The BROAD & EPHR projects Workshop: “Informing and sensitizing young European citizens on the protection of their personal data”

(LDH, AEDH, EDRi, IuRe, Pangea – Barcelona, 27 Feb. 2010)

Cédric Laurant Senior Research Fellow

Central European University (Center for Media and Communication Studies)

  BROAD means “Broadening the Range Of Awareness in Data protection”.

  Collaborative effort of Hungarian and Dutch not-for profit organizations, to raise awareness in the area of data protection and information privacy by using innovative means and methods.

  3 action areas:  Survey target groups and feed back the results to professional and

common knowledge  Establish an Internet forum at the intersection of IT and privacy  Produce and disseminate professional and amateur creative products, such

as video clips and “positive clichés”

  Funding: “Fundamental Rights and Citizenship” Programme of the European Commission and consortium of project partners.

  Duration: 18 months (1/1/2009-30/6/2010).

Partners:

 Central European University: internationally recognized, non-state institution of post-graduate education in social sciences and humanities, located in Budapest. It is accredited both in the United States and in Hungary. CEU students and faculty come from over 50 countries, the language of teaching is English. Its Center for Media and Communication Studies (CMCS) is a center of excellence for promoting media and communication studies throughout the Central and Eastern European region.

 The Eötvös Károly Policy Institute (EKINT): located in Budapest, is aimed at bringing together such areas of expertise that have been established in various fields of policy research, and to develop wide-ranging policy alternatives in the areas that have the most direct impact on the quality of the relationship between the citizens and various levels of governance, such as transparency, accountability in the municipal system, regional administration, and the central governmental institutions.

 Tilburg University: is a university committed to authenticity, academic freedom, and continuous development as well as addressing quality issues in society at national and international levels. The Tilburg Institute for Law, Technology, and Society (TILT), part of the Law School of Tilburg University, is one of the most prominent Dutch research and education institutes in the area of technology regulation. A key feature of the Institute’s research and educational programmes is the interaction between legal, public administration and ethics experts, between law, regulation and governance, and between legal, technical and social perspectives.

  1st Action Area: face-to-face interviews and dedicated online survey in The Netherlands and Hungary; in 2 specific target groups: IT professionals and their principals (bureaucrats, decision makers and business managers). The results will be fed back in both countries and in international fora to the organizations of IT professionals, the formation of the target groups, the internet forum (to be established by BROAD), publications, through intermediaries such as NGOs and ombudsman institutions and international data protection and privacy networks.

  2nd Action Area: Internet portal: will aim at raising data protection awareness in 2 target groups (IT professionals and the general public). 3 languages first, then more; with separate moderated fora, in order to enable other countries and user groups to join.

  3rd Action Area: creative products (short video clips, digital montages, cartoons,…); purpose: show privacy and informational self-determination as a value in the Information Society. Will be widely distributed and should remain topical beyond the period of the BROAD project.

  Purpose: explore opinion, values and attitudes of those target groups which exert a decisive impact on the possibilities and limitations of people’s privacy in today’s “Information Society” (multipliers), and feeding back the results to the target groups’ professional forums and formation, and to common knowledge. To achieve this objective: a) face-to-face interviews and b) dedicated online survey in two specific target groups in two countries:   1. IT professionals (including the ones who work in explicit

rights-restricting areas such as surveillance systems, border control etc.) – in other words, those who are making (designing and operating) IT systems processing personal data; and

  2. Principals, i.e. those who are commissioning these systems and paying these IT professionals, namely  (i) bureaucrats and decision makers, and

 (ii) business managers of service providers and operators, including small and medium enterprises (SME)

  The results will be fed back in the Netherlands and Hungary and in international forums in the above areas:   organizations of IT professionals   formation of the target groups   internet forum to be established by the present

project   publications including ICT relevant periodicals and

conferences   through intermediaries such as NGOs and

ombudsman institutions   in international data protection and privacy networks

  Tri-lingual (English, Dutch, Hungarian) Internet portal with blog and forum functions. Purpose: discuss, publish and share ideas and works on the impact of new technologies on information privacy, privacy-invasive technologies, and privacy enhancing technologies (PETs).

  The forum aims at raising data protection awareness in two target groups:  1. IT professionals (including the ones who work in explicit rights-

restricting areas such as surveillance systems, border control etc.). For them the new site would become a professional forum of scientific publications, studies and drafts, and a forum for exchanging ideas. Educational effect and forum to discuss, understand and develop ethical issues in the IT profession.

 2. The general public whose members are Internet users, themselves subjects of invasive technologies, but typically not aware of it. Is a potential user of PETs but generally not aware of them. Site built for general public to share and get information and obtain advice on how to use privacy preserving techniques.

  Other languages in the future.

  Attract artists (professional and amateurs) to produce video clips, digital montages, cartoons. Dissemination through YouTube, Flickr and other file sharing sites; available on the Internet forum under a Creative Commons license.

  The videos are also intended for educational purposes: they will be distributed among secondary schools and higher education organizations. High quality videos will also be shown at film festivals and other cultural events.

  Objectives:   Create corresponding eye-catching visual products that

present privacy and informational self-determination as a value in the Information society;

  Reveal adverse changes or distortions in informational power relationships and the interests behind;

  Unmask privacy-invasive behavioural patterns.   In general, enhance audience’ sensitivity to data

protection, not only at the level of being informed but also at the level of values and attitudes.

  Privacy-friendly “positive clichés”: other contest, to be announced. Purpose: encourage use and dissemination of privacy-friendly responses, behavioural patterns to the existing political and business slogans and other stereotypes influencing formation of opinion and mass culture.

  1. “Nail Polish”

  2. “Heavy Birthday”

  3. “Flower Power”

  4. “Dreamguy”

Video clip available at http://www11.zippyshare.com/v/27194377/file.html

Video clip available at http://www40.zippyshare.com/v/9771005/file.html

Video clip available a http://www4.zippyshare.com/v/97321173/file.html

Video clip available at http://www36.zippyshare.com/v/40057489/file.html

 Pizza ordering: http://www.aclu.org/pizza/images/screen.swf

 German flash animation about surveillance: http://panopti.com.onreact.com/swf/

 PRIME educational animation series: http://blues.inf.tu-dresden.de/prime/EUT_Tutorial_V0/movie/prime.swf

 Two videos about identity theft: www.ico.gov.uk/upload/images/flash_test/coi_psf5510_040_mpeg1.mpg; www.ico.gov.uk/upload/images/flash_test/filler_ad_wrong_info.mpg

 Norwegian videos and animations for 9–13 years of age: http://www.dubestemmer.no/en/Downloads/Ages_9-13/; for 13–17 years of age: http://www.dubestemmer.no/en/Downloads/Ages_13-17/

 US privacy-related videos: http://epic.org/privacy_video/

 Secondary school scene: http://youthforhumanrights.org/watchads/view/psa12_h.html

 One video for each of 30 human rights: http://youthforhumanrights.org/watchads/

 “Nothing to hide”: http://www.youtube.com/watch?v=PoYF1q68OFc

 He did not show his ID card: http://www.youtube.com/watch?v=AyvrqcxNIFs

 Homeland security: http://www.youtube.com/watch?v=BGrji2bIiG8

 Google Master Plan: http://www.youtube.com/watch?v=9zKXCQpUnMg

 “The Spies Who Love You” http://www.markfiore.com/spies_who_love_you_0

 A compilation of videos, animations and cartoons: https://www.prime-project.eu/community/humor/

  1. Survey and feedback: survey is being conducted among IT professionals in the Netherlands and Hungary about their views and knowledge regarding the handling of personal data. 1.700 responses have been received so far from the two countries together. We also conducted in-depth interviews; the result of the analysis will be publicly available before the summer.

  2. Internet forum: still not visible, but engine and basic set of functions almost ready. The three-language portal expected to become public also before the summer.

  3. Creative genres: we have two main areas: an amateur contest and professional video clips. The professional clips are ready, including 4 original scripts, one in separate Hungarian and English versions, and one as the completely re-made Hungarian version of an existing English animation (the famous ACLU pizza video).

 The Eötvös Károly Policy Institute, as a participant of the international project BROAD, invites groups and individuals to produce creative works, without limitations to choice of genre, under the following conditions:  Theme: present privacy and self-determination over personal information

as a value. The works may present both the negative examples of real or virtual voyeurism, surveillance, identity theft, naive uses of social network sites, cheating techniques on the internet, and the positive examples of respecting other people’s privacy.

 Target audience: Dutch and international; special emphasis on young people and internet users.

 Genre and format: any visual genres, e.g. videoclip, photo, traditional graphics, digital montage, multimedia, as well as other works implemented in a reproducible (recorded or performable) manner; analog or digital format.

 Use: Freely available; protected by a Creative Common license.

 Deadline: summer 2010.

 Info & questions: http://www.broad-project.eu; info@broad-project.eu.

  The “European Privacy and Human Rights” project builds upon the legacy of EPIC's publication Privacy & Human Rights, the world’s most authoritative survey on privacy regulations and developments worldwide, established 12 years ago and available in English as a printed and online publication (http://www.privacyinternational.org/phr).

  Funding: European Commission’s "Fundamental Rights and Citizenship” Programme (2007-2013) – Specific Transnational Projects.

  Duration of the project: 18 months; started on 1 Feb. 2010.

  Applicant: Privacy International (London, UK).

  Partners: Center for Media and Communications Studies (“CMCS”), Central European University (“CEU”) (Budapest, Hungary).

  Associate partner: Electronic Privacy Information Center (“EPIC”) (Washington, D.C., U.S.A.).

  Inform and raise Europeans’ awareness about privacy and data protection.

  Survey national privacy laws and improve the coverage of privacy regulations and developments at the EU level; provide a digest on policy trends on privacy in Europe; highlight best practices, and shed light on areas subject to improvement.

  Strengthen civil society and facilitate further engagement, with a survey and awareness campaigns, as well as encourage an open dialogue.

  Strengthen a EU-based hub of collaboration networks of privacy experts and advocates by promoting a collaboration between the project partners and EU Member States’ contributors from academia, public authorities, and civil society.

  Use innovative dissemination and awareness-raising strategies in order to reach out to new target groups.

  3 action areas:   1) Research: map European privacy laws and recent

developments; then summarise the trends in the light of the right to privacy;

  2) Dissemination: disseminate information and publish it on multiple online and offline platforms; and

  3) Awareness-raising: develop innovative awareness-raising campaigns to be launched at the European Data Protection Day on 28th January 2011.

  Action Area 1 – Research: The EPHR project contributes to the existing EPIC’s Privacy & Human Rights survey by coordinating and editing input and updates for the EU country reports (all 27 EU Member States) + the ECTA countries (Iceland, Norway, Switzerland and Lichtenstein) + all EU candidate countries (Croatia, Macedonia, and Turkey). Country reports will all be drafted and updated in English, then translated into the country's official language and accompanied by a summary of pan-European trends and a comparative analysis of policy implications with practical policy recommendations, and privacy ranking (charts and maps).

  Action Area 2 – Dissemination: The EPHR project will disseminate the survey through traditional offline and modern online publishing platforms that will be accessible to multiple devices including mobile devices and handhelds. Each covered country will be offered in its national language(s) on an online portal, together with further information relevant in the national context, on institutions and useful links, as well as the opportunity for interaction.

  Action Area 3 – Awareness-raising: is dedicated to the development of innovative awareness-raising campaigns intended for the European Data Protection Day on 28th January 2011 with the aim of raising awareness offline and online. The EPHR project shall illustrate concepts related to privacy so as to offer a more concrete experience for European citizens than what is usually the case. Examples include tools and applications that would:   Visualize routing of IP packets online and linking the

technical concept to the applicable laws in concerned Member States;

  Simulate biometric identification and radio frequency identification;

  Illustrate the use of location data originating from users’ mobile devices.

  The EPHR Project aims at broadening and improving the EPIC’s survey in various ways:   1) by translating country reports in the language of each

country;   2) by promoting the survey and an Internet portal to

new target groups:   all European Union citizens who do not understand

English, by translating the survey in all EU languages;   target countries via their data protection authorities, civil

society organizations, higher education institutions and other relevant multipliers like social networks;

  users of mobile devices and other platforms, by establishing multi-platform distribution strategies;

  the general public, through awareness campaigns.

  3) by providing a common methodology and scope: through a unified approach, state-specific policy and legal frameworks, as well as developments, become comparable and pan-European trends in the field of privacy can be identified more easily. This will be accomplished with the EPHR summary and privacy ranking through charts and maps, therefore allowing for a pan-European overview of the subject matter.

  As a result of the EPHR project, accurate and high quality information about the state of European privacy and data protection legal framework and recent developments will be at the fingertips of all Europeans, in English and in the language of each EU member state for its respective country report. A summary will wrap up the country reports and present policy analysis and recommendations. It is expected that the dissemination and awareness-raising strategies will significantly enhance access to the survey.

  The EPHR Project aims to contribute to the European Commission’s “Fundamental Rights and Citizenship” Programme by :  Informing and raising awareness about the fundamental right to privacy

and its exposure to limitations;

 Independently monitoring privacy laws and development, including legislation that impacts the scope of privacy, and recent judicial activities;

 Reaching out and improving the reporting on privacy developments in new Member States and accession countries;

 Strengthening civil society, in particular a network of national contributors and experts, and encouraging an open, transparent and regular dialogue with it in respect of fundamental rights;

 Improving the liaison with national data protection authorities, the European Data Protection Supervisor, the Article 29 Working Party and the European Union Agency for Fundamental Rights; and

 Informing policy makers about the best and worst practices identified in the EPHR summary report and pan-European trends.

 Privacy International (PI) is a human rights group formed in 1990 as a watchdog on surveillance and privacy invasions by governments and corporations. PI is based in London, England, and has an office in Washington, D.C. We have campaigned across the world to protect people against intrusion by governments and corporations that seek to erode this fragile right.

 The Center for Media and Communication Studies (CMCS) is a research center at the Central European University (CEU) focused on advancing media and communication scholarship throughout Central and Eastern Europe and beyond. It produces scholarly and practice-oriented research addressing academic, policy and civil society needs.

 The Electronic Privacy Information Center (EPIC) is a public interest research center in Washington, D.C. It was established in 1994 to focus public attention on emerging civil liberties issues and to protect privacy, the First Amendment, and constitutional values.

  This presentation is available at http://blog.cedriclaurant.org (under “Presentations”)

  BROAD Project web site: http://www.broad-project.eu.

  BROAD videos:

 http://www11.zippyshare.com/v/27194377/file.html (“Nail Polish”)

 http://www40.zippyshare.com/v/9771005/file.html (“Heavy Birthday”)

 http://www4.zippyshare.com/v/97321173/file.html (“Flower Power”)

 http://www36.zippyshare.com/v/40057489/file.html (“Dreamguy”)

  CMCS’s presentation of the EPHR Project: http://www.cmcs.ceu.hu/research/privacy-and-freedoms

  EPIC’s publication Privacy & Human Rights: http://www.privacyinternational.org/phr

  Cédric Laurant

  E-mail: info [at] cedriclaurant [dot] org