Perspectives on Privacy in the Internet Age Billy Hawkes Data Protection Commissioner Institute of International and European Affairs Dublin, 30 May 2008

Ubiquitous Technology Part of daily life Increased reliance – especially on Information Technology The Internet - Major Benefits  What would we do without search engines?  What would teenagers do without social networking/Instant Messaging? The Future “Technology of Things”?

Technology and Privacy: The Bigger Picture “You have zero privacy anyway. Get over it” “Surveillance Society” New Technologies Internet, global data flows, global rules?

Technology and Data Protection Data Protection Law developed in response to proliferation of Information Technology Recognition that capacity to process and link personal information could be a threat to privacy Data Protection Law originally applied only to electronic processing of personal information

Eurobarometer 2008 Individual (DS) Concern about Data Protection EU Average % Ireland % Concerned Not Concerned Don’t know / no answer1.41.3

Eurobarometer 2008 Organisations View of Necessity of Data Protection Law Requirements EU Average % Ireland % Tend to agree on necessity9199 Tend to disagree60 Don’t know / No answer30

Technology, Privacy & State Security Shifting balance in “post 9-11” world Data Retention, CCTV, Data Sharing, Border Controls – “Surveillance Society”? Proposed Compulsory biometric ID Card for non-nationals; towards National Identity Card? “Principle of Availability”

Proportionality Are the measures proportionate?  ECHR, DP Convention & Directive  Dangers of mis-identification and improper targeting of population sub-groups  Cost (telecom providers, airlines etc) Function Creep  “organised crime”  Law enforcement access to EURODAC,VIS

Eurobarometer 2008 Anti-Terrorism Phone Call Monitoring: Individual (DS) ViewEU Average % Ireland % No Yes, but only people who are suspected of terrorist activities Yes, but even suspected terrorists should only be monitored under the supervision of a judge or with equivalent safeguards Yes, in all cases Don’t know / No answer31.8

Eurbarometer 2008 Anti-Terrorism Internet Monitoring: Individual (DS) ViewEU Average & Ireland % No Yes, but only people who are suspected of terrorist activities Yes, but even suspected terrorists should only be monitored under the supervision of a judge or with equivalent safeguards Yes, in all cases Don’t know / No answer6.92.5

Privacy and Technology Tension – manageable? Privacy by Design – Privacy Enhancing Technologies Work with Industry Now cheaper to keep data than delete! Security Breach Legislation? How to control State (mis-) use?

Eurobarometer 2008 Organisations’ Use of Enhanced Security for Internet- transferred Data EU Average % Ireland % Yes6788 No3211 Don’t know / No answer22

Future Challenges Education Better Privacy by Design Privacy rights are technology-neutral Global Privacy Rules for the Internet Age

Thank You