UK and US Citizens: Please Request Your Personal Data Held By Cambridge Analytica

By now, many people have probably heard about the company Cambridge Analytica.  By its own admission, it played a major role in the success of Donald Trump.  There are also numerous indications that it was involved in the Brexit campaign.

Because Cambridge Analytica is intimately bound up with the London-based company SCL it is possible to make a subject access request in order to find out what information is held about you.  This applies to both UK and US citizens. 

I therefore urge as many people as possible to ask for that data - it only takes a few minutes, and can be done with a simple letter.  Obtaining this information will help us understand what exactly has been happening. Here's what I have sent; please feel free to use and/or modify it:

SCL Group Ltd
c/o Pkf Littlejohn 2nd Floor,
1 Westferry Circus,
Canary Wharf,
London,
United Kingdom, E14 4HD

22.10.17

Dear Sir,

Subject Access Request

I have read numerous reports in the press that you and/or your subsidiaries in the UK or elsewhere hold data on UK/US voters, which may include information about me.

In accordance with the UK Data Protection Act, I am writing to ask you to supply me with a copy of  the information you hold about me, please.

If there is a fee or you require more information in order to fulfil my request, please let me know.

Thank you for your help.

Yours faithfully,

Glyn Moody

You may also wish to make a contribution to this crowdsourced initiative to dig even deeper.  I've given, FWIW.

The stakes here are incredibly high: it is really no exaggeration to say that our democracy and freedom are at play.  I therefore hope you can spare a few minutes to help shed some light on what has happened here.

TTIP explained: The secretive US-EU treaty that undermines democracy

The Transatlantic Trade and Investment Partnership (TTIP), sometimes known as the Transatlantic Free Trade Agreement (TAFTA), is currently being negotiated behind closed doors by the European Union and the US. If it is successfully completed, it will be the biggest trade agreement in history. But TTIP is not just something of interest to export businesses: it will affect most areas of everyday life, including the online world.

Opponents fear it could undermine many of Europe's hard-won laws protecting online privacy, health, safety and the environment, even democracy itself. For example, it could effectively place US investors in the EU above the law by allowing companies to claim compensation from an EU country when it brings in a regulation that allegedly harms their investments—and for EU companies to attack US laws in the same way.

Those far-reaching effects flow from the fact that TTIP is not a traditional trade agreement, which generally seeks to lower tariffs between nations so as to increase trade between them. The tariffs between the US and EU are already very low—under 3%—so there is little scope to boost transatlantic trade significantly by removing the remaining tariffs completely.

Instead, TTIP aims to go beyond tariffs, and to remove what it calls "non-tariff barriers." These refer to the different ways of doing things which make it hard for a company to sell exactly the same product on both sides of the Atlantic. Typically, different national regulations require different kinds of tests and product information, which leads to a duplication of effort that adds costs and delays to making products available in the other market.

TTIP's stated aim to smooth away those NTBs is good news for the companies, but not so much for pesky humans. What are classed as "barriers" include things like regulations that protect the environment or the online privacy of Europeans. The threat to diminish or remove them in the name of transatlantic "harmonisation", has turned the traditionally rather dull area of trade agreements into the most important focus for civil action in years, galvanizing a broad spectrum of groups on both sides of the Atlantic that see TTIP not as a potential boon, but a bane.

Read the rest of this 6,376-word article on Ars Technica UK.

British Judge Rules Google Can Be Sued In UK Over Privacy Case

The battle over online privacy, and how personal data should be treated as it moves over the Internet, is being fought between the US and EU points of view in multiple ways. There is the EU's Data Protection Regulation, currently grinding its way through the legislative process; there are the discussions about the NSA's spying program, and how it impacts Europeans; and finally, there are various court cases involving US companies and the personal data of EU citizens. One of these is in the UK, where The Telegraph reports that an important decision has been handed down: 

On Techdirt.

EU Data Protection Proposal Gets Stronger, But With Big Loopholes

One of the most important pieces of legislation wending its way through the European Parliament concerns data protection. Because of its potential impact on major US companies like Google and Facebook, this has become one of the most fought-over proposals in the history of the EU, with lobbyists apparently writing large chunks of suggested amendments more favorable to online services. And all of that was before Snowden's revelations about NSA spying in the EU made data protection an even more politically-sensitive area. 

On Techdirt.

Controversial EU Data Protection Regulation May Be Negotiated In Secret In Breach Of Parliamentary Process

Today, the European Parliament held a three-hour long debate on PRISM, Tempora and what the EU response should be. Many wanted TAFTA/TTIP put on hold; others didn't. But one theme cropped up again and again: the need for strong data protection laws that would offer at least some legal protection against massive and unregulated transfer of Europeans' personal data to the US. 

On Techdirt.

Why CISPA Shows We Need Strong EU Data Protection

It seems hard to believe that it was only a little over a year ago that the threat from the US SOPA (Stop Online Piracy Act) was averted (and that ACTA was still with us in the EU). But of course the war is never won: new threats to freedom and openness on the Internet just keep on coming. 

On Open Enterprise blog.

Is This What Google Really Thinks About Privacy?

I've been writing quite a lot about the current Data Protection regulation that is being considered in the European Parliament. As I've noted, this has led to an unprecedented level of lobbying from US companies, who are keen not to have to follow strict EU rules when it comes to our privacy. So far, I've not singled out any particular company in this context, but having read somewhat belatedly this post by the privacy expert Simon Davies, I feel a need to talk about one that is clearly right at the heart of this battle: Google.

On Open Enterprise blog.

EU Data Protection: Please Write to MEPs Now

Last week I wrote about the revelation (to me, at least - maybe other people knew this was going on) that MEPs were simply cutting and pasting from lobbyists' proposals and presenting them as amendments to the important Data Protection regulation. I also suggested that readers might like to write to the UK MEPs involved, and ask about this. Several kindly did so, and sent me the reply, which came from Malcolm Harbour. Here's what he wrote:

On Open Enterprise blog.

How Lobbyists' Changes To EU Data Protection Regulation Were Copied Word-For-Word Into Proposed Amendments

Everyone knows that politicians are lobbied, sometimes massively. But it's rare to be able to track directly the detailed effects of that lobbying. That's why a new site called LobbyPlag is so interesting: it allows people to do precisely that in the case of the controversial data protection rules in the EU, which aim to regulate how personal information harvested from users of online services can be used. Naturally, many large Net companies -- mostly in the US -- are unhappy about these moves; some US diplomats are even talking of a possible "trade war" if the proposals go through in their current form. That's unlikely, not least because the lobbying is starting to pay off, as LobbyPlag's analysis makes clear. 

On Techdirt.

EU Data Protection: Proposed Amendments Written by US Lobbyists

It's becoming clear that the lobbying around the proposed EU directive on Data Protection is some of the most intense ever seen - some activists have said it's even worse than during ACTA, while on the US side there's mutterings about starting a "trade war" if it's passed in its present form.

On Open Enterprise blog.

The Battle for the Soul of EU Privacy

As I mentioned a couple of weeks ago, 2013 is already shaping up to be a year in which data protection is a key battleground. That's been confirmed by a flurry of stories around Data Privacy Day, which was yesterday in case you missed it.

On Open Enterprise blog.

EU Data Protection and Open Standards

As happened for last year, 2013 will doubtless see plenty of battles in the domains of open standards, copyright and software patents, but there will also be a new theme: data protection. That's a consequence of an announcement made by the European Commission almost exactly a year ago:

On Open Enterprise.

An Unintended Act of Open Government

Although unintentional in this case, here's a good example of why we need open government:

"Big Brother" plans to automatically hand the police details of the daily journeys of millions of motorists tracked by road pricing cameras across the country were inadvertently disclosed by the Home Office last night.

Leaked Whitehall background papers reveal that Home Office and transport ministers have clashed over plans for legislation this autumn enabling the police to get automatic "real-time" access to the bulk data from the traffic cameras now going into operation. The Home Office says the police need the data from the cameras, which can read and store every passing numberplate, "for all crime fighting purposes".

Thank goodness there won't be any function creep.

It's (Open) Party Time!

For anyone in Swinging London 2.0 next Wednesday, the place to be is the Open Rights Group party:

It will be a night of public domain and openly licensed music, remixed visuals and free culture goodie bags, with an uber-geek raffle which includes the opportunity to be written in to Cory Doctorow's next book, or receive a signed keyboard from our patron Neil Gaiman. Danny O'Brien, who founded the ORG pledge, will be speaking.

And if you were wondering,

The Open Rights Group is a new and fast-growing NGO focused on raising awareness of issues such as privacy, identity, data protection, access to knowledge and copyright reform.

All things that are likely to be dear to readers of these pages.