From: Julia Hahn <
[email protected]>
Sent: Tuesday, November 16, 2021 12:12 PM
Subject: Support for broad KYBC
Importance: High
Dear Minister,
Earlier this month, 83 organisations from across multiple sectors wrote to EU policy makers to call for
the DSA to include broader KYBC obligations (see letter attached). Ahead of next week´s
Competitiveness Council, we hear that several Member States intend to make a declaration at the
meeting setting out their support for broader KYBC obligations and their hope that these can be
addressed in the upcoming interinstitutional negotiations. We respectfully urge you to add your
support to such a declaration.
During next week´s Competitiveness Council, business and industry minsters from across the
European Union will meet in Brussels to discuss – and most likely endorse – a General Approach on
the proposed Digital Services Act (DSA). We fear that some important shortcomings will make the
DSA less able to fulfil its objective of creating a safer and more trustworthy online environment.
In particular, the rules on the traceability of business customers in the Presidency´s proposed
compromise are limited to online marketplaces. This means that the countless cybercriminals who do
not carry out their actives on online marketplaces will be able to continue to do so without fear of
being traced. “Know Your Business Customer” (KYBC) obligations are a simple way to increase trust
and consumer safety online. Knowing who you are doing business with should be considered as a
basic due diligence principle – not one to be reserved for a small category of online intermediary.
We and the other signatories thank you in advance for your attention and consideration. We remain
available should you require any further information on this important issue.
Kind regards,
Julia Hahn
Julia Hahn
Project & Office Manager
41, Avenue des Arts, B-1040 Bruxelles
Tel: 32 2 503 40 63
[email protected]
www.ivf-video.org
Brussels, November 2021
“Know your business customer” (KYBC) obligations: a real and tangible solution to reduce illegal content
and products with minimal burdens on intermediaries and legitimate businesses
In a responsible and mature economy, businesses should not be able to operate and have access to the
modern necessary infrastructure Europe has to offer without accurately identifying themselves. This applies
equally to the offline and to the online world, which is why in 2000 legislation introduced an obligation on
businesses to identify themselves on their websites (see Article 5 of the e-Commerce Directive (ECD)).
Unfortunately (and unsurprisingly) businesses that have the intention of making a profit out of illegal content
do not comply with this obligation and do not suffer consequences.
We welcome the European Commission’s proposal for a Digital Services Act (DSA). As this letter focuses on
the “Know Your Business Customer” (KYBC) obligations of the proposal, the signatories of this letter may also
be in touch with you independently on this and other important elements of the DSA.
With regard to KYBC obligations, we welcome the inclusion of a provision ensuring the traceability of traders
in Article 22. We acknowledge that this represents a step forward. However, the Commission’s proposed
Article 22 only introduces KYBC obligations in the context of online marketplaces. Such a limited approach
is a missed opportunity to address the broad range of illegal content and counterfeit, unsafe, non-compliant
and substandard products online.
The DSA represents a real opportunity to rectify a situation that allows bad actors to ignore Article 5 of the
ECD with impunity. A business cannot go online without a domain name, without being hosted, or without
advertisement or payment services. Some of these services are more relied upon than others, with hosting
services being amongst the most important for conducting cybercrime. 1 Hosting service providers, having a
direct relationship with the business, are therefore best placed to make sure that only businesses that are
willing to comply with the law have access to their services. This does not mean monitoring their business
customers’ behaviour, but merely asking them to identify themselves and applying simple due diligence checks
on the basis of publicly available data. Should the information provided prove to be manifestly wrong, or the
hosting provider be notified that the business customer isn’t who it claims to be, the intermediary should stop
providing services until the business customer remedies the situation.
For decades, fraudulent businesses have been exploiting the lack of enforcement of the information
requirements under Article 5 of the ECD, which has been to the detriment of a safe and trustworthy online
environment and has facilitated the use of infrastructure by completely anonymous commercial entities that
intentionally make available or distribute illegal content and products. These include operators of scam
websites and operators of online services distributing illegal content, including but not limited to substandard
or falsified medicines, sexual abuse material, counterfeits, malware, illegal gambling, piracy and more. These
illegal activities can cause serious harm to EU citizens’ physical, psychological and financial wellbeing. In some
cases, especially during the COVID-19 pandemic, they can even pose a threat to life. All hosting providers
enabling them to operate should be subject to KYBC provisions.
The Digital Services Act is an opportunity for the Council to address these shortcomings of the ECD. We
therefore urge you to ensure that at least all hosting service providers – not just online marketplaces – know
who their business customers really are.
We thank you for your attention and would welcome the opportunity to discuss this issue with you further.
Kind regards,
1 See Europol´s 2015 Cybercrime Dependencies Map, which lists hosting services among the services for which
cybercrime is “highly dependent on – cannot do without”. https://www.europol.europa.eu/publications-
documents/cybercrime-dependencies-map
Signatories:
ABAC-BAAN
Aktionskreis gegen Produkt- und Markenpiraterie e. V. (APM)
Alliance for Intellectual Property
Alliance for Safe Online Pharmacy (ASOP EU)
Anti-Counterfeiting Group (ACG)
Asociación para la defensa de la Marca (Andema)
Association de Lutte Contre La Piraterie Audiovisuelle (ALPA)
Association de Producteurs de Cinéma et de Télévision (Eurocinema)
Association of Commercial Television and Video on Demand Services in Europe (ACT)
Associazione Nazionale Industrie Cinematografiche Audiovisive Digitali (ANICA)
Audiovisual Producers Finland (APFI)
BBC Studios
BREIN
British Association for Screen Entertainment (BASE)
British Phonographic Industry (BPI)
Coalition for Online Accountability (COA)
Comité Colbert
Copyright Information and Anti-Piracy Centre (TTVK)
Cosmetics Europe – The Personal Care Association
Digital Entertainment Group (DEGI)
European Association of lighting WEEE compliance schemes (EucoLight)
European Audiovisual Production (CEPI)
European and International Booksellers Federation (EIBF)
European Brands Association (AIM)
European Cultural and Creative Industries Alliance (ECCIA)
European Federation of Pharmaceutical Industries and Associations (EFPIA)
European Grouping of Societies of Authors and Composers (GESAC)
European Network of Independent Film Publishers and Distributors (Europa Distribution)
European VOD Coalition
EUROVOD – The Association of European VoD Platforms
FDV -Danish Video Association (FDV)
Fédération Internationale des Associations de Producteurs de Films (FIAPF)
Federación de Distribuidores Cinematograficos (FEDICINE)
Federation of European Screen Directors (FERA)
Federation of European Publishers (FEP-FEE)
Federation of Screenwriters in Europe (FSE)
Federation of the European Sporting Goods Industry (FESI)
Federazione per la Tutela dei Contenuti Audiovisivi e Multimediali (FAPAV)
Film and Music Austria (FAMA)
Filmdistributeurs Nederland (FDN)
Finnish Anti-Counterfeiting Group (FACG)
HEINEKEN
Independent Film & Television Alliance (IFTA)
Independent Music Companies Association (IMPALA)
INDICAM
Interactive Software Federation of Europe (ISFE)
International Association of Scientific, Technical and Medical Publishers (STM)
International Confederation of Music Publishers (ICMP)
International Federation of Actors (FIA)
International Federation of Film Distributors' Associations (FIAD)
International Union of Cinemas (UNIC)
International Video Federation (IVF)
Kuvasto ry (Finnish visual artists’ copyright society)
LightingEurope
Lionsgate
Markenverband
Mærkevareleverandørerne (MLDK)
Mediapro
Motion Picture Association (MPA)
Nordic Content Protection
NVPI (Trade association of the Dutch Entertainment Industry)
PHILIPS
Produzenten Allianz (Germany)
Rattighetsalliansen (Sweden)
RELX (UK)
RettighedsAlliancen
Sky
Spitzenorganisation der Filmwirtschaft e.V. (SPIO)
Sports Rights Owners Coalition (SROC)
Suomen Musiikintekijät ry (Finnish Music Creators' Association – FMC)
Suomen Musiikkikustantajat ry (Finnish Music Publishers Association)
Swedish Anti-Counterfeiting Group (SACG)
Syndicat de l'Edition Vidéo Numérique (SEVN)
Together Against Counterfeiting Alliance (TAC)
Toy Industries of Europe (TIE)
Transnational Alliance to Combat Illicit Trade (TACIT)
UK Film Distributors’ Association (FDA)
UNI Global Union – media, entertainment & arts (UNI MEI)
Union des Fabricants (UNIFAB)
Univideo
VAUNET Verband Privater Medien e.V. (VAUNET)
Verein für Anti-Piraterie der Film- und Videobranche (VAP)
World Federation of Advertisers (WFA)
Coalition for Online Accountability
www.onlineaccountability.net