Europe Panel Faults Sifting of Bank Data
563446
A European Union panel has doubts about the legality of a Bush administration program that monitors international financial transactions, the groupÂs leader said.
622025
By CONSTANT BRAND  BRUSSELS, Belgium - An independent European Union panel is investigating whether Google Inc.'s Internet search engine abides by European privacy rules, which tend to be stricter than those in the United States.
521176
BRUSSELS, May 25 -- An independent European Union panel is investigating whether Google's Internet search engine follows European privacy rules, which tend to be stricter than those in the United States.
584280
Papers judge the aftermath of the EU Commission wrangle, examine football racism and French mobile phones
610272
(InfoWorld) - The European Parliament has delayed a vote on how to react to the U.S.' growing appetite for personal information about European citizens, in order to intensify its opposition. The delay follows a debate Wednesday evening in which the two other European Union lawmaking institutions both hardened their positions on the sensitive issue. The groups are drawing up a strategy for how toÂ renegotiate an agreement, over which they have been divided, with the U.S. over theÂ transfer of European air passenger data. The Parliament opposed the original agreement reached in 2004 to share the data -- 34 facts about every European entering or transiting through America by air, including credit card details and information about how and where a plane ticket was purchased. Even though the European Commission -- the E.U.'s executive branch -- and national governments in the 27 E.U. countries support strict European data protection laws, they negotiated an exemption from the rules in order to allow the U.S. to better protect itself from potential terrorist attacks. The European Parliament took the Commission and the Council of Ministers to the European Court of Justice over the passenger data agreement and forced a re-drafting of the law late last year. This agreement expires at the end of July and the E.U. will soon have to renegotiate the deal. While the Parliament is unlikely now to call for the complete scrapping of the agreement, it may well demand a shorter list of categories of data to be handed over. It may also demand that only U.S. immigration officials be granted access to the information. In a debate at the European Parliament Wednesday, Germanyâs deputy foreign minister, Guenther Gloser warned that negotiations with the U.S. will be âtortuous.â Germany holds the six-month rotating presidency of the 27-nation bloc. The European commissioner in charge of justice and home affairs issues, Franco Frattini told Parliamentarians that he has demanded an explanation from his counterparts in Washington D.C. about an apparent misuse of Europeansâ data that flouts both the original passenger rights' agreement as well as its replacement agreed last year. Frattini's concerns focus on the U.S. Automated Targeting System, which has been assessing millions of people since 2002. Some members of the U.S. Congress and privacy advocates believe the program is even illegal under the more lax U.S. data protection laws. "The right to privacy for me is nonnegotiable. It has to be respected," Frattini told the parliamentarians. Frattini's and Gloserâs speeches took many members of the Parliament by surprise, according to one Parliament official actively involved in civil liberties issues. "The MEPs were due to vote on an agreed position regarding the new round of negotiations with the U.S. today, but they have agreed to postpone the vote until the next plenary session in Strasbourg," she said, asking not to be named. The next plenary session is Feb. 12-15. "There is a mixture of joy and skepticism among the parliamentarians after hearing the strong language expressed in defense of Europeans rights to privacy," she said. "It would seem that the Commission and the Council of Ministers are both coming around to the Parliament's way of thinking on this urgent issue." The text is likely to take an even stronger line as a result of the delay, she said. The U.S. has threatened to fine airlines that fail to hand over the records, and to strip them of their landing rights in the U.S. Without any agreement, the airlines will be put in a difficult position: punished if they don't hand over the information, or sued for breaching European data protection laws if they do.
190138
Europe&#39;s top data protection officials are working to clarify a grey area of Internet law: the legal status of an IP address.The question of whether an IP address should be considered private data occupied much time at a hearing earlier this week at the European Parliament regarding Google&#39;s planned acquisition of DoubleClick. If a person can be identified by an IP address, then the address is private, said Peter Schaar, the German data protection commissioner and chairman of the Europe-wide privacy group, the Article 29 Committee.This has been the rule in most countries in the European Union for more than 10 years. However, it is hard to set a clear-cut rule because some ISPs&#160;give out fresh IP addresses to subscribers each time they go online, and people also buy time online at Internet cafes.The Article 29 Committee has been examining the question of IP addresses as part of its analysis of how search engines respect European data protection rules. It is expected to reach some conclusions by mid-June, according to an official working for the committee who asked not to be named.The committee cannot fine transgressors of E.U. data protection rules, nor can it propose legislation, but it can prompt the European Commission to do so.Internet search companies, including Google, argue that an IP address merely locates a computer rather than identifying who is sitting at that computer. Treating IP addresses as personal information would have implications for how search engines record and use people&#39;s data.If the committee persuaded lawmakers to toughen IP address protection in Europe &quot;that would definitely change things [for search engines],&quot; said John Steinback, a spokesman on policy matters for Google.From Google&#39;s perspective, whether an IP address is personal depends on the context, Steinback said. An ISP can link an IP address to a subscriber, but a Web site visited by the person using a specific IP address cannot link the address to a person, he explained.The European Parliament hearing was convened by the assembly&#39;s civil liberties committee to assess whether citizens&#39; privacy would be harmed by Google&#39;s planned acquisition of Internet advertising company DoubleClick. The deal, which has already been given the green light by U.S. regulators, is under investigation by European Commission competition officials. However, like its U.S. equivalents, the Commission won&#39;t consider the privacy question.Nevertheless, if data being collected for one purpose by one of the companies is then handed over to the other company for use in a different way, European data protection officials would be obliged to intervene, said the official close to the Article 29 Committee.&quot;Google will have to respect all the obligations of DoubleClick, including its data protection obligations,&quot; the official said. If the two databases are to be used for the same purposes, then they would be deemed compatible and could merge. &quot;But if there was an incompatibility between the two databases, then they couldn&#39;t be merged,&quot; he said.The European Parliament&#39;s civil liberties committee said it would be holding more seminars to examine the issues surrounding data protection in the months and years to come.
622005
The European Commission is warning Greece about publishing false information about its public finances.
399283
The transfer of confidential banking records by a Belgium-based company to U.S. authorities for use in anti-terrorism investigations breached Belgian and likely European Union data privacy rules, top government ...Comment
529186
(InfoWorld) - Users of online banking sites tend to bypass critical clues that the integrity of those sites may have been compromised, according to the working draft of a study released on Sunday by researchers at Harvard University and the Massachusetts Institute of Technology. The study, which will be formally released in May at the IEEE Symposium on Security and Privacy in Oakland, California, underscores how new technologies and warnings can't completely protect Internet users fromÂ scams such as phishing. It also throws doubt on the effectiveness of site-authentication images, which have been implemented by financial institutions such as Bank of America, Vanguard Group, and ING Bank. The images, selected by the customers, are shown when a bank customer logs in from a different computer than is normally used. The study involved 67 users, with more than 90 percent under 30 years old. Because of varying parameters in the study, not all qualified to be included in the results for each of the three tests. Users were ask to conduct common online banking tasks, although precautions were taken to ensure users weren't put at risk. For the first test, HTTPS indicators -- which show that an encrypted connection is enabled -- were removed from the address bar along with the lock that appears in the bottom right corner of Internet Explorer 6. Although the absence of HTTPS indicators should be a warning, all 67 participants continued with their transactions, the study found. The researchers then conducted a test where the site-authentication image was removed along with the HTTPS indicators. The researchers wrote it is the first empirical investigation into site-authentication images. Only two of 60 people chose not to log in when the image was removed, a key sign that a site may have been tampered with or is a phishing site, the study said. Of users who were actually using their own bank account for the study, 23 of 25 continued to enter their passwords. "We find them [site-authentication images] to be ineffective," the study concludes. In the last test, researchers made it more obvious, this time replacing a password-entry page with a warning page from Internet Explorer 7 Beta 3. The page advises of a problem with the security certificate of the chosen Web site. Despite the warning, 30 of 57 users entered their passwords. The study comes as U.S. banks are beefing up their authentication technologies amid new requirements from federal regulators. In October 2005, the Federal Financial Institutions Examination Council (FFIEC) mandated that U.S. banks implement stronger authentication protections by the end of last year, particularly for high-risk transactions such as sending money to a different person's account. Bank of America uses site-authentication image technology called SiteKey. Users pick an image and assign a phrase to it while also setting three "challenge" questions. If a user logs in from a computer that doesn't already have a cookie, they're asked one of the challenge questions and then to verify the image and phrase. If the image doesn't appear or the phrase is wrong, consumers shouldn't proceed. Bank of America said the image system benefits users since it's free and doesn't involve extra hardware or software.
383492
An oversight body concluded that a banking-data consortium broke the law when it gave U.S. agencies access to private financial transactions.
658183
Amid U.S. market volatility, some analysts say the European Central Bankâs focus on inflation may be misplaced.
512898
Following embarrassing revelations over Greece's budget data, the European Union expressed alarm at the reliability of Italy's own deficit figures and called for urgent clarification.
503
Financial institution failed to operate effective security measures to protect customers from data theft, government watchdog agency says.
681195
Defenders of financial rigour in the European Union attacked Tuesday a German call for a radical overhaul of the eurozone's budget rules at a lively meeting of EU finance chiefs.
323174
Financial institutions are asking law enforcement and regulators to share more data to better combat fraud.
719394
The U.S. Justice Department and other  authorities have stepped up investigations into several large  European banks for violating sanctions against Iran, Libya,  Cuba and Sudan, the Financial Times reported in its online  edition.
616960
BRUSSELS - Greece&#39;s membership of the eurozone is not in doubt despite a damaging review of its budget data stretching back five years, a European Commission official said Monday.