Home Office defends retaining comms data
But hasn't figured out how yet
What you need to know about cloud backup
The Home Office has said that ministers have not yet decided how to retain data on all communications - but defended the importance of doing so.
Several press reports have said that the government will build a single database to hold everyone's communications data, collected from all service providers – adding that this would cost £12bn. These added that GCHQ, the government's surveillance body, has been granted £1bn to build a pilot of this database under the Interception Modernisation Programme.
Communications data does not include the contents of a call, email or webpage, but can often be as revealing. For telephony, it includes numbers called, the name and address of the caller and the IMEI number and approximate location of a mobile phone, while for internet services it includes internet protocol addresses, service and, if appropriate, telephone line used.
The Home Office said the means are still under consideration, but that the aim of collecting all communications data is justified, calling it "a vital investigative and evidential tool" for law enforcement. It is also required of the UK under a European directive, and a bill is expected in the Queen's speech.
"At the moment, the police can get critical information from communications service providers such as telephone companies to help them solve crimes," said a spokesperson. "This information is used in order to prevent and detect crime on a day-to-day basis – including serious crimes and terrorism.
"However, developments in technology mean that this capacity needs to be updated. Ministers and officials are considering how best to do this and what legislation is needed to ensure adequate safeguards are put in place to protect the privacy of the public."
Privacy advocates argue that a single database would allow trawling and profiling of the entire population, while leavng the data with service providers would ensure it would only be retrieved for those who are under suspicion.
A Home Office consultation document on implementing the directive recommends minimising the duplicated storage of data – such as by excusing a reseller of services from holding data if it is kept by the actual provider – while ensuring that all kinds of this data are collected by insisting that internet communications data is retained.
It says such an approach would cost £30.4m in capital costs and £16.2m over eight years in running costs.
This article was originally published at Kablenet.
Kablenet's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.
COMMENTS
What amuses me...
is that when an article mentions the name 'Phorm' you get hundreds of angry comments with reference to people's privacy and threats to take action. But an article like this which is many magnitudes worse (especially with the government's poor track record of keeping data secure) is basically ignored (this being only the 16th comment in 6 days).
People really need to get some perspective and attack the people who are really damaging our right to privacy.
Re: A breach of EU Law
The British sent lawmakers to word a great deal of what eventually evolved into the ECHR, and it was worded like the Weimar Constitution.
Go figure.
re: A breach of EU Law
As soon as they said "It's not us, it's the EU making us" (as they did with biometric passports, the fuckers are shameless), I thought "Is this legislation that Tony pushed through on the EU so that he could push it back home, like the Human Rights Act, passed when El Presidente TB was in chrage?"
It was a great coup getting Tony's legilsation passed there. If it was welcomed, it would be Tone's Opus. And when it wasn't, it was them nasty frogs and eye-ties making us do it. And the mouth breathers swallowed it.

IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Steps to Take Before Choosing a Business Continuity Partner
Enabling efficient data center monitoring
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider