Stories from Abroad

US companies are largely unprepared for what's about to hit them when sweeping new European Union data laws take effect in 2018. The regulation — the General Data Protection Regulation (or GDPR) — is intended to give users more control of how their personal data is used and streamline data processes across the EU. Companies that fail to comply with the complex law will face steep fines of up to 4% of their global annual revenue.

Europe has by far taken the most aggressive regulatory stance on protecting consumer privacy and will in many ways be a litmus test for regulating the currency of the data economy. It impacts a huge number of businesses from advertisers to e-commerce platforms whose data flows through EU countries. That means everyone from Google to your neighbor who sells shoes on eBay could be affected.

BT has offered to spend up to £600 million to connect the final 1 million homes and businesses in rural areas of Britain to a broadband connection suitable for most needs.

The company said every home and business in the UK would have a broadband speed of at least 10 megabits per second (Mbps), fast enough to stream movies, video conference and browse the web. Properties will either be connected via the Openreach network through fibre-optic cables, the network of copper lines, or through the fixed wireless system, where connections use radio and, in some cases, satellite signals. BT said the cost of its plan would be between £450m and £600m and that 99 per cent of homes and businesses will be connected by 2020. BT made the offer after the government committed to a 10Mbps target under a Universal Service Obligation (USO). The government said it would now consider BT’s plan, while also conducting a consultation into whether it should introduce the USO in regulation.

The political landscape in France is worrisomely ripe for the enactment of new laws or policies that could undermine the security of encrypted products and services in the name of national security. France has a new president, Emmanuel Macron, who has taken an aggressive stance on encryption and allied himself with UK Prime Minister Theresa May, another hawk on the issue. Meanwhile, French law enforcement officials continue their multi-year push—including in the New York Times and at the EU level—for legislation that would ensure that they can always obtain the encrypted data they seek. Under these conditions, it seems that the encryption debate in France is just beginning—and could end abruptly in favor of backdoors in the face of another major terror attack.

[Commentary] Legislation or regulations requiring companies to remove content pose a range of risks, including potentially legitimizing repressive measures from authoritarian regimes. Hate speech, political propaganda, and extremist content are subjective, and interpretations vary widely among different governments. Relying on governments to create and enforce regulations online affords them the opportunity to define these terms as they see fit. Placing the power in the hands of governments also increases the likelihood that authoritarian regimes that lack Germany's liberal democratic tradition will criminalize online content critical of those governments and, ultimately, create another mechanism for oppressing their own citizens.

Instead of government intervention, civil society should recognize and build upon the efforts of platforms that address these issues, while also pressing companies to step up to do even more.

[Tara Wadhwa is the associate director of the NYU Stern Center for Business and Human Rights. Gabriel Ng is a fellow at the Center]

Software made by foreign companies to help Chinese users skirt the country’s system of internet filters has vanished from Apple’s app store on the mainland. One company, ExpressVPN, posted a letter it received from Apple saying that its app had been taken down “because it includes content that is illegal in China.” Another posted a message on its official account that its app had been removed. A search showed that some of the most popular foreign virtual-private networks, also known as VPNs, which give users access to the unfiltered internet in China, were no longer accessible on Apple’s app store there. ExpressVPN wrote that the removal was “surprising and unfortunate.” It added, “We’re disappointed in this development, as it represents the most drastic measure the Chinese government has taken to block the use of VPNs to date, and we are troubled to see Apple aiding China’s censorship efforts.”

Free Basics, Facebook’s free, limited internet service for developing markets, is neither serving local needs nor achieving its objective of bringing people online for the first time. That’s according to research by citizen media and activist group Global Voices which examined the Free Basics service in six different markets – Colombia, Ghana, Kenya, Mexico, Pakistan and Philippines – to see whether it was serving the intended audience. Free Basics is a Facebook-developed mobile app that gives users access to a small selection of data-light websites and services. The websites are stripped of photos and videos and can be browsed without paying for mobile data. The Global Voices report identifies a number of weaknesses in the service, including not adequately serving the linguistic needs of local populations; featuring a glut of third-party services from private companies in the US; harvesting huge amounts of metadata about users and violating the principles of net neutrality.

In June, Canada's Supreme Court came down on Google—hard. It ruled that the tech giant must take down certain Google search results for pirated products. And not just in Canada, but globally. Now, Google is going south of the Canadian border to push back on this landmark court ruling.

The tech giant filed an injunction July 24 with the US District Court for Northern California, arguing that globally removing the search results violates US law, and thus Google should not be forced to comply with the Canadian ruling. Because the case had already made its way to the highest court in Canada, Google should have not been able to fight the ruling. But Google is hoping to find a loophole on American soil by arguing this violates the First Amendment. “We’re taking this court action to defend the legal principle that one country shouldn’t be able to decide what information people in other countries can access online,” says David Price, senior product counsel at Google. “Undermining this core principle inevitably leads to a world where internet users are subject to the most restrictive content limitations from every country.”

The average South Korean can choose between three major private internet providers –SKT, KT and LG U+ – and pay less than $30 a month for the fastest internet in the world. That’s $17 less than what the average American pays for a much slower internet hookup. But why? How is it possible that the citizens of the last developed democracy have a faster and more affordable internet than Americans? The simple answer to this question is that in the 1990s South Koreans decided that their country needed a fast and affordable internet provided by a vibrant private sector, and there was the political willingness, and a national plan, to achieve that goal.

[I]t is particularly important that the United States and Caribbean nations collaborate. Our countries share many common interests and significant cultural and economic ties. The U.S. is the leading trading partner for the Caribbean, and we have benefitted greatly from the contributions of the Caribbean diaspora community in the United States. Unlike baseball, this is not a game where there is only one winner. When we expand opportunity and enhance security in one nation, the benefits can flow throughout the region. Recognizing these benefits, Congress last year made it the official policy of the United States to increase engagement with government leaders, the private sector, and civil society groups in the Caribbean region. I am proud to be here in the spirit of this law and want you to know that Chairman Pai is committed to enhancing the FCC’s engagement with the Caribbean region.

The European Union’s top court is set to decide whether the bloc’s “right to be forgotten” policy stretches beyond Europe’s borders, a test of how far national laws can—or should—stretch when regulating cyberspace. The case stems from France, where the highest administrative court on July 19 asked the EU’s Court of Justice to weigh in on a dispute between Alphabet's Google and France’s privacy regulator over how broadly to apply the right, which allows EU residents to ask search engines to remove some links from searches for their own names.

At issue: Can France force Google to apply it not just to searches in Europe, but anywhere in the world? The case will set a precedent for how far EU regulators can go in enforcing the bloc’s strict new privacy law. It will also help define Europe’s position on clashes between governments over how to regulate everything that happens on the internet—from political debate to online commerce. France’s regulator says enforcement of some fundamental rights—like personal privacy—is too easily circumvented on the borderless internet, and so must be implemented everywhere. Google argues that allowing any one country to apply its rules globally risks upsetting international law and, when it comes to content, creates a global censorship race among autocrats.