EU mulls UK government Phorm response
The UK government’s response to EU privacy concerns surrounding the web monitoring system fails to address the legality of its trial methods.


The Department for Business, Enterprise and Regulatory Reform has endorsed the web monitoring system Phorm, saying it will conform to privacy laws.
The UK government's position was outlined in a response to a letter from the European Commissioner for Media and Telecoms Vivian Reding that questioned whether the online advertising platform had breached data privacy laws.
But the response only said the Phorm platform would operate within the law, without addressing privacy concerns over earlier secret trials involving UK internet users.
The BERR statement did acknowledge that "the possible future use of Phorm technology had raised material concerns". But it added: "The UK authorities are working to ensure that, if it is introduced into the market for internet-based advertising services, this is done in a lawful, appropriate and transparent fashion."
Martin Selmayr, a spokesman for the European Union's Media and Telecoms Commissioner confirmed it had received the response and said the Commission was preparing a legal assessment of the situation.
The Information Commissioner's Office (ICO) told IT PRO it had nothing further to add to its previous statements about Phorm in response to the BERR letter, having investigated it and ruled in May that it would take no action against the software firm or BT over its secret trials.
But Phorm issued a statement: "The UK government's position on Phorm's technology reflects our common commitment to transparency," it said.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
And the software firm has said in the past that its underlying Open internet Exchange (OIX) technology does not store personal information, internet protocol (IP) addresses or browsing histories and that its future use would involve an opt-out' policy.
The Foundation for Information Policy Research had previously criticised Phorm, claiming it contravened the Regulation of Investigatory Powers Act 2000 (RIPA).
A 25-year veteran enterprise technology expert, Miya Knights applies her deep understanding of technology gained through her journalism career to both her role as a consultant and as director at Retail Technology Magazine, which she helped shape over the past 17 years. Miya was educated at Oxford University, earning a master’s degree in English.
Her role as a journalist has seen her write for many of the leading technology publishers in the UK such as ITPro, TechWeekEurope, CIO UK, Computer Weekly, and also a number of national newspapers including The Times, Independent, and Financial Times.
-
What is polymorphic malware?
Explainer Polymorphic malware constantly changes its code to avoid detection, making it a top cybersecurity threat that demands advanced, behavior-based defenses
-
Outgoing Kaseya CEO teases "this is just the beginning" for the company
Opinion We spoke to Fred Voccola who remains a key figurehead at the firm as it enters its next chapter...
-
Apple, Meta hit back at EU after landmark DMA fines
News The European Commission has issued its first penalties under the EU Digital Markets Act (DMA), fining Apple €500 million and Meta €200m.
-
Optimise CX and accelerate business growth through your voice network
whitepaper Protecting the human experience in a digital world
-
‘Europe could do it, but it's chosen not to do it’: Eric Schmidt thinks EU regulation will stifle AI innovation – but Britain has a huge opportunity
News Former Google CEO Eric Schmidt believes EU AI regulation is hampering innovation in the region and placing enterprises at a disadvantage.
-
The EU just shelved its AI liability directive
News The European Commission has scrapped plans to introduce the AI Liability Directive aimed at protecting consumers from harmful AI systems.
-
A big enforcement deadline for the EU AI Act just passed – here's what you need to know
News The first set of compliance deadlines for the EU AI Act passed on the 2nd of February, and enterprises are urged to ramp up preparations for future deadlines.
-
IDC InfoBrief: Sustainability doesn’t need to be all stick and no carrot
whitepaper CIOs are facing two conflicting strategic imperatives
-
‘The pace of change is taking its toll’: Business leaders are becoming burned out by rapid technological changes
News Tech leaders are contending with mounting stress levels amidst a sharpened focus on adopting new technologies and ramping up transformation efforts
-
EU agrees amendments to Cyber Solidarity Act in bid to create ‘cyber shield’ for member states
News The EU’s Cyber Solidarity Act will provide new mechanisms for authorities to bolster union-wide security practices