Bonum Certa Men Certa

EPO and Microsoft Collude to Break the Law -- Summing Up: EPO Administrative Council Still Asleep at the Wheel

Previous parts:



EPO's council heads



Summary: AC chair Josef Kratochvíl (CZ) and deputy chair Borghildur Erlingsdóttir (IS) seem to be unperturbed by the sell-out of the EPO's "digital sovereignty" taking place on their watch

For quite some time now it has been an open secret that the data protection framework at the EPO is not fit for purpose.



Back in the spring of 2014 the Bavarian Data Protection Commissioner, Dr Thomas Petri, carried out his own independent investigation into the matter following a complaint and he came to the conclusion that "nobody was really in charge".

Together with his colleague the Federal German Data Protection Commissioner, Andrea Vosshoff, Dr Petri raised serious concerns about the state of data protection at the EPO. However, their urgent pleas for reform fell on deaf ears.

"So it's difficult to see how such a manifestly deficient framework which hadn't changed in the meantime could be considered meet the even more stringent standards imposed by GDPR in 2018."When the EU GDPR came into effect in May 2018, Battistelli attempted to pull the wool over the eyes of the EPO's stakeholders and the general public by issuing a self-serving communiqué (warning: epo.org link) proclaiming the EPO's commitment to "ensuring the highest level of data protection" and announcing that "a recent audit report has confirmed a close alignment with the GDPR legal framework".

The only problem here is that Dr Petri, a serious and well-regarded independent expert on data protection law found that the EPO's data protection framework failed to measure up to pre-GDPR standards in 2014.

So it's difficult to see how such a manifestly deficient framework which hadn't changed in the meantime could be considered meet the even more stringent standards imposed by GDPR in 2018.

As a matter of fact, a report commissioned by the EPO staff union SUEPO from external legal experts in 2016 came to the conclusion that the EPO's data protection framework was not compliant with EU data protection standards and was in urgent need of a radical overhaul.

It's worth citing a few passages from that report for the record:

The European Union does, quite rightly, take data protection seriously. Yet the framework at the EPO gives rise to significant cause for concern, which has also been expressed by the national data protection authorities of the main host state – the Federal Republic of Germany.

The Guidelines for the Protection of Personal Data in the European Patent Office (‘EPO DataProtection Guidelines’ or ‘EPO DPG’), which were unilaterally adopted by the President and which entered into force on 1st April 2014. The current EPO DPG appear to fail to meet the standards of both EU data protection law and the national data protection laws of the Contracting States, in particular, the host countries of the EPO. As such, they do not provide a satisfactory framework for safeguarding the data protection rights of data subjects within the Office.

A key component of the EU data protection framework and which is reflected in the national data protection laws of all EU member states is the existence of an independent oversight body; yet this is conspicuously absent at the EPO. Indeed, the deficiencies in the existing system of data protection established by the EPO's Data Protection Guidelines have come to the attention of the national data protection authorities in the host state of the EPO's headquarters (Germany) and have even been the subject of a discussion in the Legal Affairs Committee of the German Federal Parliament (Bundestag).


In the meantime, very little has changed at the EPO apart from the arrival of a new Data Protection Officer via "the talent pipeline from the EUIPO in Alicante” in April 2020 as previously reported by Techrights.

"Unfortunately for all concerned, the Administrative Council appears to have completely abdicated its responsibilities in this regard."When all is said and done, the task of ensuring that the EPO's data protection framework is fit for purpose is a matter of fundamental legal and political significance which lies within the responsibility of the governing body of the organisation, namely the Administrative Council.

This is not something which can be simply delegated to the EPO management to deal with on its own initiative.

Unfortunately for all concerned, the Administrative Council appears to have completely abdicated its responsibilities in this regard.

The Council gives the distinct impression that it is "asleep at the wheel" as the senior management of the EPO proceeds to sell out the organisation's "digital sovereignty" to a US multinational corporation behind its back.

EPO cruise
Once again, the EPO's Administrative Council seems to be asleep at the wheel



Of course the Council has only got itself to blame for the precarious and potentially disastrous situation which has now developed.

After all they were the ones who permitted their sense of judgement to be corrupted by the former Council Chairman Battistelli and agreed to follow his proposal to disband the independent Audit Committee in 2011.

With the benefit of hindsight it is now apparent that, by acting as an accessory to Battistelli's Machiavellian intrigues and acquiescing in the disbandment of the Audit Committee, the Council followed a misguided course of action which has had far-reaching and detrimental effects on the integrity of EPO governance.

It comes as no real surprise to see that - having deprived itself of any genuinely independent source of advice by means of an ignominious act of self-mutilation at the urging of Battistelli - the Council is now unable to react in an robust manner to defend the EPO's "digital sovereignty" and to ensure that the organisation's data protection framework is fit for purpose and truly GDPR-compliant.

These are matters of fundamental importance and legitimate concern not only to EPO staff but also to all other stakeholders, including the general public.

Unfortunately the current Council under the stewardship of its chair, Josef Kratochvíl (Czech Republic), and deputy chair, Borghildur Erlingsdóttir (Iceland), does not appear to appreciate the seriousness of the issues and stake and seems unlikely to take appropriate remedial action unless and until something dramatic happens to jolt it out of its complacent slumber.

Recent Techrights' Posts

Lovers and Haters
Always beware hate preachers and demagogues (or how they frame issues or whose fault they distract from)
Punching People Doesn't Work
It makes nobody any safer
 
Purchasing Concert Tickets in 2025 in Manchester: The "Modern" Experience
I recently spent a couple of days here testing the "terrain" in order to better understand how large public venues, for concerts rather than sporting events like football, currently "work"
Links 25/09/2025: French Unions Want Another Strike, Super Typhoon Ragasa Kills Many
Links for the day
Microsoft 'Secure Boot' and Shim as Barrier or Obstacle to New GNU/Linux Users Trying to Escape Microsoft
Just as intended all along
Focusing on What People Have in Common Instead of Killing and Cancelling One Another
Men and women of both "wings" stand to gain a lot by working together on common interests
'Cancel Culture' Isn't About Enforcing Ethics (and It's Done by People on the Right, Not "The Leftists")
Smarter folks would leave social control media
Russia's Attack on Europe (and NATO) Will Worsen Censorship and Corruption in Europe
Can we still debate issues that predate the invasion of Crimea?
Lawyers Should Permanently Lose Their Licence (and Worse) for Using Chatbots in Legal Work
They not only waste people's money and time. They pollute the literature with falsehoods. They commit perjury. [...] Brett Wilson LLP sent the Judge nearly 1,000 pages of material (mostly mine, copied without proper permission) shortly before a short Hearing, which lasted less than an hour
GAFAM and MATA (Mythical, Metaphor) as Explained by analognowhere.com
They're instruments of suppression that sponsor the oppressor
We've Already Mentioned Who Nowadays Funds Garrett's SLAPP Against Us (Not Garrett), Let's Examine Who Sponsored His Litigation Partner (Other Than Microsoft Salaries There's a Buddy of Bill Gates)
it's alleged that the Serial Strangler from Microsoft got money from him
Florian Müller: Using Software Patents to Attack Software Developers, Agitate Against Patent Reform
He also promotes attacks on the German Constitution and laws
Reliance on Typepad Seems to Have Doomed the Voice of Software Patents and Patent Maximalists in PatentDocs
Follow the money
UEFI 'Secure Boot' is Potential Mayhem to the Environment (Older and Leaner Distros Stop Working)
creating new problems, disguised as "solutions" to problems that do not exist
Sometimes 'Cancel Culture' Backfires Badly
There's no such thing as "too much" coverage
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 24, 2025
IRC logs for Wednesday, September 24, 2025
Links 25/09/2025: Jimmy Kimmel Returns to Air (With Limitations) and London Stansted Airport Latest to Have Incident (Fire)
Links for the day
Slopwatch: Fake Articles, SPAM With Slop, and Google News Directs People to Read Slopfarms
why does Google News insist on still linking to prolific slopfarms?
Gemini Links 25/09/2025: New Game for Gemini Protocol, Eleven, and Network Solutions Woes
Links for the day
Look Ma, No "Cloud"
So far this year we've had an almost perfect uptime
Links 24/09/2025: Autism Blame-Shifting and Typhoon Ragasa Enters China
Links for the day
Buying From Oneself is Not Business Success
This isn't at all a joking matter even if you already laugh at the whole thing because your pension, savings etc. are tied to this scam at some level
This is How Microsoft's XBox and Entire Consoles (If Not Gaming) Ventures Will Ultimately Die
Ensure you can blame "Tariffs" (politics)? If not "hey hi", the fashionable go-to excuse when businesses fail?
What They Really Hate David Heinemeier Hansson (DHH) for
Nothing to do with code
Smart People Won't Buy 'Smart' Cars
Imagine trying to sell someone a house (proper home) while insisting that it'll need to be demolished 5 or 10 years later, then rebuilt again from scratch on the same vacant lot
The Relationship Between IBM Red Hat and Microsoft, Visualised
This metaphor goes a long way (projects, collaborations, and outsourcing
The Complaint About Brett Wilson LLP - Part III - Spying on Reporters' Families, Chaining Cases for Microsoft Employees Who Demand Censorship of Facts (Even Politely Expressed)
the time seems right to wrap up this introductory series
The Complaint About Brett Wilson LLP - Part II - UK SLAPPs for Americans, SLAPPs for Profit
Brett Wilson LLP has a track record of this kind
Cloudflare Gives Us All Another Reason to Boycott Cloudflare
If Cloudflare wants to use its vast surveillance network (which is what it does as a CDN) to foist paywalls and maybe something worse (like DRM on top), then Cloudflare should be more widely rejected as a company
Links 24/09/2025: "NASA Moving Out of Entire Buildings as It's Gutted" and Purge of Online Critics (Opposing Fascism Becomes Unlawful)
Links for the day
Science is Under Attack
Oligarchy prefers a dumbed-down population
Someone Expiring Certificates on the Day of the 9/11 Attacks is Not Someone I Would Want Controlling My PC (or Deciding What's Authorised for Booting)
"social justice warriors"
The Solicitors Regulation Authority (SRA) Has Reportedly Failed People With Wrong Advice
At the moment the SRA has a PR blunder
The Man Suing Brett Wilson LLP and Gervase de Wilde (5RB)
Now he's probably using the (almost) 200,000 pounds he's supposed to receive to sue Brett Wilson LLP and former colleagues/partners
More Microsoft-Red Hat Cross-Pollination as the Company Loses a Managing Director
some people move from Microsoft to Red Hat and some do the opposite
Slopwatch: A World Wide Web That's Rotting for Companies That Won't Even Exist in a Few Years
some of the junk Google News is promoting
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, September 23, 2025
IRC logs for Tuesday, September 23, 2025
Links 24/09/2025: Qt Creator 18 Beta, Microsoft Cannot Bail Out "ChatGPT" Anymore, China and US Intensify Censorship
Links for the day
Gemini Links 24/09/2025: Gemlogs and Politics
Links for the day
Links 23/09/2025: Japan Limits Uses of Skinnerboxes ('Smartphones') With Toxic "Apps", Fentanylware (TikTok) Tapped by "MAGAts"
Links for the day
Brett Wilson LLP Has Just Been Sued (by Their Own Clients!)
Vladimir and Alla Yanpolsky sued Brett Wilson LLP in BL-2025-001167 at the end of last week
Mayday: Optus emergency calling crisis
Reprinted with permission from Daniel Pocock
Links 23/09/2025: Massive Data Breach, Slop Versus Productivity, and Vista 11 Update Breaks Things Again
Links for the day
Code of Censorship
Extortion is peace
The Free Software Foundation (FSF) Has Un-cancelled the Best People, Just in Time for the Big 4-0
Mr. Oliva should have been there all along (since 2019)
Most "Modern" Technology Makes You Slower and Dumber
Because proprietary software makes you worse off
"What Comes After Free Software?" Wrongly Insinuates We've Reached the Goal (Prison is Not the Goal)
The oil tycoons use similar tactics against environmentalists, giving them fake "wins"
Making More Work Space
I learned the hard way that less is more in circumstances where more means distraction
MAHA is a Lie, Public Officials Never Valued Citizens' Health (They Still Value Private Businesses, Their Sponsors)
Reject demagogues
Free Software Foundation (FSF) Has a New Press Kit for the Weekend After Next Weekend (40th Anniversary)
miles better than social [sic] media [sic] quips, moderated by narcissists and oil tycoons.
Microsoft Had Two Waves of Mass Layoffs This Month (That We Know of) and It'll Get Worse for Microsoft Soon
Will the axe fall again by month's end?
Gemini Links 23/09/2025: Happy Equinox, Photronic Arts, and Perception Cognition
Links for the day
Lessons We've Learned After 17 Years of American Hosting
GAFAM is "all-in" with the "Trump agenda"
Back to Normal Now, We Plan to Do More In-Depth Series (or Multi-part Stories)
Articles (or series thereof) that contain philosophy are important to us
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 22, 2025
IRC logs for Monday, September 22, 2025
Microsoft Media is Panicking Amid Mass Layoffs Every Month, H-1B Fees, and "Seattle’s Tech Scene in Trouble"
In "late stage Microsoft", copyleft becomes proprietary
The Next Wave of IBM/Red Hat Layoffs Being Discussed Already
Red Hat is sort of disappearing the way Tivoli did
New Techrights Turns 2
Today starts the third year of the SSG-based Techrights