Bonum Certa Men Certa

EPOLeaks on Misleading the Bundestag -- Part 7: Ms Voßhoff Alerts the Bundestag…

Series index:

  1. The EPO Bundestagate -- Part 1: How the Bundestag Was (and Continues to be) Misled About EPO Affairs
  2. The EPO Bundestagate -- Part 2: Lack of Parliamentary Oversight, Many Questions and Few Answers…
  3. The EPO Bundestagate -- Part 3: A “Minor Interpellation” in the German Bundestag
  4. The EPO Bundestagate -- Part 4: Parroting the GDPR-Compliance Myth
  5. The EPO Bundestagate -- Part 5: The Federal Eagle's Disconcerting Metamorphosis
  6. EPOLeaks on Misleading the Bundestag -- Part 6: Dr Petri Starts the Ball Rolling…
  7. You are here ☞ Ms Voßhoff Alerts the Bundestag…


Federal Data Protection Commissioner



Summary: In July 2015, the Federal Data Protection Commissioner notified the Bundestag of her concerns

As is well known, the EPO made headlines in Germany in June 2015 following revelations about covert surveillance conducted by the Benoît Battistelli's notorious "Investigative Unit" which was reported to have deployed hidden cameras and key loggers in a manner that would have been illegal under EU and national data protection law in Germany.



Media reports about the EPO spy-scandal persuaded Ms Voßhoff to dust off the EPO file and renew her efforts to have this rogue organisation called to account by the Federal German authorities.

"Media reports about the EPO spy-scandal persuaded Ms Voßhoff to dust off the EPO file and renew her efforts to have this rogue organisation called to account by the Federal German authorities."In July 2015, Ms Voßhoff proceeded to write to Ms Renate Kunast, the Chairperson of the Legal Affairs Committee of the German Federal Parliament (the "Bundestag") to bring her concerns to the attention of German parliamentarians.

The text of Ms Voßhoff's letter [PDF] reads as follows (in translation):

I was made aware of the issue of the lack of independent external data protection supervision of the European Patent Office (EPO) by the Bavarian State Commissioner for Data Protection.

My efforts to improve data protection supervision at the EPO have so far been have so far been unsuccessful.

I would therefore like to draw the attention of the German Bundestag to the problem.

The European Patent Office is an organ of the European Patent Organisation (EPO) established by the European Patent Convention (EPC) and endowed with legal personality. It is therefore a supranational institution based on an international treaty with its headquarters in Munich and offices in The Hague, Berlin, Vienna and Brussels. Vienna and Brussels with about 6,800 employees. The contracting states are 38 European countries, including all EU member states.

The legal nature of the EPO means that there is no data protection supervision by an independent external body. Neither the Bavarian State Commissioner for Data Protection nor I can derive any competence from state or federal data protection law. The EPO is neither a public body of the State of Bavaria nor of the Federal Republic of Germany. The European Data Protection Supervisor is also ruled out as an independent supervisory body, as the EPO is neither an institution nor a body of the European Union.

Even if, according to the EPO's internal data protection officer, internal data protection regulations have been in place at the EPO since 1992, in particular based on the Data Protection Directive 95/46 EC, a lack of independent external data protection supervision is also taken as given from the EPO perspective.

In the interest of safeguarding the data protection rights of those affected, I have contacted the responsible Federal Ministry of Justice and Consumer Protection (BMJV) with the request to examine measures to close this supervisory and oversight gap, for example by means of a corresponding amendment to the EPC.

The BMJV has not yet taken up this suggestion. It refers to the necessity of a diplomatic conference of all 38 contracting states of the EPC for such an institutional reform of the EPC. This time-consuming procedure would not permit an amendment in the short term.

However, the Federal Ministry of Justice gives an assurance that it will continue to advocate, within the scope of its possibilities, compliance with and further development of high data protection standards and an independent data protection structure in its committee work within the EPO.

Although I have some understanding for the BMJV's position, the permanent absence of an independent external supervisory authority for data protection matters nevertheless poses a risk - that should not be underestimated - to the fundamental right to informational self-determination of the persons concerned given the processing of a large amount of personal data of applicants and staff at the EPO.

This risk is rendered apparent by a case that has now received press coverage. In an article dated 8 June 2015 (see attachment), the Süddeutsche Zeitung reported allegations that two publicly accessible computers at the EPO were placed under surveillance with so-called keyloggers and video cameras without the persons concerned being informed. Due to the current legal situation, no independent data protection supervisory authority can investigate these allegations.

Moreover, those potentially affected, in particular members of the Administrative Council, patent attorneys, employees and visitors to the EPO, lack any possibility of turning to an independent body capable of enforcing their rights to informational self-determination.

In view of the prevailing factual and legal situation, I would be grateful if the Legal Affairs Committee would address the issue in a supportive manner.



The Legal Affairs Committee of the Bundestag reacted to Ms Voßhoff's letter by placing the matter on its agenda for a meeting scheduled to take place in October 2015 [PDF].

It seemed that the Legal Affairs Committee was gearing up to investigate the worrying "supervisory and oversight gap" identified by Ms Voßhoff.

"As far as can be determined from the available evidence, the authors of this intrigue were the duplicitous Tweedledum and Tweedledee duo of the EPO‑Federal Justice Ministry nexus, Raimund Lutz and Christoph Ernst."However, as we shall see in due course, Ms Voßhoff's efforts to have the deficiencies in the EPO's data protection framework subjected to meaningful parliamentary scrutiny were derailed by what appears to have been a nefarious behind-the-scenes intrigue.

As far as can be determined from the available evidence, the authors of this intrigue were the duplicitous Tweedledum and Tweedledee duo of the EPO‑Federal Justice Ministry nexus, Raimund Lutz and Christoph Ernst.

Before delving into the details of the intrigue which derailed Ms Voßhoff's initiative, we will make a detour to look more closely at these two individuals and their respective roles in EPO affairs over the last two decades.

Recent Techrights' Posts

Official SUSE Blog Still Uses LLM Slop (Bots) to Make Fake Articles (Marketing)
The company is all about sound bites
Companies Realise That Slop Doesn't Work as Advertised, Accordingly Dump It
"Hype dims as a country-wide survey of US corporations shows a sudden drop-off in AI use among firms with more than 250 employees."
Microsoft-Funded Lawsuits Against Critics of UEFI 'Secure Boot'
Remember that no company (or law firm) ever survives collaborations with Microsoft
It's Only the Second Week of September and Already Two Waves of Layoffs at Microsoft, Slopfarms and Microsoft-Funded Sites Spin It as "AI Investments" Rather Than Commercial Failure
A very large third one expected next week
If Your Machine Still Has "Secure Boot" Enabled, Then Microsoft Has a de Facto Kill Switch (Even If Your Machine Doesn't Have Windows and Never Had Windows)
It is not incorrect to call UEFI 'secure boot' a "kill switch"
Reddit is Corporate Propaganda
To make matters worse, Reddit ousted many original moderators
Jeff Geerling Shocked to Discover Many Metrics in YouTube Are Fake (His Audience Turns Out to be Much Smaller)
Maybe self-host all videos, don't rely on Google's "FOMO" cheating (addiction based on false assumptions)
 
Links 09/09/2025: US-Korea Tensions and Meta Whistleblowers
Links for the day
Gemini Links 09/09/2025: Moon Eclipse and ROOPHLOCH Reports
Links for the day
Links 09/09/2025: “Torrents of Hate” and Political Crisis in France
Links for the day
Gemini Links 09/09/2025: "Dedigitizing" and Forgejo on FreeBSD
Links for the day
Google News (Not Just Google Search) Lets Itself by Gamed by One Slopfarm - to the Point Almost Half of "Linux" News is Bot-Produced Plagiarism (LLM Slop With Slop Images)
That says a lot about what Google thinks of quality, even in Google News
Bill Gates-Funded Media Inadvertently Refutes the Microsoft Lie That in 2025 Microsoft Had Just Two Waves of Layoffs
There were about 12 rounds of layoffs so far in 2025
From theregister.co.uk to theregister.com (US) to The Register MS (Run by Microsoft Operatives) and theregister.ai
The best way to break this racket (or cycle of hype and harm) is to break the chains of funding
Open Source Initiative (OSI) Culture of Censorship Necessitates More Speech
The OSI bans dissent or people who merely point out that the OSI is abusive
How to Reach Us Discreetly (Other Than Encrypted E-mail)
We're still managing to maintain a 100% source protection record. We soon turn 19.
LLMs Are Vastly Worse Than a Waste of Energy and the Externalities Are Huge
Worse than just higher power bills for everybody
LLMs Versus Search (Not Replacing Search But Engaging in DDoS Attacks Against Web Sites That Permit Searching)
The state of the Web isn't just bad; it's utterly terrible
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 08, 2025
IRC logs for Monday, September 08, 2025
The UEFI 9/11 - Part IX - Shunning Old Computers (in 2023 the Certificate Was Updated/Overridden, Underlying Aim May Be Herding/Forcing People to Get TPM and Other 'Novel' Restrictions)
the "upgrade treadmill"
Rumour: Second Wave of Microsoft Mass Layoffs in September to Commence Third Week of September
That basically answers questions like, "Any specific date or time of the month?"
Gemini Links 08/09/2025: Reality, ROOPHLOCH 2025, and Writing Another Gemini Client
Links for the day
Updating Firmware is Not the Solution But Only Additional Risk, Disable "Secure Boot" Today
firmware blobs are buggy, secret, impossible to audit, and barely tested
Microsoft Tim's DevClass (Part of The Register MS/Situation Publishing) is Full of Slop
Looking at many sites that are full of slop images is becoming an eye sore and hallmark of text too likely generated by LLMs or 'assisted' (tainted) by them
Microsoft Trying to Fake Demand for Slop. At What Cost?
That's a giant demotion and broken promises
Sunlight is the Best Disinfectant and Kryptonite/Garlic to Vampires
Transparency (sometimes described by words like "Sunlight" or "Truth") is paramount
The Register MS Uses Slop in Articles About Slop
we are fairly certain it's slop or CG based on other people's work
Visiting a Web Page or a Public URL Should be Safe, Predictable, and Benign
It's probably too late to "fix" the Web
The Register MS (Situation Publishing) is Paid to Spread Mindless Hype for the "Hey Hi" Ponzi Scheme and That's a Serious Problem
"Sponsored by Zoom."
Links 08/09/2025: Burger King Cracked, Cox v. Sony Analysed
Links for the day
Gemini Links 08/09/2025: Socialist Computer Museum and GAFAM/ByteDance/TikTok-Dominated Net
Links for the day
Links 08/09/2025: Tim Crook Disappoints Apple Faithfuls and Zuckerberg Lies (Financial Fraud) for Cheeto King
Links for the day
EPO Workers Point Out that the EPO is Destroying the Planet Under the Guise of "Hey Hi" (It Also Grants Many Invalid Patents Illegally
On 12 March and 16 June 2025, staff representation met with the administration in the Local Occupational Health, Safety and Ergonomics Committee (LOHSEC) in Munich
Turn Off Microsoft's Restricted Boot ("Secure Boot")
We're still running a series on this issue
Social Control Media Sites Have Become Bot Farms (Not Limited to LLMs and Automation)
linkedin.com was nothing but trouble and losses for Microsoft
Deep in Debt With the Magnitude of Losses Quickly Growing, Microsoft "Open" "Hey Hi" Now Uses Broadcom for Vapourware, Pretending It'll Do OK Next Year
At some stage it'll collapse
You Can Tell Microsoft is in Trouble When Its Own Fans and Staff Blast it
"Microsoft sinks billions into chasing artificial intelligence fads to hype up its share price."
Multiple Undersea Cable Cuts and We're Still OK
Microsoft customers experience problems
Lawyers Who Think They Are Online Assassins Don't Deserve a Licence to Operate
they've become a laughing stock in their "sector"
Microsoft Windows Fell to 3.9% "Market Share" in Bahamas
Based on statCounter
How the European Union (EU) Fell Out of Love With Free/Libre Software
Lots of bribery
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 07, 2025
IRC logs for Sunday, September 07, 2025
Gemini Links 07/09/2025: Scanner, Slop, and Chadobear
Links for the day
The UEFI 9/11 is 3 Days Away
Nobody denies that bad things will happen
Google Versus Journalism
Google played a big role in the demise of news sites
Gemini Links 07/09/2025: Advertising, Decentralized Archival, and Outsourcing to Bezos
Links for the day
Certificate Authority Let's Encrypt Has Almost Gone Down to Zero, Nearly Totally Extinct in Geminispace, the Few Capsules Still Using It Are Spam/Dead/Stagnant
This represents another decrease for Let's Encrypt; the last decrease was last week
Not Much Left in News Cycles
To be very clear, this does not describe "Linux" anything; it's true in just about every facet of news, except the paid-for fake "journalism" about "hey hi" (sites getting paid explicitly to maintain or rekindle hype)
Trying to Silence Techrights Was a Huge Mistake
Peter Thiel attacked a publisher for asserting, correctly, that he was gay. Now everyone knows it.
Throwing Away "Old" Computers (Mozilla and Other Climate Deniers)
Mozilla is not leftist
The UEFI 9/11 - Part VIII - Denial of Service and Selling Us WSL (Windows) Instead of "Risky" (Prone by Breakage by Microsoft) GNU/Linux
Restricted Boot (so-called 'SecureBoot') does not improve security. It is nothing but trouble. It's meant to trouble non-Windows users. In dual-boot setups, SecureBoot is a recipe for disaster because Microsoft keeps erasing or tampering with the boot sector, to paraphrase an associate
Slop is Extremely Rare in Geminispace, Slop Images Are Unheard Of (Despite Images Being Supported)
As long as Geminispace grows in terms of domains it's safe to predict the protocol will still be used in 2029 and hence Geminispace will turn 10
Links 07/09/2025: Robodebt Class Action, Fines, and Copyright Settlement
Links for the day
Links 07/09/2025: Yle Impersonated in Social Control Media, Boat-Attacking Orcas, Midjourney Sued Again
Links for the day
Slopwatch: LinuxSecurity, Linux Journal, and the Serial Slopper
Google won't tackle the issue because Google participates not only in relaying slop but also in generating lots of it
Links 07/09/2025: Google Fines in EU and "Your Internet Access Is at Risk"
Links for the day
Gemini Links 07/09/2025: Little Brother and Corporate Theatre
Links for the day
Links 07/09/2025: More Harms of Slop and Anthropic's Nightmare Scenario (Huge Legal Liabilities for Slop)
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 06, 2025
IRC logs for Saturday, September 06, 2025