Category: Law

Legally minded discussions

  • Home Office Data Subject Access Request: Part One

    Data Subject Access Requests (under Article 10 of the Data Protection Act 1998) are powerful tools that allowed people to request a copy of any information held on them by organisations (with some exceptions). In order to provide a response, a fee of up to £10 could be charged.

    With the new GDPR era, these fees are no longer going to apply, and the access requests will now be covered by Section 94 of the Data Protection Act 2018 (which is set for Royal Assent today). As a result, I suspect we will be seeing far more of these requests… and given how underprepared most organisations have proven to be with the DPA 98’s mechanisms, it will be interesting to see how they cope.

    I decided to investigate the process myself with none other than the UKVI. Formerly known as the UKBA. The visas and immigration people. I’m pretty sure they must have some interesting information on me, especially given that my spouse is a foreign national.

    Handily, they have a page where you can submit your request for information on gov.uk. The process is, as you would expect, fairly convoluted. There are three categories of information you can request: Basic, Specific, or Detailed. For the ‘Detailed’ request, they are still asking for the £10 fee. However, in order to verify your identity, they require a host of information, including:

    • Your passport number.
    • A copy of your passport.
    • Written confirmation that your passport is a ‘true likeness’ of you.

    Interestingly, they ask for a lot more information, including your parents’ date of birth, etc. This is noted as being ‘optional’, but still presents itself in such a way that it seems like it might be required. Let’s repeat after me: Data Subject Access Requests should not be an excuse to mine more data. I chose not to provide any more details than was necessary.

    Back to what was required: Data controllers have an obligation to take ‘reasonable measures’ to verify the identity of a person making a request, and so some of this is fair enough. However, the passport number alone should be sufficient, since the UKVI hold all of the information anyway. A copy of the passport seems unnecessary, and the written confirmation of the likeness just seems bonkers – especially since the list of people who can give this certification is prohibitively small:

     

    • a legal representative, registered with the Office for the Immigration Services Commissioner (OISC)
    • a solicitor, barrister or chartered legal executive
    • a commissioner for oaths
    • a registered charity

    Now, I am not one to suggest that the UKVI may well be trying to make it as difficult as possible for somebody to make a subject access request, but it certainly seems like this is not in the spirit of the GDPR, or the DPA 2018. The list above is even more restrictive than the categories of people who can countersign photos to get a passport in the first place. To illustrate the point, here are the professions of folks who can counter-sign your initial passport application:

    Examples of recognised professions include:

    • accountant
    • airline pilot
    • articled clerk of a limited company
    • assurance agent of recognised company
    • bank/building society official
    • barrister
    • chairman/director of limited company
    • chiropodist
    • commissioner for oaths
    • councillor, eg local or county
    • civil servant (permanent)
    • dentist
    • director/manager/personnel officer of a VAT-registered company
    • engineer – with professional qualifications
    • financial services intermediary, eg a stockbroker or insurance broker
    • fire service official
    • funeral director
    • insurance agent (full time) of a recognised company
    • journalist
    • Justice of the Peace
    • legal secretary – fellow or associate member of the Institute of Legal Secretaries and PAs
    • licensee of public house
    • local government officer
    • manager/personnel officer of a limited company
    • member, associate or fellow of a professional body
    • Member of Parliament
    • Merchant Navy officer
    • minister of a recognised religion – including Christian Science
    • nurse – RGN or RMN
    • officer of the armed services
    • optician
    • paralegal – certified paralegal, qualified paralegal or associate member of the Institute of Paralegals
    • person with honours, eg an OBE or MBE
    • pharmacist
    • photographer – professional
    • police officer
    • Post Office official
    • president/secretary of a recognised organisation
    • Salvation Army officer
    • social worker
    • solicitor
    • surveyor
    • teacher, lecturer
    • trade union officer
    • travel agent – qualified
    • valuer or auctioneer – fellows and associate members of the incorporated society
    • Warrant Officers and Chief Petty Officers

    This means that the requirements for verifying ‘likeness’ are higher to get information held on you by the UKVI, than they are to get a passport in the first place.

    For my subject access request, I have been told I have 15 days to submit the relevant documentation, including the above:

    UKVI Requirements

    Despite making the application online, I also apparently can’t submit the evidence online – so I’m not sure what the point of offering such a service is in the first place.

    In my opinion, the requirements are not ‘reasonable’, and providing my passport number alone should be enough. As a result, I will not be submitting statements from a solicitor or charity at this point to support my request. I am going to operate on the assumption that the online system is not properly equipped to deal with subject access requests properly, and that the evidential standard is being confused with actual visa applications. I have contacted the UKVI directly with these concerns. Here’s what I said:

    Reference: [redacted]

    Hi,

    I have just submitted a Data Subject Access Request under s.10 of the DPA 98 and s.94 of the DPA 2018 (which just received Royal Assent). This should further be considered in light of Article 15 of the GDPR.

    As part of the evidential requirements listed on your site, I must provide:

    1. A copy of my passport.
    2. A ‘written confirmation of true likeness’ from a third party.
    3. A letter of permission.

    Firstly, I want to point out that there is no way to provide these documents online, despite the initial application being made online. I therefore request that you agree to receive items 1 and 3 electronically, rather than by post.

    Secondly, I object to the requirement to provide a written confirmation of true likeness. As you will be aware, data controllers are required to undertake ‘reasonable measures’ to verify the identity of the person making the Data Subject Access Request. I submit that by providing a copy of my passport, and the passport number, that this more than satisfies the legal requirement.

    Further, I submit that since the list of those who are considered appropriate to provide this written confirmation is less extensive than those who can act as a counter-signatory for a passport application in the first place, that this requirement is demonstrably disproportionate, and as such not required to respond to my request.

    To summarise, please advise that:

    1. You will accept items 1 and 2 from the above electronically.
    2. That the written confirmation of true likeness is not required to give effect to the request under the relevant law.

    Yours sincerely,

    We will see what happens. Should my subject access request be denied, then it would appear that the UKVI really are requiring a disproportionately high standard to verify people for their Data Subject Access Requests, and I’ll need to revisit it at that point. Stay tuned.

  • Issues with Article 17 (‘Right to be Forgotten’) of the GDPR

    Issues with Article 17 (‘Right to be Forgotten’) of the GDPR

    With the GDPR’s deadline now almost upon us, one of the most talked about provisions has been the ‘Right to Erasure’ contained within Article 17.

    Significantly expanding the ‘Right to be Forgotten’ doctrine established in the Google Spain case, Article 17 allows data subjects (i.e. you and I) to submit takedown requests to any organisation that collects and controls information on them.

    There are a number of grounds under which people may seek to have data deleted, which cover a broad variety of circumstances. These include situations where the data is no longer necessary for the reasons it was collected; where it was unlawfully processed; where the subject withdraws their consent; as well as some others. The right is not unlimited, with exceptions where the collection and processing of the data is necessary in the exercise of the right to freedom of expression; where there is a specific legal obligation to retain the information; for reasons of public interest; etc.

    Issues with Article 17

    Despite some initial reservations, the GDPR (and Article 17 in particular) has generally been lauded as a victory for European citizens, who will gain far more control over what information companies hold on them than they ever previously have had. This is especially true given the arguably extra-territorial applicability, where any organisation that handles European data will be expected to comply.

    However, there are a few specific issues arising from the construction of Article 17 that bear some further scrutiny. Rather than analyse the philosophical criticisms of the Right to Erasure, below I briefly look at some of the practical considerations that will need to be taken by data controllers when they receive such a Request for Erasure:

    1. Verification.
    2. Abuse, and a lack of formal requirements for removal requests.
    3. Article 85: Freedom of expression.

    Verification of the Data Subject

    Before giving effect to an Article 17 request, the controller must use all ‘reasonable measures’ to identify the identity of the requesting party. It is perhaps obvious that an organisation should not be deleting the accounts or other data of somebody without checking first to make sure that the person making that request is authorised to do so. However, this leaves open a number of questions about what this kind of verification will look like. In other words, what steps will be considered ‘reasonable’ under the terms of the law? Will courts begin to see arguments over online platforms account recovery procedures as a result of a denial of access to the fundamental right of privacy via the GDPR? What metrics will a data subject be able/expected to provide in order to discover their associated data? i.e. while it might be easy to request information relating to your e-mail address, what about other identifiers such as IP addresses, or names? These are questions that do not have clear answers, and will inevitably lead to an uneven application of the law, dependent on the situation.

    Abuse, and a Lack of Formal Procedural Requirements for Erasure Requests

    It should be self-evident at this stage that any statutory removal mechanisms will be open to abuse by parties determined to have content removed from the Internet, and in that regard, Article 17 is no different. However, there is a common misconception that the Right to Erasure gives people the right to stop any mention of them online – especially speech that is critical of them, or that they disagree with. This is not the case, and Article 17 is not crafted as a dispute resolution mechanism for defamation claims (that would be the E-Commerce Directive). These facts don’t stop people from citing the GDPR incorrectly though, and it can quickly become difficult to deal with content removal demands as a result.

    The problem is compounded by the fact that there are no formal procedural requirements for an Article 17 request to be valid, unlike the notice and takedown procedure of the DMCA, or even the ECD. Requests do not have to mention the GDPR, or even Right to be Erasure specifically, and perhaps even more surprisingly, the requests don’t have to be made in writing, as verbal expressions are acceptable.

    While the reasons for the lack of specific notice requirements is clearly in order to give the maximum amount of protection to data subjects (the lack of requirement for writing was apparently in order to allow people to easily ask for the removal of their data from call centres over the phone), it seems to ignore the accompanying problems with such an approach. The lack of clarity for the general public around what exactly the Right to Erasure includes, along with the lack of procedural checks and balances means that it will be increasingly difficult for organisations to identify and give effect to legitimate notices. This is especially true for online platforms that already receive a high number of reports. While many of these are often nonsense or spam, they will require far greater scrutiny in order to ensure that they aren’t actually badly worded Article 17 requests that might lead to liability.

    If we look at the statistics on other notice and takedown processes such as that in the DMCA (the WordPress.com transparency report, for example), we can see that the levels of incomplete or abusive notices received are high. The implementation of even basic formal requirements would provide some minimum level of quality control over the requests, and allow organisations identifiers to efficiently categorise and give effect to legitimate Article 17 requests, rather than the prospect of having to consider any kind of report received through the lens of the GDPR.

    Article 85: Freedom of expression

    As mentioned earlier, a controller is not obliged to remove data where its continued retention is ‘necessary for reasons of freedom of expression and information’. The obvious question then becomes under what grounds this should be interpreted, and we find some guidance in Article 85 of the GDPR. Unfortunately however, it doesn’t say all that much:

    ‘Member States shall by law reconcile the right to the protection of personal data pursuant to this Regulation with the right to freedom of expression and information, including processing for journalistic purposes and the purposes of academic, artistic or literary expression.’

    This appears to leave the task of determining how the balance will be made to individual Member States. Whilst this isn’t unusual in European legislation, it means that the standard will vary depending on where the organisation is based, and or where the data subject resides. At the time of writing, it isn’t clear how different Member States will address this reconciliation. Despite freedom of expression’s status as a fundamental right in European law, it is afforded scant consideration, and thus weak protection under the GDPR, preferring to defer to national law, which simply isn’t good enough. Far stronger statements and guarantees should have been provided.

    Over Compliance

    Unfortunately, the amount of extra work required to analyse and deal with these requests as a result of the law’s construction – along with the high financial penalties detailed in Article 83 – mean that it is likely that many organisations will simply resort to removing data, even where there is no lawful basis for the request, or requirement for them to do so.

    We may fairly confidently speculate that the response from many data controllers will be to take a conservative approach to the GDPR’s requirements, and thus be less likely to push back on any potentially dubious requests as a result. Insistent complainants may find that they are able to have speech silenced without any legitimate legal basis simply out of fear or misunderstanding on the part of third party organisations.

    With a well publicised and generally misunderstood right to removal, lack of procedural requirements, and a reliance on intermediaries to protect our rights to freedom of expression, we may find ourselves with more control over our own data, but with far less control over how we impart and receive information online.

    Header image by ‘portal gda‘ on Flickr. Used under CC BY NC-SA 2.0 license.

  • Nazi Pugs Fuck Off

    Nazi Pugs Fuck Off

    One of the latest cases to spark intense debate around freedom of expression happens to fall in my own back yard. The facts of the ‘nazi pug’ case concerned one Mark Meechan, aka ‘Count Dankula’, who filmed himself training his girlfriend’s dog to react to various phrases such as ‘gas the Jews’, and then posted it on YouTube. In his own words:

    “My girlfriend is always ranting and raving about how cute and adorable her wee dog is, and so I thought I would turn him into the least cute thing that I could think of, which is a Nazi”

    Meechan was subsequently charged and convicted in a Scottish Sheriff Court under s.127 of the Communications Act 2003, which makes it an offence to (publicly) communicate a ‘message or other matter that is grossly offensive or of an indecent, obscene or menacing character’.

    Count Dankula

    Offensive speech should not be a criminal offence

    The accused argued that the video was intended as a joke to noise up his girlfriend, as evidenced by the disclaimer at the outset. This position was rejected by the court, who stated that humour was ‘no magic wand’ to escape prosecution, and that any determination of context was for them to decide.

    In passing the sentence, the Sheriff brought up the fact that the accused’s girlfriend didn’t even subscribe to his YouTube channel, and so claimed that as a result the notion that the escapade was in fact intended as a private joke didn’t hold any water. This is important as it demonstrates a deep cultural ignorance of how people communicate in an age dominated by online platforms, but also for what may well be a more interesting point: That the actions could only be classed as an offence under the Communications Act by dint of the fact that the video was posted on a ‘public communications network’. In other words, if the same ‘joke’ had been demonstrated at a house party, down the pub, or even on stage in front of hundreds of people, then it could not have brought about the same kind of prosecution.

    This brings about two questions:

    1. Should there be any distinction between posting a video online (or via telephone), and making statements in person? If so, why?
    2. Should anybody ever face jail time for making ‘offensive’ statements?

    These are questions that can only realistically be properly addressed by Parliament – not the Sheriff court, though one would have hoped that they would have taken a more liberal approach to statutory interpretation, or that the Procurator Fiscal would have had more foresight to not pursue a conviction.

    A bad sense of humour should not be enough to justify the possibility of a criminal offence. Further, even if the video was in fact an expression of a genuine conviction (which has not been at issue in this case), then it still should not warrant the possibility of jail time – especially not when the distinction lies on the fact that the statements were made on a ‘public communications network’ rather than in person. Remember, this was not a question of ‘incitement’, but simply offence.

    Nazis are not your friends

    It appears that in many ways, the court were bound by the statutory terms, and that the 2003 law itself is inadequate, to say the least. However, there is another element to this tale that is worth discussing. Namely, that individuals such as the former leader of the so called English Defence League have come out to associate themselves with the issue, and that not enough has been done to reject those attempts.

    The support of the far right is not particularly surprising, as they are increasingly taking up the bastion of free expression to justify their odious positions. I is also understandable that when faced with what you perceive as an unwarranted criminal prosecution that you would welcome any support that you can get, or that the media would try to draw connections where there are none. However, the enemy of my enemy is not necessarily my friend. If arseholes such as Tommy Robinson whose views you claim to be diametrically opposed to try to co-opt your situation for their own political ends, you have a duty to clearly, loudly, and publicly tell them to fuck off. When the far right started to infiltrate punk culture based on the premise of certain shared values, the Dead Kennedys responded in no uncertain terms.

    I don’t and won’t claim to know the politics of the accused in this case, but the situation should be a warning for all who consider ourselves to sit on the liberal end of the spectrum: Be wary of those who seek to use a shared belief in freedom of expression as a trojan horse. Yes, fight for the right of those you disagree with to speak, but don’t let the crows trick their way into your nest as a result.

    Meechan has indicated plans to appeal the conviction in order to make a point about freedom of speech, although it is unclear at this point under what grounds he will do so. Either way, whilst this is something I would support prima facie, it is becoming increasingly tough to do so with the knowledge that each development gives people such as the EDL a platform without any real challenge.


    For a more in depth analysis of the law involved in this case, have a look at this post from thebarristerblogger.com.

    P.S. I don’t blame the pug.

  • Laughing in the face of Terror

    Laughing in the face of Terror

    With the terrorist attacks in Manchester and London over the past week or so, it’s fair to say that the UK’s resilience has been tested. With the General Election taking place tomorrow, and Theresa May promising to ‘rip up the Human Rights act’ to introduce sweeping restrictions on the Internet, and strengthen anti-terrorist legislation, it remains to be seem how things will pan out.

    You can never completely overshadow the horrific consequences of fatal attacks where innocent people lose their lives, but through the dark fog of the events themselves, stories have emerged that show true humanity, rather than the bleak nihilism of the terrorists. Stories of people rushing to the defence and aid of others; fearlessly tackling armed attackers, and embracing strangers.

    A couple of examples of this that have really stood out for me in particular demonstrate the best, and most ‘British’ response imaginable. In the first, a man seen ambling casually away from a pub where the attackers had struck was hailed as a spirit of defiance for taking his pint with him:

    Screen Shot 2017-06-07 at 14.52.45.png

    Beer is so expensive in London mind you, that leaving a full pint behind would be the real madness.

    And then, there was this guy… who when confronted with three knife wielding attackers screaming ‘This is for Allah!’, replied by rushing to fight them bare handed, shouting: ‘Fuck you, I’m Millwall!’, allowing others the chance to escape the scene. For those not familiar with Millwall football club, this sort of behaviour is perfectly normal.

    Screen Shot 2017-06-07 at 14.54.51.png

    Speaking later after surviving multiple stab wounds all over his body, he said:

    I thought, ‘I need to take the p*** out of these b******s’.

    For me, this sums things up pretty beautifully. The point of these attacks is to make people afraid; to make nowhere feel safe… to withdraw in terror to an authoritarian regime that results in us turning on our neighbours and friends… but it’s tough to be afraid when you are laughing your ass off.

    Those of us in Glasgow remember our own brush with ISIS well…

    johnsmeaton.jpg

    These attacks are always heartbreaking, and we’ll mourn the people we lose, but we also need to turn things on their head, find the humour in any situation, and laugh. Laugh right in the face of those who think they can make us scared to go outside, or scared of our Muslim friends, because their attempts to destroy who we are are laughable – and if there’s one thing the British are good at, it’s taking the piss out of those who take themselves too seriously.

  • Shopify, Breitbart, and Freedom of Speech.

    Shopify, Breitbart, and Freedom of Speech.

    Tonight I came across an article on TechCrunch in response to an open letter from Tobias Lütke, CEO of e-commerce platform Shopify, in which he defends the company’s decision to continue hosting Breitbart’s online shop. Breitbart being the infamous far right publication of which Steve Bannon was heavily involved with.

    After sustained criticism, Lütke explains in the post entitled ‘In Support of Free Speech’ that based upon a belief that ‘commerce is a powerful, underestimated form of expression’, it would be wrong to effectively censor merchants by shutting down their shops as the result of differing political views.

    Reporting on the letter, TechCrunch shared their post to Facebook with the text: ‘Shopify’s CEO thinks his platform has a responsibility to continue hosting Breitbart’s store – here’s why he’s wrong.’

    Screen Shot 2017-02-10 at 02.29.57.png

    I was curious to see the arguments that would be proffered as to why the decision was wrong, but was ultimately left wanting. Here are the reasons given, as far as I could make out:

    1. Lütke is grossly overestimating the role of a private e-commerce platform in providing and protecting freedom of expression.
    2. Shopify cannot ‘censor’ anybody, as they are not an emanation of the State.
    3. Justifying the continued hosting of merchants who have extreme views for freedom of speech reasons is wrong, as freedom of speech does not apply to private organisations.
    4. As a private company, Shopify are not legally required to provide a platform to anybody.
    5. Shopify’s Terms of Service allow them to terminate the account of any user at any time.

    In response, here’s why TechCrunch are wrong:

    None of the reasons given actually explain why Shopify shouldn’t continue to host Breitbart.

    Read over them again, then check out the full article here. Despite heavily criticising Shopify, and stating that Lütke is ‘wrong’, TechCrunch don’t engage at all with the heart of the issue. No, Shopify are not legally required to host the Breitbart shop, and yes, quite obviously their Terms of Service are quite obviously worded in such a way to give them that discretion in the event of any legal challenge, but that’s hardly a surprise.

    Here’s the big question that went unanswered: why should Shopify not host Breitbart?Lütke hits the nail on the head with the following challenge, which the TechCrunch article completely fails to even acknowledge:

    When we kick off a merchant, we’re asserting our own moral code as the superior one. But who gets to define that moral code? Where would it begin and end? Who gets to decide what can be sold and what can’t?

    Rather than attempt to address this fundamental issue, TechCrunch essentially just argue that Shopify should kick Breitbart off of their platform because, er, well, legally there’s nothing to stop them. A pretty poor argument at best.

    Protecting freedom of speech isn’t just down to the State.

    Firstly, I’m not sure where this idea that censorship is only something that the State can give effect to comes from. It means to forbid or to ban something; to suppress speech. The source doesn’t have anything to do with it.

    Screen Shot 2017-02-10 at 03.24.28.png

    Secondly, there is a lot of confusion surrounding freedom of speech and the relation to the State, even from those who purport to understand the dynamic. To clear some things up, the following are true:

    • Freedom of speech law (generally) only protects citizens from the acts of State actors.
    • Private online service providers (generally) have no obligation to protect the freedom of speech rights of their users, or to give them a platform for expression.

    However, to assert that a platform cannot justify their actions based on freedom of speech considerations, or to willingly strive to uphold those principles on the basis of the above is a non sequitur. Additionally, just because you can’t threaten legal action on a freeedom of speech argument against Facebook if they take down your status update, that doesn’t mean it is wrong to argue that Facebook should be doing more to consider and protect those values.

    Just as we would not expect a hotel owner to be able to refuse to allow a same sex couple to share a bed, or a pub to knock back someone based purely on the colour of their skin, it is nonsense to pretend that we have no expectations of private organisations to abide by certain shared societal values.

    Without touching on the claims around the importance of e-commerce as a vehicle for expression, it seems that in a world where we are increasingly reliant on private entities to provide our virtual town square equivalents, and where we expect certain values to be upheld, arguably platforms such as Shopify have an increasing moral obligation to protect (as far as is possible) the principles that are the cornerstone of our Democracies.

     

     

  • Yes, Protest Does Matter.

    Yes, Protest Does Matter.

    In the past week, we have seen peaceful protests around the world, in response to the actions taken by Donald Trump, as he has assumed the American Presidency.

    Despite not having attended any of the demonstrations myself, I’ve been troubled by the fervent reaction against those who have done so, and the poor arguments that have been made against speaking out. So, without passing comment on the content of any of Trump’s policies or actions, I’ve decided to address the common criticisms publicly:

    1. Protesting doesn’t make any difference.

    I almost can’t believe that this statement is still being uttered in 2017, after all that has been written, and after we have seen and to-this-day celebrate the outcomes of peaceful protest in the past.

    The ultimate goal of protest is obviously to bring about change, but few who take part in any single act of resistance are naive enough to believe that that one particular event will have devastating political ramifications on its own. Movements are built over time, and are successful by building the pressure on those in power.

    In this particular situation, there is a real chance that sustained protest can have an impact on the policies of the Trump administration. The Republican party is not full of evil people, and many viscerally disagree with his approach to many issues, but at present feel unable to speak up against them. If all these people hear is silent indifference to what is going on, they are far less likely to have the courage to take the first steps themselves in opposition.

    For many, even if there is absolutely zero chance of political change, demonstrations are still immensely important. First and foremost, they are about standing up and publicly stating that you refuse to quietly accept actions that you fundamentally disagree with, and may otherwise be powerless to stop. It’s about demonstrating to other people who facing the brunt of the effects that they are not alone. That’s why they are called ‘demonstrations’.

    I won’t draw comparisons between Trump and Hitler at this point, but I do find it rather curious how one of the biggest questions people have when looking back at history is how the German population could possibly have let fascism take hold, seemingly without much protest. I wonder how many people were dismissing those who spoke up, with the same argument: ‘Protesting won’t make a difference’.

    2. It’s a foreign country. It doesn’t have any impact on you or people you know. Focus on your own issues.

    There are a few constitutent parts to this. Firstly, this kind of statement is often made in a blanket fashion, completely ignoring the personal relationships that the person on the receiving end may have. Where their wife may come from; where their friends may live; where the company their work for is based, for example.

    Secondly, even if a person has zero personal ties to the US, the idea that we could close our eyes and ears to what happens outside of our country is a non-sequitur. In fact, it’s the worst kind of nationalism. Following the argument through logically, no Scottish person should ever speak about the evils of apartheid – because it was a South African issue. Neither should the UK have gotten involved in the Second World War. There are innumerable examples of why this doesn’t hold water.

    There is a valid criticism to be made of people who only care and speak up about what they see on the news in a foreign country, whilst acting completely indifferent about what is happening in their own back garden. However, that sort of criticism can only be made with in depth knowledge of a person and their motives, and is certainly not something that should be applied with a broad brush to people whose background you have no idea about. Just because somebody is concerned about the actions of Trump, doesn’t mean that they aren’t equally as passionate about the right wing agenda of the UK Government, or that they volunteer at a local foodbank every night.

    All of this aside, the reality is that what happens in America does impact what happens in the UK. The policies and rhetoric of the most powerful man on Earth, who leads the biggest military superpower in modern history, who happens to be our supposedly closest ally, definitely has repercussions around the globe. To pretend otherwise is simply foolish.

    To bring it home, so to speak: the ‘solidarity’ word is one that comes with a lot of baggage, but it is exactly what protest is often about: making a statement about what kind of society you want and believe in, even in spite of everything that may be happening elsewhere. It’s about saying: ‘The most powerful nation on the planet may be targetting refugees, but we won’t accept those same actions here.’ If all the protests in Glasgow yesterday achieved was to make a single refugee feel more welcome and secure in their adopted city, then they were already a success.

    3. The American people chose to vote for Trump. Get over it.

    This is one of the most ridiculous assertions of the lot. The idea that once a political party or candidate wins an election that they are infallible, and should be immune from any sort of criticism is ludicrous. At best it is complete hypocrisy on the part of those uttering this nonsense, and at worst an extremely dangerous perspective, that results in human rights abuses in countries like Turkey and Russia.

    4. Protesters are just idiots who are virtue signalling whilst contributing exactly zero to the cause they’re apparently so passionate about.

    This is pretty much a word for word comment from someone who didn’t approve of the demonstrations held in Glasgow yesterday, but the language is similar to a lot of others.

    Here’s how ‘virtue signalling’ is defined:

    virtue signalling (US virtue signaling)

    noun [mass noun]

    the action or practice of publicly expressing opinions or sentiments intended to demonstrate one’s good character or the moral correctness of one’s position on a particular issue: it’s noticeable how often virtue signalling consists of saying you hate things | standing on the sidelines saying how awful the situation is does nothing except massage your ego by virtue signalling.

    On its own, the phrase is seemingly innocuous, but more and more frequently it is now being used to dismiss people who are taking a position that others disagree with, without them having to actually intellectually engage with that position. It’s become one of the lazy phrases like ‘fake news’ that I can’t stand, as it doesn’t actually mean anything in practice.

    Given that the phrase is based on intent, the only way ‘virtue signalling’ could accurately be ascribed to those who chose to demonstrate against Trump or his actions, would be if the person using it knew those intentions. In other words, they would need to know the specific motivating factors involved… something that is clearly impossible when applied to a group.

    It’s probably worth being crystal clear on this: disagreeing with your position doesn’t mean that somebody is ‘virtue signalling’. It means they disagree with your position. Challenge them on their arguments, not with some spurious empty phrase that only serves to shut down discussions that you can’t handle.

    Trump image by Gage Skidmore – used under CC-BY-SA 2.0 license

  • Trump, Prostitutes, and 4chan. Still want to ban sites that publish fake news?

    Today the big story on the web is that a story leaked from a ‘British intelligence officer’ about Russia blackmailing Donald Trump, published by BuzzFeed, and then dutifully re-posted by other major established media outlets was allegedly made up by posters on 4chan.

    Whilst the articles state that the claims are ‘unverified’, and ‘contain errors’, it appears that there has been very little in the way of fact checking or corroboration of sources going on. Indeed, publishing allegations without due dilligence is exactly the operational basis of other sites that don’t fall under the banner of ‘credible’ media. The fact is that the outcome in either case is the same: either willingly or blindly (through a desire to publish content first to drive advertising revenue), these sites are spreading misinformation. Looking at the Mirror’s coverage, one would be forgiven for thinking that the info was at least partially credible:

    Screen Shot 2017-01-11 at 12.46.40.png

    It’s all too easy to scoff at the Mirror, or BuzzFeed. Nobody takes them seriously after all; everybody knows that! That clearly isn’t actually the case, and it demonstrates the problem with the reactionary drive towards ‘banning’ or filtering sites that publish fake news from online platforms.

    Of course, these claims to have made up the story could very well be made up themselves… but that doesn’t invalidate the criticism. If anything, it highlights the issue with asking or expecting third parties such as online service providers to filter out untrue content.

    To echo the questions I raised in my previous post on this topic: Exactly what constitutes fake news, where do we draw the line, at what point do ‘credible’ news sources lose that credibility, and who makes those determinations? Should BuzzFeed articles be removed from Facebook? What about The Mirror? What about CNN? Maybe only articles claiming to have made up fake news should be treated as fake news. Where does it stop?

    For an interesting read on this that was shared by my colleague Davide recently, check out this page:

    https://www.theguardian.com/commentisfree/2017/jan/08/blaming-fake-news-not-the-answer-democracy-crisis

    It only gets worse when charges of fake news come from the media, which, due to the dismal economics of digital publishing, regularly run dubious “news” of their own. Take the Washington Post, that rare paper that claims to be profitable these days. What it has gained in profitability, it seems to have lost in credibility.

    Edit: I published this earlier today before Trump’s press conference, and felt compelled to update it as a result of what he said. Responding to questions from the media, he apparently decided to pick up the ‘fake news’ mantle:

    When Jim Acosta, Senior White House Correspondent for CNN, attempted to ask Trump a question, the President-elect refused to answer. “Not you. Your organization is terrible,” Trump said. “I’m not going to give you a question, you are fake news.”
    So now Trump has appropriated the term ‘fake news’ to thwart off any criticism without response. That’s what happens when you set up an empty vessel as something that is inherently wrong with no real definition. This should have been easy to avoid. – (source)

    This is precisely why setting up a straw man term such as ‘fake news’ is so dangerous, because an empty vessel that is inherently bad without any clear definition leaves the power in the hands of those who want to wield it for their own ends. If we want to try and combat ‘fake news’, we first need to understand what it is we are fighting against. Otherwise, the question becomes whether it is our version of fake news that is bad, or Donald Trump’s?

  • Censoring ‘Fake News’ is the real threat to our online freedom

    As the results of the US Presidential election began to sink in, the finger of blame swung around to focus on ‘fake news’ websites, that publish factually incorrect articles with snappy headlines that are ripe for social media dissemination.

    francis-fake.png
    A ‘fake’ headline. Via the Independent.

    Ironically, the age of propaganda has previously thought to have died out with the proliferation of easy access to the Internet, with people able to cross-reference and fact check claims from their bedroom, rather than having a single domestic point of information. Instead, what it appears we are seeing is the opposite; people congregating around a single funnel of sources (Facebook), which filters to the top the most widely shared (read: most attention grabbing) articles.

    Almost immediately, the socially liberal-leaning technology giants Google and Facebook announced that they would be taking steps to prevent websites from making use of their services. This has sparked a ream of discussion about the ‘responsibility’ of other online platforms to take steps to prevent the spread of these so-called ‘fake news’ sites on their networks.

    Here, probably for the first time I can remember, I find myself in agreement with what Zuckerberg has (reportedly) said in response:

    The suggestion that online platforms should unilaterally act to restrict ‘fake news’ websites is one of the biggest threats to free speech to face the Internet.

    Those are my words, not his – just to be clear. Click through to see what he actually said (well, as long as the source can be trusted).

    It is unclear exactly what ‘fake news’ is supposed to be. Some sites ‘outing’ publishers that engage in this sort of activity have included The Onion in their lists, which in of itself demonstrates the problem of singling out websites that publish ‘fake’ news.

    • Where is the line drawn between ‘fake news’ and satire?
    • At what point do factually incorrect articles become ‘fake news’?
    • At what point do ‘trade puffs’ and campaign claims become ‘fake news’ rather than just passionate advocacy?
    • If the defining factor is intent, rather than content, who makes that determination, and based on what set of values?

    It is not the job of online platforms to make determinations on the truth of the articles that their users either share, or the content that they themselves publish. There is no moral obligation or imperative on them to editorialise and ensure that only particular messages reach their networks. In fact, it is arguably the complete opposite: they have an ethical obligation to ensure that they do not interfere in the free speech of users, and free dissemination of ideas and information; irrespective of their own views on the ‘truth’ or otherwise of them.

    The real challenge to free speech isn’t fake news; it’s the suggestion that we should ban it.

    Misinformation is a real issue, and the lazy reliance culture facilitated by networks such as Facebook and Google where any article with a catchy headline is taken at face value is a huge problem, but the answer is not for these networks to take things into their own hands and decide what set of truths are acceptable for us to see, and which are not.

    We have reached a position where half of our societies are voting one way, whilst the other half can’t believe that anybody would ever make such a decision, precisely because we have retreated into our own echo chambers – both in the physical world as well as the virtual. The solution to the political struggles we on the left face is not to further restrict the gamut of speech that is open to us in our shared online spaces, or to expect service providers to step up and act as over-arching publishers; it is to get out there and effectively challenge those ideas with people that we would normally avoid engaging with. Curtailing the free speech of others through the arbitrary definition of ‘fake news’ is not only not the answer, but it’s a terrifying prospect to the very freedoms that we are arguing to protect.

    The real challenge to free speech isn’t fake news; it’s the suggestion that we should ban it.

    Disclaimer: It should go without saying that these are my views, and not necessarily those of WordPress.com, or anybody else.

  • High Court’s Article 50 judgement is best outcome for all

    For the first time in a while, I woke up to headlines that gave me a glimmer of hope that not all has completely gone to the dogs:

    Screen Shot 2016-11-03 at 12.36.32.png

    I took the time to read through the full judgement (PDF), which is something of a master class in British constitutional law and statutory interpretation; full of exactly the points that I and other legal commentators have been making since the EU referendum was announced relating to British Parliamentary sovereignty.

    screen-shot-2016-11-03-at-13-42-36

    Specifically, the judgement superbly outlines and solidifies limits on the Royal Prerogative, which is a power oft-criticised for its vast, unchecked reach, and past abuses.

    “The powerful constitutional principle is that the Crown should not have power to vary the law of the land by the exercise of its prerogative powers.”

    Essentially, the judgement was that based on the Diceyan principle of Parliamentary Sovereignty; that it is the British Parliament who must give the Article 50 notification; not the Government via the Royal Prerogative.

    screen-shot-2016-11-03-at-13-39-59

    Despite the strong, and reasoned nature of the judgement, the response from those who voted to leave has been almost unbelievable, with Conservative MPs declaring that the Government should not be bound by unelected judges (which is literally, the entire basis of the rule of law), and that the decision to require Parliament’s involvement is ‘disgraceful’.

    Dictionary definition of contradiction in terms.
    Dictionary definition of contradiction in terms.

    To be clear: today’s judgement was not about whether or not we leave the EU; instead, it simply re-asserted the sovereignty of the British Parliament, which is exactly what the leave campaign was arguing had been lost in the first place. If Parliament does decide to completely refuse to trigger Article 50, then that would arguably be a disgrace. The referendum was held, and the outcome should be respected; something that I have repeated time and again on this blog. However, Parliament should be involved.

    The UK voted to leave the EU, yes, but the kind of exit was never specified. We were faced with the prospect of having the most extreme form of severance possible, thrust forward at the whim of an unelected Prime Minister. Instead, now we have Parliament involved in determining the kind of exit.

    The Government argued in it submissions that Parliament would most likely have the chance to vote on any deal that was reached with the EU before it was implemented, and that it wasn’t necessary to have Parliamentary approval to trigger Article 50. The Court quite sensibly rejected this notion, on the basis that by the time any such vote came around, there is the real chance that the time limit imposed by the European Treaty would run out, and leave us with no rights or compromises.

    screen-shot-2016-11-03-at-13-14-15

    By all means, get angry if Westminster completely refuses to ever trigger Article 50, but to be outraged at the principle that the British Parliament should be involved in the implementation of one of the most significant political processes of our lifetime is plainly just nonsensical. To reiterate: today’s question isn’t about whether or not Article 50 should be triggered, but who has the power to do it – on behalf of the people.

    Of course, all of this is subject to a final appeal to the Supreme Court, so we will see what happens in the next leg.

    I’ll wrap up with this text, taken from the Fire Brigades Union case, and quoted in today’s judgement:

    R v Secretary of State for the Home Department ex parte Fire Brigades Union [1995] 2 AC 513
    R v Secretary of State for the Home Department ex parte Fire Brigades Union [1995] 2 AC 513
  • Common Brexit Legal Myths Debunked

    Legal myths and inaccuracies have been rampant in the days following the outcome of the EU referendum. I collected these as I sat sipping leche de pantera in sunny Barcelona, and have put together an explanation for each of the biggest howlers below.

    ‘The referendum was only advisory, not legally binding.’

    No, the referendum is not legally binding – but that should be of no surprise, as no referendum in the UK ever is.

    The response from a lot of folk at this point is to reference the 2011 referendum on whether or not to adopt a system of proportional representation for Westminster. This is thought of as a referendum where the result would be ‘legally binding’ on Parliament. Part of the relevant language of the Parliamentary Voting System and Constituencies Act 2011 that lends itself to this view is:

    8Commencement or repeal of amending provisions

    (1)The Minister must make an order bringing into force section 9, Schedule 10 and Part 1 of Schedule 12 (“the alternative vote provisions”) if—

    (a)more votes are cast in the referendum in favour of the answer “Yes” than in favour of the answer “No”, and

    (b)the draft of an Order in Council laid before Parliament under subsection (5A) of section 3 of the Parliamentary Constituencies Act 1986 (substituted by section 10(6) below) has been submitted to Her Majesty in Council under section 4 of that Act.

    (2)If more votes are not cast in the referendum in favour of the answer “Yes” than in favour of the answer “No”, the Minister must make an order repealing the alternative vote provisions.

    (3)An order under subsection (1)

    (a)must bring the alternative vote provisions into force on the same day as the coming into force of the Order in Council in terms of the draft referred to in paragraph (b) of that subsection, but

    (b)does not affect any election held before the first parliamentary general election following that day.

    Rather than binding Parliament to a decision, this simply sets out the process by which they would be expected to implement the result in a statutory form. That in of itself does not impose a legal obligation on Parliament to actually do so. Even if it did, the doctrine of Parliamentary Sovereignty means that it is impossible for Parliament to bind itself in such a way. Just as the statutory recognition of the Scottish Parliament’s ‘permanence’ is symbolically important but legally meaningless, the same applies here. Politically, expectations may be set by statutory wording, but legally there is absolutely nothing to stop Parliament ignoring the result of any referendum.

    The nature of the referendum does come into play when considering another one of the myths though, so we will come back to it later on.

    From my own personal, political standpoint (rather than a legal one):

    When it comes to the ‘advisory’ part of the claim about the referendum, it is a word that has conveniently only cropped up in the aftermath of the result, usually to aid a particular position. Changing the expectation of referenda in this way is a dangerous game. We should not start to assume that a referendum result will not be implemented by default, and that the Electorate are only giving their ‘opinion’, just because it technically isn’t legally binding under the constitution. If Parliament wish to ignore the expressed will of the people, we should not let them away with the political consequences of doing so.

    At no point in the lead up to the EU referendum was it ever suggested that the result would only be ‘advisory’. To pretend otherwise would be a disgrace, and do a massive disservice to our Democracy. Imagine the fallout of Scotland had voted to leave the UK, only for the outcome to be dismissed on the basis that the referendum ‘was only advisory’.

    The Scottish Parliament can veto the referendum result.’

    Ah, wouldn’t it be glorious if it were true. Sadly, it’s not. This is a myth that appears to be caused, or at least perpetuated by the media’s misleading coverage.

    The Sun's ill informed title
    The Sun’s ill informed title. What a surprise.
    Misleading headline from the Independent
    Misleading headline from the Independent
    The BBC's original headline
    The BBC’s original headline

    It’s worth noting that the BBC have since updated the story’s title to be more accurate:

    BBC's updated veto title

    There are some brilliant responses already that deal with this question in depth. As great as they are, they tend to approach things in a more academic fashion – which isn’t necessarily all that clear for those without a legal background. For this reason, I think it’s worth reiterating the position in a more straightforward fashion.

    In short, the Scottish Parliament has no legal power to ‘veto’ any decision of the British Parliament – and particularly not this one. Westminster is sovereign, and can make or unmake any laws it likes, including the very existence of the Scottish Parliament if it so chose. (Again, see my previous blog on this very topic for more). There would of course be political fallout to any of these decisions, but legally nothing would stand in their way.

    If there is no veto, what was all the media fuss about then?

    There is a ‘constitutional convention’ that Westminster would seek legislative consent from the Scottish Parliament before legislating on any area that would affect devolved matters, which can be thought of as a sort of ‘gentleman’s agreement’; an understanding that the elected representatives of Scotland should at least be consulted before Westminster exercises their sovereign power to over-rule them. This could be (shakily) equated to a parent choosing to knock before entering into their teenagers’ bedroom. Nothing would stop them from waltzing in unannounced, but they make the choice not to out of respect for the other person’s individual autonomy. If parents continually disrespect this unwritten social understanding, then the overall relationship will suffer as a result.

    In the interview with Nicola Sturgeon, you will notice that she never once mentioned the word ‘veto’. Rather, she stated that she would ask the Scottish Parliament to refuse to give their ‘legislative consent’, something which they are perfectly entitled to do. This may well pose a significant political and constitutional issue for Westminster, but nothing would prevent them from pulling out of the EU anyway.

    As it stands, there is a very real chance that the Scottish Parliament would never have the chance to refuse to give their legislative consent anyway. If Westminster were to vote on the issue, this would be far more likely, but…

    ‘To leave the EU, the British Parliament will have to vote on it.’

    Nope.

    The idea here is that in order to give the now infamous Article 50 notification to commence the process of the UK leaving the EU, it will have to be approved by the Westminster Parliament – and potentially even the House of Lords. Those looking to find a way to avoid exiting the EU are hoping that since a majority of MPs are opposed to leaving, they will refuse to do so, scuppering the whole thing.

    What people who bring this up forget is the existence of the ‘Royal Prerogative’, a curiosity of the British constitution that allows for action to be taken (usually on the advice of a Prime Minister) without requiring Parliamentary assent. This is the norm for international treaties, and it’s precisely the mechanism David Cameron was expected to employ before he dropped the mic and kicked the ball down the field for somebody else to deal with.

    Parliament could block the repeal of the European Communities Act 1972 when it came time to do so, but if the Article 50 notification process had already been invoked, this would be completely pointless. After 2 years (unless there was a unanimous agreement to extend this period), we would be out of the EU under European law, whilst still domestically bound by the requirements.

    ‘Under European law, the result of the referendum is invalid as less than 65% of those who voted did so to leave.’

    This particular idea seems to have come from people desperately reading various laws to come up with some way to nullify the vote’s outcome. It’s also completely incorrect, resulting from a simple misinterpretation of the law.

    Edit: Apparently this error is the basis of a petition signed by over 4 million people to call for a second referendum. Even more important to clear it up.

    The wording that gives rise to the confusion is found in our old friend Article 50 of the Treaty of the Functioning of the European Union. Section 4 states:

    4. For the purposes of paragraphs 2 and 3, the member of the European Council or of the Council representing the withdrawing Member State shall not participate in the discussions of the European Council or Council or in decisions concerning it.

    A qualified majority shall be defined in accordance with Article 238(3)(b) of the Treaty on the Functioning of the European Union.

    and Article 238(3)(b) says:

    (b) By way of derogation from point (a), when the Council does not act on a proposal from the Commission or from the High Representative of the Union for Foreign Affairs and Security Policy, the qualified majority shall be defined as at least 72% of the members of the Council representing Member States comprising at least 65% of the population of these States.

    Rather than imposing any requirement on the percentage of people who have to vote to leave the EU in a Member State, this sets out the framework for how the European Council will go about negotiations should that Member State decide to leave. The 65% figure relates to the makeup of the group that will enter into those negotiations.

    Further, Section 1 of Article 50 TFEU is pretty clear:

    1. Any Member State may decide to withdraw from the Union in accordance with its own constitutional requirements.

    If the UK decided to draw straws, or have a haggis flinging competition to decide whether or not to leave the EU – that would be perfectly acceptable (so long as it complied with other general EU law principles). The point is that the decision making process is something that is entirely up to the Member State in question to determine. Again, this provides a neat segue into the final incorrect assertion:

    ‘The EU will force the UK to leave if we don’t trigger Article 50.’

    If you listen to the President of the European Commission, Jean-Claude Juncker, it would sound like the UK is about to be kicked out of the EU, even if it doesn’t invoke Article 50. However, there is nothing in the European treaty that allows for that possibility.

    As things stand, the UK is arguably still involved in the decision making process of whether to leave the EU or not, in accordance with the British constitution. The referendum is hugely important, and Westminster should ignore it at their peril – but given that it isn’t legally binding on the British Parliament, then it means absolutely diddly squat under European law.

    Until the Article 50 notification is invoked, legally absolutely nothing has changed between the UK and the EU. This is why Juncker’s smart-ass riposte to UKIP in the European Parliament isn’t all that clever at all. Politically, pressure is mounting, and feelings are obviously running high, but the UK remains a full Member State – something which everyone would do well to recognise.

    If you’re looking for some good legal resources (some with particular political slants), check out the following blogs:

    https://publiclawforeveryone.com/

    http://barristerblogger.com/

    http://lallandspeatworrier.blogspot.com/

    http://jackofkent.com/