Jesper Lund

Chairperson IT-Pol Denmark, member of EDRi.

Web: https://itpol.dk/
Email: [email protected]
PGP: D836 43E6 58E3 5CF8 15A8 FAAC 996D 5FC3 A773 C4EB

Public Key

npub1x50ljs9q4qyzjdhzl7f7v27upqal90x63k05m7d5zvfv82267hwq8qyr4u

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsr28legzs2szpfxm30lylx90wqswljhndgm86dlx6pxykr49d0thqpzpmhxue69uhkummnw3ezuamfdejsz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcdhvazw

Publishing to

nostr.wine

relay.damus.io

nos.lol

Author Public Key

npub1x50ljs9q4qyzjdhzl7f7v27upqal90x63k05m7d5zvfv82267hwq8qyr4u

Show more details

Last Notes

2026-08-20 12:24:58 UTC

Rejsekort A/S: Vi kan ikke finde ud af at lave en billetapp uden totalovervågning af lokation og bevægelsessensorer. Alle lokationsdata er "nødvendige" for at fordele indtægter mellem trafikselskaberne.
Datatilsynet: Jamen, så er alt godt, og sagen "afsluttes". De nye #GDPR krav om databeskyttelse gennem design er også overholdt, fordi teknisk inkompetence skal belønnes!
(Det nævnes dog, at Rejsekort A/S kan "komme til" at registrere religiøs overbevisning m.v...)
https://www.datatilsynet.dk/afgoerelser/afgoerelser/2026/aug/datatilsynet-afslutter-sag-om-rejsekort-appen

2026-08-04 14:05:22 UTC

- reply

Even today, a phone call can be transferred through multiple SS7 connections that can present a spoofed calling number to the provider terminating the call. The calling number may be available instantly due to "digital", but it may be spoofed, and perhaps (I don't know) present a similar call-trace challenge for the real number where time matters.

2026-07-20 12:26:50 UTC

- reply

There is a WeMove Europe petition against EBSP https://action.wemove.eu/sign/2026-06-dont-send-our-data-to-the-US-petition-EN/ @npub1w4r…8cxz

2026-07-09 12:56:52 UTC

Tak til de mange som har sendt emails til MEP'er om #ChatControl. Jeg er sikker på at det har gjort en forskel. Blandt de danske MEP'er stemte 11 af 15 for afvisning! https://howtheyvote.eu/votes/195775
For hele EP stemte 314-276 for afvisning, 345-237 for at begrænse scanningen til kendt CSAM, og 322-255 for at overvågningen skal være målrettet.
Flertal mod masseovervågning!!
Når CC 1.0 alligevel, meget skuffende, vedtages skyldes det "procedure" og at 60 MEP'er forlod Strasbourg fra onsdag til i dag. 😭

2026-06-28 18:30:53 UTC

- reply

EPP cites NCMEC 2024 as data source. Their statistics for 2024 indeed has 20 milliion reports per year, but for the ENTIRE WORLD (not the EU) and for all types of services.
The correct number:
In 2024, EU received 344K reports about interpersonal communications services per year. If all of them disappered because scanning stopped, that would mean about 945 reports missing per day.
Source: Commission evaluation of CC 1.0 https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52025DC0740 page 18.

2026-06-28 18:23:55 UTC

On X, EPP is claiming that 54,795 reports are missing per day because #ChatControl 1.0 lapsed on 3 April.
The real number is currently 0 because US Big Tech is ignoring EU law (see https://netzpolitik.org/2026/auch-ohne-gesetz-weiterhin-massenhaft-hinweise-auf-kindesmissbrauch/).
If US tech companies actually complied with EU law and stopped unlawful surveillance of private communications, about 945 reports per day would be "missing".
That is 1,7% of what EPP claims.
(see next post for explanation).
https://eupolicy.social/system/media_attachments/files/116/829/121/434/088/063/original/d8e3b3c1013f7e1a.png

2026-05-05 15:50:04 UTC

Amazing reporting on the latest data scandal at #Europol https://wearesolomon.com/en/mag/focus-area/accountability/they-protect-the-law-while-breaking-it-inside-europols-shadow-it-system/
Move fast and break the law, seems to be their motto! (to quote Europol insiders: "a space where operational data could be stored and rapidly analyzed without the constraints of EU law").
Law enforcement seeking a lawless space should ring some alarm bells, right?
On the backdrop of all this, the Commission will soon propose a further expansion of Europol's data processing powers..

2026-03-25 16:08:43 UTC

The Commission stands with Big Tech in an utterly wild letter that puts pressure on the democratically elected European Parliament to abandon their rights respecting vote on #ChatControl 1.0 just two weeks ago, and instead give Big Tech two-more-years of mass surveillance of our private communications without any safeguards.
https://eupolicy.social/system/media_attachments/files/116/290/669/217/783/367/original/20c22d18795b96a6.png

2025-12-16 20:06:18 UTC

RE: https://eupolicy.social/@je5perl/115696467286859905
Some good news from Denmark! The government has withdrawn the #VPN proposal after just five days, claiming that the proposal was misunderstood and that banning VPN use was never the intention. In that case, the drafting was exceptionally bad, and withdrawing the proposal is clearly the right thing to do.
(source: press release yesterday from the Ministry of Culture https://kum.dk/aktuelt/nyheder/kulturministeren-justerer-lovforslag-og-fjerner-afsnit-om-vpn).
#Copyright
#note17g5…5p2d

2025-12-10 17:33:09 UTC

The Danish government is using the upcoming Christmas break to slip through a public consultation for a draft law that would make it an OFFENCE to use a #VPN to access content that would otherwise not be available in Denmark, or to circumvent the blocking of "illegal" websites. https://hoeringsportalen.dk/Hearing/Details/70858
This is done under the guise of ensuring a technologically neutral implementation of Directive 98/84 on pay-TV decoders (hint: the IP address is NOT a conditional access device).
#Copyright
https://eupolicy.social/system/media_attachments/files/115/696/437/650/440/333/original/a685982e9595c734.png

2025-10-30 14:39:55 UTC

In a surprise development on #ChatControl, the Danish government has sent out a press release that it will drop mandatory detection orders, and instead propose to make the current voluntary detection scheme permanent https://www.berlingske.dk/politik/efter-tysk-kritik-hummelgaard-dropper-overvaagningsforslag (in Danish)
This is essentially the proposal of the Polish Presidency in the first half of 2025.
A huge win for privacy and encryption!!
#E2EE

2025-10-17 14:45:25 UTC

One of the three parties in the Danish coalition government now openly opposes general and indiscriminate scanning of private communications and breaking encryption (#ChatControl). They want time to consider a new approach. https://www.dr.dk/nyheder/politik/moderaterne-tilslutter-sig-kritikere-af-dansk-chatkontrol-forslag
The Danish Minister of Justice still has a mandate from 2023 to support the Commission's proposal. But with the public statement today, the majority in Parliament behind the mandate is gone. The opposition will likely demand a new committee vote.

2025-10-14 19:11:57 UTC

At the JHA Council press conference (yesterday), the Danish Minister of Justice encourages journalists to "follow the money" on how the #ChatControl narrative has arised (from 6:40 https://newsroom.consilium.europa.eu/events/20251013-justice-and-home-affairs-council-october-2025/150289-4-press-conference-justice-part-4-q-a-20251013).
Peter Hummelgaard is very careful not to make direct accusations.
In Denmark, he is less careful and has said directly to DR that tech companies are behind the opposition to Chat Control https://www.dr.dk/nyheder/udland/eu/morgenpost-fra-europa-hummelgaard-forsvarer-danmark-arbejder-chatkontrol-men-han
Needless to say, without presenting any evidence for this absurd claim..

2025-05-03 11:30:24 UTC

[dk] Lovforslag giver #PET adgang til at opbygge store databaser om HELE befolkningen fra alle (u)mulige kilder. PET kan samkøre og bruge disse databaser til data-mining overvågning af HELE befolkningen for at finde ukendte målpersoner (den automatiserede mistanke-maskine).
Peter Hummelgaards "svar" på kritikken: lovforslaget giver ikke PET øget adgang til at overvåge ENKELTpersoner https://www.dr.dk/nyheder/politik/det-er-ikke-oeget-overvaagning-forsikrede-minister-nu-hagler-kritikken-ned-over-ham (et svar, der udover at være stærkt vildledende, også er faktuelt forkert).
#dkpol

2024-12-03 15:10:29 UTC

"Through legal requests, authorities will now be able to access the messages for their investigations." https://www.europol.europa.eu/media-press/newsroom/news/international-operation-takes-down-another-encrypted-messaging-service-used-criminals
What Europol really means: all messages on the service have already been intercepted, without prior individualised suspicion, and analysed with Europol's AI data-mining tools, but please send an EIO/MLA request to make the investigation look legal..

2024-10-28 16:59:45 UTC

While some analysts have compared #Cellebrite to the NSO Group, there is a distinction: NSO Group sells its wares to governments to spy clandestinely on journalists and other civilians while skirting legal protocol, while “Cellebrite works in the legitimate world of the police force, whose abilities are closely controlled,” Carmil [Cellebrite CEO] told Israeli media in 2020. https://www.dropsitenews.com/p/israel-digital-intelligence-cellebrite-gaza
I am so relieved.. NOT. Fortunately, this BS claim is debunked by @npub1qyr…9jh4 in the article.

2024-10-10 10:26:47 UTC

The #AgeVerification future: Meta's AI says you are below 13, and there is nothing you can do..
'On Tuesday, I loaded Instagram and learned Meta had disabled my account. The alleged reason was that I was under 13, the minimum age for joining the site. It gave me 30 days to appeal [..] asking me to upload a copy of my state ID. I decided to trust Meta’s promise it would be “stored securely and deleted within 30 days.” But after review, Meta insisted I was still underage.' https://www.theverge.com/2024/10/9/24266096/instagram-threads-moderation-account-post-deleted-limited

2024-10-09 10:04:31 UTC

The Commission presented a proposal yesterday for Digital Travel Credentials https://ec.europa.eu/commission/presscorner/detail/en/ip_24_5047
With "digitalisation" the border check can be reduced from 30 to 8 seconds. BUT.. to save 22 seconds, people must
- Install an eu-LISA app
- Scan their passport (NFC) and do an annoying liveliness check
- Send their passport data and #biometrics to a central server with all the privacy risks that entail
- Manually enter additional travel route info
Is that making our travel easier? (NO)

2024-10-02 14:02:50 UTC

- reply

Very unlikely - a qualified majority must suddenly emerge between now and next Wednesday. CSAR will be on the agenda of the JHA Council meeting next Thursday, either as a vote for adoption of a (partial) general approach, or as a (no) progress report from the Presidency. Most likely the latter. I wouldn't put too much emphasis on the fact that the Council webpage https://www.consilium.europa.eu/en/meetings/jha/2024/10/10/ still mentions "general approach". The agenda can be changed at the last minute.

2024-10-01 19:58:52 UTC

- reply

The general approach (Council position on the dossier) is partial because the Article about seat of the EU Centre will be decided later.

2024-10-01 15:08:58 UTC

The Danish Tax Agency used personal data collected from the October 2021 Twitch data breach (see https://www.videogameschronicle.com/news/the-entirety-of-twitch-has-reportedly-been-leaked/) for tax control purposes, according to this publication from the agency https://sktst.dk/publikationer/mange-fejl-med-indberetning-af-indtaegter-fra-streaming (in Danish).
What is not considered in the report: can personal data obtained from a clearly unlawful dissemination (a data breach) be lawfully processed by another controller, in this case a public authority? #GDPR

2024-09-30 20:56:21 UTC

- reply

This article lists surveillance features to disable for various smart TVs, including LG https://themarkup.org/privacy/2023/12/12/your-smart-tv-knows-what-youre-watching

2024-09-30 20:10:17 UTC

- reply

You are being too negative - there are only about 10 AI (surveillance) features to disable on LG WebOS, including one (Live Plus) that constantly monitors what you watch..😅 [@1br0wn](https://eupolicy.social/@1br0wn )

2024-09-27 11:51:59 UTC

Red Barnet påstår i en kronik i Berlingske i dag, at seneste #ChatControl kompromis ikke omgår eller svækker kryptering https://www.berlingske.dk/kronikker/red-barnet-psykolog-vi-staar-over-for-potentielt-tilbageskridt-i-kampen
Det er simpelthen FORKERT.
Det fremgår tydeligt af betragtning 26a, at end-to-end krypterede kommunikationstjenester skal scanne private beskeder før de overføres krypteret til modtageren.
Det er client-side scanning, som svækker sikkerheden lige så meget som andre bagdøre i #E2EE.
Der er INTET NYT i seneste kompromistekst på dette punkt.
#dkpol
https://eupolicy.social/system/media_attachments/files/113/209/305/286/104/341/original/3eb0a8db4baa500b.png
https://eupolicy.social/system/media_attachments/files/113/209/341/643/936/653/original/7767285a56a13759.png

2024-09-18 10:06:40 UTC

- reply

The FBI legal attaché at Europol literally spoke about the fight against encrypted communications platforms (not the fight against crime, as you would think law enforcement is doing..)
(Full Europol press conference here: https://www.youtube.com/watch?v=HdlIT0zmmyY, and yes a link to a Big Tech platform is the official link from Europol)
https://eupolicy.social/system/media_attachments/files/113/157/989/710/846/265/original/9e111c367cad4e1e.png

2024-09-18 09:56:27 UTC

The Europol press conference today announcing the takedown of the miniature encrypted communications service Ghost (1000 messages exchanged per day, a fraction of EncroChat), quickly turned into a lobbying exercise for the #EuGoingDark HLG:
"[Private companies] must ensure that their platforms are not safe havens for criminals and should provide mechanisms for lawful data access under judicial oversight and in full respect of fundamental rights" (aka #E2EE backdoors)
https://www.europol.europa.eu/media-press/newsroom/news/global-coalition-takes-down-new-criminal-communication-platform

2024-08-31 13:21:53 UTC

- reply

Great thread! A related question is whether the current level of compensation through levies (e.g. storage media covered, now including mobile phones, and amount per medium) is appropriate when today there is very little copyrighted content which can actually be copied for private use? (mainly due to streaming services replacing distribution on physical media).