Europe's New Online Privacy Rules Could Protect U.S. Users Too : All Tech Considered When Europe begins enforcing sweeping new privacy rules next month, it will have a major impact on U.S. tech companies, both large and small. And it could affect American Internet users as well.

Europe's New Online Privacy Rules Could Protect U.S. Users Too

  • Download
  • <iframe src="" width="100%" height="290" frameborder="0" scrolling="no" title="NPR embedded audio player">
  • Transcript


While the laws are changing in Europe, digital norms are changing around the world. Many experts say people are coming to expect more transparency in terms of what data is collected about them and how it is used. Here's NPR's tech correspondent Aarti Shahani.

AARTI SHAHANI, BYLINE: Ahead of the change in European law set for May, there's a lot of forecasting going on. According to data privacy experts like Rayna Stamboliyska, who's based in Paris, the Internet is going to change in a big way. It's going to become a place where no means no.

RAYNA STAMBOLIYSKA: Before you even, you know, put your cookie on my computer or on my mobile device, you have to make sure I consent to being followed.

SHAHANI: A cookie is a small piece of data a website might slip into your smartphone or laptop to keep track of what you're doing online. Right now, without clearly asking your permission, she says, many sites are watching your every move. Under Europe's new directive, that's not OK. Consent must be given, and it can be taken away.

STAMBOLIYSKA: Consent, just like sexual consent, is dynamic.

SHAHANI: Stamboliyska gives this simple example. Say you want to buy a new pair of heels. You're fine with marketers slipping a Zappos ad into your morning feed. But then later you're done shopping.

STAMBOLIYSKA: Fine. If tomorrow I decide that I've had enough of shoes, I must have the ways to withdraw my consent and say, look; I'm fed up with your shoes. Now, just stop profiling me and stop following me. And please do remove the data you have of me because I no longer want you to keep it.

SHAHANI: Europe, a continent that has not created Internet giants like Google or Facebook, is now engineering a legal way to control them. If you capture or mine personal data like height, weight, race, religion, browsing habits, you've got new obligations. Stamboliyska says for too long American companies have gotten away with too little oversight. In a recent scandal, Facebook lost control over the data of 87 million users. While CEO Mark Zuckerberg said sorry, she says...

STAMBOLIYSKA: You know, we don't need your apology. We need you to be respectful.

MICHAEL COHEN: It's aspirational, aspirational meaning that of course we would like to strive for what's considered the gold standard.

SHAHANI: Michael Cohen is a lawyer who advises American media and Internet companies that operate across the Atlantic. Europe's directive is sprawling, 99 articles long. How U.S. companies deal with new rules on the collection and storage of personal data - it's a work in progress. Internet users will start to see little notices from their news and music and gaming apps in the coming days and weeks. Cohen has a little confession.

COHEN: I'm going to be real honest with you. I'm an attorney that writes those privacy notices that 99 percent of the people, you know, never bother to read anyway.

SHAHANI: But if users in Europe start to see really simple language, get truly easy-to-follow prompts, Americans might want what the Europeans have. Last week Facebook's chief told Congress that he plans to make all the same controls and settings available everywhere, not just in Europe. Tech giants Microsoft and Google have indicated they'll also extend Europe's privacy rights to users around the world. Aarti Shahani, NPR News, San Francisco.

Copyright © 2018 NPR. All rights reserved. Visit our website terms of use and permissions pages at for further information.

NPR transcripts are created on a rush deadline by an NPR contractor. This text may not be in its final form and may be updated or revised in the future. Accuracy and availability may vary. The authoritative record of NPR’s programming is the audio record.