Crushing Terrorism Online – Or Curtailing Gratis Speech? The Proposed Eu Rule On Online Terrorist Content

Professor Lorna Woods, University of Essex

On twelfth September 2018, the Commission published a proposal for a rule (COM(2018) 640 final) aiming to require Member United States of America to require sure mesh intermediaries to stimulate got proactive if non pre-emptive activeness against terrorist content on line equally good equally to ensure that solid set down actors stimulate got the necessary capacity to stimulate got activeness against such illegal content. It is described equally “[a] contribution from the European Commission to the Leaders’ coming together inwards Salzburg on 19-20 September 2018”. The proposal is a evolution from existing voluntary frameworks in addition to partnerships, for instance the European Union Internet Forum, in addition to the non-binding Commission Recommendation on measures to effectively tackle illegal content online ((C(2018)1177 final), 1st March 2018) in addition to its before Communication on tackling illegal content online (COM(2017) 555 final). In moving from non-binding to legislative form, the Commission is stepping upwardly activeness against such content; this movement may also live on seen equally business office of a full general tightening of requirements for Internet intermediaries which tin flaming also live on seen inwards the video-sharing platform provisions inwards the revised Audiovisual Media Services Directive in addition to inwards the proposals regarding copyright. Since the proposal has an “internal market” legal base, it would apply to all Member States.

The Proposal

Article 1 of the proposed Regulation sets out its discipline matter, including its geographic scope.  The range of the proposed rule is directed to sure service providers, “hosting service provider” inwards honor of specified content “illegal terrorist content”.  Terms are defined inwards Article 2. Article 2(1) defines “hosting service provider” (HSP) equally “a provider of information guild services consisting inwards the storage of information provided past times in addition to at the asking of the content provider in addition to inwards making the information stored available to tertiary parties”. The Definition of illegal terrorist content found inwards Article 2(5) is ane (or more) of the next types of information:

(a) inciting or advocating, including past times glorifying, the committee of terrorist offences, thereby causing a danger that such acts live on committed;

(b) encouraging the contribution to terrorist offences;

(c) promoting the activities of a terrorist group, inwards particular past times encouraging the participation inwards or back upwardly to a terrorist grouping inside the pregnant of Article 2(3) of Directive (EU) 2017/541

(d) instructing on methods or techniques for the usage of committing terrorist offences.

The format does non matter: thus terrorist content tin flaming live on found inwards text, images, sound recordings in addition to videos.

Article three specifies the obligations of the HSPs. In add-on to a specific obligation to prohibit terrorist content inwards their damage in addition to conditions, HSPs are obliged to stimulate got appropriate, reasonable and   proportionate actions against terrorist content, though those actions must stimulate got into line of piece of work organisation human relationship fundamental rights, specifically liberty of expression.

Article four introduces the thought of a removal order, in addition to requires that the competent authorities of the Member United States of America are empowered to number such orders; requirements relating to removal orders are laid out inwards Article 4(3).  It does non appear that the issuing of such orders require judicial authorization, though the Regulation does envisage mechanisms for HSPs or the “content provider” to enquire for reasons; HSPs may also notify issuing authorities when the HSP views the monastic tell equally defective (on the basis laid out inwards Article 4(8)), or to notify the issuing authorization of forcefulness majeure. Article 4(2) states:

Hosting service providers shall take away terrorist content or disable access to it inside ane hr from receipt of the removal order.

The rule also envisages referral orders; these create non involve the removal of content, nor – dissimilar the seat for removal orders – does it specify deadlines for action. On receipt of a referral order, a HSP should assess the notified content for compatibility amongst its ain damage in addition to conditions. It is obliged to stimulate got inwards house a scheme for carrying out such assessments. There is also an obligation inwards Article vi for HSPs inwards appropriate circumstances to stimulate got (unspecified) effective in addition to proportionate proactive measures in addition to must study upon these measures. Article vi also envisages the possibility that competent authorities may – inwards sure circumstances – require a hosting service provider to stimulate got specified action.

Article vii requires hosting service providers to save information for sure periods.  The hosting service provider is also required to render transparency reports equally good equally to operate inside sure safeguards specified inwards Section III, including transparency reporting, human oversight of decisions, complaints mechanisms in addition to information to content providers – these are of import safeguards to ensure that content is non removed erronously.  Section IV deals amongst cooperation betwixt the relevant authorities in addition to amongst the HSPs.  Cooperation amongst European bodies (e.g. Europol) is also envisaged.  As business office of this, HSPs are to constitute points of contact.

The Regulation catches services based inwards the European Union but also those exterior it which render services inwards the European Union (with jurisdiction inwards relation to Article vi (proactive measures), eighteen (penalties) in addition to 21 (monitoring) going to the Member State inwards which the provider has its principal establishment) in addition to should designate a legal representative. The Member State inwards which the representative is based has jurisdiction (for the purposes of Articles 6, eighteen in addition to 21). Failure in addition to then to designate agency that all Member United States of America would stimulate got jurisdiction.  Note that equally the legal cast of the proposal is a Regulation, national implementing measures would non live on required to a greater extent than generally.

Member United States of America are required to designate competent authorities for the purposes of the regulation, in addition to also to ensure that penalties are available inwards relation to specified articles such penalties to live on effective, proportionate in addition to dissuasive.  The Regulation also envisages a monitoring programme inwards honor of activeness taken past times the authorities in addition to the HSPs.  Member United States of America are to ensure that their competent authorities stimulate got the necessary capacity to tackle terrorist content online.

Preliminary Comments

The proposal is inwards add-on to the Terrorism Directive, the implementation appointment for which is September 2018.  That directive includes provisions requiring the blocking in addition to removal of content; is the supposition that – fifty-fifty before they are require legally to live on inwards house – these provisions are beingness seen equally ineffective.

This is also roughly other instance of what seems to live on a alter inwards mental attitude towards intermediaries, especially those platforms that host tertiary political party content.  Rather than the approach from the early on 2000s – exemplified inwards the e-Commerce Directive rubber harbour provisions – that these providers are in addition to to roughly extent should live on expected to live on content-neutral, it similar a shot seems that they are beingness treated equally a policy tool for reaching content viewed equally problematic.  From the Definition inwards the Regulation, it seems that roughly of the HSPs could stimulate got – provided they were neutral -fallen inside the damage of Article xiv e-Commerce Directive: they are information guild service providers that render hosting services.  The principal trunk of the proposed rule does non bargain amongst the priority of the respective laws but inwards damage of the impact on HSPs, the recitals claim

“any measures taken past times the hosting service provider inwards compliance amongst this Regulation, including whatever proactive measures, should non inwards themselves atomic number 82 to that service provider losing the create goodness of the liability exemption provided for inwards that provision.  This Regulation leaves unaffected the powers of national authorities in addition to courts to constitute liability of hosting service providers inwards specific cases where the weather nether Article xiv of Directive 2000/31/EC for liability exemption are non met”.

This reading inwards of what is effectively a practiced Samaritan saving clause follows the approach that the Commission had taken amongst regard to its recommendation – albeit inwards that instance without whatever judicial or legislative backing.  Here it seems that the recitals of ane musical instrument (the Regulation) are beingness deployed to translate roughly other (the e-Commerce Directive). 

The recitals hither also specify that although Article three puts HSPs nether a duty of help to stimulate got proactive measures, this should non constitute ‘general monitoring’; such full general monitoring is precluded according to Article xv e-Commerce Directive. How this boundary is to live on drawn remains to live on seen. Especially equally the rule envisages prevention of uploads equally good equally swift take-downs. Further, recital xix also recognises that

“[c]onsidering the especially grave risks associated amongst the dissemination of terrorist content, the decisions adopted past times the competent authorities on the basis of this Regulation could derogate from the approach established inwards Article 15(1) of Directive 2000/31/EC, equally regards sure specific, targeted measures, the adoption of which is necessary for overriding populace safety reasons”.

This is a novel deviation inwards the interpretation of Article xv e-Commerce Directive.

The Commission press release suggests the next could live on caught: social media platforms, video streaming services, video, ikon in addition to sound sharing services, file sharing in addition to other cloud services, websites where users tin flaming brand comments or post reviews. There is a limitation inwards that the content hosted should live on made available to tertiary parties. Does this hateful that if no ane other than the content provider tin flaming access the content, the provider is non an HSP?  This boundary mightiness testify hard inwards practice.  The essay out does non appear to live on ane of populace display in addition to then services where users who are content providers tin flaming take to permit others stimulate got access (even without the noesis of the host) mightiness autumn inside the definition. What would live on the seat of a webmail service where a user shared his or her credentials in addition to then that others inside that shut circle could access the information? Note that the Commission is also envisaging services whose primary usage is non hosting but which allows user generated content– e.g. a tidings website or fifty-fifty Amazon – also autumn inside the definition. 

The range of HSP is wide in addition to may to roughly extent overlap amongst that of video-sharing platforms or fifty-fifty audiovisual media service providers for the purposes of the Audiovisual Media Services Directive (AVMSD).  Priorities in addition to conflicts volition demand to live on ironed out inwards that respect. The instant chemical ingredient of this broadness is that the HSP provisions are non merely applying to the large companies, the ones to roughly extent already cooperating amongst the Commission, but also to modest companies. In the thought of the Commission terrorist content may live on spread merely equally much past times modest platforms equally large.  Similar to the approach inwards the AVMSD, the Commission claims that the regulatory burden volition live on proportionate equally the proportionality amongst hateful the grade of risk equally good equally the economical capabilities would live on taken into account. 

In line amongst the approach inwards other recent legislation (e.g. GDPR, video-sharing platforms provisions inwards AVMSD) the proposal has an extraterritorial dimension. HSPs would live on caught if they render a service inwards the EU.  The recitals clarify that “the mere accessibility of a service provider’s website or of an e-mail address in addition to of other contact details inwards ane or to a greater extent than Member United States of America taken inwards isolation should non live on a sufficient status for the application of this Regulation” [rec 10]; instead a substantial connector is required [rec 11]. Whether this volition stimulate got a dark out resultant similar to the GDPR remains to live on seen; it may depend on whether the operator is aware plenty of the law; how primal the hosting chemical ingredient is in addition to how large a business office of its operations the European Union marketplace is.

While criminal law, inwards principle, is a affair for Member States, the Definition of terrorist content relies on a European Definition – though whether this Definition is ideal is questionable.  For companies that operate across borders, this is presumably something of a relief (and equally noted above, the proposal is based on Article 114 TFEU, the internal marketplace harmonisation power).  The Commission also envisages this a mechanisms limiting the possible range of the obligations – alone fabric that falls inside the European Union Definition falls inside the range of this obligation – thereby minimising impact on liberty of aspect (Proposal p. 8).  Whether national standards volition consequently live on precluded is a different question.  Note that the provisions inwards the AVMSD that focus on video sharing platforms were originally envisaged equally maximum harmonisation but, equally a resultant of amendments from the Council, retuned to minimum harmonisation (the Council amendments also introduced provisions on terrorist content into the AVMSD based on the same definition).

The removal notice is a novelty aimed at addressing differential approaches inwards the Member United States of America inwards this regard (an on-going employment inside the rubber harbour provisions of the e-Commerce Directive), but also to ensure that such stimulate got downward requests are enforceable.  Note, however, that it is upwardly to each Member State to specify the competent authorities, which may give ascension to differences betwixt the Member States, mayhap also indicating differences inwards approach.  The startling indicate is likely the real curt timescale: 1 hr (a consummate contrast to the timing for instance specified inwards the UK’s Terrorism Act 2006).  The removal notices stimulate got been a source of concern.  This is non real long which volition hateful that - especially amongst non-domestic providers in addition to taking into line of piece of work organisation human relationship fourth dimension differences - HSPs volition demand to remember how to homo such a requirement (unless the HSPs computer programme to automate their responses to notices), especially if the HSP hopes to challenge ‘unsatisfactory’ notices (Art 4(8)). 

Given the size of the penalties inwards view, manufacture commentators stimulate got suggested that all reported content volition live on taken down.  This is sure would live on a concern inwards relation to situations where the HSPs had to seat terrorist content (ie ascertain non merely that it was inwards a sure location but also that it met the legal criteria) themselves.  Is it non the instance that this criticism is fully appropriate here.  Here, HSPs are non having to determine whether or non the relevant content is terrorist or not- the notice volition brand that selection for them.  Further, the notice is made non past times soul companies amongst a turn a profit agenda but instead past times populace authorities (presumably) orientated to the populace practiced in addition to amongst roughly sense inwards the topic equally good equally inwards legal safeguards.  Furthermore, the authorization must include reasons. Indeed, the Commission is of the thought that referrals are limited to the competent authorities which volition stimulate got to explicate their decisions ensures the proportionality of such notices (Proposal p. 8). Nonetheless, a ane hr fourth dimension frame is a real curt menstruation of time.

Another ambiguity arises inwards the context of referral notices. It seems that the objective hither is to seat the existing voluntary arrangements on a statutory set down but amongst no obligation on the HSP to stimulate got the content downward inside a specified period. Rather the HSP is to assess whether the content referred is compatible amongst the HSPs damage of service (not whether the content is illegal terrorist content).  Note this is a different from the province of affairs where the HSP discovers the content itself in addition to at that topographic point has been no official thought equally to whether the content falls inside the Definition of terrorist content or not. This seems rather devoid of purpose: relevant authorities stimulate got either decided that the content is a employment (in which instance the removal notice seems preferable equally the determination is made past times competent authorities non soul companies) or the notice refers to content which is non quite bad plenty to autumn amongst the content prohibited past times the rule but the relevant authorities would soundless similar it down, amongst the responsibleness for that determination beingness pushed on to the HSP. Such an approach seems undesirable.

Article vi requires HSPs to stimulate got effective proactive measures.  These are non specified inwards the Regulation, in addition to may thus allow the HSPs roughly leeway to stimulate got measures that appear appropriate inwards the lite of each HSP’s ain service in addition to priorities, though it seems hither that at that topographic point may also live on concerns almost the HSPs’ interpretation of relevant terrorist content.  It is mayhap hither that criticisms almost the privatisation of the contend against terror comes to the fore.  Note, nonetheless that Article 6(4) allows a designated authorization to impose measures specified past times the authorization on the HSP.  Given that this is dealt amongst at the national level, roughly fragmentation across the European Union may arise; at that topographic point seems to live on no cooperation machinery or European Union coordination of responses nether Article 6(4).

There is also the enquiry of liberty of expression. Clearly solid set down mandated removal of content should live on limited, but it is the intention that HSPs stimulate got no liberty to take away objectionable content for other reasons. At roughly points, the recitals suggest exactly this: “hosting service providers should human activeness amongst due diligence in addition to implement safeguards, including notably human oversight in addition to verifications, where appropriate, to avoid whatever unintended in addition to erroneous determination leading to removal of content that is non terrorist content” [rec 17]. Presumably the intention is that HSPs should stimulate got steps to avoid mistakenly considering content to live on terrorist.  They clearly are nether obligations to stimulate got other forms of content down, e.g. nipper pornography in addition to loathe speech. 

More questionable is the seat amongst regard other types of content: the controversial in addition to the objectionable, for example.  As soul entities human rights obligations create non seize amongst teeth on them inwards the same way equally they create amongst regards to States, in addition to then at that topographic point may live on questions almost the extent to which a content provider tin flaming claim liberty of aspect against an unwilling HSP (e.g. for Mastodon, the different instances stimulate got different community standards prepare past times that community - should those communities non live on entitled to enforce those standards (providing that they are non themselves illegal)?).  There may moreover live on differences betwixt the diverse Member United States of America equally to how such human rights stimulate got horizontal resultant in addition to the deference given to contractual autonomy.  With regard to the video sharing platforms, it seems that room is given to the platforms to enforce higher standards if they in addition to then choose; at that topographic point is non such explicit provision here.

Influenza A virus subtype H5N1 in conclusion indicate to authorities annotation is the size of the penalties that are proposed.  The proposal implicitly distinguished betwixt one-off failings in addition to a ‘systematic failure to comply amongst obligations’.  In the latter cases, penalties of upwardly to 4% of global turnover- inwards this at that topographic point are similarities to the scale of penalties nether the GDPR.  This seems to live on developing into a measure approach inwards this sector.

Barnard & Peers: chapter 25, chapter 9

JHA4: chapter II:5

Photo credit: Europol

Share this post