Japan-UK Trade Deal Shows How Controversial Digital Policies Can Be Slipped Through With Little Scrutiny Or Resistance

from the welcome-to-the-data-washing-hub dept

Techdirt has been writing about trade agreements for many years. The reason is simple: as digital technology permeates ever more aspects of modern life, so international trade deals reflect this by including sections that have an important impact on the online world. A new trade agreement between Japan and the UK (pdf) is a good example. It is essentially a copy of the earlier trade deal between the EU and Japan (pdf) -- because of Brexit, UK negotiators have not had the time or resources to draw up their own independent text, which typically requires years of drafting and negotiation. But significantly, the Japan-UK agreement adds several major sections purely about digital matters. All are terrible for the general public, as a briefing document from the UK-based Open Rights Group explains.

One issue concerns transfers of personal data between the UK and Japan. In the EU, this is governed by the well-known and relatively stringent GDPR. In fact, in order to achieve "adequacy" -- essentially, legal permission to receive EU personal data -- Japan has had to strengthen its data protection laws:

The EU required Japan to change its data protection regime, including supplementary rules on onwards transfers of EU data to other countries. The European Parliament has expressed further concerns and Japan is considering further changes.

However, the Japan-UK trade deal explicitly calls for personal data flows to be made easier, with a consequent watering-down of EU-level protections:

The UK deal includes measures which ban restrictions on the free flow of personal data, restrictions which could clash with the limits which European data protection laws place on international transfers. The EU could not adopt these measures in its treaty with Japan, and instead put in placeholder text committing both parties to review the situation in three years. The UK-Japan text heeds the wording of the USMCA [United States-Mexico-Canada Free Trade Agreement], with some extra clauses to exclude procurement and data kept on government orders.

The banning of restrictions on the free flow of personal data allows for public interest policies, following a standard formulation in trade agreements. This regime looks reasonable on paper, but in practice, it is very difficult to implement public interest policies which clash with trade liberalisation, as they are open to legal challenge, which rarely find in favour of restrictions.

Open Rights Group notes two important consequences of this decision not to follow the EU text here. First, it potentially allows personal data flowing to the UK from third countries to be passed to Japan and then on to other jurisdictions, for example the US, with almost no controls or restrictions. This would turn the UK into a "data washing hub" as the Open Rights Group puts it. In this respect, the UK-Japan deal contrasts with the EU-Japan deal, where:

The EU specifically excluded data flows from their trade agreement with Japan. Although Japan has an adequacy decision from the EU, it had to put specific arrangements in place for EU data to stay in Japan.

Given that risk, it is highly likely that the EU will refuse to grant adequacy to the UK, in order to prevent the personal data of EU citizens being sent via the UK to Japan or the US without adequate protections. The crucial role of personal data in modern business means a failure to gain adequacy will have a hugely negative impact on EU-UK trade. The other significant addition to the text in the digital sphere concerns "technical protection mechanisms" (TPMs) -- DRM and similar technologies -- and the criminalization of circumventing them. Open Rights Group points out:

Another concern for digital rights in the UK is the potential criminalisation of circumvention outside commercial endeavours, affecting ordinary people. Circumvention is not a niche activity. Millions of people used to make backup copies of DVDs and many today have to bypass technological protections in order to convert their protected ebooks to other formats. The provisions in the USMCA will require Mexico to beef up its anti- circumvention laws, including introducing criminal penalties for "commercial advantage or private gain".

Finally, there is an interesting section dealing with cryptography. The Japan-UK deal introduces provisions to shield cryptography from a range of government requirements, such as sharing or disclosing keys. However:

What is different here is that the UK also introduces a specific exception for law enforcement to demand access to encrypted communications and for financial regulation. This is not surprising given that the UK is at the forefront of government demands to access data from encrypted messaging systems such as WhatsApp or Telegram. There are no public interest policy exceptions in this area, however limited, only demands from courts, regulators or police.

Of course, the UK is not alone in wanting access to encrypted communications: a recent Techdirt article noted that the EU is also looking to require what is euphemistically termed "lawful access" -- that is, backdoors -- to end-to-end encrypted communications, as is the US and elsewhere. What is significant here is that the exception is being introduced in the context of trade, with no expert input or public debate about the details, as are the other measures discussed above. The danger is that this will become a common practice, where governments try to slip through contentious digital policies as short sections of obscure but far-reaching trade deals.

Follow me @glynmoody on Twitter, Diaspora, or Mastodon.

Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: backdoors, brexit, data protection, encryption, japan, privacy, trade deals, uk


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • icon
    PaulT (profile), 17 Nov 2020 @ 5:06am

    Oh, really? A post-Brexit deal actually leaves the British public worse off than if they'd have stayed and used their capital within the EU to get the kind of special deal they were used to, and makes getting any of the concessions we used to have with the EU itself much more difficult? I'm shocked...

    reply to this | link to this | view in chronology ]

    • icon
      Ben (profile), 17 Nov 2020 @ 5:52am

      Re:

      It's exactly the kind of shenanigans those of us opposed to Brexit have been talking about for years! Brexit was predicated on some sort of post colonial rose-tinted view of the power of a little island nation off the west coast of one of the most powerful markets in the world. Bonkers thinking throughout the entire process.

      reply to this | link to this | view in chronology ]

    • identicon
      Anonymous Coward, 17 Nov 2020 @ 8:36am

      Re:

      I just find it funny. The leavers wanted to break free of Brussels but it seems merely exchanged one unelected commission for another.

      reply to this | link to this | view in chronology ]

      • icon
        PaulT (profile), 17 Nov 2020 @ 10:45am

        Re: Re:

        No, the funny part is that the UK had got so many special concessions to EU rules that it was hilarious to claim they were acting as dictators, especially to a country that notably refused t participate in the EU elections. Then came the propaganda...

        reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 17 Nov 2020 @ 10:06am

    From what i read previously, all uk citizens data is now available to whoever wants it in Japan and they can pass it on to whoever wants it, wherever they may be, bypassing any and all protections that are in place atm, simply because the data wont go direct. Any excuse to screw the people, regardless of which country we're talking about at the time because some self centered asshole wants to/will get megabucks out of the deal!

    reply to this | link to this | view in chronology ]

    • identicon
      Anonymous Coward, 17 Nov 2020 @ 5:09pm

      Re:

      Any excuse to screw the people, regardless of which country we're talking about at the time because some self centered asshole wants to/will get megabucks out of the deal!

      Which is why I say: The people the data is about should be getting a cut of that deal. You won't get people to acknowledge privacy until they suffer without it. You can get people to acknowledge the megabucks that some asshole is making off of them without them getting a cent. Make that the conversation, and all of these "free trade" deals will suddenly loose their lucrative incentives.

      reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 19 Nov 2020 @ 1:39am

    Sorry to be in the minority among this "Britain sucks" crowd here but I don't see how enabling the UK's massive digital economy to trade freely with Japan is a bad thing. The idea that thousands of innocent Britons are going to be criminalized or have their data stolen is paranoid nonsense. The EU, with its pointless and bureaucratic GDPR, still suffers far higher levels of data breach than Japan.

    reply to this | link to this | view in chronology ]

    • icon
      PaulT (profile), 19 Nov 2020 @ 2:26am

      Re:

      "I don't see how enabling the UK's massive digital economy to trade freely with Japan is a bad thing."

      Because, on top of the detailed objections above that you seem to have ignored, it's been rushed through by an incompetent government with a woeful track record of implementing anything "digital".

      reply to this | link to this | view in chronology ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here



Subscribe to the Techdirt Daily newsletter




Comment Options:

  • Use markdown. Use plain text.
  • Remember name/email/url (set a cookie)

Close

Add A Reply

Have a Techdirt Account? Sign in now. Want one? Register here



Subscribe to the Techdirt Daily newsletter




Comment Options:

  • Use markdown. Use plain text.
  • Remember name/email/url (set a cookie)

Follow Techdirt
Insider Shop - Show Your Support!

Essential Reading
Techdirt Insider Chat
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.