EU privacy watchdogs tell app developers and app stores to take care of users' data

Google Play, Apple and others told to implement privacy by design

New recommendations from Europe's top privacy watchdog could have big ramifications for Google Play, Apple and application developers.

The Article 29 working group, which is made up of data protection authorities from across the European Union, has issued fresh guidelines for mobile phone applications. The overall principle of data minimization -- only collecting the data strictly necessary for the app to operate -- is the cornerstone of the group's recommendations.

However, according to Nick Pickles, director of Big Brother Watch, there is much confusion in the market, and in February, Christopher Graham, the U.K.'s Information Commissioner, said that some app developers had a "cavalier" attitude to personal data protection.

Apps most commonly access names and email addresses. Some store this information and some do not, some ask for permission and some do not. But apps from Facebook, Twitter, Instagram, Foursquare and others also suck other information from users' phones.

According to the Article 29 group, app developers must ask for consent for each type of data accessed including location, contacts, payment data, browsing history and social networks credentials. However, it warned that even consent "does not legitimize excessive or disproportionate data processing." Developers should also define a period of inactivity after which the account will be treated as expired, so that apps that users have forgotten they installed do not continue to slurp data from their phones.

App stores, such as Google Play, must implement consent collection mechanisms in their OSes at the first launch of the app or the first time the app attempts to access one of the categories of data that have significant impact on privacy.

The aim of all this is to give users the means to avoid being tracked by advertisers and any other third party. "The default settings must be such as to avoid any tracking. Third parties must not circumvent any mechanism designed to avoid tracking, as it currently often happens with the 'Do Not Track' mechanisms implemented in browsers," according to the Article 29 document.

The growing concerns over the privacy policies of mobile phone apps prompted the GSMA trade association to publish a set of voluntary guidelines that aims to give users more transparency, choice and control over how apps use their personal information. European mobile phone operators including Orange, Vodafone and Deutsche Telekom have said they will implement these guidelines.

Last month the U.S. Federal Trade Commission set out a similar set of guidelines. However these are not legally binding, whereas many of the Article 29's recommendations are already covered by E.U. law, specifically the Data Protection Directive and the ePrivacy Directive.

Follow Jennifer on Twitter at @BrusselsGeek or email tips and comments to jennifer_baker@idg.com.

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags mobile applicationssecuritymobileArticle 29 Working Partyprivacy

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jennifer Baker

IDG News Service
Show Comments

Essentials

Lexar® JumpDrive® S57 USB 3.0 flash drive

Learn more >

Microsoft L5V-00027 Sculpt Ergonomic Keyboard Desktop

Learn more >

Mobile

Lexar® JumpDrive® S45 USB 3.0 flash drive 

Learn more >

Exec

Audio-Technica ATH-ANC70 Noise Cancelling Headphones

Learn more >

Lexar® JumpDrive® C20c USB Type-C flash drive 

Learn more >

HD Pan/Tilt Wi-Fi Camera with Night Vision NC450

Learn more >

Lexar® Professional 1800x microSDHC™/microSDXC™ UHS-II cards 

Learn more >

Budget

Back To Business Guide

Click for more ›

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?