any agency so authorised to order your ISP to collect ALL meta-information about everyone's internet activity, retain it for a year and supply it to them for arbitrary analysis. • Almost impossible to repair in a way that preserves citizen digital rights. • Needs your input now. • Needs you to start supporting ORG
Modernisation Programme” under Labour • Announced as “Communications Capabilities Development Programme” in Queen's Speech • Now “Communications Data Bill” (CDB) • Colloquially, “Snooper's Charter”
elected, they promised that: – “We will end the storage of internet and email records without good reason” • Nick Clegg added: – "We won't hold your internet and email records when there is just no reason to do so." • Seems someone had a “Yes, Minister” moment...
It keeps coming back to life • Source is deep inside Home Office • Same outcomes sought repeatedly • This will probably not be the last time we need to defeat it...
order ISPs to collect communications data • Part 2 creates a system for assorted public bodies to get access to this data. • Part 3 adjusts other laws to reflect the new powers and establishes who has oversight.
envelope”): postal, phone records • Any traffic data, use data, or subscriber data • But not the message itself • Kept for 12 months by default • Any civil, criminal or military proceedings can trigger indefinite retention • No requirement for any citizen to be told
used by people, except for the contents of communications • Any information that a telecoms operator has about people who use their service • Traffic data: Anything associated with a communication for the purpose of facilitating transmission, which also satisfies at least one of these criteria: – Identifies any person, apparatus, or location which the communication is being sent to or from – Identifies apparatus involved in sending the communication – Controls apparatus involved in sending the communication – Identifies the time when something relating to the communication occurs – Identifies data that is associated with the communication • For postal operators: anything the postal service uses to transmit the communication, anything about how people are using the postal service, and any other data that the postal service has about people who use the service
& a lot of eyes • Enormous volume of data • Can be data mined, heuristically analysed & triangulated with other data • Can be managed by a central service • Can be shared with wide range of users • With friction of mechanical records removed, offers unprecedented ability to deduce anyone's location, actions, opinions and associations
Organised Crime Agency, (c) Her Majesty’s Revenue and Customs, (d) any of the intelligence services, (e) any public authority designated for the purposes of this Part by order of the Secretary of State,
(b) for the purpose of preventing or detecting crime or of preventing disorder, (c) for the purpose of preventing or detecting any conduct in respect of which a penalty may be imposed under section 123 or 129 of the Financial Services and Markets Act 2000 (civil penalties for market abuse), (d) in the interests of the economic well-being of the United Kingdom, (e) in the interests of public safety, (f) for the purpose of protecting public health, (g) for the purpose of assessing or collecting any tax, duty, levy or other imposition, contribution or charge payable to a government department, (h) for the purpose, in an emergency, of preventing death or injury or any damage to a person’s physical or mental health, or of mitigating any injury or damage to a person’s physical or mental health, (i) to assist investigations into alleged miscarriages of justice, or (j) where a person (“P”) has died or is unable to identify themselves because of a physical or mental condition, to assist in identifying P, or to obtain information about P’s next of kin or other persons connected with P or about the reason for P’s death or condition. The Secretary of State may by order amend this subsection so as to add to or restrict the permitted purposes.
criminals are using” • “It's meta-data that contains no personal details” • “We'll ask OfCOM first” • “We will make sure the data is used properly” • “It will only cost £1.8bn”
not the postal service – There's no public accountability or judicial oversight • “No Personal Data” – Meta-data allows triangulation – Mass data allows heuristic analysis • “Ask OfCOM/Data Protection” – Already ineffective on behalf of citizens • “Used properly” – Mission creep will happen – Home Secretary can arbitrarily extend without oversight
of being under surveillance when there is evidence of wrongdoing, you will be under suspicion by default. • Once created, this resource can only grow in scope & use
Open Rights Group – http://openrightsgroup.org • Read ORG materials – https://wmk.me/TMvWns • Respond to consultation THIS WEEK – http://www.parliament.uk/business/committees/committees-a- z/joint-select/draft-communications-bill/news/call-for-evidence/ • Join (or start) a local ORG chapter