Monday | 13 October, 2008
CIO
EU, US Passenger Data Sharing Deal Under Scrutiny
The European Parliament has no direct say in the shaping of an agreement that will give US customs, the US Department of Homeland Security and other agencies including the US Central Intelligence Agency free access to airlines' passenger databases to help them prevent potential terrorist attacks
Paul Meller (IDG News Service) 03 July, 2007 15:13:32

Related Stories
  • +

    The 2007 security hall of shame 27 December, 2007 07:47:46

    Bad breaches, ghastly gaffes and five people we'd like to forget
    How bad was 2007 for breaches, vulnerabilities and similar mayhem? On the bright side, it was better than 2008 is forecast to be. With more of every sort of meltdown predicted -- more criminalization of the hacker community, more Web-application attacks, more phishing, more spamming, more zero-day attacks and more virtualization-related threats -- we're happy to tell you that you are likely to look back on 2007 as the peaceful old days.
Additional Resources
Executive Guides
Whitepapers

Newsletter Subscription

Sign up for our CIO newsletters!
Weekly coverage of the issues that impact corporate and government information
RSS Feeds

Critics of the agreement allowing European passengers' personal data to be shared with US authorities have just under a month to reshape the accord before it comes into force, said Stavros Lambrinidis, vice president of the European Parliament's civil liberties committee.

"There is a battle to make this agreement respectful of European citizens' civil liberties, and it's not over," he said in a telephone interview.

The European Parliament has no direct say in the shaping of an agreement that will give US customs, the US Department of Homeland Security and other agencies including the US Central Intelligence Agency free access to airlines' passenger databases to help them prevent potential terrorist attacks.

However, some national parliaments will get the chance.

"There are about six or seven countries that have to debate this agreement. There is still a chance to change it," Lambrinidis said.

The US government demanded access to information about everyone flying to the US from the EU in the wake of the terrorist attacks in September 2001.

However, by complying with the demand, airlines would have been breaching strict European data protection laws, so the US and EU drafted an exemption clause from the laws, which they claim was respectful of European citizens' data.

The European Court of Justice annulled that agreement last year and gave the two sides until the end of July to come up with an alternative.

Failure to do so would leave European airlines exposed to massive fines and the possible loss of landing slots in the US if they don't continue to hand over the data, or legal action on data protection grounds in the EU if they do.

"It's clear that there has to be an agreement but not one like this," Lambrinidis said.

The agreement that was reached during a phone call between German Interior Minister Wolfgang Schaeuble, EU justice and home affairs commissioner Franco Frattini and US Secretary for Homeland Security Michael Chertoff late June 2007 reduces the fields of data to be shared from 34 at present to 19.

These fields include information such as name, credit-card details and travel itinerary. They won't include dietary requirements, which could be used to identify someone's religion.

However, it extends the length of time the US authorities can hold the data from three years to 15 years, and it allows US agencies to dip into the databases at their will.

Europe's data protection supervisor, Peter Hustinx, said his main concern was that the EU would grant American agencies the right to pull up information about Europeans whenever they want. He called for a push mechanism, meaning that database managers for the airlines would have to pass over the data, instead.

Like the temporary accord it replaces, the new agreement promises an eventual switch to a push mechanism.

Under the new agreement, US agencies can pull up the data they want until early next year, when airlines will start pushing it instead. However, the DHS maintains the right to pull the information if airlines don't offer up the data promptly.

The main concern, however, is that the agreement omits any binding undertakings for US authorities to safeguard European citizens' data. The details of this arrangement aren't in the agreement itself but in an exchange of letters that haven't been made public, Lambrinidis said.

Reacting to the agreement, Hustinx said he fears the measure could violate European citizens' rights to privacy.

In addition to allowing US authorities to keep the data for 15 years, there would be "no limitation to what US authorities are allowed to do with the data", Hustinx wrote in a letter to Schaeuble after the German minister clinched the deal.

Market Place
 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
  • +

    CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25

    For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders.
  • +

    CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00

    Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00

    Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05

    Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
  • +

    Cutting Through the Spin of Recent Vulnerability Disclosures 13 October, 2008 10:53:00

    The FUD surrounding the ClickJacking and TCP/IP vulnerabilities has the world seemingly frozen in fear. But once you cut through the spin, the vulnerabilities aren't all that they were made out to be.
    There are a few highly publicised vulnerabilities at the moment which haven't completely been disclosed and which, it is claimed, could threaten the whole Internet as-we-know-it. Only, when the vulnerabilities are finally disclosed, it seems that the whole incident has been somewhat Chicken Little.
  • +

    PCI app security: Who's guarding the data bank? 13 October, 2008 11:09:00

    Compliance strategies for PCI's new application security requirements
    While Willy Sutton never really said it, the truth is that people rob banks because that is where the money is. Today's criminals don't walk into banks with loaded guns and get-away drivers. Rather they connect from a remote location using a browser and are armed with hacking tools and spyware.
  • +

    Data-center security tools to not overlook 10 October, 2008 11:37:00

    With the rise of security suites, it's time to consider some emerging security tools and rethink others
    Protecting a corporate data center is like trying to keep an elephant safe from a swarm of flies. Despite your best efforts, bites happen. As the staples of security -- such as firewalls, antivirus software, spam and spyware filters -- come together in suites of products that allow for sophisticated management, there are other security tools either emerging or worth a rethink.
  • +

    IBM, Secret Service, others study identity/cybercrime issues 09 October, 2008 10:09:00

    Center for Applied Identity Management Research organization teams experts in criminal justice, financial crime, biometrics, cybercrime and cyberdefense, data protection, homeland security and national defense.
    IBM, LexisNexis and the Secret Service are among a group of corporations, government agencies and academic institutions that has formed to study and help solve identity management challenges around cybercrime, terrorism and narcotics trafficking.
  • +

    Strange account management at Amazon 09 October, 2008 09:51:00

    A careless login led to the discovery of some strange ccount management practices at one of the Internet's largest retailers.
    Via the RISKS mailing list comes an interesting tale of poor online account management at a major online retailer. According to Graham Bennett, accounts with Amazon display an odd behaviour that doesn't seem to have attracted much attention in the past.
CIO Webcast Innovation #8 - What are the biggest roadblocks to IT's involvement in innovation at your company?
Watch the latest latest edition of CIO Innovation which is now available for download.
Watch the webcast
Sign up to the CIO Innovation update email


CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper

Best Practice in Building an Integrated Information Management Strategy

Discover the business value that creating an integrated information platform can bring. Learn how to provide consistent, accurate information to all stakeholders within your business network. Integrate vital data from disparate sources and deliver a trusted information foundation. Read on to uncover the stepping-stones to your new information management strategy.