NO data protection for USIM (MDISDN) when spoofed and hacked and

Data Protection Officer did not have the information requested.

Madeline O'Brien

Dear Data Protection Officer,

Under the right of access to documents in the EU treaties, as developed in Regulation 1049/2001, I am requesting documents which contain the following information:
Dear The Innovation and Networks Executive Agency,

To whom is May concern
I, Madeline O'Brien(limerick, Ireland) am requesting the following document on the data protection of my International Mobile Subscriber Number (IMSI) and how I can exercise my right when my IMSI has been spoofed and hacked, resulting in the breech of my privacy.
The main Network Operator (Ireland) and ETSI standards do not provide the actuate Data Protection of my Mobile Number (USIM) (Universal Subscriber International Number) (The USIM is the functional equivalent of the SIM in a GSM device)

I am requesting the documents for the Procedures and processes to report such breech's of my USIM data protection at National and EU level
I am requesting the document from ESTI Standards and regulations on the actions that pervert Spoofing of USIMs
I am requesting the document for Network Operator(s) Ireland on the Data Protection rights of USIM Network subscribers when breech's occur. "Current Data protection for network operator states " do not answer these calls" but my USIM and MSISDN have been breeched which is an Infringement of the Data Protection Policy" and my data protection rights
I am requesting the document for Actions to stop Local Spoofing and scamming of private Mobile Subscribers both Nationally and at EU Levels
I am requesting the document for Spoofing and scanning tools used to breech GSM/2G/3G/4G/5G and what actions and documents are available to protect subscribers Privacy Data protection from spoofing Breech's
I am requesting the document that provides the legal procedures and processes for the end-users the owner of USIM on how to exercise their rights through the Data protection regulator and law
I am requesting the document that clarifies that at EU data protection level
Data Protection Breech's
Mobile subscriber (owner of USIM) Spoofed
If you get calls from people saying your number is showing up on their caller ID, it's likely that your number has been spoofed. ... You can also place a message on your voicemail letting callers know that your number is being spoofed.
Usually scammers switch numbers frequently. Because phone numbers are often used as security keys, hackers may be able to get into many other accounts once they have access to your phone account.
If it matches a reported scammer, the caller's number is tagged with “Scam Likely” so you can keep your guard up when you answer the call. This feature is designed to protect against robocalls, tech support scams, IRS impersonation scams, and really any kind of phone call that attempts to defraud you.
ETSI
https://www.etsi.org/newsroom/news/769-2...

Cybersecurity
Security of infrastructures, devices, services and protocols
Security advice, guidance and operational security requirements to users, manufacturers and network and infrastructure operators
Security tools and techniques to ensure security
Creation of security specifications and alignment with work done in other ETSI committees

Network Operator Ireland (three Ireland)

Phishing Explained

Phishing is generally defined as "a cybercrime in which a target or targets are contacted by email, phone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords. The information is then used to access important accounts and can result in identity theft and financial loss."

Source: phishing.org

People can be targeted for phishing in lots of ways, via email, calls and texts. Some common phishing methods include:

Texts and emails featuring links to websites which look legitimate. The person is prompted to enter personal information (e.g. name, phone number, card details).
'Too good to be true' emails or texts about winning a competition etc.
Email attachments (these can be viruses that will download to your computer if you click on them).

Network Operator Ireland (three Ireland)

https://community.three.ie/t5/Handsets-D...
How to Avoid Phishing

Here are some easy ways to avoid being caught out by a phishing scam:

Don't answer the phone if you don't recognise the number.
If you receive a missed call from an unknown number, don't call back - you may be charged. This form of phishing is sometimes referred to as a Wangiri call or scam.
Never provide personal information (e.g. name, address, PPS number, bank details) over the phone, via text or email unless you know the person you're talking to.
Don't click on suspicious links in emails or texts.
Don't open attachments on emails unless you know the sender and are expecting an attachment in the email.
Download reliable security software (which generally includes spam filters and virus firewalls) to your PC or laptop.
Be wary of pop ups and advertisements when browsing the web.
Always 'think before you click' when you receive a text or email. If something sounds too good to be true, it probably is.

Data protection of USIM and Data protection of USIM Subscribers
https://www.three.ie/legal/privacy/priva...
https://www.three.ie/business/solutions/...

If the USIM which has MSISDN has been compromised and the projection offered is "that not answering these spoofed and scam calls" does not offer any the protection of my data rather informs me that it is acceptable to have my USIM breach's and to accept this as norm!!!!

I am requesting the document that clarifies that my USIM (IMSI) (MSISDN) are fully protected at EU data protection level and when breech's happen " who is liable " myself?

Informing me NOT to answer theses criminals is NOT protecting my data protection rights!!!!
It protecting the telecommunication network operator from NOT taking any responsibility for my Data protection and the protection of my USIM and all personal data associated with that account

King Regards
Sincerely
Madeline O'Brien MSc

SG ACCES DOCUMENTS, Data Protection Officer

1 Attachment

Link: [1]File-List
Link: [2]Edit-Time-Data
Link: [3]themeData
Link: [4]colorSchemeMapping

Dear Madam,

 

Thank you for your request for access to documents.

 

Unfortunately, you have not indicated your postal address. This is
necessary for registering and handling your request in line with the
procedural requirements.

 

Please send us your full postal address at your earliest convenience.
Pending your reply, we reserve the right to refuse the registration of
your request.

 

Alternatively, you may use directly the electronic form available on the
Europa website:

 

[5]http://ec.europa.eu/transparency/regdoc/....

 

Yours faithfully,

 

 

ACCESS TO DOCUMENTS TEAM (LC)

 

European Commission

Secretariat-General

SG C.1 – Transparency, Document Management & Access to Documents

[6][email address]

 

 

-----Original Message-----

From: Madeline O'Brien <[7][FOI #9746 email]>

Sent: Friday, July 2, 2021 4:09 PM

To: DATA PROTECTION OFFICER <[8][DPO request email]>

Subject: access to documents request - NO data protection for USIM
(MDISDN) when spoofed and hacked and

 

Dear Data Protection Officer,

 

Under the right of access to documents in the EU treaties, as developed in
Regulation 1049/2001, I am requesting documents which contain the
following information:

Dear The Innovation and Networks Executive Agency,

 

To whom is May concern

I, Madeline O'Brien(limerick, Ireland) am requesting the following
document on the data protection of my International Mobile Subscriber
Number (IMSI) and how I can exercise my right when my IMSI has been
spoofed and hacked, resulting in the breech of my privacy.

The main Network Operator (Ireland) and ETSI standards do not provide the
actuate Data Protection of my Mobile Number (USIM) (Universal Subscriber
International Number) (The USIM is the functional equivalent of the SIM in
a GSM device)

 

I am requesting the documents for the Procedures and processes to report
such breech's of my USIM data protection at National and EU level

I am requesting the document from ESTI Standards and regulations on the
actions that pervert Spoofing of USIMs

I am requesting the document for Network Operator(s) Ireland on the Data
Protection rights of USIM Network subscribers when breech's occur.
"Current Data protection for network operator states " do not answer these
calls" but my USIM and MSISDN have been breeched which is an Infringement
of the Data Protection Policy" and my data protection rights

I am requesting the document for Actions to stop Local Spoofing and
scamming of private Mobile Subscribers both Nationally and at EU Levels

I am requesting the document for Spoofing and scanning tools used to
breech GSM/2G/3G/4G/5G and what actions and documents are available to
protect subscribers Privacy Data protection from spoofing Breech's

I am requesting the document that provides the legal procedures and
processes for the end-users the owner of USIM on how to exercise their
rights through the Data protection regulator and law

I am requesting the document that clarifies that at EU data protection
level

Data Protection Breech's

Mobile subscriber (owner of USIM) Spoofed

If you get calls from people saying your number is showing up on their
caller ID, it's likely that your number has been spoofed. ... You can also
place a message on your voicemail letting callers know that your number is
being spoofed.

Usually scammers switch numbers frequently. Because phone numbers are
often used as security keys, hackers may be able to get into many other
accounts once they have access to your phone account.

If it matches a reported scammer, the caller's number is tagged with “Scam
Likely” so you can keep your guard up when you answer the call. This
feature is designed to protect against robocalls, tech support scams, IRS
impersonation scams, and really any kind of phone call that attempts to
defraud you.

ETSI

[9]https://urldefense.com/v3/__https://www....
...

 

Cybersecurity

Security of infrastructures, devices, services and protocols

Security advice, guidance and operational security requirements to users,
manufacturers and network and infrastructure operators

Security tools and techniques to ensure security

Creation of security specifications and alignment with work done in other
ETSI committees

 

Network Operator Ireland (three Ireland)

 

Phishing Explained

 

Phishing is generally defined as "a cybercrime in which a target or
targets are contacted by email, phone or text message by someone posing as
a legitimate institution to lure individuals into providing sensitive data
such as personally identifiable information, banking and credit card
details, and passwords. The information is then used to access important
accounts and can result in identity theft and financial loss."

 

Source: phishing.org

 

People can be targeted for phishing in lots of ways, via email, calls and
texts. Some common phishing methods include:

 

Texts and emails featuring links to websites which look legitimate. The
person is prompted to enter personal information (e.g. name, phone number,
card details).

'Too good to be true' emails or texts about winning a competition etc.

Email attachments (these can be viruses that will download to your
computer if you click on them).

 

Network Operator Ireland (three Ireland)

 

[10]https://urldefense.com/v3/__https://comm...
...

How to Avoid Phishing

 

Here are some easy ways to avoid being caught out by a phishing scam:

 

Don't answer the phone if you don't recognise the number.

If you receive a missed call from an unknown number, don't call back - you
may be charged. This form of phishing is sometimes referred to as a
Wangiri call or scam.

Never provide personal information (e.g. name, address, PPS number, bank
details) over the phone, via text or email unless you know the person
you're talking to.

Don't click on suspicious links in emails or texts.

Don't open attachments on emails unless you know the sender and are
expecting an attachment in the email.

Download reliable security software (which generally includes spam filters
and virus firewalls) to your PC or laptop.

Be wary of pop ups and advertisements when browsing the web.

Always 'think before you click' when you receive a text or email. If
something sounds too good to be true, it probably is.

 

Data protection of USIM and Data protection of USIM Subscribers

[11]https://urldefense.com/v3/__https://www....
...

[12]https://urldefense.com/v3/__https://www....
...

 

If the USIM which has MSISDN has been compromised and the projection
offered is "that not answering these spoofed and scam calls" does not
offer any the protection of my data rather informs me that it is
acceptable to have my USIM breach's and to accept this as norm!!!!

 

I am requesting the document that clarifies that my USIM (IMSI) (MSISDN)
are fully protected at EU data protection level and when breech's happen "
who is liable " myself?

 

Informing me NOT to answer theses criminals is NOT protecting my data
protection rights!!!!

It protecting the telecommunication network operator from NOT  taking any
responsibility for my Data protection and the protection of my USIM and
all personal data associated with that account

 

King Regards

Sincerely

Madeline O'Brien MSc

 

-------------------------------------------------------------------

 

This is a request for access to information under Article 15 of the TFEU
and, where applicable, Regulation 1049/2001 which has been sent via the
AsktheEU.org website.

 

Please kindly use this email address for all replies to this request:
[13][FOI #9746 email]

 

If [14][DPO request email] is the wrong address for
information requests to Data Protection Officer, please tell the
AsktheEU.org team on email [15][email address]

 

This message and all replies from Data Protection Officer will be
published on the AsktheEU.org website. For more information see our
dedicated page for EU public officials at
[16]https://urldefense.com/v3/__https://www....

 

Please note that in some cases publication of requests and responses will
be delayed.

 

 

-------------------------------------------------------------------

References

Visible links
1. file:///tmp/cid:filelist.xml@01D771AF.3C3CC4F0
2. file:///tmp/cid:editdata.mso
3. file:///tmp/~~themedata~~
4. file:///tmp/~~colorschememapping~~
5. http://ec.europa.eu/transparency/regdoc/....
6. mailto:[email address]
7. mailto:[FOI #9746 email]
8. mailto:[DPO request email]
9. https://urldefense.com/v3/__https:/www.e...
10. https://urldefense.com/v3/__https:/commu...
11. https://urldefense.com/v3/__https:/www.t...
12. https://urldefense.com/v3/__https:/www.t...
13. mailto:[FOI #9746 email]
14. mailto:[DPO request email]
15. mailto:[AsktheEU.org contact email]
16. https://urldefense.com/v3/__https:/www.a...

hide quoted sections

MORANA Evagelia, Data Protection Officer

Dear Madam,

Thank you for your email of 02 July 2021. We hereby acknowledge the receipt of your request to exercise your rights under Regulation (EU) 2018/1725 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data.

We would like to clarify that the Data Protection Officer of the European Commission, to whom you have addressed your email, has no competence towards the application of the Regulation (EU) 2018/1725 in other European Institutions. His remit is limited to ensuring the respect of data protection rules within the European Commission.

You request access to all personal data concerning you that the Commission might have. In this respect, please note that the Commission does not have a centralised retrieval system, which would enable us to identify the departments within the Commission that might have processed your personal data. Consequently, please be so kind as to indicate which Commission departments or units you have been in contact with in the past.

In your e-mail, you also indicate that you would like to obtain access to all documents, held by the Commission, that contain any personal data of you.
Please note that the right of access pursuant to Article 17 of Regulation (EU) 2018/1725 concerns personal data and not documents. The fact that a person's name is mentioned in a document does not necessarily mean that all information in that document should be considered as personal data.
If you would like to obtain public access to a specific document, held by the Commission, you have the possibility to request that pursuant to Regulation (EC) No 1049/2001 regarding public access to European Parliament, Council and Commission documents . A form to request public access to Commission documents is available online: https://ec.europa.eu/transparency/regdoc....

Please note that the time limit of one month for handling your request will start running when we receive the requested clarifications.

Thank you in advance for your understanding.

Yours faithfully,

Data Protection Office

European Commission
Data Protection Office
B-1049 Brussels/Belgium
[email address]   
https://ec.europa.eu/info/departments/da...

-----Original Message-----
From: Madeline O'Brien <[FOI #9746 email]>
Sent: Friday, July 2, 2021 4:09 PM
To: DATA PROTECTION OFFICER <[DPO request email]>
Subject: access to documents request - NO data protection for USIM (MDISDN) when spoofed and hacked and

Dear Data Protection Officer,

Under the right of access to documents in the EU treaties, as developed in Regulation 1049/2001, I am requesting documents which contain the following information:
Dear The Innovation and Networks Executive Agency,

To whom is May concern
I, Madeline O'Brien(limerick, Ireland) am requesting the following document on the data protection of my International Mobile Subscriber Number (IMSI) and how I can exercise my right when my IMSI has been spoofed and hacked, resulting in the breech of my privacy.
The main Network Operator (Ireland) and ETSI standards do not provide the actuate Data Protection of my Mobile Number (USIM) (Universal Subscriber International Number) (The USIM is the functional equivalent of the SIM in a GSM device)

I am requesting the documents for the Procedures and processes to report such breech's of my USIM data protection at National and EU level
I am requesting the document from ESTI Standards and regulations on the actions that pervert Spoofing of USIMs
I am requesting the document for Network Operator(s) Ireland on the Data Protection rights of USIM Network subscribers when breech's occur. "Current Data protection for network operator states " do not answer these calls" but my USIM and MSISDN have been breeched which is an Infringement of the Data Protection Policy" and my data protection rights
I am requesting the document for Actions to stop Local Spoofing and scamming of private Mobile Subscribers both Nationally and at EU Levels
I am requesting the document for Spoofing and scanning tools used to breech GSM/2G/3G/4G/5G and what actions and documents are available to protect subscribers Privacy Data protection from spoofing Breech's
I am requesting the document that provides the legal procedures and processes for the end-users the owner of USIM on how to exercise their rights through the Data protection regulator and law
I am requesting the document that clarifies that at EU data protection level
Data Protection Breech's
Mobile subscriber (owner of USIM) Spoofed
If you get calls from people saying your number is showing up on their caller ID, it's likely that your number has been spoofed. ... You can also place a message on your voicemail letting callers know that your number is being spoofed.
Usually scammers switch numbers frequently. Because phone numbers are often used as security keys, hackers may be able to get into many other accounts once they have access to your phone account.
If it matches a reported scammer, the caller's number is tagged with “Scam Likely” so you can keep your guard up when you answer the call. This feature is designed to protect against robocalls, tech support scams, IRS impersonation scams, and really any kind of phone call that attempts to defraud you.
ETSI
https://urldefense.com/v3/__https://www.... ...

Cybersecurity
Security of infrastructures, devices, services and protocols
Security advice, guidance and operational security requirements to users, manufacturers and network and infrastructure operators
Security tools and techniques to ensure security
Creation of security specifications and alignment with work done in other ETSI committees

Network Operator Ireland (three Ireland)

Phishing Explained

Phishing is generally defined as "a cybercrime in which a target or targets are contacted by email, phone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords. The information is then used to access important accounts and can result in identity theft and financial loss."

Source: phishing.org

People can be targeted for phishing in lots of ways, via email, calls and texts. Some common phishing methods include:

Texts and emails featuring links to websites which look legitimate. The person is prompted to enter personal information (e.g. name, phone number, card details).
'Too good to be true' emails or texts about winning a competition etc.
Email attachments (these can be viruses that will download to your computer if you click on them).

Network Operator Ireland (three Ireland)

https://urldefense.com/v3/__https://comm... ...
How to Avoid Phishing

Here are some easy ways to avoid being caught out by a phishing scam:

Don't answer the phone if you don't recognise the number.
If you receive a missed call from an unknown number, don't call back - you may be charged. This form of phishing is sometimes referred to as a Wangiri call or scam.
Never provide personal information (e.g. name, address, PPS number, bank details) over the phone, via text or email unless you know the person you're talking to.
Don't click on suspicious links in emails or texts.
Don't open attachments on emails unless you know the sender and are expecting an attachment in the email.
Download reliable security software (which generally includes spam filters and virus firewalls) to your PC or laptop.
Be wary of pop ups and advertisements when browsing the web.
Always 'think before you click' when you receive a text or email. If something sounds too good to be true, it probably is.

Data protection of USIM and Data protection of USIM Subscribers
https://urldefense.com/v3/__https://www.... ...
https://urldefense.com/v3/__https://www.... ...

If the USIM which has MSISDN has been compromised and the projection offered is "that not answering these spoofed and scam calls" does not offer any the protection of my data rather informs me that it is acceptable to have my USIM breach's and to accept this as norm!!!!

I am requesting the document that clarifies that my USIM (IMSI) (MSISDN) are fully protected at EU data protection level and when breech's happen " who is liable " myself?

Informing me NOT to answer theses criminals is NOT protecting my data protection rights!!!!
It protecting the telecommunication network operator from NOT taking any responsibility for my Data protection and the protection of my USIM and all personal data associated with that account

King Regards
Sincerely
Madeline O'Brien MSc

-------------------------------------------------------------------

This is a request for access to information under Article 15 of the TFEU and, where applicable, Regulation 1049/2001 which has been sent via the AsktheEU.org website.

Please kindly use this email address for all replies to this request: [FOI #9746 email]

If [DPO request email] is the wrong address for information requests to Data Protection Officer, please tell the AsktheEU.org team on email [email address]

This message and all replies from Data Protection Officer will be published on the AsktheEU.org website. For more information see our dedicated page for EU public officials at https://urldefense.com/v3/__https://www....

Please note that in some cases publication of requests and responses will be delayed.

-------------------------------------------------------------------

hide quoted sections

Madeline O'Brien

Dear MORANA Evagelia,

Please see, My Address as requested to further process my request for documents

Madeline O'Brien MSc
2 Thomond Court
Shelbourne Road
Limerick
V94P5H0
Munster
Republic of Ireland

Thank you
Yours sincerely,
Madeline O'Brien MSc

DATA-PROTECTION-OFFICER@ec.europa.eu, Data Protection Officer

Dear Ms O'Brien,

please let me clarify, in the previous email, we did not request you to give us your personal address, instead in order to proceed we would need the additional information, as requested in the previous email and as summarised below.

You request access to all personal data concerning you that the Commission might have. In this respect, please note that the Commission does not have a centralised retrieval system, which would enable us to identify the departments within the Commission that might have processed your personal data. Consequently, please be so kind as to indicate which Commission departments or units you have been in contact with in the past.

In your e-mail, you also indicate that you would like to obtain access to all documents, held by the Commission, that contain any personal data of you.
Please note that the right of access pursuant to Article 17 of Regulation (EU) 2018/1725 concerns personal data and not documents. The fact that a person's name is mentioned in a document does not necessarily mean that all information in that document should be considered as personal data.
If you would like to obtain public access to a specific document, held by the Commission, you have the possibility to request that pursuant to Regulation (EC) No 1049/2001 regarding public access to European Parliament, Council and Commission documents . A form to request public access to Commission documents is available online: https://ec.europa.eu/transparency/regdoc....

We would like to clarify that the Data Protection Officer of the European Commission, to whom you have addressed your email, has no competence towards the application of the Regulation (EU) 2018/1725 in other European Institutions. His remit is limited to ensuring the respect of data protection rules within the European Commission.

Please note that the time limit of one month for handling your request will start running when we receive the requested clarifications.

Thank you in advance for your understanding.

Yours faithfully,

Data Protection Office

European Commission
Data Protection Office
B-1049 Brussels/Belgium
[email address]   
https://ec.europa.eu/info/departments/da...

-----Original Message-----
From: Madeline O'Brien <[FOI #9746 email]>
Sent: Monday, July 5, 2021 4:02 PM
To: MORANA Evagelia (SG) <[email address]>
Subject: RE: access to documents request - NO data protection for USIM (MDISDN) when spoofed and hacked and

Dear MORANA Evagelia,

Please see, My Address as requested to further process my request for documents

Madeline O'Brien MSc
2 Thomond Court
Shelbourne Road
Limerick
V94P5H0
Munster
Republic of Ireland

Thank you
Yours sincerely,
Madeline O'Brien MSc

-----Original Message-----

Dear Madam,

Thank you for your email of 02 July 2021. We hereby acknowledge the receipt of your request to exercise your rights under Regulation (EU) 2018/1725 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data.

We would like to clarify that the Data Protection Officer of the European Commission, to whom you have addressed your email, has no competence towards the application of the Regulation (EU) 2018/1725 in other European Institutions. His remit is limited to ensuring the respect of data protection rules within the European Commission.

You request access to all personal data concerning you that the Commission might have. In this respect, please note that the Commission does not have a centralised retrieval system, which would enable us to identify the departments within the Commission that might have processed your personal data. Consequently, please be so kind as to indicate which Commission departments or units you have been in contact with in the past.

In your e-mail, you also indicate that you would like to obtain access to all documents, held by the Commission, that contain any personal data of you.
Please note that the right of access pursuant to Article 17 of Regulation (EU) 2018/1725 concerns personal data and not documents. The fact that a person's name is mentioned in a document does not necessarily mean that all information in that document should be considered as personal data.
If you would like to obtain public access to a specific document, held by the Commission, you have the possibility to request that pursuant to Regulation (EC) No 1049/2001 regarding public access to European Parliament, Council and Commission documents . A form to request public access to Commission documents is available online: https://ec.europa.eu/transparency/regdoc....

Please note that the time limit of one month for handling your request will start running when we receive the requested clarifications.

Thank you in advance for your understanding.

Yours faithfully,

Data Protection Office

European Commission
Data Protection Office
B-1049 Brussels/Belgium
[email address]   
https://ec.europa.eu/info/departments/da...

-------------------------------------------------------------------
Please use this email address for all replies to this request:
[FOI #9746 email]

This message and all replies from Data Protection Officer will be published on the AsktheEU.org website. For more information see our dedicated page for EU public officials at https://urldefense.com/v3/__https://www....

Please note that in some cases publication of requests and responses will be delayed.

-------------------------------------------------------------------

hide quoted sections