A Comparison Of The EU And US Legislation Of Electronic Surveillance Activities And The Response Of Private Companies In The Aftermath Of Snowden’s Revelations

dc.contributor.authorAdamopoulou, Alikien
dc.date.accessioned2015-06-29T14:39:04Z
dc.date.available2015-09-27T05:57:56Z
dc.date.issued2015-06-29
dc.identifier.urihttps://repository.ihu.edu.gr//xmlui/handle/11544/557
dc.rightsDefault License
dc.titleA Comparison Of The EU And US Legislation Of Electronic Surveillance Activities And The Response Of Private Companies In The Aftermath Of Snowden’s Revelationsen
heal.abstractThis dissertation was written as part of the LLM in Transnational and European Commercial Law & Alternative Dispute Resolutions at the International Hellenic University. In summer 2013, Edward Snowden, revealed the operation of a number of mass surveillance programs conducted in violation of the legal preconditions by NSA in collaboration with GCHQ. The leaks disclosed the operation of PRISM and TEMPORA programs through which the Intelligence Agencies were obtaining direct access on major high tech companies’ servers in order to indiscriminately collect their users’ personal data, operating (via these programs) a large-scale and illegal espionage of almost everyone. Snowden’s scandal brought up in the timeliness the legal regime under which US and EU electronic surveillance is conducted. In US, surveillance activities are regulated by USA Patriot Act 2001, FISA and Executive Order 12333. Generally, in US while a warrant is needed for US-persons, warrantless access is permitted for non-US persons. In EU regime, TFEU provides that a Member State’s surveillance activities are regulated by its national law and not by the EU law. This exemption though does not apply when a third country’s surveillance authorities assert access to EU citizens’ data. Such access is regulated by EU law and takes place after the transfer of data from an EU company to a company outside EU. Data Protection Directive provides for such transfers only if the third country assures an adequate level of protection or if the controller adduces adequate safeguards. In the case of US, Commission decided that this adequacy is provided by Safe Harbor principles. Safe Harbor, though, has been subject to extent criticism concerning the level of adequacy it provides, a criticism that has turned out to be totally justifiable since it became one of the instruments for NSA’s mass surveillance activities. The Draft General Data Protection Regulation includes significant amendments concerning the transfer of data to a third country and the disclosures to a third country’s authority of EU citizens’ personal data. Mass surveillance scandal inevitably affected private companies with negative effects both on their reputation and economic growth. As a response private companies -ivstarted issuing transparency reports via which they disclose mainly the government requests they receive in relation to their users’ data. However these reports do not correspond to the transparency principle’s obligations and cannot be evaluated as an effective means of transparency.en
heal.academicPublisherSchool of Economic and Business Administration,LL.M in Transnational and European Commercial Law and Alternative Dispute resolutionsen
heal.academicPublisherIDihu
heal.accessfreeel
heal.advisorNameKosta, Dr. Elenien
heal.bibliographicCitationAdamopoulou Aliki ,2015, A Comparison Of The EU And US Legislation Of Electronic Surveillance Activities And The Response Of Private Companies In The Aftermath Of Snowden’s Revelations, Master's Dissertation, International Hellenic Universityen
heal.committeeMemberNameKosta, Dr. Elenien
heal.committeeMemberNameAlexandropoulou, Prof. Dr. Evgeniaen
heal.committeeMemberNameKomninos, Komniosen
heal.fullTextAvailabilityfalse
heal.languageen
heal.licensehttp://creativecommons.org/licenses/by-nc/4.0
heal.numberOfPages50
heal.publicationDate2015-02
heal.recordProviderSchool of Economics, Business Administration and Legal Studies, LLM in Transnational and European Commercial Law, Mediation, Arbitration and Energy Law
heal.tableOfContentsAbstract .............................................................................................................................. iii Contents .............................................................................................................................. v 1. Introduction ..................................................................................................................... 1 2. Global Electronic Surveillance Scandal .............................................................................. 1 2.1. PRISM PROGRAM ..................................................................................................................... 2 2.2. TEMPORA PROGRAM ................................................................................................................ 4 2.3. THE IMPACT OF THE SCANDAL ON PRIVATE COMPANIES ................................................................. 6 3. EU & US Law Regulating Intelligence Agencies’ Access to Data Stored & Processed by Private Companies, Their Differences & Their Impact on Private Companies .......................... 7 3.1. US LAW ................................................................................................................................. 7 3.1.1. Section 215 of the USA-Patriot Act 2001 ..................................................................... 8 3.1.2. Section 702 FISA .......................................................................................................... 8 3.1.3. Executive Order 12333 ................................................................................................ 9 3.2. EU LAW ............................................................................................................................... 10 3.2.1. Articles 4(2), 276, 72 &73 TFEU ................................................................................. 10 3.2.2. Article 67 (3) TFEU ..................................................................................................... 11 3.2.3. A29WP on Surveillance of Electronic Communications for Intelligence and National Security Purposes................................................................................................................. 12 3.2.4. EU Law Concerning a Third Country’s Surveillance Authorities Access on EU Citizens Data Stored and Processed by Private Companies .............................................................. 13 3.2.4.1. Articles 25(1) & 26(2) DPD ................................................................................. 14 3.2.4.2. Safe Harbor Agreement ...................................................................................... 15 3.2.4.3. Safe Harbor as an Instrument for NSA’s Mass Surveillance Activities ............... 16 3.2.5. General Data Protection Regulation ......................................................................... 17 3.2.5.1. New Provisions for Transfer of Data to Third Countries .................................... 17 3.2.5.2. The New Article 43(a) ......................................................................................... 19 3.2.5.3. Data Protection Regulation – The Current State ................................................ 20 3.3. THE DIFFERENCES BETWEEN EU & US LEGISLATION GOVERNING SURVEILLANCE AUTHORITIES’ ACCESS & THEIR IMPACT ON PRIVATE COMPANIES ........................................................................................ 21 4. The Response of Private Companies to the Mass Surveillance Scandal ............................. 23 4.1. DATA PROTECTION PRINCIPLES ................................................................................................. 23 4.2. TRANSPARENCY PRINCIPLE ....................................................................................................... 24 4.3. ACCOUNTABILITY PRINCIPLE IN DATA PROTECTION ...................................................................... 26 -vi- 4.4. TRANSPARENCY AND ACCOUNTABILITY IN GENERAL DATA PROTECTION REGULATION ........................ 29 4.5. MEASURES TO ACHIEVE ACCOUNTABILITY .................................................................................. 31 4.6. TRANSPARENCY REPORTS AS A RESPONSE TO THE MASS SURVEILLANCE SCANDAL ............................. 32 4.7. AN EVALUATION OF TRANSPARENCY REPORTS AS A RESPONSE TO MASS SURVEILLANCE ACTIVITIES ..... 35 5. Conclusions .................................................................................................................... 38 References ......................................................................................................................... 40en
heal.typemasterThesis

Αρχεία

Φάκελος/Πακέτο αδειών

Τώρα δείχνει 1 - 1 από 1
Δεν υπάρχει διαθέσιμη μικρογραφία
Ονομα:
license.txt
Μέγεθος:
8.15 KB
Μορφότυπο:
Item-specific license agreed upon to submission
Περιγραφή:

Συλλογές