The impact will be global<\/a>, as companies craft their policies to avoid being shut out of a market of 500 million rich consumers. Already, Facebook has announced it intends to apply<\/a> the EUs standards across the globe.<\/p>\n Experts agree the law will impact the global digital landscape for decades to come. The Harvard Business Review has called it a \u201cradical\u201d law for its impact on any company across the world that handles European users data. Thats the kind version. \u201cPeople thought we were loony,\u201d admits one EU official involved in drafting the law, for proposing to replace the puny fines once applied to data breaches with multibillion-euro wallops.<\/p>\n The EUs new privacy regulation, like many of Selmayrs creations, was born of missionary zeal, and subject to both love and hate from its conception.<\/p>\n<\/blockquote>\n While the European Commission claims GDPR could boost business activity across the EU by \u20ac2.3 billion per year, Goldman Sachs predicts<\/a> it could slash more than that off Facebooks annual revenue alone. Selmayr himself insists the new privacy rules will grow markets by simplifying the legal regimes companies deal with in Europe and driving trust \u2014 a commodity in short supply in Silicon Valley \u2014 across the Continents digital single market.<\/p>\n The EUs new privacy regulation, like many of Selmayrs creations, was born of missionary zeal, and subject to both love and hate from its conception. While many can claim to be the midwives and doting parents of GDPR \u2014 from corporate lobbyists to Green members of the European Parliament \u2014 only one person can claim to be its father: Selmayr.<\/p>\n As a German, Selmayr shares his countrys conservative approach to privacy. His grandfather Josef Selmayr headed West Germanys military counterintelligence service from 1955 to 1964, during the rise of the East German Stasi, which ran against its citizens one of the most invasive state surveillance operations in history, infiltrating nearly every aspect of life in the German Democratic Republic.<\/p>\n His first public foray into data protection came in 2009, when the European Commission acted on complaints about U.K. telecoms provider BT contracting a company called Phorm in 2006 and 2007 to conduct secret trials of behavioral advertising on customers without their consent.<\/p>\n Selmayr was then spokesperson for European Information Society and Media Commissioner Viviane Reding, who shared his privacy concerns. Reding had clear and practical principles she wanted applied: Europeans should be able to sit at a computer and be certain their privacy was protected, without too much hassle and effort. Selmayr had a strategic vision to implement those principles. (Full disclosure: From 2011-2014, I served as European Commission digital spokesperson, doing the job Selmayr once did.)<\/p>\n Former European Information Society and Media Commissioner Viviane Reding | Patrick Seeger\/EPA<\/p>\n They got the ball rolling<\/a> with a Commission consultation on how to manage data protection in mid-2009, and by taking the U.K. government to court for failing to uphold EU data laws in the Phorm case.<\/p>\n Selmayrs interest in the relatively low-profile Phorm case took many by surprise. Junior Commission officials \u2014 including deputy Commission spokesperson Mina Andreeva, then an intern \u2014 maintained a regularly updated set of \u201clines to take\u201d on various aspects of the case.<\/p>\n Selmayrs passion for the case was clear, according to a political consultant who represented Phorm at the time. The consultant, who requested anonymity, recalled phoning the Commission spokespersons service to register a concern that Commissioner Reding had been quoted referring to Phorm by name, when the companys identity was supposed have been protected at such an early stage of the investigation.<\/p>\n \u201cMartin Selmayr gets on the phone and starts screaming at me,\u201d the consultant said. \u201cHe said I will have you written up for harassment, because I was a non-journalist questioning the Commissions approach. I was 24. I got off the phone and I was crying. I had no idea what was going on.\u201d<\/p>\n When POLITICO put the allegation to the European Commission, a spokesperson said, \u201cThe story is invented. It is false.\u201d<\/p>\n As the Phorm case moved forward, Reding and Selmayr were working to introduce personal data protection into a Commission overhaul of telecoms regulations. To do that, Selmayr deployed tactics more frequently seen in political campaigns than in the Commissions gray corridors \u2014 like extensive opinion polls and telephone banks \u2014 to get the message out that consumers were being exploited and the EU was arriving to save them.<\/p>\n The law, passed in 2009, introduced<\/a> \u201cmandatory notifications for personal data breaches,\u201d legal protection against spam and the EUs infamous cookies law, which requires internet users to say whether they agree to their activity being tracked while using a given website.<\/p>\n Selmayrs efforts coincided with a larger wave of privacy concerns, most evident in the EUs Lisbon Treaty, which when it came into effect at the end of 2009, cemented privacy as a fundamental right in European law.<\/p>\n \u201cTheres a lot of people who can call this their baby\u201d \u2014 Jan Philipp Albrecht, MEP and future minister in the German state of Schleswig-Holstein<\/em><\/p>\n<\/blockquote>\n Europes existing data protection laws had been agreed in 1995, at a time when less than 1 percent of Europeans used the internet. Selmayr saw a political opportunity.<\/p>\n By 2010, Reding had become the Commission vice president in charge of EU fundamental rights, and Selmayr had been promoted to be her chief of staff.<\/p>\n Selmayr set about promoting data privacy as one of those fundamental rights. With the support of a special data protection team in the Commissions justice department, the legislation that would eventually become GDPR was born.<\/p>\n Testifying in 2010, Selmayr set of policy preferences<\/a> that can later be turned into regulation \u2014 calling for a \u201ccomprehensive approach\u201d to data protection that at the same time strengthened the EUs single market.<\/p>\n The Commission also carried out a Eurobarometer survey of 28,000 Europeans that produced a statistic Selmayr has often since cited: 70 percent of respondents said they worried that companies would use data<\/a> for purposes other than those for which it was collected.<\/p>\n Some of Selmayrs colleagues noted at the time that the survey had been carried out only after the Commission released its policy preferences, joking that the process was an example of \u201cpolicy-based evidence-making.\u201d<\/p>\n Mina Andreeva, a Commission spokesperson, said: \u201cThe European Commission uses [Eurobarometer surveys] to take the pulse of citizens on various topics. Since we want to act in areas where the EU can have an added value and not regulate areas that are best left to member states and that people perceive as unnecessary interference in their daily lives, they are indeed a helpful tool in guiding our policymaking.\u201d<\/p>\n Jan Philipp Albrecht, Green Member of the European Parliament | Laurent Dubrule\/EPA<\/p>\n The Commission ploughed ahead with EU action even though the survey revealed that while 44 percent of respondents wanted the EU to act, a similar 40 percent preferred national protections, highlighting the publics wariness of granting Brussels greater sway over their privacy rights.<\/p>\n By the time the results were published in June 2011, internal preparations on GDPR were underway. It fell to Paul Nemitz, a long-time official in the Commissions justice department who became principal adviser to its director general last year, to wrestle the principles and prose into a serviceable legal text.<\/p>\n Redings fellow commissioners approved the GDPR proposal<\/a> in January 2012, sending it onto Parliament, where it was subject to nearly 4,000 amendments.<\/p>\n Jan Philipp Albrecht, who as an MEP steered the regulation through four years of parliamentary amendments and negotiations with national governments, said that GDPR is the result of \u201cintense in-depth work on every word and every paragraph.\u201d<\/p>\n \u201cTheres a lot of people who can call this their baby,\u201d added Albrecht, who is leaving the European Parliament to become a minister in the north German state of Schleswig-Holstein. Selmayr, he said, largely chose not to get involved in the details.<\/p>\n As GDPR rolls into action, theres no reason to believe that Selmayr will let up on his push for privacy.<\/p>\n<\/blockquote>\n What Selmayr excelled at, said an official from the Commissions justice department, was knitting together a web of supportive activists, MEPs and data regulators to support the cause. \u201cOur goal was always to raise the boardrooms attention to data protection,\u201d rather than simply push through a set of technical rules, the official said.<\/p>\n A Western European diplomat said that Selmayr showed a ruthless understanding of the theater of politics. \u201cHe knows who not to irritate. There are aggressive jabs, and strategic leaks, but he is humble around leaders and uses charm and friendliness to keep the show together.\u201d<\/p>\n Unlike successive U.S. administrations, which tried and failed twice to deliver privacy legislation, Selmayr \u201cbuilt a bridge of trust between EPP and Greens, between Commission, Parliament and Council, and in cooperation with about 20 key activists<\/a>,\u201d the justice department official said.<\/p>\n Selmayr sat at the top of the chain. \u201cOn every specific issues we made a detailed discussion paper that went up to him,\u201d Nemitz recalled. \u201cMartin in this way was deeply engaged in the work and provided the political orientations which paved the way for the successful adoption of the regulation.\u201d<\/p>\n Meanwhile, Selmayr missed no opportunity to promote the effort. After Edward Snowdens whistleblowing revealed the extent of U.S. data collection in 2013, Reding embarked on a media tour<\/a> to describe the revelations as a \u201cwake-up call\u201d that showed the need for tougher data protection laws.<\/p>\n A pro-Edward Snowden sticker on a lamppost in Dresden, Germany | Sean Gallup\/Getty Images<\/p>\n \u201cSnowden made a huge difference in the dynamic of the negotiations,\u201d said Nemitz, helping to win the support of MEPs in early 2014.<\/p>\n That year, Selmayr found an even more useful vehicle for his digital ambitions, leaving Reding to become the campaign manager of the favored candidate for Commission President: Jean-Claude Juncker.<\/p>\n Juncker was infamous for his digital ignorance, preferring old Nokias and newspapers over smartphones and social networks. And yet, within weeks of Selmayrs arrival, Juncker officially declared that building a digital single market, with strong data protection as its hallmark, was his No. 1 priority<\/a>.<\/p>\n Selmayrs zeal has persisted even after GDPR was finally sealed into EU law in 2016. One example: he co-wrote a 1,200-page academic commentary<\/a> on the law in June 2017 while serving as chief of staff to Commission President Juncker. Selmayr, through a spokesperson, declined to provide comment for this article, but referred POLITICO to the document for his views.<\/p>\n Even as Selmayr promoted the upcoming privacy rules, lobbyists tried to sway national data authorities over how they would work in practice. In September 2017, Selmayr took to the stage at a conference in Brussels<\/a> to rail against those predicting \u201cend-of-the-world scenarios\u201d over new rules that would complement the GDPR and warned opponents against years of \u201chuge lobbying\u201d over a battle they had already lost.<\/p>\n As GDPR rolls into action, theres no reason to believe that Selmayr \u2014 whose surprise appointment as the Commissions top civil servant in February angered many in Brussels \u2014 will let up on his push for privacy.<\/p>\n European Commission President Jean Claude Juncker | John Thys\/AFP via Getty Images<\/p>\n In 2017, Selmayr blocked an effort<\/a> by free-trade advocates to include data flows in future trade agreements. \u201cFor the EU, privacy is not a commodity to be traded,\u201d Commission spokesperson Andreeva said at the time. \u201cData protection is a fundamental right in the EU.\u201d<\/p>\n After months of wrangling, Selmayr reached an agreement with the rest of the commission on including data in trade deals. Once the Parliament and national governments back his proposal, the EU will begin insisting on his vision on data protection in free-trade deal negotiations.<\/p>\n Already, Selmayr has put privacy at the center of the U.K.-EU Brexit negotiations. In a January 2018 letter<\/a>, the Commission warned \u201call stakeholders processing personal data\u201d operating in the U.K. that they would be subject to the EUs privacy rules in any dealings with the bloc.<\/p>\n It need not have bothered. For months, British government officials<\/a> and watchdog bodies<\/a> have made clear that they like the way the EU deals with the protection of online privacy. Indeed, GDPR has already served as the basis for a new British data protection law.<\/p>\n Other countries are taking similar actions. Since breaking commercial ties with the worlds largest trading bloc is unthinkable, legislators worldwide are scrambling<\/a> to update their domestic legislation to bend to Europes privacy rules. When it comes to making sure European privacy is protected, Selmayr has only begun.<\/p>\n Laurens Cerulus contributed reporting.<\/em><\/p>\n Original Article<\/a><\/p>\n [contf] [contfnew] As tech companies across the globe scramble to adapt to the ..<\/p>\n","protected":false},"author":1,"featured_media":72062,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50],"tags":[],"class_list":["post-72061","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech"],"yoast_head":"\n\n
GDPR, I am your father<\/h3>\n
![](\"https:\/\/www.politico.eu\/wp-content\/uploads\/2018\/04\/h_51481273-714x496.jpg\"\/)
<\/p>\nPrivacy concerns<\/h3>\n
\n
Policy-based evidence-making<\/h3>\n
![](\"https:\/\/www.politico.eu\/wp-content\/uploads\/2018\/04\/pp_albrecht102x65-714x476.jpg\"\/)
<\/p>\n\n
Snowden effect<\/h3>\n
![](\"https:\/\/www.politico.eu\/wp-content\/uploads\/2018\/04\/GettyImages-461077682-714x476.jpg\"\/)
<\/p>\nAfter GDPR<\/h3>\n
![](\"https:\/\/www.politico.eu\/wp-content\/uploads\/2018\/02\/GettyImages-921953256-714x475.jpg\"\/)
<\/p>\n <\/p>\n
<\/a><\/h5>\n","protected":false},"excerpt":{"rendered":"