Homo Digitalis in the DSA public consultation
Following its input to the European Commission in June, Homo Digitalis filed extra proposals in the DSA public consultation
Our organization is very active in the field, since the new legislation will mark important developments in contemporary digital services.
You may read our answers to the Commission’s questionnaire here. You may also read our extra comments here.
European Digital Rights (EDRi) also filed its comments to the European Commission. Homo Digitalis endorsed these comments. EDRi’s input is available here.
Open Event: “Technology–led Policing: Between privacy and security”
Greek Police may currently use drones to enhance its efficiency in fighting against crime. In 2021, it is expected to receive smart devices with facial recognition software; these devices are expected to be used by police officers on patrol to process citizens’ biometric data (fingerprints and photos), in order to identify them.
Moreover, a Presidential Decree on the use of CCTV in public areas is expected soon. The media are also reporting legislative initiatives on the use of body worn cameras by certain police officers.
Despite all these developments, the Greek State has not yet revised its legislation on electronic communications’ data retention and police access to them, according to the guidelines issued by the Court of Justice of the European Union (CJEU) in 2014. It is notable that a law drafting committee was formed in 2014, but has not publicized any result until today.
A new CJEU ruling on the topic is expected in fall 2020. Prominent civil rights organizations, such as Privacy International and La Quadrature du Net play an important role in the case. Electronic communications’ metadata retention provides for the possibility of important conclusions regarding people’s privacy.
Such conclusions refer to daily activities, permanent or temporary living locations, usual transport, activities, social relations, etc.
Homo Digitalis, taking into account these developments, holds an open event in Technopolis, City of Athens on Wednesday 30 September. The purpose of this event is to inform the public on the current situation and potential challenges on human rights, but also to bring together the various stakeholders and enhance cooperation between them, with a view to ameliorating the legal framework on the topic.
Representatives by the Greek Police, the Greek Data Protection Authority, the Authority for Communication Security and Privacy, the EU Fundamental Rights Agency, as well as academics and civil society will participate in the event.
Τhe event will be available on live stream and will also be filmed and will be available online.
If you want to watch the event on live stream, please register below.
The event is part of the Digital Ri.Se. (Digital Rights & Security) project by Homo Digitalis, which takes place under the auspices of the “Active Citizens Fund”. The funding of the project comes from the EEA countries (Iceland, Lichtenstein, Norway).
Interview with Prof. Chris Brummer on cryptocurrencies and international regulatory cooperation
In recent years, cryptocurrencies have significantly grown in popularity, demand and accessibility. New “stablecoins” have emerged as a relatively low-risk asset category for institutional investors, whereas new “altcoins” have attracted retail investors due to their availability on popular fintech platforms.
These developments have amplified some of the risks inherent in the decentralized and immutable nature of the blockchain technology on which cryptocurrencies rely. Indicatively, sunk costs associated with volatility, loss of private keys or theft have become higher, whereas the financing of illicit activities has increasingly been channeled through cryptocurrencies.
We asked Chris Brummer, Professor of International Economic Law at Georgetown University*, to reflect on the importance of international regulation, standardization or regulatory cooperation in mitigating the above risks, and the challenges entailed in seeking to align or harmonize domestic regulatory approaches.
Prof. Brummer began by noting that the major risk of cryptocurrencies from an investment standpoint lies in their relative complexity — “what they are, how they operate, and the value proposition, if any, that any particular cryptoasset provides. Because of this complexity, they are difficult to price, and unscrupulous actors can exploit the relative ignorance of many investors”, Prof. Brummer explained.
As cryptoassets are inherently cross-border financial products, operating on digital platforms, the mitigation of the risks entailed in their increasing circulation and use requires international coordination.
“This could take place through informal guidelines and practices which, though not “harmonizing” approaches, should at least ensure that reforms are broadly moving in the same direction”, Prof. Brummer notes.
Countries have very different risk-reward appetites—which are defined largely by their own experiences
Achieving even a minimal degree of international consensus may nonetheless prove challenging given the existence of significant regulatory constraints at the domestic level. As Prof. Brummer explains, “for one, although the tech may be new, regulators operate within legacy legal systems. And national jurisdictions don’t identify crypto assets in the same way, in part because they identify just what is a “security” differently, and also define key intermediaries differently, from “exchanges” to “banks.” And these definitions can be difficult to modify — in the U.S. it’s in part the result of case law by the Supreme Court, whereas in other jurisdictions it may be defined by national (or in the case of the EU, regional) legislation. Coordination can thus be tricky, and face varying levels of practical difficulty.”
Apart from key differences in existing domestic regulatory structures, there may also be a mismatch in incentives across different jurisdictions. “Countries have very different risk-reward appetites—which are defined largely by their own experiences”, Prof. Brummer explains. “Take for example how cybersecurity concerns have evolved. Japan was one of the most crypto friendly jurisdictions in the world. Its light touch regulatory posture, began to change when its biggest exchange, Coincheck, was hacked, resulting in the theft of NEM tokens worth around $530 million. Following the hack, Japanese regulators required all the exchanges in the country to get an operating license. In contrast, other G20 countries like France have been more solicitous, and have even seen the potential for modernizing their financial systems and gaining a competitive advantage in a fast-growing industry, especially as firms reconsider London as a financial center in the wake of Brexit. Although not dismissive of the risks of crypto, France has introduced optional and mandatory licensing, reserving the latter for firms that seek to buy or sell digital assets in exchange for legal tender, or provide digital asset custody services to third parties.”
Users in different jurisdictions may face different regulatory constraints or enjoy varying degrees of regulatory protection
Another limiting factor of international coordination is the proliferation of domestic and international regulatory authorities. Prof. Brummer observes that “international standard-setters don’t always agree on crypto approaches, and neither do agencies within countries. International standard-setters and influencers themselves have until recently espoused very different opinions, with the Basel Committee less impressed, and the IMF—committed to payments for financial stability, more intrigued. And even within jurisdictions, regulatory bodies can take varying views. In the US, for example, the SEC has at least been seen to be far more wary of crypto than the CFTC; similarly, from an outsider’s perspective, the ECB’s stance has appeared to be more cautious than, say ESMA’s.”
For the time being, international regulatory cooperation appears to be evolving slowly, in light of the limitations listed above by Prof. Brummer. Users in different jurisdictions, even within the EU, may therefore face different regulatory constraints or enjoy varying degrees of regulatory protection. The Bank of Greece, for one, has issued announcements adopting the views of European supervisory authorities warning consumers of the risks of cryptocurrencies, but has yet to adopt precise guidelines. Yet, as stablecoin projects popularized by established commercial actors gain popularity, we may soon begin to see a shift in international regulatory pace, possibly toward a greater degree of convergence.
* Chris Brummer is the host of the popular Fintech Beat podcast, and serves as both a Professor of Law at Georgetown and the Faculty Director of Georgetown’s Institute of International Economic Law. He lectures widely on fintech, finance and global governance, as well as on public and private international law, market microstructure and international trade. In this capacity, he routinely provides analysis for multilateral institutions and participates in global regulatory forums, and he periodically testifies before US and EU legislative bodies. He recently concluded a three-year term as a member of the National Adjudicatory Council of FINRA, an organization empowered by the US Congress to regulate the securities industry.
** Photo Credits: Jinitzail Hernández / CQ Roll Call
Comments by Homo Digitalis to the Council of Europe for the use of facial recognition technology
On Friday September 4th, Homo Digitalis submitted its written proposals to the Data Protection Committee of the Council of Europe concerning the draft Guidelines it had issued in early June regarding the use of facial recognition technologies.
With its written proposals Homo Digitalis focuses on 3 different topics, namely the relevant databases, impact assessment, and the principles of necessity and proportionality. Also, by submitting our proposals, we explicitly support the views and ideas submitted by the partner organizations Access Now and European Digital Rights (EDRi).
You can read the suggestions we have submitted here.
We remind you that our organization is one out of 10 civil society organizations to have an observer position in the Ad Hoc Committee on Artificial Intelligence of the Council of Europe (CAHAI)
Homo Digitalis brings "My Data Done Right" to Greece
Since September, 1 the platform “My Data Done Right” is available for use in Greece.
The platform intends to help users exercise easily and rapidly their rights under the GDPR.
The platform helps users to exercise the right to access, rectification, erasure and data portability. Homo Digitalis has added more than 150 Greek-based organizations in the platform, enabling Greek users to contact them and exercise their rights. The said organizations include banks, air companies, political parties, clothing companies, supermarkets and many more.
Homo Digitalis is proud to have collaborated with Bits of Freedom, which started the platform in the Netherlands in 2018, in order to bring it to Greece. Apart from the Netherlands and Greece, My Data Done Right is available in Austria, Belgium, Germany, UK, Spain, Italy, Portugal, Romania, Sweden and Serbia.
We warmly thank the members of the Homo Digitalis team, namely Stergios Konstantinou, Konstantinos Kakavoulis, Eleftherios Chelioudakis, Christianna Andreou, Antigoni Logotheti, Dimitris Ntosas, Marina Zacharopoulou and Theodora Firingou.
You may use the platform here.
The Greek DPA investigates the Greek Police
On August, 31 the Greek Data Protection Authority informed Homo Digitalis that it requested information by the Greek Police regarding its contract for smart policing software. Homo Digitalis had filed a requested to the DPA on March 2020.
The DPA calls the Police to inform it regarding the contract signed with INTRACOM TELECOM. More precisely, it requests the Police to provide for a legal basis for the intended processing, as well as the data retention period, information provided to data subjects, etc.
Moreover, the DPA calls the Police to inform it if it has made a Data Protection Impact Assessment on the consequences of the use of such a software on citizens’ rights. The DPA underlines that a DPIA must be conducted not only prior to the operation of such a software, but also prior to its supply, in order to ensure that privacy-by design standards are met.
Digital Cartels: The Risks, the Role of Big Data, the Possible Measures & the Role of the EU
By Konstantinos Kaouras*
The risks of tacit collusion have increased in the 21st century with the use of algorithms and machine learning technologies.
In the literature, the term “collusion” commonly refers to any form of co-ordination or agreement among competing firms with the objective of raising profits to a higher level than the non-cooperative equilibrium, resulting in a deadweight loss.
Collusion can be achieved either through explicit agreements, whether they are written or oral, or without the need for an explicit agreement, but with the recognition of the competitors’ mutual interdependence. In this article, we will deal with the second form of collusion which is referred to as “tacit collusion”.
The phenomenon of “tacit collusion” may particularly arise in oligopolistic markets where competitors, due to their small number, are able to coordinate on prices. However, the development of algorithms and machine learning technologies has made it possible for firms to collude even in non-oligopolistic markets, as we will see below.
Tacit Collusion & Pricing Algorithms
Most of us have come across pricing algorithms when looking to book airline tickets or hotel rooms through price comparison websites. Pricing algorithms are commonly understood as the computational codes run by sellers to automatically set prices to maximise profits.
But what if pricing algorithms were able to set prices by coordinating with each other and without the need for any human intervention? As much as this sounds like a science fiction scenario, it is a real phenomenon observed in digital markets, which has been studied by economists and has been termed “algorithmic (tacit) collusion”.
Algorithmic tacit collusion can be achieved in various ways as follows:
- Algorithms have the capability “to identify any market threats very fast, for instance through a phenomenon known as now-casting, allowing incumbents to pre-emptively acquire any potential competitors or to react aggressively to market entry”.
- They increase market transparency and the frequency of interaction, making the industries more prone to collusion.
- Algorithms can act as facilitators of collusion by monitoring competitors’ actions in order to enforce a collusive agreement, enabling a quick identification of ‘cartel price’ deviations and retaliation strategies.
- Co-ordination can be achieved in a sort of “hub and spoke” scenario where competitors may use the same IT companies and programmers for developing their pricing algorithms and end up relying on the same algorithms to develop their pricing strategies. Similarly, a collusive outcome could be achieved if most companies were using pricing algorithms to follow in real-time a market leader (tit-for-tat strategy), who in turn would be responsible for programming the dynamic pricing algorithm that fixes prices above competitive level.
- “Signaling algorithms” may enable companies to automatically set very fast iterative actions, such as snapshot price changes during the middle of the night, that cannot be exploited by consumers, but which can still be read by rivals possessing good analytical algorithms.
- “Self-learning algorithms” may eliminate the need for human intermediation, as using deep machine learning technologies, the algorithms may assist firms in actually reaching a collusive outcome without them being aware of it.
Algorithms & Big Data: Could they Decrease the Risks of Collusion?
Big Data is defined as “the information asset characterized by such a high volume, velocity and variety to require specific technology and analytical methods for its transformation into value”.
It can be argued that algorithms which constitute a “well defined computational procedure that takes some value, or set of values, as input and produces some value, or set of values, as outputs” can provide the necessary technology and analytical methods to transform raw data into Big Data.
In data-driven ecosystems, consumers can outsource purchasing decisions to algorithms which act as their “digital half” and/or they can aggregate in buying platforms, thus, strengthening their buyer power.
Buyers with strong buying power can disrupt any attempt to reach terms of coordination, thus making tacit collusion an unlikely outcome. In addition, algorithms could recognise forms of co-ordination between suppliers (i.e. potentially identifying instances of collusive pricing) and diversify purchasing proportions to strengthen incentives for entry (i.e. help sponsoring new entrants).
Besides pure demand-side efficiencies, “algorithmic consumers” also have an effect on suppliers’ incentives to compete as, with the help of pricing algorithms, consumers are able to compare a larger number of offers and switch suppliers.
Furthermore, the increasing availability of online data resulting from the use of algorithms may provide useful market information to potential entrants and improve certainty, which could reduce entry costs.
If barriers to entry are reduced, then collusion can hardly be sustained over time. In addition, algorithms can naturally be an important source of innovation, allowing companies to develop non-traditional business models and extract more information from data, and, thus, lead to the reduction of the present value of collusive agreements.
Measures against Digital Cartels and the Role of the EU
Acknowledging that any measures against algorithmic collusion may have possible effects on competition, competition authorities may adopt milder or more radical measures depending on the severity and/or likelihood of the risk for collusion.
To begin with, they may adopt a wait-and-see approach conducting market studies and collecting evidence about the real occurrence of algorithmic pricing and the risks for collusion.
Where the risk for collusion is medium, they could possibly amend their merger control regime lowering their threshold of intervention and investigating the risk of coordinated effects in 4 to 3 or even 5 to 4 mergers.
In addition, they could regulate pricing algorithms ex ante with some form of notification requirement and prior analysis, eventually using the procedure of regulatory sandbox.
Such prior analysis could be entrusted to a “Digital Clearing House”, a voluntary network of contact points in regulatory authorities at national and EU level who are responsible for regulation of the digital sector, and should be able to analyze the impact of pricing algorithms on the digital rights of users.
At the same time, competition authorities could adopt more radical legislative measures by abandoning the classic communications-based approach for a more “market-based” approach.
In this context, they could redefine the notion of “agreement” in order to incorporate other “meetings of minds” that are reached with the assistance of algorithms. Similarly, they could attribute antitrust liability to individuals who benefit from the algorithms’ autonomous decisions.
Finally, where the risk for collusion is serious, competition authorities could either prohibit algorithmic pricing or introduce regulations to prevent it, by setting maximum prices, making market conditions more unstable and/or creating rules on how algorithms are designed.
However, given the possible effects on competition, these measures should be carefully considered.
Given most online companies using pricing algorithms operate beyond national borders and the EU has the power to externalize its laws beyond its borders (a phenomenon known as “the Brussels effect”), we would suggest that any measures are taken at EU-wide level with the cooperation of regulatory authorities who are responsible for regulation of the digital sector.
Harmonised rules at EU Regulation level such as the recently adopted General Data Protection Regulation are important to protect the legitimate interests of consumers and facilitate growth and rapid scaling up of innovative platforms using pricing algorithms.
It is worth noting that, following a proposal of the European Parliament, the European Commission is currently carrying out an in-depth analysis of the challenges and opportunities in algorithmic decision-making, while in April 2019, the High-Level Expert Group on Artificial Intelligence (AI), set up by the European Commission, presented Ethics Guidelines for Trustworthy AI, in which it was stressed that AI should foster individual users’ fundamental rights and operate in accordance with the principles of transparency and accountability.
In conclusion, given the potential benefits of algorithms, but also the risks posed by the creation of “digital cartels”, it is clear that a fine balance must be struck between adopting a laissez-faire approach, which can be detrimental for consumers, and an extremely interventionist approach, which can be harmful for competition.
* Konstantinos Kaouras is a Greek qualified lawyer who works as a Data Protection Lawyer at the UK’s largest healthcare charity, Nuffield Health. He is currently pursuing an LLM in Competition and Intellectual Property Law at UCL. He has carried out research on the interplay between Competition and Data Protection Law, while he has a special interest in the role of algorithms and Big Data.
Bibliography
Lianos I, Korah V, with Siciliani P, Competition Law Analysis, Cases, & Materials (OUP 2019)
OECD, ‘Algorithms and Collusion: Competition Policy in the Digital Age’ (2017)
OECD, ‘Big Data: Bringing Competition Policy to the Digital Era – Background Note by the Secretariat’ (2016)
Comments to the Greek Draft Telecommunications Code
Homo Digitalis and Sarantaporo.gr jointly filed comments to the Draft Greek Telecommunications Code. The Code was open for public consultation by the Ministry of Digital Governance.
The two civil society organizations suggested amendments with a view to create a favourable framework for the development and operation of Wireless Community Networks in Greece.
The two organizations also addressed the Minister of Digital Governance with a letter, congratulating him for the great work, which has been done for the Draft Code. They also underlined that the suggested amendments by the two organizations may provide for an additional solution for internet connectivity in remote areas in Greece. Notably, the suggested amendments are based in the EU Directive being implemented.
The suggested solution is in line with the views of the United Nations and the European Commission.
Our letter is available in Greek here.
The actions of Homo Digitalis in “Kathimerini” Newspaper
It is a great pleasure for our organization that our actions are mentioned in a recent article published in the newspaper “Kathimerini”. Journalist Ioannis Papadopoulos with his article “Border controls with advanced digital systems” focuses on European research programs in the field of border management in Greece and refers to our requests for access to information that we had sent to the Research Executive Agency (REA) of the European Commission regarding seven (7) research programs concerning the use of new technologies in the fields of migration and policing in Greece and the relevant answers we received.
We warmly thank Ioannis Papadopoulos for his interest in the actions of Homo Digitalis.
(Links are available only in Greek)