{"id":104262,"date":"2024-06-03T03:00:00","date_gmt":"2024-06-03T07:00:00","guid":{"rendered":"https:\/\/cdt.org\/?post_type=insight&#038;p=104262"},"modified":"2024-05-31T16:10:22","modified_gmt":"2024-05-31T20:10:22","slug":"eu-tech-policy-brief-june-2024","status":"publish","type":"insight","link":"https:\/\/cdt.org\/insights\/eu-tech-policy-brief-june-2024\/","title":{"rendered":"<strong>EU Tech Policy Brief: June 2024<\/strong>"},"content":{"rendered":"\n<p><em>Welcome back to the Centre for Democracy &amp; Technology Europe\u2018s Tech Policy Brief. This edition covers the most pressing technology and internet policy issues under debate in Europe, the U.S., and internationally, and gives CDT\u2019s perspective on the impact to digital rights. To sign up for CDT Europe\u2019s AI newsletter, <a href=\"https:\/\/cdt.org\/email-signup\/\">please visit our website<\/a>. Do not hesitate to contact our team in Brussels: <a href=\"https:\/\/cdt.org\/staff\/asha-allen\/\">Asha Allen<\/a>, <a href=\"https:\/\/cdt.org\/staff\/silvia-lorenzo-perez\/\">Silvia Lorenzo Perez<\/a>, <a href=\"https:\/\/cdt.org\/staff\/laura-lazaro-cabrera\/\">Laura Lazaro Cabrera<\/a>, <a href=\"https:\/\/cdt.org\/staff\/aimee-duprat-macabies\/\">Aim\u00e9e Duprat-Macabies<\/a>, <a href=\"https:\/\/cdt.org\/staff\/david-klotsonis\/\">David Klotsonis<\/a>, and <a href=\"https:\/\/cdt.org\/staff\/jonathan-schmidt\/\">Jonathan Schmidt<\/a>.<\/em><\/p>\n\n\n\n<p><strong>\ud83d\udc41\ufe0f Security, Surveillance &amp; Human Rights<\/strong><\/p>\n\n\n\n<p>On 15 May, CDT Europe hosted a <a href=\"https:\/\/cdt.org\/insights\/cdt-europe-hosts-online-panel-event-exploring-ways-forward-to-combat-spyware-in-the-eu\/\">high-level panel<\/a> reflecting on the Pegasus scandal, its revelations about the dangers of government surveillance, and ways to combat spyware in the EU going forward. While the European Parliament adopted the <a href=\"https:\/\/www.europarl.europa.eu\/doceo\/document\/B-9-2023-0260_EN.html\">PEGA Committee\u2019s report<\/a> and recommendations in 2023, significant EU-level action against civilian-targeted spyware is still lacking. In October 2023, the Council of Europe\u2019s Parliamentary Assembly urged the EU to collaborate on setting standards and monitoring data protection and surveillance practices.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignleft size-medium is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/2024-CDT-Europe-Spyware-Event-Panellists-640x263.jpeg\" alt=\"Screenshot of five speakers, including CDT Europe Deputy Director Asha Allen at far left, during CDT Europe\u2019s online high-level event on spyware.\" class=\"wp-image-104264\" width=\"541\" height=\"222\" srcset=\"https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/2024-CDT-Europe-Spyware-Event-Panellists-640x263.jpeg 640w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/2024-CDT-Europe-Spyware-Event-Panellists-768x316.jpeg 768w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/2024-CDT-Europe-Spyware-Event-Panellists.jpeg 800w\" sizes=\"(max-width: 541px) 100vw, 541px\" \/><figcaption class=\"wp-element-caption\">Screenshot of five speakers, including CDT Europe Deputy Director Asha Allen at far left, during CDT Europe\u2019s online high-level event on spyware.<\/figcaption><\/figure><\/div>\n\n\n<p>Internationally, initiatives like the <a href=\"https:\/\/www.diplomatie.gouv.fr\/en\/french-foreign-policy\/digital-diplomacy\/news\/article\/the-pall-mall-process-tackling-the-proliferation-and-irresponsible-use-of\">Pall Mall Process<\/a> supported by most EU member states, and the U.S. administration&#8217;s efforts to combat commercial spyware misuse, have gained momentum. These initiatives underscore global recognition of the need for regulatory measures to protect human rights and the rule of law.<\/p>\n\n\n\n<p>CDT Europe\u2019s event featured a stellar lineup of speakers, including:<\/p>\n\n\n\n<ul>\n<li>Sophie in &#8216;t Veld, Member of the European Parliament, Renew Europe, and Rapporteur of the PEGA report;&nbsp;<\/li>\n\n\n\n<li>David Kaye, UC Irvine School of Law, Independent Board Chair, Global Network Initiative, former UN Special Rapporteur on Freedom of Opinion and Expression;&nbsp;<\/li>\n\n\n\n<li>Anna Buchta, Head of Unit \u201cPolicy &amp; Consultation\u201d, European Data Protection Supervisor;\u00a0and<\/li>\n\n\n\n<li>Iverna McGowan, Tech and Human Rights Advisor, Office of the United Nations High Commissioner for Human Rights.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>The discussion \u2014 moderated by CDT Europe Deputy Director <a href=\"https:\/\/cdt.org\/staff\/asha-allen\/\">Asha Allen<\/a> \u2014 highlighted the EU&#8217;s insufficient action on spyware, the complete incompatibility of such technology with human rights, and the necessity of a democratic debate on its civilian use. Panellists questioned whether spyware use can ever be justified even in the context of national security, and deemed a multistakeholder approach involving civil society crucial for future efforts.<\/p>\n\n\n\n<p>Following the panel, a civil society roundtable moderated by Programme Director on Security and Surveillance <a href=\"https:\/\/cdt.org\/staff\/silvia-lorenzo-perez\/\">Silvia Lorenzo Perez<\/a> allowed European partners to discuss regulatory pathways and strategies to keep the need for solutions prominent on the EU&#8217;s agenda. This event underscored the critical nature of collaborative efforts to address the spyware issue effectively.<\/p>\n\n\n\n<p><strong><em>Recommended read:<\/em><\/strong> Our Programme Director on Security and Surveillance, <a href=\"https:\/\/cdt.org\/staff\/silvia-lorenzo-perez\/\">Silvia Lorenzo Perez<\/a>, penned an op-ed for Euractiv on 22 May titled, <a href=\"https:\/\/www.euractiv.com\/section\/digital\/opinion\/governments-spying-on-citizens-who-is-to-blame-what-can-the-eu-do\/\"><em>\u201cGovernments spying on citizens: Who is to blame, what can the EU do?\u201d.&nbsp;<\/em><\/a><\/p>\n\n\n\n<p><strong>\u00a0\ud83d\udcac Online Expression &amp; Civic Space<\/strong><\/p>\n\n\n\n<p>At the beginning of May, the Council of the EU <a href=\"https:\/\/www.consilium.europa.eu\/en\/press\/press-releases\/2024\/05\/07\/council-adopts-first-ever-eu-law-combating-violence-against-women\/#:~:text=The%20Council%20has%20given%20the,men%20and%20of%20non%2Ddiscrimination.\">adopted<\/a> the <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=OJ:L_202401385\">Directive on violence against women and domestic violence<\/a>, marking the final step before the law enters into force for all EU member states by 2027. As laid out in <a href=\"https:\/\/cdt.org\/insights\/cdt-europe-reacts-to-eu-directive-on-gender-based-violence-gbv-new-rules-to-tackle-online-gbv-create-free-expression-concerns\/\">our analysis of the Directive<\/a>, the law \u2014 alongside the EU Digital Services Act \u2014 creates a new precedent in addressing online gender-based violence (GBV).<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-medium is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Glitch-Asha-GBV-640x482.jpeg\" alt=\"Photograph of four speakers, including CDT Europe\u2019s Programme Director for Online Expression &amp; Civic Space Asha Allen at far right, appearing onstage on a panel organised by Glitch UK entitled \u201cThe Deepfake Dilemma\u201d.\" class=\"wp-image-104265\" width=\"492\" height=\"371\" srcset=\"https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Glitch-Asha-GBV-640x482.jpeg 640w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Glitch-Asha-GBV-1024x771.jpeg 1024w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Glitch-Asha-GBV-768x578.jpeg 768w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Glitch-Asha-GBV-1536x1157.jpeg 1536w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Glitch-Asha-GBV.jpeg 2040w\" sizes=\"(max-width: 492px) 100vw, 492px\" \/><figcaption class=\"wp-element-caption\">Photograph of four speakers, including CDT Europe\u2019s Programme Director for Online Expression &amp; Civic Space Asha Allen at far right, appearing onstage on a panel organised by Glitch UK entitled \u201cThe Deepfake Dilemma\u201d.<\/figcaption><\/figure><\/div>\n\n\n<p>During the annual Computers, Privacy &amp; Data Protection (<a href=\"https:\/\/www.cpdpconferences.org\/\">CPDP) conference<\/a>, Programme Director for Online Expression &amp; Civic Space Asha Allen spoke on a panel organised by Glitch UK entitled \u201cThe Deepfake Dilemma\u201d, which focused on deepfakes, online GBV, and the disproportionate impact this technology has on black women and other minoritised groups. The groundbreaking panel was a first of its kind at CPDP, with a panel of speakers entirely made up of black women technologists and policy experts.&nbsp;<\/p>\n\n\n\n<p>Speakers explored how the history of black feminist analysis can shine light on the increasing prevalence of online GBV in the last decade, and critiqued newly adopted EU regulatory frameworks aimed at addressing the issue of non-consensual intimate images. Asha shared the importance of integrating intersectional feminist methodologies into AI and tech policy governance to better ensure effective redress and remedies for all communities.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignleft size-medium\"><img decoding=\"async\" loading=\"lazy\" width=\"427\" height=\"640\" src=\"https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Asha-Brussels-Binder-427x640.jpg\" alt=\"Photograph of three speakers appearing onstage, including CDT Europe\u2019s Programme Director for Online Expression &amp; Civic Space Asha Allen at far right of image, on a panel organised by the UK Mission and the Brussels Binder.\" class=\"wp-image-104273\" srcset=\"https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Asha-Brussels-Binder-427x640.jpg 427w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Asha-Brussels-Binder-683x1024.jpg 683w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Asha-Brussels-Binder-768x1152.jpg 768w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Asha-Brussels-Binder-1024x1536.jpg 1024w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Asha-Brussels-Binder-1365x2048.jpg 1365w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Asha-Brussels-Binder-scaled.jpg 1707w\" sizes=\"(max-width: 427px) 100vw, 427px\" \/><figcaption class=\"wp-element-caption\">Photograph of three speakers appearing onstage, including CDT Europe\u2019s Programme Director for Online Expression &amp; Civic Space Asha Allen at far right of image, on a panel organised by the UK Mission and the Brussels Binder.<\/figcaption><\/figure><\/div>\n\n\n<p>On 29 May, Asha spoke at a joint event of the <a href=\"https:\/\/brusselsbinder.org\/\">Brussels Binder<\/a> and the UK Mission to the European Union, \u201c<a href=\"https:\/\/brusselsbinder.us15.list-manage.com\/track\/click?u=d3d10511c88b763226c532848&amp;id=483640561d&amp;e=635d5b96a1\">A safer digital public sphere: addressing gender-based cyber violence<\/a>\u201d. Panellists explored the social implications of online GBV, and delved into whether the final Directive will substantively change the digital ecosystem and provide better protections against this pervasive fundamental rights violation. Asha noted that the Directive, alongside other legislative measures like the Digital Services Act, marks progress but requires further refinement in the implementation phase to fully protect against online GBV and avoid creating unintended harms.<\/p>\n\n\n\n<p><strong><em>Recommended read<\/em><\/strong>: Our Policy and Research Officer <a href=\"https:\/\/cdt.org\/staff\/david-klotsonis\/\">David Klotsonis<\/a> shared key <a href=\"https:\/\/cdt.org\/insights\/cdt-eu-hosts-dsa-civil-society-roundtable\/\">insights and themes<\/a> that emerged during our Fifth DSA Civil Society Roundtable Series event.<\/p>\n\n\n\n<p><strong>\u2696\ufe0f Equity and Data<\/strong><\/p>\n\n\n\n<p>The AI Act got its final green light on 21 May, and continues to make headlines, as the European Commission recently announced the setup of <a href=\"https:\/\/www.euractiv.com\/section\/artificial-intelligence\/news\/commissions-dg-for-technology-restructures-to-realise-ai-office\/\">the AI Office<\/a> tasked with overseeing the Act.&nbsp;<\/p>\n\n\n\n<p>In our <a href=\"https:\/\/cdt.org\/insights\/eu-ai-act-brief-pt-3-freedom-of-expression\/\">latest EU AI Act explainer<\/a>, Programme Director for Equity and Data <a href=\"https:\/\/cdt.org\/staff\/laura-lazaro-cabrera\/\">Laura Lazaro Cabrera<\/a> delved into how the AI Act affects freedom of expression and opinion, highlighting its interplay with the Digital Services Act. While the AI Act clearly attempts to curtail threats to freedom of opinion by banning AI-fuelled manipulation of individuals, it also sets a high bar for applying those bans, requiring demonstration of intent or effect on behaviour.&nbsp;&nbsp;<\/p>\n\n\n\n<p>The Act also imposes special disclosure obligations on actors using AI to create synthetic content, including deepfakes, but these obligations are less robust and specific than disclosure requirements existing in other pieces of legislation like the Political Ads Regulation. Notably, the AI Act does not prohibit law enforcement use of synthetic content or deepfakes \u2014 rather, it creates exceptions from disclosure requirements, when use of synthetic content is authorised by law to detect, prevent, or prosecute criminal offences. In so doing, the AI Act creates a new vector for lawful AI-reliant law enforcement tactics.\u00a0<\/p>\n\n\n\n<p>The AI Act was also high on the agenda of many events and workshops at CPDP. At a panel organised by <a href=\"https:\/\/www.dataprivacybr.org\/en\/\">Data Privacy Brazil<\/a>, which focused on the differences between the EU AI Act and Brazil\u2019s latest AI bill, CDT Europe\u2019s Laura Lazaro Cabrera described the Act\u2019s attempt to reconcile a risk-based and rights-based approach.\u00a0<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignright size-medium is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Laura-@-cpdp-640x344.jpg\" alt=\"Photograph of five speakers, including CDT Europe\u2019s Programme Director for Equity and Data Laura Lazaro Cabrera at far left, appearing onstage at a panel organised by Data Privacy Brazil on the EU and Brazil AI Acts.\" class=\"wp-image-104267\" width=\"473\" height=\"254\" srcset=\"https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Laura-@-cpdp-640x344.jpg 640w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Laura-@-cpdp-1024x550.jpg 1024w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Laura-@-cpdp-768x413.jpg 768w, https:\/\/cdt.org\/wp-content\/uploads\/2024\/05\/Laura-@-cpdp.jpg 1396w\" sizes=\"(max-width: 473px) 100vw, 473px\" \/><figcaption class=\"wp-element-caption\">Photograph of five speakers, including CDT Europe\u2019s Programme Director for Equity and Data Laura Lazaro Cabrera at far left, appearing onstage at a panel organised by Data Privacy Brazil on the EU and Brazil AI Acts.<\/figcaption><\/figure><\/div>\n\n\n<p>She underscored the need for effective remedies as a key component of a human rights approach, noting that, while the AI Act includes some practical avenues \u2014 such as the limited right to explanation, and access to complaint mechanisms for individuals impacted by AI systems \u2014 these fall short of GDPR standards in terms of coverage, follow-up, and compensation. By contrast, the Brazilian AI bill places a stronger emphasis on rights. Laura argued that in order to protect human rights, AI regulation must address effective remedies within the text of the regulation through actionable measures.<\/p>\n\n\n\n<p>In another panel organised by the <a href=\"https:\/\/icfg.eu\/\">International Centre for Future Generations<\/a>, Laura provided an overview of the regulatory landscape around AI and neurotechnology, emphasising that a robust understanding of the constellation of applicable laws is necessary before rushing to create new subject matter-specific regulations. She highlighted the risks of having parallel frameworks for neurotechnology health applications and direct-to-consumer neurotechnology applications, noting that both should be subject to strict safeguards as they ultimately entail the same data processing operations and therefore similar levels of privacy risks.<\/p>\n\n\n\n<p><strong><em>Recommended read:<\/em><\/strong> <a href=\"https:\/\/cdt.org\/staff\/laura-lazaro-cabrera\/\">Laura Lazaro Cabrera<\/a>, Director of CDT Europe\u2019s Equity and Data Programme,\u00a0 and <a href=\"https:\/\/cdt.org\/staff\/nathalie-marechal\/\">Nathalie Mar\u00e9chal<\/a>, Co-Director of CDT\u2019s Privacy and Data Project, <a href=\"https:\/\/cdt.org\/insights\/the-european-data-protection-boards-opinion-on-pay-or-okay-models-surveillance-based-advertising-is-on-borrowed-time\/#:~:text=The%20opinion%20lays%20down%20the,to%20task%20at%20national%20level.\">analysed the European Data Protection Board\u2019s opinion on \u201cPay or Okay\u201d Models<\/a>.<\/p>\n\n\n\n<p><strong>\ud83d\uddde\ufe0f Press Corner&nbsp;<\/strong><\/p>\n\n\n\n<ul>\n<li><em>Euronews, <\/em><a href=\"https:\/\/www.euronews.com\/my-europe\/europe-decoded\/brussels-my-love\">Brussels, My Love: On violence against politicians<\/a><\/li>\n\n\n\n<li><em>The Record<\/em>, <a href=\"https:\/\/therecord.media\/eu-failure-spyware-political-will\">EU failure to rein in spyware reflects lack of political will, parliamentarian says<\/a><\/li>\n\n\n\n<li><em>MLex (paywalled)<\/em>, <a href=\"https:\/\/identity.mlex.com\/Account\/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dspa%26nonce%3Dadd2c9b550e04a789b6d35527bd6901c%26redirect_uri%3Dhttps%253A%252F%252Fcontent.mlex.com%252F%2523%252Fhome%252Fcallback%26response_type%3Dtoken%2520id_token%26scope%3Dopenid%2520profile%2520MLexApp%2520MLexUser%26state%3D38af5df252bb499382ee0d39d8459d98\">Comment: Messaging services in limbo as privacy concerns delay EU rules on detecting child abuse material&nbsp;<\/a><\/li>\n\n\n\n<li><em>Euractiv<\/em>, <a href=\"https:\/\/www.euractiv.com\/section\/digital\/opinion\/governments-spying-on-citizens-who-is-to-blame-what-can-the-eu-do\/\">Governments spying on citizens: Who is to blame, what can the EU do?<\/a><\/li>\n<\/ul>\n\n\n\n<p><strong>\u23eb Upcoming Events&nbsp;<\/strong><\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/www.fosi.org\/events\/fosi-2024-european-forum\"><strong>FOSI 2024 European Forum:<\/strong><\/a> Join Laura Lazaro Cabrera, Director of our Equity and Data Programme, in Paris on 5 June at the FOSI 2024 European Forum. There, she will discuss Europe\u2019s approach to online safety, the balance it strikes between human rights and industry priorities, and upcoming challenges for implementation of regulations. <a href=\"https:\/\/www.eventbrite.com\/e\/2024-european-forum-a-transatlantic-dialogue-registration-876218522187?aff=oddtdtcreator\">Register on FOSI\u2019s website<\/a>!<\/li>\n<\/ul>\n","protected":false},"featured_media":81520,"template":"","content_type":[10213],"area-of-focus":[834,7253,829,652,7257,77,806],"acf":[],"_links":{"self":[{"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/insight\/104262"}],"collection":[{"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/insight"}],"about":[{"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/types\/insight"}],"version-history":[{"count":9,"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/insight\/104262\/revisions"}],"predecessor-version":[{"id":104286,"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/insight\/104262\/revisions\/104286"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/media\/81520"}],"wp:attachment":[{"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/media?parent=104262"}],"wp:term":[{"taxonomy":"content_type","embeddable":true,"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/content_type?post=104262"},{"taxonomy":"area-of-focus","embeddable":true,"href":"https:\/\/cdt.org\/wp-json\/wp\/v2\/area-of-focus?post=104262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}