EU preparing law to force tech companies to release users data

THE European Union (EU) is preparing new legislation that would radically change how personal data is shared during criminal investigations.

According to Reuters, the EU wants to pass legislation forcing any technology company that does business within its territory to turn over a customer’s personal data if requested as part of an investigation into a serious crime. Such crimes are defined as ones that carry a minimum penalty of three years.

The law would apply regardless of the customer’s nationality or the location of the data server. For example, if a country within the EU is investigating a serious crime involving an American citizen and the nation believes Google has data stored on an American server that would help with that investigation, the proposed law would force Google to turn over the data.

The legislation will reportedly be ready to go before EU lawmakers and member states by the end of March.
If the previously proposed scenario were to happen today, the European prosecutor would need to contact the United States government and obtain a local subpoena or search warrant to obtain the data.

The time required to go through that process could be the difference between stopping a crime before it happened or playing catch-up with the criminals. A faster method could lead to less crime.

Tech companies, however, are resistant to any laws that force them to turn over customer data to foreign nations. Such extraterritorial jurisdiction laws could erode individual privacy rights and undermine consumer trust in cloud services, they argue.

As John Frank, vice president for EU government affairs at Microsoft, told Reuters, such laws could also infringe upon national sovereignty, giving EU nations police jurisdiction outside their territory.

If the EU did pass a new law, it would likely need to work out new international agreements to address this. If a nation didn’t agree to enforce the new law, the EU could ban companies from that nation from operating within its borders, but that could upset citizens.

ALSO READ: Tesla hit with lawsuit for allegedly selling defective vehicles

According to Reuters, the EU law alone could take a couple of years to complete, so for now, nations will just have to continue to rely on one another for help obtaining the data they need.