the right to be forgotten

81
The right to be forgotten Francesco Bonadiman [email protected] Craig Kershaw [email protected] 15 January 2015 Quality and Usability (Privacy) Seminar

Upload: francesco-bonadiman

Post on 16-Jul-2015

597 views

Category:

Technology


5 download

TRANSCRIPT

Page 1: The Right to be Forgotten

The right to beforgotten

Francesco [email protected]

Craig [email protected]

15 January 2015Quality and Usability (Privacy) Seminar

Page 2: The Right to be Forgotten

2014 2.3 zettabytes /day

mmedia.is

2

Page 3: The Right to be Forgotten

2014 2.3 zettabytes /day

Should this information be

forgotten at some point?

mmedia.is

2

Page 4: The Right to be Forgotten

“My own business always bores me to death; I prefer other

people’s.”

a3.files.biography.com

Oscar Wilde

3

Page 5: The Right to be Forgotten

Who hasn’t “Googled” themselves?

“My own business always bores me to death; I prefer other

people’s.”

a3.files.biography.com

Oscar Wilde

3

Page 6: The Right to be Forgotten

Example Cases

origin.arstechnica.com

4

Stacy Snyder

Page 7: The Right to be Forgotten

Example Cases

Stacy Snyder Virginia Da Cunha

origin.arstechnica.com 2.bp.blogspot.com

4

Page 8: The Right to be Forgotten

Mario Costeja González

cdn-lejdd.ladmedia.fr

5

Page 9: The Right to be Forgotten

Privacy

A “Right to be Forgotten”?

Liable? →

webseoanalytics.com

6

Page 10: The Right to be Forgotten

What is the right to be forgotten?

Page 11: The Right to be Forgotten

rack.3.mshcdn.com

“The right to silence on past events in life that are no longer occurring”

8

Page 12: The Right to be Forgotten

New technologies

‘Default of forgetting’

gradually shifted towards

‘Default of remembering’

9

Page 13: The Right to be Forgotten

Keep data for as long as needed and then

destroy or archive

movie-hound.com

10

Page 14: The Right to be Forgotten

Keep data for as long as needed and then

destroy or archive

Express yourself freely without fear!

movie-hound.com

10

Page 15: The Right to be Forgotten

Protections?

falkondigital.com

What if we later regret what we post?

11

Page 16: The Right to be Forgotten

Protections?

falkondigital.com

What if we later regret what we post?

Few protections againstrevenge-porn / poor judgement

11

Page 17: The Right to be Forgotten

Protections?

falkondigital.com

EU ruling allows citizens to apply for outdated information to be removed from search results

12

Page 18: The Right to be Forgotten

Responsibility?

Re-posts or re-tweets?

Search engine de-indexing?

pfhub.com

13

Page 19: The Right to be Forgotten

Drawbacks

Page 20: The Right to be Forgotten

Privacy Issues

Appear too late

Impossible to predict all negative consequences

No change in behaviour

15

Page 21: The Right to be Forgotten

Threat to Free Speech?

images.flatworldknowledge.com

Subtle Censorship

16

Page 22: The Right to be Forgotten

Threat to Free Speech?

images.flatworldknowledge.com

Subtle CensorshipImportant information → - Inaccessible - Incomplete- Misrepresentative

16

Page 23: The Right to be Forgotten

Threat to Free Speech?

Public interest in remembrance

images.flatworldknowledge.com

17

Page 24: The Right to be Forgotten

Threat to Free Speech?

Public interest in remembrance

Culture is memory

images.flatworldknowledge.com

17

Page 25: The Right to be Forgotten

Threat to Free Speech?

Public interest in remembrance

Culture is memory

Freedom of expression

images.flatworldknowledge.com

17

Page 26: The Right to be Forgotten

Third Parties

Data mining

wp.streetwise.co

18

Page 27: The Right to be Forgotten

Third Parties

Data mining

Re-blogging

wp.streetwise.co

18

Page 28: The Right to be Forgotten

Third Parties

Data mining

Re-blogging

Untrackable

wp.streetwise.co

18

Page 29: The Right to be Forgotten

Recent Privacy Scandals

Individuals have a complete lack of control over their data in practice

ytnetwork.com - rt.com

19

Page 30: The Right to be Forgotten

Scope

Contractual relationship

hse.gov.uk

20

Page 31: The Right to be Forgotten

Scope

Contractual relationship

What if data is needed (legally) without an individual’s consent?

hse.gov.uk

20

Page 32: The Right to be Forgotten

The Dawn

deviantart.net

Page 33: The Right to be Forgotten

Previous Legislation

Directive 95/46/EC → Internet protection

falkondigital.com

22

Page 34: The Right to be Forgotten

Previous Legislation

Directive 95/46/EC → Internet protection

“Right to forget” → don’t revive old events

falkondigital.com

22

Page 35: The Right to be Forgotten

Previous Legislation

Directive 95/46/EC → Internet protection

“Right to forget” → don’t revive old events

French Code → criminals“droit à l’oubli” + rehab

falkondigital.com

22

Page 36: The Right to be Forgotten

Previous Legislation

Directive 95/46/EC → Internet protection

“Right to forget” → don’t revive old events

French Code → criminals“droit à l’oubli” + rehab

ECHR: balance betweenPrivacy ⇔ Right to speech

falkondigital.com

22

Page 37: The Right to be Forgotten

May 2014

persecutionofahmadis.org

“suppress search-results for

privacy-related reasons”

23

Page 38: The Right to be Forgotten

May 2014

persecutionofahmadis.org

“suppress search-results for

privacy-related reasons”

“inadequate or no longer relevant” = no public interest

23

Page 39: The Right to be Forgotten

vs

bvoed.degoogle.com

right to be forgotten

de-indexed

24

Page 40: The Right to be Forgotten

vs

bvoed.degoogle.com

right to be forgotten

de-indexed

person’s name ≠ keyword

24

Page 41: The Right to be Forgotten

vs

bvoed.degoogle.com

right to be forgotten

de-indexed

ISSUE #1past life online if less relevant?

person’s name ≠ keyword

24

Page 42: The Right to be Forgotten

vs

bvoed.degoogle.com

right to be forgotten

de-indexed

ISSUE #1past life online if less relevant?

person’s name ≠ keyword

ISSUE #2search engines = offline world?

24

Page 43: The Right to be Forgotten

s3.amazonaws.com

no control → robot

25

Page 44: The Right to be Forgotten

s3.amazonaws.com

no control → robot

economic interests = secondary

25

Page 45: The Right to be Forgotten

s3.amazonaws.com

no control → robot

legal responsibility for results?

economic interests = secondary

25

Page 46: The Right to be Forgotten

s3.amazonaws.com

no control → robot

Google’s businesses?

legal responsibility for results?

economic interests = secondary

25

Page 47: The Right to be Forgotten

What did the Court say?

Page 48: The Right to be Forgotten

quickmeme.com

Page 49: The Right to be Forgotten

Domains

Ruling applied to European domains

youreuropemap.com

28

Page 50: The Right to be Forgotten

Domains

Ruling applied to European domains

youreuropemap.com

but not to .com!

28

Page 51: The Right to be Forgotten

Domains

Ruling applied to European domains

youreuropemap.com

but not to .com!

→ new guidelines!(circumnavigation)

28

Page 52: The Right to be Forgotten

Balkanizationaccentuate differences

lookintoit.org

29

Page 53: The Right to be Forgotten

Balkanization

cdn.static-economist.com

Webform request6 months: 175k (~60% OK)accentuate differences

lookintoit.org

29

Page 54: The Right to be Forgotten

techweekeurope.co.uk

30

Page 55: The Right to be Forgotten

techweekeurope.co.uk

30

PRIVACYSPEECH

CONFLICT

Page 56: The Right to be Forgotten

techweekeurope.co.uk

government involvement

PRIVACYSPEECH

CONFLICT

30

Page 57: The Right to be Forgotten

techweekeurope.co.uk

government involvement

“fail to enforce privacy rights”

PRIVACYSPEECH

CONFLICT

30

Page 58: The Right to be Forgotten

techweekeurope.co.uk

freedom of expression government

involvement

“fail to enforce privacy rights”

PRIVACYSPEECH

CONFLICT

30

Page 59: The Right to be Forgotten

techweekeurope.co.uk

freedom of expression

society and civic values

government involvement

“fail to enforce privacy rights”

PRIVACYSPEECH

CONFLICT

30

Page 60: The Right to be Forgotten

techweekeurope.co.uk

freedom of expression

society and civic values

government involvement

“fail to enforce privacy rights”

PRIVACYSPEECH

CONFLICT

one’s criminal history = public

30

Page 61: The Right to be Forgotten

Controversies

Practicality of international human right→ Access information?

31

Page 62: The Right to be Forgotten

Controversies

Practicality of international human right→ Access information?

Turn public into private after time → Privacy?

31

Page 63: The Right to be Forgotten

Controversies

Practicality of international human right→ Access information?

Turn public into private after time → Privacy?

Bureaucratic nightmare → companies

31

Page 64: The Right to be Forgotten

Public life

jerrymabbott.com

Past political comments?Transparency?

32

Page 65: The Right to be Forgotten

Public life

jerrymabbott.com

Past political comments?Transparency?

High School poems?

32

Page 66: The Right to be Forgotten

Public life

jerrymabbott.com

Past political comments?Transparency?

High School poems?

Retreat into anonimity?

32

Page 67: The Right to be Forgotten

Criminal records

How relevant after time?

lacriticacritica.comsteve-lovelace.com

33

Page 68: The Right to be Forgotten

Criminal records

How relevant after time?

World War II

lacriticacritica.comsteve-lovelace.com

33

Page 69: The Right to be Forgotten

Criminal records

How relevant after time?

World War II

Ruling party of GDR

lacriticacritica.comsteve-lovelace.com

33

Page 70: The Right to be Forgotten

Solution (?)

Expiration dates!

3.bp.blogspot.com

34

Page 71: The Right to be Forgotten

Solution (?)

Expiration dates!

Who deletes the information?Difficult to apply

3.bp.blogspot.com

34

Page 72: The Right to be Forgotten

Conclusions

Convergence in views between US and EU

imageshack.us

35

Page 73: The Right to be Forgotten

Conclusions

Convergence in views between US and EU

Balance privacy ⇔ freedom

imageshack.us

35

Page 74: The Right to be Forgotten

Conclusions

Convergence in views between US and EU

Balance privacy ⇔ freedom

Trade-off sharing ⇔ services

imageshack.us

35

Page 75: The Right to be Forgotten

Conclusions

Convergence in views between US and EU

Balance privacy ⇔ freedom

Trade-off sharing ⇔ services

Internet → Free and open as now?imageshack.us

35

Page 76: The Right to be Forgotten

fineartamerica.com

Funes the Memorious

36

Page 77: The Right to be Forgotten

fineartamerica.com

Funes the Memorious

“Present is worthless”36

Page 78: The Right to be Forgotten

jrbenjamin.com

“Without forgetting it is quite impossible to live at all”

37

Page 79: The Right to be Forgotten

Thanks!

Page 80: The Right to be Forgotten

References1. Bygrave L., A right to be forgotten?, Communications of the ACM, 20152. Ausloos J., The ‘Right to be Forgotten’ - Worth Remembering?, Forthcoming Computer Law

& Security Review, 20123. de Terwangne. C, Internet Privacy and the Right to Be Forgotten/Right to Oblivion, Revista de

los Estudios de Derecho y Ciencia Política de la UOC, 20124. Wagner M., Li-Reilly Y., The right to be forgotten, The Advocate, 20145. Weber R., The Right to Be Forgotten: More Than a Pandora’s Box?, JIPITEC, 20116. Bennett S., The "Right to Be Forgotten": Reconciling EU and US Perspectives, Berkeley Journal

of International Law, 20127. Rosen J., The Right to Be Forgotten, Stanford Law Review, 20128. wsj.com/articles/eu-says-google-should-extend-right-to-be-forgotten-to-com-websites-

1417006254 - The Wall Street Journal9. theguardian.com/technology/2014/nov/27/eu-to-google-expand-right-to-be-forgotten-

to-googlecom - The Guardian10. wikipedia.org/wiki/Right_to_be_forgotten - Wikipedia

39

Page 81: The Right to be Forgotten

Discussion

Might forgetting be a good thing?

And if yes, after how long?

Should ISP determine whether a piece of information should be forgotten?

40