Facebook and Google may be forced to ask permission to use personal data

http://www.guardian.co.uk/media/2013/jan/09/facebook-google-use-personal-data-eu

Version 0 of 1.

Internet companies such as Facebook and Google may have to get further permission to use information if European Union lawmakers give users more control over their personal data.

EU lawmakers want to limit companies' ability to use and sell data – such as internet browsing habits – to advertising companies, especially when people are unaware their data is being used in such a way.

"Users must be informed about what happens with their data," said Jan Philipp Albrecht, a German member of the European parliament who is driving the reform. "And they must be able to consciously agree to data processing - or reject it."

Facebook and Google, who were among the first to profit from user data, have been lobbying against the curbs. Other data-reliant sectors such as health services, rail and smart-meter makers have also voiced concerns.

Albrecht, a Green politician, plans to announce on Wednesday a plan to make sure users of search engines and social networks can control how much of their data is sold to advertisers.

A report he produced, which was seen by Reuters, builds on a proposal announced by the European commission last January for tougher data protection.

The European parliament, the commission and the 27 member states will seek an agreement on the rules in coming months.

Internet companies worry it will have a chilling effect on a thriving business.

"We are concerned that some aspects of the report do not support a flourishing European digital single market and the reality of innovation on the internet," said Erika Mann, head of EU policy for Facebook.

The digital market was inescapably global in nature, and included important partners in the US, she said.

The amount of online data collected and sold has grown rapidly. Currently, over 60 hours of YouTube content is uploaded every minute.

US privacy advocates estimate a Facebook user can make $10 a year for the company by clicking on ads. At last count, the company said it had over 1 billion users.

Albrecht also said national authorities might be allowed to levy fines ranging from 0.5%-2.0% of annual turnover for compromising customer data – which could mean losing or divulging the data.

However, high-ranking politicians in the European parliament are lobbying for the maximum fine to be no more than 1% of turnover, saying anything higher could push big data offshore. Albrecht's final report will be voted on in April.

The push to regulate use of customer data comes as consumers appear to be turning against the practice. In December, image-editing and hosting application Instagram dropped an idea to sell users' photos to advertisers after it lost almost a quarter of its users within a week of announcing the plan.

Privacy lobbyists say companies do not take sufficient consideration of users' privacy concerns.

"They may do so if they feel that their reasons for doing so are more compelling than the individual's right to privacy," said Joe McNamee, a privacy advocate in Brussels.

Albrecht said there would be exceptions in his proposed curbs. For example, a company would still be able to send junk mail to a user based on data it had gathered itself.

• To contact the MediaGuardian news desk email editor@mediaguardian.co.uk or phone 020 3353 3857. For all other inquiries please call the main Guardian switchboard on 020 3353 2000. If you are writing a comment for publication, please mark clearly "for publication".

• To get the latest media news to your desktop or mobile, follow MediaGuardian on Twitter and Facebook.