E-Commerce Regulation: Necessity, Futility, Disconnect
Existing e-commerce regulations constitute a premature and unnecessary interference in the natural evolution of commercial practices and technologies. I question not just their quality, mainly attributable to the technological ignorance of the regulator, but their very necessity. I observe the practical futility of drafting effective regulatory instruments in areas subject to continuous and unpredictable technological change. I criticize the overly homogenous approach to “everything Internet” (i.e. everything involving the Internet requires new law) as well as the creation of new regulatory spheres and legal categories. Some might claim that it is too early for a critical retrospective of this subject. Despite its relative “youth,” however, the “law of e-commerce” has developed a set of orthodox approaches. It is therefore not too early to present some heterodox views, especially given the largely unsuccessful regulatory activity in the European Union. Not just technologies but also theories about the Internet can become obsolete within a short period of time and should therefore be subject to constant revision.
The Impact of EU Unfair Contract Terms Law on U.S. Business-to-Consumer Internet Merchants
When the Court of Appeals for Versailles issued its decision in AOL France v. UFC Que Choisir2 in September 2005, it sent the message to U.S. Internet businesses that even contractual boilerplate localized for European markets may be invalid in European consumer transactions. In that case, a French consumer advocacy group challenged the terms AOL offered its French customers after AOL had made extensive revisions to its standard form contracts to respond to the concerns regarding those terms expressed in an advisory opinion by a French consumer protection agency. In 2004, a trial court invalidated nearly every term in the revised agreement; the appeals court affirmed on all counts. Subsequently, in July 2006 following concerns raised by the Office of Fair Trading (“OFT”), a United Kingdom government agency charged with “making sure markets work well for consumers,”3 Dell Corporation Limited changed its online terms and conditions to make them fairer to consumers.4 European consumer contract law had an impact in both cases. At issue for AOL France and Dell Corporation Limited was the application of France’s and the UK’s consumer contract law which is based on the Unfair Contract Terms Directive of 19945 and calls into question the validity of many of the terms that U.S. courts routinely enforce in transactions involving American consumers and merchants.
The data privacy / national security balancing paradigm as applied in the USA and Europe: Achieving an acceptable balance
...................................................................................................................... iii Summary ..................................................................................................................... ix Overall Introduction.................................................................................................... 1 Chapter One ................................................................................................................. 7 The Privacy/National Security Balance from a European Perspective .................. 7 Introduction ................................................................................................................ 7 Section I: The Council of Europe ............................................................................ 13 1.0 The Basis for the Data Privacy/National Security Balance .......................... 13 2.0 The Influence of the ECHR on National Legal Systems .............................. 14 3.0 The Jurisprudence of the ECtHR and the Data Privacy/National Security Balance ................................................................................................................. 27 4.0 Shortcomings in the Jurisprudence of the ECtHR The Application of the Margin of Appreciation ........................................................................................ 43 Section II: The European Union .............................................................................. 67 1.0 The European Union and Human Rights Protection in the Context of the data privacy/national security balance ......................................................................... 73 2.0 The Growing Involvement of the EU in Human Rights Protection, particularly in data protection and the circumstances influencing this. ............... 77 3.0 Data Retention Directive 2006/24/EC and the Alteration of the Data Privacy/National Security Balance ....................................................................... 79 4.0 Features of Directive 2006/24/EC ................................................................ 81 5.0 Responses to Data Retention Directive 2006/24/EC .................................... 82 6.0 Institutional Responses to Directive 2006/24/EC......................................... 94 7.0 Judgment of the CJEU (Grand Chamber) on the Validity of Directive 2006/24/EC......................................................................................................... 103 8.0 The Ruling of the CJEU ............................................................................. 105 9.0 Significance of the Digital Rights Ireland and Seitlinger Judgment and its Context ............................................................................................................... 109 10.0 Consequences of the Digital Rights Ireland Judgment for Data Privacy/National Security in Europe .................................................................. 114 11.0 Judgments of the CJEU in the Google Spain and Schrems Cases .............. 122 12.0 Developments following the Invalidation of the Safe Harbour Agreement 131 13.0 Impact of the CJEU decisions in the Digital Rights Ireland, Google Spain, and Schrems cases on the data privacy/national security balance ...................... 135 14.0 The Alternative Data Privacy/National Security Balance: Circumventing vi Data Privacy Protections in the EU: The Mass Surveillance of Personal Data by Spy Agencies in some EU Member States ..........................................................135 15.0 Two Parallel Systems of Surveillance .........................................................146 16.0 The Council of Europe Versus The European Union: Which Regime Provides Greater Protection For Data Privacy Rights? .......................................148 17.0 Contrasting the European and U.S. positions on the Balancing of Data Privacy Rights against National Security Interests .............................................153 18.0 Conclusion ...................................................................................................156 Chapter Two .............................................................................................................165 The Privacy/Security Balance in the U.S. pre-9/11 ................................................165 1.0 Introduction .................................................................................................165 2.0 U.S. Understandings of the Right to Privacy and Particularly Data Privacy .............................................................................................................................168 3.0 Major Interferences with data privacy for national security reasons pre-9/11 in the context of the data privacy/national security balance, with emphasis on the background and role of the NSA. ........................................................................179 4.0 Major Scandals Relating to Data Retention: Privacy Rights Illegally Infringed by the Executive and its Agencies .......................................................186 5.0 Church Committee Report and the Balance Between National Security and Personal Liberties Pre-9/11 .................................................................................191 6.0 Judicial Oversight of Surveillance in the name of National Security: Implications for the Data Privacy/National Security Balance. ............................194 7.0 FISA: Adjusting the Data Privacy/National Security Balance? Restricting the Interpretation of Personal Data in the Context of Intelligence Surveillance by the Executive Branch in the name of National Security ...........................................197 8.0 Balancing Rights which are Qualitatively Different: Philosophical Issues Underlying the Data Privacy/National Security Balancing Paradigm ................209 9.0 Two Data Privacy/National Security Balancing Systems Pre-9/11:The Influence of NSA Surveillance Activity. The Legal and the Actual Balances....220 10.0 Conclusion ...................................................................................................224 Chapter Three ...........................................................................................................229 The Privacy/Security Balance in the U.S. Post-9/11 ..............................................229 1.0 Introduction ...................................................................................................229 2.0 Background ...................................................................................................230 3.0 The Administration's Defence of Its Surveillance Policies and a Scholarly Response .............................................................................................................244 4.0 Ideological Context of the Patriot Act ...........................................................252 5.0 Provisions of the Patriot Act .........................................................................253