Privacy News Online | Weekly Review: October 16, 2020

Privacy News Online | Weekly Review: October 16, 2020

Location data shouldn’t be accessible to government agencies without a warrant thanks to a 2017 Supreme Court ruling.Court documents from an arson case have revealed that Google regularly gives information to law enforcement on anyone who has searched a particular keyword, including physical addresses.

Q&A: EU's top court rules that UK, French and Belgian mass surveillance regimes must respect privacy

Q&A: EU's top court rules that UK, French and Belgian mass surveillance regimes must respect privacy

Now that the CJEU has decided on the application of EU law in relation to bulk data retention and collection, the cases will be sent back to the national courts for a final decision.

EU laws may not require general and indiscriminate data retention

EU laws may not require general and indiscriminate data retention

On the plus side, the CJEU does say that information and evidence obtained as a result of indiscriminate retention of traffic and location data in breach of EU law should be disregarded in court cases.

EU’s top court limits government spying on citizens’ mobile and internet data

EU’s top court limits government spying on citizens’ mobile and internet data

The groups specifically took issue with the U.K.'s Investigatory Powers Act, a 2015 French decree related to specialized intelligence services, and a Belgian law on collection and retention of communications data that was introduced in 2016.

The Coronavirus (Retention of Fingerprints and DNA Profiles in the Interests of National Security) (No. 2) Regulations 2020

The Coronavirus (Retention of Fingerprints and DNA Profiles in the Interests of National Security) (No. 2) Regulations 2020

(2) The condition is that the fingerprints or DNA profiles are retained in accordance with a national security determination that will (ignoring the effect of these Regulations) cease to have effect on a date during the period that starts with 1st October 2020 and ends with 24th March 2021.

Search engine startup asks users to be the customer, not the product

Search engine startup asks users to be the customer, not the product

More security-conscious users should also be aware of Neeva's Data Retention policy, which simply states "we store the personal information we receive as described in this Privacy Policy for as long as you use our Services or as necessary to fulfill the purposes for which it was collected...

How often does your IP address change without a VPN?

How often does your IP address change without a VPN?

Specifically, the study looks at IP address retention periods of internet service providers (ISPs) around the world.Of the ten countries, the study found that ISPs in the Netherlands showed the highest average IP address retention period at a whopping 36.96 days between IP address changes.

Australian Federal Police calls for audit into its telco data requests

Australian Federal Police calls for audit into its telco data requests

The identified issues relate to record-keeping, authorisations, and reporting of requests under Section 180(2) of the Telecommunications (Interception and Access) Act 1979.The AFP said it undertook an examination of historic documents and records to estimate the extent of the compliance issues, and self-reported to the Commonwealth Ombudsman on 24 January 2020.In a statement, the AFP confirmed the requests were made by ACT Policing and related to the potential identification of a mobile device location during an investigation.

Newsrooms, let's talk about Office 365

Newsrooms, let's talk about Office 365

If your organization has an Office 365 Enterprise subscription, find out what rules your organization has set up in eDiscovery, audit logs, as well as any internal policies your organization may have for administrative data retention and access.

Top EU court’s advisor: bulk surveillance is “disproportionate”, and national security exemptions do not always apply

Top EU court’s advisor: bulk surveillance is “disproportionate”, and national security exemptions do not always apply

Then, in 2016, the CJEU affirmed that decision by ruling specifically that “EU law precludes national legislation that prescribes general and indiscriminate retention of data,” in what is known as the Tele2 Sverige and Watson judgment.

Myths of Email

Myths of Email

Therefore, when considering an offshore email service, it is important to ascertain the status of a government’s independence and the facts pertaining to its privacy and data retention laws.Offshore email services with data retention and weak privacy standards should be avoided.

Firefox Announces New Partner in Delivering Private and Secure DNS Services to Users

Firefox Announces New Partner in Delivering Private and Secure DNS Services to Users

NextDNS Joins Firefox’s Trusted Recursive Resolver Program Committing to Data Retention and Transparency Requirements that Respect User Privacy.Firefox announced a new partnership with NextDNS to provide Firefox users with private and secure encrypted Domain Name System (DNS) services through its Trusted Recursive Resolver Program.

Watchdog group Electronic Frontier Foundation warns people of the dangers of using Slack, the popular work chat app now worth $18 billion

Watchdog group Electronic Frontier Foundation warns people of the dangers of using Slack, the popular work chat app now worth $18 billion

Slack's privacy page explains that with all plans, paid or free, "the default message and file retention setting is to keep everything for as long as the workspace exists.".

EU Quietly Ramps Up Preparations To Re-introduce Blanket Data Retention After Top Court Threw It Out In 2014

EU Quietly Ramps Up Preparations To Re-introduce Blanket Data Retention After Top Court Threw It Out In 2014

In the second version, the Council of the EU is much more assertive: The rulings of the European Court of Justice in the cases Digital Rights Ireland and Tele 2, which set out the criteria for the lawful retention of data and access thereof are of fundamental importance in this context.

Media Alert: Court Hearing Wednesday on Law Enforcement Retention of DNA Profiles from Innocent Californians

Media Alert: Court Hearing Wednesday on Law Enforcement Retention of DNA Profiles from Innocent Californians

San Francisco – At 9:30 am on Wednesday, May 1, the Electronic Frontier Foundation (EFF) and the Law Office of Michael T. They filed the suit against the state of California to challenge its retention of genetic profiles from people arrested but never convicted of any crime.

DNS-over-HTTPS Policy Requirements for Resolvers

DNS-over-HTTPS Policy Requirements for Resolvers

Those resolvers will be required to conform to a specific set of policies that put privacy first. In publishing this policy, our goal is to encourage adherence to practices for DNS that respect modern standards for privacy and security.

The ‘Unreality’ of Russian Internet Censorship — Is There an Escape?

The ‘Unreality’ of Russian Internet Censorship — Is There an Escape?

Some bigger providers, such as PIA, had their websites blocked in Russia Thus, VPN is the most popular way to fight growing internet censorship in Russia and other restricted countries.

Social Justice Organizations Challenge Retention of DNA Collected from Hundreds of Thousands of Innocent Californians

Social Justice Organizations Challenge Retention of DNA Collected from Hundreds of Thousands of Innocent Californians

San Francisco - Two social justice organizations—the Center for Genetics and Society and the Equal Justice Society—and an individual plaintiff, Pete Shanks, have filed suit against the state of California for its collection and retention of genetic profiles from people arrested but never convicted of any crime.

Scottish Government to Delete Biometric Data After Retention Periods • Digit

Scottish Government to Delete Biometric Data After Retention Periods • Digit

Because retaining biometric data is deemed in opposition with a citizen’s right to privacy, the Scottish government is taking the approach that following the end of a prescribed retention period all records will be deleted, including those held as backup or copied and stored elsewhere.