Ethics of Security and Surveillance Technologies
Total Page:16
File Type:pdf, Size:1020Kb
ISSN 1830-3595 Ethics Security of and Surveillance Technologies OPINION NO. 28 OF THE EUROPEAN GROUP ON ETHICS IN SCIENCE AND NEW TECHNOLOGIES Brussels, 20 May 2014 Ethics of Security and Surveillance Technologies Brussels, 20 May 2014 Ethics of Security and Surveillance Technologies Brussels, 20 May 2014 Jim Dratwa Chief Editor 28 Opinion No Europe Direct is a service to help you find answers to your questions about the European Union. Freephone number (*): 00 800 6 7 8 9 10 11 (*) The information given is free, as are most calls (though some operators, phone boxes or hotels may charge you). More information on the European Union is available on the Internet (http://europa.eu). Luxembourg: Publications Office of the European Union, 2014 ISBN 978-92-79-37240-7 doi:10.2796/22379 © European Union, 2014 Reproduction is authorised provided the source is acknowledged. Photo © Gstudio Group Printed in Luxembourg PRINTED ON ELEMENTAL CHLORINE-FREE BLEACHED PAPER (ECF) OPINION OF THE EUROPEAN GROUP ON ETHICS IN SCIENCE AND NEW TECHNOLOGIES TO THE EUROPEAN COMMISSION Ethics of Security and Surveillance Technologies No 28 20/05/2014 Reference: Request from President Barroso Rapporteurs: Inez de Beaufort, Linda Nielsen, Siobhán O’Sullivan THE EUROPEAN GROUP ON ETHICS IN SCIENCE AND NEW TECHNOLOGIES (EGE), Having regard to the Treaty on European Union, and in particular Article 6 of the common provisions concerning respect for fundamental rights, Having regard to the Treaty on the functioning of the European Union, and in particular Art- icle 16 concerning the right to the protection of personal data, Having regard to the Charter of Fundamental Rights of the European Union, and in particular Article 1 (Human dignity), Article 3 (Right to the integrity of the person), Article 6 (Right to liberty and security), Article 7 (Respect for private and family life), Article 8 (Protection of personal data), Article 10 (Freedom of thought, conscience and religion) Article 11 (Freedom of expression and information), Article 20 (Equality before the law), Article 21 (Non-discrimination), Article 42 (Right of access to documents), Article 47 (Right to an effective remedy and to a fair trial), Article 48 (Presumption of innocence and right of defence) and 52 (Scope of guaranteed rights) thereof (1), Having regard to the Universal Declaration of Human Rights, in particular Articles 7, 8, 10, 11, 12 and 14 (2), Having regard to the European Convention of Human Rights (ECHR), in particular Article 5 ‘Right to liberty and security’ and Article 8 ‘Right to respect for private and family life’ (3), Having regard to the International Covenant on Civil and Political Rights, in particular Articles 14, 17, 18 and 19 (4), Having regard to Article 6 of the Seventh Framework Programme of the European Union for research, technological development and demonstration activities (2007–2013), which states that ‘All the research activities carried out under the Seventh Framework Programme shall be carried out in compliance with fundamental ethical principles’, Having regard to the Council of Europe Convention on Human Rights and Biomedicine, signed on 4 April 1997 in Oviedo (5), Having regard to the Council of Europe Convention on Cybercrime signed on 23 Novem- ber 2001 which provides for modern and flexible means of international co-operation, (6) (1) Official Journal C 364 of November 2000, pp. 1–22 (2) http://www.worldservice.org/udhr.html#12 (3) http://www.echr.coe.int/Documents/Convention_ENG.pdf (4) http://www.ohchr.org/en/professionalinterest/pages/ccpr.aspx (5) http://conventions.coe.int/Treaty/en/Treaties/Html/164.htm (6) http://conventions.coe.int/Treaty/en/Treaties/Html/185.htm 3 Having regard to the Additional Protocol to the Convention on Cybercrime, concerning the criminalisation of acts of a racist and xenophobic nature committed through computer systems, signed on 28 January 2003 (7), Having regard to Directive 2002/21/EC of the European Parliament and of the Council of 7 March 2002 on a common regulatory framework for electronic communications networks and services (8) (Framework Directive), Having regard to Directive 2002/19/EC of the European Parliament and of the Council of 7 March 2002 on access to, and interconnection of, electronic communications networks and associated facilities (9) (Access Directive), Having regard to Directive 2002/20/EC of the European Parliament and of the Council of 7 March 2002 on the authorisation of electronic communications networks and services (10) Ethics of Security and Surveillance Technologies (Authorisation Directive), Having regard to Directive 2002/22/EC of the European Parliament and of the Council of 7 March 2002 on universal service and users’ rights relating to electronic communications net- works and services (11) (Universal Service Directive), Having regard to the Convention for the Protection of Human Rights and Fundamental Free- doms, 213 U.N.T.S. 222, entered into force Sept. 3, 1953, as amended by Protocols Nos 3, 5, 8 and 11 which entered into force on 21 September 1970, 20 December 1971, 1 January 1990 and 1 No- vember 1998 respectively, especially Article 8 — Right to respect for private and family life (12), Having regard to Directive 2002/58/EC of the European Parliament and of the Council of July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector, Having regard to the Council Regulation (EC) 2252/2004 of 13 December 2004 on standards for security features and biometrics in passports and travel documents issued by Member States (13), Having regard to the Regulation of the European Parliament and of the Council concerning the Visa Information System (VIS) and the exchange of data between Member States on short stay-visas COM (2004) 835 final, Having regard to Directive 2006/24/EC of the European Parliament and of the Council of March 15, 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communications services or of communications networks and amending Directive 2002/58/ECV, (7) http://conventions.coe.int/Treaty/en/Treaties/Html/189.htm (8) OJ L 108, 24.4.2002. (9) OJ L 108, 24.04.2002. (10) OJ L 108, 24.04.2002 (11) OJ L 108, 24.04.2002. (12) http://www1.umn.edu/humanrts/instree/z17euroco.html (13) http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2004:385:0001:0006:EN:PDF 4 Having regard to the ‘Communication from the Commission to the European Parliament and the Council — An area of freedom, security and justice serving the citizens’ (Stockholm pro- gramme) COM (2009) 262/4, Having regard to the European Council (March 2010) Internal security strategy for the EU. Towards a European security model (14), Having regard to Directive 95/46/EC of the European Parliament and of the Council of 24 Oc- tober 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, Having regard to the Commission Decision 2000/520/EC of 26 July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the safe harbour privacy principles and related frequently asked questions issued by the US Department of Commerce (notified under document number C(2000) 2441 (15), Having regard to the Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (16), Having regard to the Council Framework Decision 2008/977/JHA of 27 November 2008 on the protection of personal data processed in the framework of police and judicial cooperation in criminal matters (17), Having regard to the Communication from the Commission to the European Parliament and the Council on the Functioning of the Safe Harbour from the Perspective of EU Citizens and Companies Established in the EU, COM (2013) 847, 27.11.2013 (18), Having regard to the Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems and replacing Council Framework Deci- sion 2005/222/JHA (19), Having regard to the Proposal for a Regulation of the European Parliament and of the Council establishing an Entry/Exit System (EES) to register entry and exit data of third country national crossing the external borders of the Member States of the European Union COM (2013) 95 (20), Having regard to the Proposal COM(2013) 107 final 2013/2014 (COD) for a Decision of the Eu- ropean Parliament and of the Council establishing a space surveillance and tracking support programme (21), (14) http://www.consilium.europa.eu/uedocs/cms_data/librairie/PDF/QC3010313ENC.pdf (15) http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32000D0520:EN:HTML (16) http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2001:008:0001:0022:en:PDF (17) http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2008:350:0060:01:EN:HTML (18) http://ec.europa.eu/justice/data-protection/files/com_2013_847_en.pdf (19) http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2013:218:0008:0014:EN:PDF (20) http://ec.europa.eu/dgs/home-affairs/doc_centre/borders/docs/1_en_act_part1_v12.pdf (21) http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=COM:2013:0107:FIN:EN:PDF 5 Having regard to Council Framework Decision 2008/977/JHA of 27 November 2008 on the pro- tection of personal data