Saturday | 6 September, 2008
CIO
EU, US Passenger Data Sharing Deal Under Scrutiny
The European Parliament has no direct say in the shaping of an agreement that will give US customs, the US Department of Homeland Security and other agencies including the US Central Intelligence Agency free access to airlines' passenger databases to help them prevent potential terrorist attacks
Paul Meller (IDG News Service) 03 July, 2007 15:13:32

Related Stories
  • +

    The 2007 security hall of shame 27 December, 2007 07:47:46

    Bad breaches, ghastly gaffes and five people we'd like to forget
    How bad was 2007 for breaches, vulnerabilities and similar mayhem? On the bright side, it was better than 2008 is forecast to be. With more of every sort of meltdown predicted -- more criminalization of the hacker community, more Web-application attacks, more phishing, more spamming, more zero-day attacks and more virtualization-related threats -- we're happy to tell you that you are likely to look back on 2007 as the peaceful old days.
Additional Resources
Executive Guides
Whitepapers

Newsletter Subscription

Sign up for our CIO newsletters!
Weekly coverage of the issues that impact corporate and government information
RSS Feeds

Critics of the agreement allowing European passengers' personal data to be shared with US authorities have just under a month to reshape the accord before it comes into force, said Stavros Lambrinidis, vice president of the European Parliament's civil liberties committee.

"There is a battle to make this agreement respectful of European citizens' civil liberties, and it's not over," he said in a telephone interview.

The European Parliament has no direct say in the shaping of an agreement that will give US customs, the US Department of Homeland Security and other agencies including the US Central Intelligence Agency free access to airlines' passenger databases to help them prevent potential terrorist attacks.

However, some national parliaments will get the chance.

"There are about six or seven countries that have to debate this agreement. There is still a chance to change it," Lambrinidis said.

The US government demanded access to information about everyone flying to the US from the EU in the wake of the terrorist attacks in September 2001.

However, by complying with the demand, airlines would have been breaching strict European data protection laws, so the US and EU drafted an exemption clause from the laws, which they claim was respectful of European citizens' data.

The European Court of Justice annulled that agreement last year and gave the two sides until the end of July to come up with an alternative.

Failure to do so would leave European airlines exposed to massive fines and the possible loss of landing slots in the US if they don't continue to hand over the data, or legal action on data protection grounds in the EU if they do.

"It's clear that there has to be an agreement but not one like this," Lambrinidis said.

The agreement that was reached during a phone call between German Interior Minister Wolfgang Schaeuble, EU justice and home affairs commissioner Franco Frattini and US Secretary for Homeland Security Michael Chertoff late June 2007 reduces the fields of data to be shared from 34 at present to 19.

These fields include information such as name, credit-card details and travel itinerary. They won't include dietary requirements, which could be used to identify someone's religion.

However, it extends the length of time the US authorities can hold the data from three years to 15 years, and it allows US agencies to dip into the databases at their will.

Europe's data protection supervisor, Peter Hustinx, said his main concern was that the EU would grant American agencies the right to pull up information about Europeans whenever they want. He called for a push mechanism, meaning that database managers for the airlines would have to pass over the data, instead.

Like the temporary accord it replaces, the new agreement promises an eventual switch to a push mechanism.

Under the new agreement, US agencies can pull up the data they want until early next year, when airlines will start pushing it instead. However, the DHS maintains the right to pull the information if airlines don't offer up the data promptly.

The main concern, however, is that the agreement omits any binding undertakings for US authorities to safeguard European citizens' data. The details of this arrangement aren't in the agreement itself but in an exchange of letters that haven't been made public, Lambrinidis said.

Reacting to the agreement, Hustinx said he fears the measure could violate European citizens' rights to privacy.

In addition to allowing US authorities to keep the data for 15 years, there would be "no limitation to what US authorities are allowed to do with the data", Hustinx wrote in a letter to Schaeuble after the German minister clinched the deal.

Market Place
 

2008 CIO Summit

19th August, 2008 Four Seasons Hotel, Sydney Developed in partnership with CIO Magazine, IDC, INTEP and the CIO Executive Council.

The world of the CIO is extremely complex and diverse. Multiple priorities demand attention and decisions are needed instantly. Individual teams need to be driven towards common goals, and businesses strive to become more mobile, agile and responsive. For CIOs, the challenge never ends.

Every year the CIO Summit identifies what is top of mind for CIOs across Australia and New Zealand, and offers insight for CIO benchmarking and vendor strategic planning alike.

Recent IDC research shows that over 59% of CIO's believe that 'to achieve their business strategies, technology should be used more aggressively than today.'

Join us on August 19th to discover how this is possible with the latest technologies including Virtualisation, Web 2.0, IP Surveillance and Software as a Service (Saas).

Click here for registration.

Click here for more information.

Please email Denyse_Robertson@idg.com.au for further information.

  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Information security governance: Centralized vs. distributed 05 September, 2008 10:15:00

    Should security policies, procedures and processes be managed within a central body, or distributed at an individual level? You need to find the middle ground.
    The management of information risk has become a significant topic for all organizations, small and large alike. But for the large, multi-divisional organization, it poses the additional challenge of determining how to deploy an information security governance program among what are often disparate business units. Should the policies, procedures, and processes that define the program be developed and managed within a central, corporate body? Or perhaps responsibility would be better placed at the individual unit level? Is there a workable middle-ground?
  • +

    DNS error brings Sophos antivirus updates to a halt 05 September, 2008 13:40:00

    Optus, Internode and Equinix affected among others.
    A sporadic Domain Name Server (DNS) error has blocked Sophos anti-virus updates around the world.
  • +

    Ouch! Security pros' worst mistakes 04 September, 2008 08:05:00

    We've all done regrettable things on the job, but does any valuable wisdom come of it? Four security pros candidly explain their biggest blunders and what they learned in the process
    It was a mistake so bad the person who made it asked that his name and company not be mentioned here. Let's call him Frank.
  • +

    Security ROI: Fact or Fiction? 03 September, 2008 08:32:00

    Bruce Schneier says ROI is a big deal in business, but it's a misnomer in security. Make sure your financial calculations are based on good data and sound methodologies.
    Return on investment, or ROI, is a big deal in business. Any business venture needs to demonstrate a positive return on investment, and a good one at that, in order to be viable.
  • +

    Information Security and the Importance of Context 01 September, 2008 10:00:00

    Those entrusted with information security must raise their contextual awareness
    When the US Transportation Security Administration (TSA) was first created, it created a sudden need for tens of thousands of screeners. Getting a job as an airport screener was a pretty easy process. It seemed as though if you had a pulse, you were in. Jump forward to 2008 and becoming a screener is a bit harder as the TSA has instituted background checks, has upped the educational requirement to include a high school diploma or GED, and added other significant requirements.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Optimized Back-up and Recovery for VMWare for VMWare Infrastructure with EMC Avamar

Virtual machines deployed in the data centre must be protected against failure. Read on to find out how to extend data protection to your virtual machines.

Sponsored Links