Articles for category: Europa

Foreseeability and the Rule of Law in Data Protection after the PNR judgment

The rule of law cannot be reconciled with the existence of secret laws, unclear laws and laws which cannot be obeyed. However, this may be difficult to realise in practice, where full transparency is at odds with the legislative goals; where a certain degree of flexibility of rules is necessary to address changing circumstances, in which these rules function; and where a disconnect occurs between the visions of the lawmaker and reality created by modern technologies that are utilized to pursue them. The CJEU's ruling in Lige des droits humains on Passenger Name Record Directive underscores the difficulty of foreseeability of algorithmic measures and the rule of law.

The European Legal Architecture on Security

As the European legal architecture on internal security is being built around large-scale databases, AI tools and other new technologies, the relationship between the public and private sectors has become increasingly complex. We examine one aspect of the Court of Justice of the European Union’s recent judgment in Ligue des droits humains, namely the data protection rules applicable to cooperation between the public and private entities in personal data sharing. The judgment enhances the ‘personal data autonomy’ of individuals and requires public authorities to justify to a high standard any obligations it seeks to place on the private sector to share personal data related, directly or indirectly, to travel by air.

Taiwan’s Participatory Plans for Platform Governance

Platform regulation is not limited to Europe or the United States. Although much debate currently focuses on the latest news from Brussels, California, or Washington, other important regulatory ideas emerge elsewhere. One particularly consequential idea can be found in Taiwan. Simply put, Taiwan wants to, tacitly, democratize platform governance. Concretely, Taiwan wanted to establish a dedicated body that would potentially facilitate far-reaching civil society participation and enable ongoing citizen involvement in platform governance. This article explains what discourses about platform governance can learn from Taiwan and how vivid democratic discourse shapes platform governance beyond traditional regulatory models.

Caution: Safeguards may appear more robust than they are

At a time when the European security architecture is evolving, and when national lawmakers must pay greater attention to an evolving set of common standards and safeguards to prevent disproportionate government access to data, it is essential to shed critical light on their implementation in actual practice. As different as the EU PNR Directive and the German legal framework are, they both include provisions that seek to prevent disproportionate government access and to ensure effective and independent review of data collection and subsequent data processing.

Passengers Name Records and Security

The EU Passenger Name Records Directive is based on the logic of preventive security. Th CJEU ruling, Ligue des droits humains, offers an opportunity for national judges to question more radically the idea of generalised preventive security that seeks to anticipate human behaviour through the creation of risk profiles and statistical correlations (instead of causality).

Machine learning and profiling in the PNR system

Automated processing of personal data, which is what Passenger Name Record data are, can lead to forms of profiling; certain individuals or groups of people are more likely to be excluded based on the transfer of their data than others. In its Passenger Name Record judgment, the CJEU extensively discusses discrimination risks, and it set a number of conditions to prevent them. Unfortunately, not all of its considerations are perfectly clear and some of the solutions the CJEU proposes are not entirely satisfactory.

The Future of the European Security Architecture: A Debate Series

This debate series is dedicated to Ligue des Droits Humains – a case in which the Court of Justice of the European Union decided on the fate of one of the main drivers of this development: the Directive on on the use of passenger name record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime. The PNR Directive, being one of the first major EU-wide examples of predictive policing, is not just interesting in itself. It exemplifies the emergence and gradual consolidation of a new security architecture in Europe.

The Ukrainian Grain Imports Saga

Poland and Hungary, later joined by Bulgaria, Slovakia and Romania, decided to unilaterally halt the imports of grain and other food products from Ukraine to protect their domestic farmers. The European Commission quickly announced that “trade policy is of EU exclusive competence and, therefore, unilateral actions are not acceptable”. At the same, however, the Commission’s spokesperson also considered that it was “too early” to comment on the legal implications of the Member States’ actions. Instead, the Commission adopted a pragmatic approach. It quickly announced a new support package for EU farmers affected by the increased supply of Ukrainian agricultural products and proposed additional measures to ensure the transit of Ukrainian grain exports to destinations outside of the Union. Significantly, it also added that this package “is subject to Member States lifting their unilateral measures”. This creates a very cynical situation, in the sense that an infringement of EU law may be instrumental to reach a better deal.

Flexible Responsibility or the End of Asylum Law as We Know It?

On March 21 2023, the Council released a revised draft proposal for an Asylum and Migration Management Regulation (AMMR). It reintroduces the concept of ‘flexible responsibility’ — or ‘adaptable responsibility’ — into the EU’s migration management. Already included in the controversial Instrumentalisation Regulation of 14 December 2021, flexible responsibility is the idea that Member States should be allowed to derogate from normally applicable asylum standards when faced with sudden migratory pressures. While the Instrumentalisation Regulation was rejected in December 2022, this post will detail how the new AMMR draft threatens to reintroduce the idea of flexible/adaptable derogations — including, potentially, those originally foreseen in the Instrumentalisation Regulation — into the EU’s asylum framework and why we should reject it.

If the EU Picks Baby Genes

Which genes should children not inherit? This is a fundamental question. It arises acutely in medically assisted reproduction, such as in-vitro fertilization (IVF) or artificial insemination. One must frequently choose between different donors, sperm, eggs or embryos. The EU wishes to draw this line. However, Its proposed Substances of Human Origin Regulation (‘SoHO’) treads into delicate ethical and political territory, without properly addressing, or even mentioning, crucial ethical questions. This leads the EU to silently take three controversial positions: the proposal excludes most ethical considerations; it draws the line vaguely and below existing ethical standards; and it makes genetic selection mandatory in genetically assisted reproduction.