This is a guest blog post, written by Jerry Weyer from the Luxembourg Pirate Party
A day in April 2012, 6:30pm. Policemen knock on the door of Sven Clement, President of the Pirate Party Luxembourg, to carry out a search warrant. They take his laptops, smartphones and tablets, he has to follow them to the police station where he is being questioned - the accusation: Sven allegedly "stole" a password written on a Post-It by making a picture of it in a publicly accessible place and allegedly used this password to "hack" into the medical database of the ministry of sports. A few weeks ago Sven received the confirmation that he will be charged with unauthorized access to a protected database and - brace yourself - copyright infringement!
Let's start from the beginning: on January 19th, 2012, Sven's birthday, news gets to the luxembourgish pres that there has been a very serious security problem at the medial database of the ministry of health, containing the medical records of nearly 10% of the total population of Luxembourg. The first reaction of the Minister of Health is frantic panic: in an interview he denounces the "hackers" and "thieves" that will face the prosecution of the government. The facts in no way justify this reaction: the information presented to the press clearly stated that there has been a security problem, that this problem resulted from the incredibly negligent behaviour of the technical and political staff responsible for the database, that the responsible administration dealing with data leaks had immediately been notified and that now, 2 weeks later, this information was given to the press to inform the public of the carelessness of government institution with personal data. No data sets from the database have ever been leaked, till today.