now in the last Parliamentary session before they must prorogue Parliament and send members back to their constituencies to seek re-election. The last date that the election can be held is June 2010 - that is the time when the 5 year maximum period runs out.

So, the Government must go to the country. The likelihood is that the election will be before the absolute last date, possibly on Thursday 6th May. This is the date already set-aside for district council elections in England so it would make sense for the General Election to be held on the same day.

Of course, the election may come sooner and The Crusher hears whispers that a date in March may already be in consideration.

The recent State Opening of Parliament (18th November) saw one of the shortest Queen’s Speech ever as plans for future legislation were cut back and cut back to the absolute minimum. Many expected measures were dropped in the rush to cut back to what the Govt. thought they might just be able to squeexe through before the election. Perhaps the headline piece was the Digital Economy Bill which has now received its Second Reading in the House of Lords. This rather contentious piece now passes to the committee stage which will not now take place until January. That is beginning to look mighty close to the election. The Crusher is minded to think that there may be very little of the contents of the Queen’s Speech that will actually make it all the way to the Statute Book.

But - as we now run up to the election, and the State Opening was perhaps the first and opening element of the election campaign, a look at something elsewhere in Europe. A General Election was held in Portugal on Sunday 26th September. Posters across the country exhorted the population to cast their vote. But one poster caught the eye of The Crusher - a large billboard alongside the main road leading to the airport just outside central Lisbon.

Now, clearly child protection is an issue in Portugal as it is here in the UK. Perhaps we are less likely to see campaigning here on this particular front. Translated, the poster reads:

“If you want to provide paedophiles with freedom, continue to vote as you would normally. For chemical castration of these criminals and to change Portugal, vote MMS.”

This particular party did not win the majority mandate - the election returned the previous centre-left government but with a reduced majority.

Somehow it seems unlikely that we will see this poster reproduced here in the run up to the General Election.

Whither ‘mere conduit’?

‘Mere conduit’ is a defence - laid down within the European e-Commerce Directive and transposed to UK law within the Electronic Commerce (EC Directive) Regulations 2000 - that allows an intermediary, typically an Internet Service Provider, to limit liability for illegal activity. This follows on from the accepted position that a mail carrier (Royal Mail etc.) is not liable for the contents of mail that it carries - provided that it does not know what is in the package.

Article 12 of the European Directive sets out the position:

‘Mere conduit’

1. Where an information society service is provided that consists of the transmission in a communication network of information provided by a recipient of the service, or the provision of access to a communication network, Member States shall ensure that the service provider is not liable for the information transmitted, on condition that the provider:

(a) does not initiate the transmission;
(b) does not select the receiver of the transmission; and
(c) does not select or modify the information contained in the transmission.

2. The acts of transmission and of provision of access referred to in paragraph 1 include the automatic, intermediate and transient storage of the information transmitted in so far as this takes place for the sole purpose of carrying out the transmission in the communication network, and provided that the information is not stored for any period longer than is reasonably necessary for the transmission.

So, that seems reasonably clear. An Internet Service Provider (ISP) is an intermediary - they carry traffic across their network, they do not initiate the traffic, they do not select the recipient and they carry it without selection or modification. Provided they adhere to the conditions then they may claim a defence of mere conduit and cannot be held liable for, say, the transmission of illegal criminal content (child abuse content) or unlawful content (Peer 2 Peer file sharing). The problem for the ISP comes when they are told about the traffic or otherwise become aware. Once an ISP is ‘put on notice’ then they must take action.

OK, so why is there a question mark over ‘mere conduit’, what appears to be a well established point of law. The problem, as so many affecting ISPs today, has derived from the peer 2 peer discussion. We know that pressure from the industry has resulted in the ‘3-strikes and you’re out’ process - shortly to be incorporated within the UK Digital Economy Bill. Now it seems that the rights industry has been able to exert pressure in other areas and the outcome of this could be important for the intermediary.

The problem area is ACTA. AC what you say - ACTA stands for the Anti-Counterfeiting Trade Agreement. OK, what has that got to do with ISPs. Governments have been engaged in a series of discussions, the most recent of which have taken place in Seoul, South Korea, to look at the updating of laws to protect intellectual property. Most readers will be familiar with actions brought against online auction houses (e-Bay) alleging collusion in the sale of counterfeit goods diluting the trademark interests of well known luxury brand names. Other actions have been taken by Customs and Trading Standards officers to confiscate counterfeit goods - sunglasses, handbags, rip-off DVDs etc. That all seems fairly straight forward and expected.

The problem comes with the extension of the counterfeiting argument to copyright infringement in the electronic environment. Hints of the nature of the Seoul discussions appeared in leaked preparatory papers. An European Commission (DG Trade) document in September indicated that the EU and US had engaged in discussion in Washington as part of the Intellectual Property Rights Work Group. Within those discussions, a side meeting had been held to discuss the US preparation of the future Internet Chapter of the ACTA. At that time the US delegation indicated that they had been working for some while on the chapter and had engaged in discussion with other Govt. agencies and with interested private stakeholders (not defined or named as these were bound by NDAs). The US delegation gave an oral presentation to the EU Trade group. It is now clear that discussions in Seoul have followed the inital oral advice and that the US drafted chapter appears to follow the provisions of the US Digital Millennium Copyright Act (DMCA)

ACTA requires that ACTA members (Government/member state signatories) have to provde for third-party liability; Safe-harbours for liability regarding ISPs to be based on Section 512 of the Digital Millennium Copyright Act and to benefit from safe-harbours, ISPs will need to put in place policies to deter unauthorised storage and transmission of IP infringing content (these might include making changes to customer contracts to allow a graduated response - ie, ‘3-strikes and you’re out’).

The European Parliament has now voted against the ‘3-strikes’ approach - there is development within the new Telecoms Package to be agreed between the European Council and the European Parliament. That is likely to reach consensus with provisions to allow a ‘3-strikes’ approach but perhaps subject to appeal or judicial oversight.

There is more amongst the discussion from Seoul. It would appear that rights owners will be able to initiate proceedings against intermediaries alleging that they have allowed their networks to be used for unlawful activities. European ISPs have long known that US based rights owners would like to see the European protection removed and brought into line with the US DMCA practice. In order to claim safe-harbour protection the European intermediaries would need to ensure that they, ‘put in place policies to deter unauthorized storage and transmission of IP infringing content.’ That is a wholly different approach to the current status, transferring the onus to the ISP. The EDRI newsletter notes, “European citizens should be concerned and indignant. As reported, the ACTA Internet provisions would also appear to be inconsistent with the EU eCommerce Directive and existing national law, as Joe McNamee, the European Affairs Coordinator of EDRi notes: “The Commission appears to be opening up ISPs to third party liability, even though the European Parliament has expressly said this mustn’t happen, ACTA looks likely to erode European citizens’ civil liberties.”

There has been real concern about the nature of the discussions - and the secrecy within which they have been conducted. The EU leaked paper noted, ‘As agreed among ACTA participants, the negotiating papers are not public documents’. The Washington Post noted that civil rights organisations had written to President Obama to complain about the lack of transparency.

The Washington Post article noted. ‘The groups, which include Public Knowledge and the Sunlight Foundation, wrote in a letter that the secrecy of the process – and on an issue that could have broad implications for Web users – could unfairly the benefit content providers that are most actively involved in the process.

“We applaud your promise of a more transparent, collaborative and participatory government,” the groups wrote. “However, multiple aspects of ACTA fail to meet these standards.”

The Swedish Presidency has published a note about the 6th round of negotiations. The Swedish note notes, ‘discussions at the meeting were productive and focused on enforcement of rights in the digital environment and criminal enforcement.’ The note continues, ‘Participants also discussed the importance of transparency including the availability of opportunities for stakeholders and the public in general to provide meaningful input into the negotiating process.’

The opportunity for the public to ‘provide meaningful input’ is important. The next stage of the ACTA negotiations will take place in Mexico in January 2010. With the Lisbon Treaty in full force from 1st December, the EU will represent all member states and any decisions accepted will be implemented for all. The current (Swedish) presidency of the European Union notes that ACTA hopes to reach agreement and implementation early in 2010 - there is not much time left before we might see major changes that will affect ISPs and other third parties. Where will be the opportunity for public consultation and input in this timescale?

Data retention - still some unhappy states

The Data Retention Directive was introduced into European law back in 2006 - with a requirement that member states transpose the first phase by September 2007 and the second phase by March 2009 (where the State took advantage of a derogation in rellation to IP based traffic).

Interestingly, both Belgium and The Netherlands advised the European Commission of their intention to take advantage of the derogation in relation to IP. That still meant that they were expected to transpose in relation to fixed line and mobile telephone traffic by September 2007 but that had opted, like the UK, to leave IP based retention until the later date.

A group of Belgian organisations have now raised a petition to protest the local transposition of the Directive. In August, the Belgian Minister of Justice proposed a retention period of 2 years (the maximum within the range of the Directive - 6 months to 2 years) . The UK settled on 12 months - interestingly the Belgian Data Protection Supervisor felt that the 2 year period was too long and disproportionate and should be reduced to 12 months. The Belgian petitioners felt that there was not sufficient evidence to justify the retention of traffic data which they felt was not a solution to security issues.

Just to the north, the Netherlands government is also engaged in discussion. A few wees ago, government agencies held meetings with ISPs to provide some clarification of terms within the new Data Retention Act - EDRI-News reports that after the meeting there was still confusion as to what was required and for how long. As currently implemented, both telcos and ISPs are required to retain data for 12 months but discussion in the upper house of the Netherlands parliament (Senate) has suggested that the Minister may be prepared to reduce the ISP requirement to just 6 months (as was suggested in the UK, bearing in mind the low level of requests of user data in relation to IP based traffic).

A full description of the Netherlands law (2008) can be found at the site for Agentschap Telecom, the Dutch telecoms regulator.

There has also been discussion in the Netherlands about the possibility of centralised retention of traffic data. ‘Bits of Freedom’ in the Netherlands reports that some 3 Million requests for traffic data were served by the Netherlands police in 2008 - on a population of some 16 Million. That is a very high figure when compared against the reported request rate in the UK - Surveillance Commissioner reported 0.5 Million requests in 2007 against a population of some 60 Million. If the UK rate were the same as the Dutch then that figure would be in the order of some 11 Million requests!

Clearly there remains considerable concern and disquiet across Europe.

The Directive provides for review of the retention policies in 2010. Clearly there is likely to be a lot to be discussed.

Amendment 138 falls out into the Grand Place…….

For some time the European Commission and the European Parliament have been in discussion in relation to the development of a new Telecoms Package, a raft of new laws with the intention of revising and updating the regulatory control of the telecoms industry. Included within the package were updates to the Privacy and Electronic Communications Directive that would impact on the receipt of cookies (commonly used by advertisers and others) by a web browser.

But, the passage of the Telecoms Package was held up by the introduction of an amendment, Amendment 138 which aimed to control the move towards the ‘3 strikes and you’re out’ approach to the regulation of peer to peer file sharing.

The rights industry has been pushing hard for national governments to adopt the ‘3 strikes’ approach as a way of trying to contol the use of file sharing and unlawful copying of rights protected materials. The idea is that users identified as engaged in unlawful filesharing will receive a letter from their ISP to advise that the sharing is unlawful and (in pretty much most cases) in contravention of the ISP acceptable use policy. Experience suggests that the first letter had some effect in about 50% of cases. Many of those responded to confirm deletion of infringing materials and that they would not engage in any further file sharing. For those that continue, a second, stronger letter would be sent before a third letter and then disconnection of internet service.

It is the disconnection that is the problem. Many now consider access to broadband as a basic human right - alongside access to water, power etc. There was political support for the view, including from Mdme Reding, European Commissioner for Information Society. The problem was (is) that disconnection would take place without judicial review and potentially without the option for the accused user to defend their position and argue their innocence. When the Telecoms Package came before the European Parliament it was amended by Amendment 138 to require judicial intervention and oversight before disconnection.

The Amendment provided the clear requirement for a judicial role and in so doing acted as a brake on the proposals by certain European governments to press ahead with legislation to enable ‘3 strikes’. Before any disconnection could take place a rights owner would have to go before a judge and plead a case for disconnection of the user. And, of course, the user would have the opportunity to defend his position. In France, President Sarkozy promoted the ‘Hadopi’ legislation and in the UK, the Digital Britain report and the Business Secretary, Peter Mandelson, engaged in discussions to push ahead with a ‘3 strikes’ approach. It is notable that Peter Mandelson appears to have come out strongly in favour of ‘3 strikes’ since a weekend meeting with a leading producer.

For the European bureaucrats and politicians the groundswell of public support for Amendment 138 provided a problem. Whilst the Amendment was debated it held up progress on the whole Telecoms Package and with the imminent arrival of the Lisbon Treaty conference there was a political need for progression.

Now, at the last minute and just before the conference, there has been agreement in Brussels to accept a watered down version of the amendment Pressure from national governments that will allow them to introduce disconnection for persistent file sharers (and who else the Crusher wonders?).

Jérémie Zimmermann, spokesperson for La Quadrature du Net,(quoted on ISPreview) said: “Amendment 138 was in haste dissolved into useless legalese and soft consensus. The Parliament hurried to get rid of the safeguards of citizens’ freedoms because it knew that with the imminent coming into effect of the Lisbon treaty, both institutions will soon share the legislative power in the field of judicial affairs. And the bad excuses we have heard these past few days to justify to abandon amendment 138 will then be totally obsolete. In the end, the Parliament was not brave enough to stand against the Council to defend citizens’ freedoms.

Ministers of Member States, who want to be able to regulate the Net without interference from the judiciary, were rushing to kill amendment 138 and put an end to the negotiations. It is a shame that the Parliament’s delegation, and especially rapporteur Catherine Trautmann, was not determined enough to use the political context to assert its authority in the European lawmaking process in order to protect European citizens. Even though it has been an interesting and constructive discussion, amendment 138 has turned, by the lack of courage of the delegation, into the emblem of the powerlessness of the Parliament.”

So, in the face of political pressure to reach agreement before the meeting of Heads of State/Prime Ministers to conclude ratification of the Lisbon Treaty and the appointment of a new President of Europe, the Council has over-ridden the European Parliament (which had previously voted substantially in favour of Amendement 138) which has now accepted the reduced version limiting the rights of the citizen.

The way is now clear for those member states who wanted to introduce ‘3-strikes’ to do so. In the UK, Lord Mandelson has now announced actions to be taken against repeat piracy offenders and procedures will be included in the Digital Economy Bill expected to be included in the Queen’s Speech (18th November) with passage through Parliament before the end of the current session.

Lord Mandelson met with Internet industry representatives before the announcement was made. Mandelson asked the Internet industry to consider the proposed ‘3-strikes’ process in the context of the wider business economy (in iother words, consider the impact of filesharing on the revenues of the music industry) and to realise the importance of creativity. The Crusher understands that Lord Mandelson was fairly combative in his approach to the Internet industry but that the industry did make him aware of their concerns about proportionality, cost, options for alternative modes of contents delivery, due process etc.

The devil, as they say, will always be in the detail so it remains now to see how the Digital Economy Bill is drafted in order to see exactly how the ‘3-strikes’ approach will work in the UK. It would seem likely that the rights industry will contribute to the costs of the ISP in communicating with users and that there will be a likely lengthy process before any disconnection take place. It is likely that Ofcom will set up a dispute panel procedure to hear appeals from consumers targetted for disconnection and that Ofcom will collate information relating to the issue of notifications.

But - time is now running out for this Government. A full General Election must be held before June 2010 at the latest. As we are now clearly in the run up to the election and campaigning has been going on for some time, The Crusher wonders whether the Govt. will actually be able to progress the Digital Economy Bill to the Statute Book before dissolution.

The other matter, of course, is in Brussels. The actions there point to the ineffectiveness of the European Parliament. The elected representatives of the European citizenry are over-ruled and kicked into touch by member states acting in the European Council. The European Parliament has no ability to initiate legislation and can only comment and amend - it seems now that their ability to amend has been curtailed in the face of opposition from member states.

Hadopi - three strikes and …. it’s out!

The French farce continues.

After passage through a singularly empty French assembly, then return to a more populous house, the Hadopi law (Haute Autorité pour la Diffusion des Oeuvres et la Protection des droits sur Internet - Higher Authority for the Distribution of Works and the Protection of Copyright on the Internet) has now received a further setback.

The superior court in France, the French Consititutional Court, has now ruled that access to Internet services can only be denied on the authority of a judge. The court has recognised the view in the European Parliament that Internet access is a basis human right - as also now recognied by Ofcom in the UK. The introduction of the bill to create the Hadopi in France was contentious - in France and elsewhere. Supported by President Nicolas Sarkozy the bill would have created a new agency with the power to disconnect users on third notification of file sharing infringement. The agency would also place the users on a blocklist to prevent them from simply migrating to another provider. This cannot now happen - any process to remove a user access must now go before a court and a judge - with the user able to defend his position in court.

The UK Government has already indicated that it does not favour the 3 strikes approach - again echoing the view that broadband access is now seen as a basic human right.

It’s back to the drawing board for the rights owners. Perhaps these actions might just focus their minds to consider some new business models. But then ‘les cochons peuvent voler’ as they might say in France.

Article 8 again ….. and the UK loses another case!

A few months ago we heard the outcomes of the case of ‘Marper and S v United Kingdom’ brought before the European Court of Human Rights. Now, you may remember this one - something of a landmark. The court opined that the storage of DNA profiles in England was contrary to the privacy requirements enshrined under Article 8 of the European Convention on Human Rights.

Just in case you had missed the Article, it states:

ARTICLE 8
1. Everyone has the right to respect for his private and family life, his home and his correspondence.

2. There shall be no interference by a public authority with the exercise of this right except such as is in accordance with the law and is necessary in a democratic society in the interests of national security, public safety or the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or for the protection of the rights and freedoms of others.

The problem for the UK, and for England in particular, was that the claimants in the case were innocent persons who had not been charged or convicted of any offence. It was, said the Court, an infringment of their privacy for their DNA records to be retained within a national criminal database. Now, interestingly Scotland applies the law in a different way to England (of course!) and the Scottish model was approved by the European Court. The Conservatives have given a commitment to implementing the Scottish model when (not if!) then win the next election. We’ll hold them to that. The Government in London has now announced a revision of rules to apply in England - rules that have all the sublety of a two fingered salute to Europe - and has indicated that it will change the rules to allow law enforcement to retain data for 6 or 12 years. No intention there to remove the data as required by the Europen court.

But - along comes another case and again the Courts find that the actions of law enforcement in the UK go against the requirements of Article 8. Andrew Wood had his photograph taken by police surveillance units when (perfectly legitimately) he attended the AGM of a company in which he had shares. The police photographs were stored on file and were potentially available for use in investigation of other acts. The Appeal Court has now rules (2 to 1) in the case and has instructed the Metropolitan Police to destroy copies of photographs of Mr Wood.

The implications here are interesting. The police must now destroy Mr Wood’s images - but must also now look to identifying, removing and destroying images of other perfectly law abiding persons who happened to come in front of their surveillance photographers - perhaps at football matches, demonstrations etc. Taking photographs is a legitimate practice the court held - but the police should identify those who were of good character and should destroy the images. The implication of that opinion by Lord Justice Dyson is that images should only be retained of those who are nicked - and they will be photographed at the police station anyway so facial recognition should be able to locate, and identify them in surveillance image databases. Anyone else should then deleted.

Naturally the police were not too happy and may now consider an appeal to the House of Lords (note - there was one dissenting opinion in which Lord Justice Laws argued that the police were ‘operating within the margin of operational discretion in keeping the photos’.

The Crusher senses the wind of change blowing - the surveillance society created under New Labour is unravelling before the courts. With an increasingly lame duck administration and an imminent election (which the PM has tacitly recognised that Labour will lose) we may be seeing a few steps back from the oppressive nature of surveillance. Where next - data retention and the Communications Data Bill?

French farce

A few postings ago we reported on the vote in the French Senate that introduced the ‘Hadopi’ law, providing for the 3-strikes and you’re out principle to be adopted by rights owners seeking the disconnection of persistent file sharers. After the initial vote in a sparsely attended house, the law passed on to the National Assembly where a rather larger house voted it down. Now it seems that the French authorities have adopted the European approach - if at first you don’t get the result you want, ask them to vote again until they give the right result!

The law was returned to the National Assembly for another attempt and this time it seems that there was a rather fuller attendance. Perhaps some ‘persuassion’ by the French equivalent of the Whips? There is clear intention by the French Government to push the law through and in advance of voting in the European Parliament on the Telecom Reform package.

A large number of amendments to the Bill made it impossible to proceed through the voting process by 5th May and the Bill must now return for further debate. It is seen as likely that this will be by mid-May so it is quite possible that President Sarkozy will see the new legislation in force by the end of the month. This will allow the setting up of a new agency (the HADOPI) which will deal with copyright infringement notices submitted by rights owners and will decide whether to warn or to disconnect users and place them on a list of blocked persons.

Quite clearly this will not be a popular piece of legislation. Civil rights campaigners will be campaigning and asserting that the law will be an infringement of the rights of the citizen. But the campaigners will have some powerful allies. MEPs voting in the European Parliament in Brussels and Strasbourg have indicated that they view internet access as a fundamental service and have voted down 3-strikes approaches.

When the Telecom Package came up for 2nd reading in the European Parliament, MEPs voted 407 to 57 for initial amendment 138 rejecting the Trautman report and reverting to the initial text which provided that only judicial authorities would be able to make decisions on cutting off users. The reversion to judicial authorities means that users accused of infringement would be able to submit a defence and to appeal any decision. It would seem that the HADOPI proposed in France would not be accepted as a judicial body and would not be acceptable under the European package.

Going further, it is interesting to read comments by Commissioner Redding responding to questions in Brussels: “The fourth element I would like to underline is the recognition of the right to Internet access. The new rules recognise explicitly that Internet access is a fundamental right such as the freedom of expression and the freedom to access information. The rules therefore provide that any measures taken regarding access to, or use of, services and applications must respect the fundamental rights and freedoms of natural persons, including the right to privacy, freedom of expression and access to information and education as well as due process?”

Now that makes the Commissioners view quite clear. Internet access is a fundamental right and any rules must respect fundamental rights and freedoms. That will make it difficult to impose any 3-strikes approach without their being a judicial process. Even then, there must be compelling reason to act - and, I suspect, copyright infringment will not be there as the most compelling reason. Perhaps use of the internet to download paedophilic content might be there.

So, how will this impact on the UK. There is discussion in Govt. and we are awaiting the final version of Stephen Carter’s ‘Digital Britain’ report. Trails suggest that that may include details of a Digital Rights Agency - amongst other things. The report is now unlikely to arrive before mid-June - it will not be published in the run-up to local and European elections at the beginning of June - and will probably be after voting in the European Parliament. Any agency that is then set up will have to accommodate the European Telecoms Package - so we are unlikely to see any 3-strikes here. Unlikely anyway as Govt. Ministers have now indicated that this is not favoured by Govt.

Copyright in the news…….

Copyright is in the news - and for a variety of reasons. In Sweden, the founders of Pirate Bay have been found guilty of copyright infringement and have received a prison sentence, UK copyright law has been judged as ‘failing’ by a consumer group and the European Parliament is about to vote on the extension of copyright protection. It’s all happening!

OK, let’s look at the UK first. Copyright law was last updated in the Copyright and Design Patent Act 1988 - which replaced the Copyright Act 1956. Yes, it takes that long for changes to be made. Of course, there have been subsequent amendments to the 1988 Act, mainly as a result of legislation from Europe which now assumes competence in this area (is competence the right word to be used in a European context?). The UK Intellectual Property Office have a useful unofficial consolidated version of the CDPA here. The last major revision, the Copyright etc Act of 1988 predated the majority of home computing and electronic communications, web access, file sharing etc. Amendments have been made but the Consumer Focus group found that UK law was the worst in a survey of 16 countries - “UK copyright law is the oldest, but also the most out of date” said Ed Mayo of Consumer Focus.

The problem is that UK law does not provide any fair dealing exceptions that allow the type of actions commonly accepted by the majority of the population. Things like making copies of music that you ‘own’ on CD to play on a different system, PC or iPod etc. It is estimated that over 50% of the population do this and nearly 2/3 (over 60%) think that this is quite legal. There was a review of intellectual property in 2006/2007 published by Gowers - but there has not been a great deal of action in the areas that affect the public most directly. There have been changes in the background - changing the Patent Office to the Intellectual Property Office etc. - but, so far, it has not proved possible to introduce new legislation to permit the type of use accepted by the public. Perhaps it is that the rights industry view this as a major issue and see public action as a major loss of revenue - also that other groups such as ISPs etc. do not see it as part of their core business to introduce controls on their users. Stalemate really. We now await the publication of the final Digital Britain report to see where that points. Maybe it will help to answer some of the critiscisms levelled by Consumer Focus.

OK - so what about Pirate Bay. An interesting case. Pirate Bay itself does not host copyright materials, rather it seems to be a directory allowing users to find materials to download. In that respect it acts rather like other search engines on the web. Of course, it helps users to find materials that they can download and thereby infringe the copyright of the owners but is it itself infringing copyright. Maybe it might be held to be inciting infringement. Pirate Bay has rather set itself up, over some time it has invited actions from the rights owners - a sort of catch me if you can approach. With most of the rights owners in the US and the web site in Sweden there were likely to be problems but it does now look as if the rights owners have managed to persuade the Swedish authorities that the actions of the site are illegal. The original plea requested damages in the order of 100,000,000 SEK but this was reduced by the court to 30,000,000 SEK. That is still far more than the defendants are likely to be able to pay so it seems unlikely that the rights owners will get their damages. And, with the servers located outside Sweden it may be difficult for the court to enforce take down actions. So, what will the rights owners get - one might suggest that their approach could have been to raise awareness and to generate publicity about the illegality of the actions. Well, if that was the case they seem to have done that. Are the Pirate Bay crew down and out - somehow I guess that is not likely.

So, it is back to the European Parliament. The music industry has brought pressure for a review of the period of copyright - arguing that some musicians who produced work in their early years are now running the risk of seeing their work passing into the public domain whilst they are still alive. I suppose you could look at Cliff Richard with hit records in every decade since the 1950s. Some of the early works are now reaching the end of their copyright term. The European Parliament now has a proposal before it to extend copyright term in order to allow musicians to continue to benefit from their works. Interestingly, analysis suggests that it is not the musicians who will benefit from the change (26p per annum!) but the big 4 music publishers who stand to make millions.

Will it go through? The Council of Ministers has blocked the action and there is a European Parliamentary election at the beginning of June. Maybe this is not the time to rock the boat - we shall see what the outcome of the vote is. As the Ministers are not minded to approve, I suspect the extension of term will not go ahead.

As the Chinese say, ‘may we live in interesting times’.