03.20.21

Gemini version available ♊︎

EPO and Microsoft Collude to Break the Law — Part XV: Has the EPO Sold Out Its “Digital Sovereignty”?

Posted in Europe, Law, Microsoft, Patents at 7:18 am by Dr. Roy Schestowitz

Previous parts:

EPO GDPR disaster
Is the EPO heading towards a GDPR disaster?
EPO Vice-President Steve Rowan says “Not on your Nellie!”
But sceptics remain unconvinced.

Summary: “Given the tenor of the ongoing political debate about European “digital sovereignty”, it does not seem to be an exaggeration to say that these recent developments at the EPO deserve to be a matter of urgent concern at the highest political level in Europe.”

Although it is probably fair to say that there is no general consensus about what exactly the concept of “digital sovereignty” covers at the level of detail, the term has nevertheless become a key catch-phrase of contemporary political discourse.

In the earlier parts of this series we saw how various events over the last decade such as Edward Snowden’s whistle-blowing revelations in 2013, the passage of the US CLOUD Act and entry into force of the EU GDPR in 2018, and the Schrems II judgment from the CJEU in July 2020 contributed to fuel the political debate about “digital sovereignty” in Europe.

Both at the supranational level of the EU and at the national level in its member states, there have been consistent calls for greater self-determination and strategic autonomy with regard to technology and the digital economy.

“Both at the supranational level of the EU and at the national level in its member states, there have been consistent calls for greater self-determination and strategic autonomy with regard to technology and the digital economy.”These calls serve as shorthand for the aspiration to reduce dependency on digital infrastructures and services from foreign providers, notably the US.

The global circumstances of the coronavirus pandemic and the accompanying changes have added weight to these calls for more independence and decision-making capacity in the digital sphere.

One significant example of this came in July 2020 when the German government, which had assumed the presidency of the Council of the EU, announced its intention to “establish digital sovereignty as a leitmotiv of European digital policy”.

However, inside the “echo chamber” of the EPO’s senior management and governance bodies, the competent decision-makers appear to be either entirely oblivious to the prevailing tenor of the current European debate or hell-bent on ignoring the clearly articulated policy statements about enhancing European “digital sovereignty”.

In fact, with its latest procurement decisions relating to IT services, the EPO seems to have gone off on its own “solo run” in a diametrically opposed direction.

A unicorn cloud
Despite plentiful indications to the contrary, EPO management continues to peddle the myth of a “close alignment” with EU data protection policy

The intellectual duplicity of senior EPO management in such matters has long been apparent from the lip-service paid to the purported GDPR-compliance of the EPO’s internal data protection regulations and their fondness for peddling the myth of a “close alignment” with EU data protection policy. This is generally recognised by EPO insiders as a piece of well-rehearsed humbug for external consumption which does not stand up to closer scrutiny.

This duplicity has now reached new heights with recent IT procurement decisions in favour of Microsoft which are clearly at odds with the spirit of European data protection law and incompatible with the political goal of enhancing European “digital sovereignty”.

As explained previously, these decisions have effectively resulted in the large-scale export of operational data from the EPO to external data processing infrastructure owned by and under the control of a privately owned US-based multinational corporation.

In an internal communiqué addressed to all staff the EPO’s Vice-President Steve Rowan has openly admitted that this “exported” data is not secure from the prying eyes of US security and intelligence agencies:

Under the US Foreign Intelligence and Surveillance Act (FISA) and the US Clarifying Lawful Overseas Use of Data Act (CLOUD Act), Microsoft is obliged to grant security and intelligence agencies access to data stored in its cloud, even when stored on EU servers.

“As explained previously, these decisions have effectively resulted in the large-scale export of operational data from the EPO to external data processing infrastructure owned by and under the control of a privately owned US-based multinational corporation.”Even if the risk of “official” (i.e. state-sanctioned) industrial espionage were to be discounted, the data in question has – for all practical intents and purposes – been placed at the disposal of Microsoft such that it could easily be accessed by the company for its own ulterior ends.

It is worth pointing out that this data is likely to include confidential internal communications from members of first instance divisions in examination and opposition proceedings. It also presumably includes confidential internal communications from members of the Boards of Appeal who rely on the IT infrastructure provided by the Office.

It is difficult to see how such developments can be reconciled with the spirit of European data protection law or how they could realistically be characterised as anything other than a misguided and ignominious sell-out of the EPO’s own “digital sovereignty”.

Given the tenor of the ongoing political debate about European “digital sovereignty”, it does not seem to be an exaggeration to say that these recent developments at the EPO deserve to be a matter of urgent concern at the highest political level in Europe.

At the very least these matters seem to merit discussion at a “conference of ministers of the Contracting States responsible for patent matters” which is envisaged under Article 4a of the European Patent Convention and which is supposed to take place “at least every five years”.

But given that the Administrative Council has repeatedly failed to convene such a conference ever since Article 4a EPC entered into effect in December 2007, it is seems quite likely that the competent ministers of the EPO contracting states have not yet been properly briefed about the catastrophic data protection situation at the EPO and the currently ongoing sell-out of the organisation’s “digital sovereignty” by its senior management.

As we noted in the preceding instalment, one of Battistelli’s first moves as President of the European Office was to procure the abolition of the independent Audit Committee which reported directly to the Administrative Council.

“Given the tenor of the ongoing political debate about European “digital sovereignty”, it does not seem to be an exaggeration to say that these recent developments at the EPO deserve to be a matter of urgent concern at the highest political level in Europe.”The intended functions of the Audit Committee included advising the Administrative Council about potential conflicts of interest and risk management.

Now that this independent committee has been abolished there is nobody around to warn the Council about the potential political and security risks of the dubious “IT roadmap” being implemented by the senior management of the EPO.

So if the Administrative Council delegates themselves are not on top of the situation – which appears to be the case – it would be too much to expect them to be in a position to brief their supervising ministers in an effective manner.

As things stand the EPO caravan seems destined to trundle forwards on auto-pilot until it is jolted out of its complacency by some kind of monumental data protection “clusterf**k”.

Or perhaps matters will come to a head when a pre-emptive complaint is filed with the European Data Protection Supervisor or some kind of legal challenge is mounted to the EPO’s non-compliance with GDPR standards by a privacy advocate like Max Schrems?

“As things stand the EPO caravan seems destined to trundle forwards on auto-pilot until it is jolted out of its complacency by some kind of monumental data protection “clusterf**k”.”Even then, the usual suspects will probably do their best to hide behind a smoke screen and sweep the debris under the carpet before anybody notices and starts asking too many awkward questions.

We would like to end this series on an optimistic note but for the moment the best advice we can give to those hoping for firm political action to counteract the sell-out of the EPO’s “digital sovereignty” is the following: “Don’t hold your breath…”

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

DecorWhat Else is New


  1. [Meme] EPO Legal Sophistry and Double Dipping

    An imaginary EPO intercept of Administrative Council discussions in June 2013...



  2. Links 21/10/2021: PostgreSQL JDBC 42.3.0 and Maui Report

    Links for the day



  3. [Meme] [Teaser] “Judge a Person Both by His Friends and Enemies”

    Fervent supporters of Team Battistelli or Team Campinos (a dark EPO era) are showing their allegiances; WIPO and EPO have abused staff similarly over the past decade or so



  4. 'Cluster-Voting' in the European Patent Office/Organisation (When a Country With 1.9 Million Citizens Has the Same Voting Power as a Country With 83.1 Million Citizens)

    Today we examine who has been running the Finnish patent office and has moreover voted in the EPO during the ballot on unlawful "Strike Regulations"; they voted in favour of manifestly illegal rules and for 8.5 years after that (including last Wednesday) they continued to back a shady regime which undermines the EPO's mission statement



  5. The EPO’s Overseer/Overseen Collusion — Part XVIII: Helsinki's Accord

    The Finnish outpost has long been strategic to the EPO because it can help control the vote of four or more nations; evidence suggests this has not changed



  6. [Meme] Living as a Human Resource, Working for Despots

    The EPO has become a truly awful place/employer to work for; salary is 2,000 euros for some (despite workplace stress, sometimes relocation to a foreign country)



  7. Links 20/10/2021: New Redcore Linux and Hospital Adoption of GNU Health

    Links for the day



  8. IRC Proceedings: Tuesday, October 19, 2021

    IRC logs for Tuesday, October 19, 2021



  9. Links 19/10/2021: Karanbir Singh Leaves CentOS Board, GPL Violations at Vizio

    Links for the day



  10. [Meme] Giving the Knee

    The 'knee' champion Kratochvìl and 'kneel' champion Erlingsdóttir are simply crushing the law; they’re ignoring the trouble of EPO staff and abuses of the Office, facilitated by the Council itself (i.e. facilitated by themselves)



  11. Josef Kratochvìl Rewarded Again for Covering Up EPO Corruption and the EPO Bribes the Press for Lies Whilst Also Lying About Its Colossal Privacy Violations

    Corrupt officials and officials who actively enable the crimes still control the Office and also the body which was supposed to oversee it; it's pretty evident and clear judging by this week's press statements at the EPO's official Web site



  12. [Meme] Sorry, Wrong Country (Or: Slovenia isn't Great Britain)

    Team UPC is trying to go ahead with a total hoax which a high-level European court would certainly put an end to (if or when a referral is initiated)



  13. How Denmark, Iceland, Finland, Norway and Sweden Voted on Patently Unlawful Regulations at the EPO

    We look back and examine what happened 8 years ago when oppressed staff was subjected to unlawful new “regulations” (long enjoyed by António Campinos, the current EPO autocrat)



  14. The EPO’s Overseer/Overseen Collusion — Part XVII: The Non-Monolithic Nordic Bloc

    We start our investigation of how countries in northern Europe ended up voting on the unlawful “Strike Regulations” at the EPO and why



  15. Proof That Windows “11” is a Hoax

    Guest post by Ryan, reprinted with permission



  16. Firefox Becomes as Morally Reprehensible as Apple, Facebook, or Uber

    Guest post by Ryan, reprinted with permission



  17. Links 19/10/2021: GNU dbm 1.22 and Godot 3.4 RC 1

    Links for the day



  18. [Meme] [Teaser] GitHub an Expensive and Dangerous Trap (Also: Misogyny Hub)

    The ongoing Microsoft GitHub exposé will give people compelling reasons to avoid GitHub, which is basically just a subsidised (at a loss) trap



  19. Norway Should Have Voted Against Benoît Battistelli's Illegal (Anti-)'Strike Regulations' at the European Patent Office

    Benoît Battistelli‘s EPO faced no real and potent opposition from Norwegian delegates, who chose to abstain from the vote on the notorious and illegal so-called ‘Strike Regulations’ (they’re just an attack on strikes, an assault on basic rights of labourers)



  20. Links 19/10/2021: Sequoia PGP LGPL 2.0+, Open RAN Adoption

    Links for the day



  21. [Meme] [Teaser] Benoît Battistelli, King of Iceland

    Later today we shall see how the current deputy of the head of the EPO‘s overseeing body was in fact likely rewarded for her complicity in Benoît Battistelli‘s abuses against EPO staff, including staff from Iceland



  22. IRC Proceedings: Monday, October 18, 2021

    IRC logs for Monday, October 18, 2021



  23. Links 19/10/2021: MyGNUHealth 1.0.5 and Ubuntu 22.04 Now Developed

    Links for the day



  24. [Meme] [Teaser] Thrown Under the Bus

    Tomorrow we shall look at Danish enablers of unlawful EPO regulations, Jesper Kongstad and Anne Rejnhold Jørgensen



  25. The World Needs to Know What Many Austrians Already Know About Rude Liar, the Notorious 'Double-Dipper'

    Today we publish many translations (from German) about the Austrian double-dipper, who already became the subject of unfavourable press coverage in his home country; he’s partly responsible for crushing fundamental rights at the EPO under Benoît Battistelli‘s regime



  26. The EPO’s Overseer/Overseen Collusion — Part XVI: The Demise of the Austrian Double-Dipper

    Friedrich ‘Rude Liar’ Rödler is notorious in the eyes of EPO staff, whom he was slandering and scandalising for ages while he himself was the real scandal



  27. Links 18/10/2021: Porteus Kiosk 5.3 and Ventoy 1.0.55

    Links for the day



  28. [Meme] [Teaser] More to Life Than Patents

    Greedy sociopaths oughtn’t be put in charge of patent offices; this is what’s dooming the EPO in recent years (all they think about is money



  29. Microsoft GitHub Exposé — Part II — The Campaign Against GPL Compliance and War on Copyleft Enforcement

    Microsoft contemplated buying GitHub 7.5 years ago; the goal wasn’t to actually support “Open Source” but to crush it from the inside and that’s what Microsoft has been doing over the past 2.5 years (we have some details from the inside)



  30. Links 18/10/2021: Linux 5.15 RC6 and 7 New Stable Kernels

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts