Feeds

The mobile phone as self-inflicted surveillance

And if you don't have one, what have you got to hide?

  • alert
  • submit to reddit

The essential guide to IT transformation

Mass surveillance of the rest of us is becoming even more pervasive. The UK started transposing the European directive on retaining data generated through electronic communications or public communications networks (European Directive 2006/24/EC) with the Data Retention (EC Directive) Regulations 2007. These came into force on 1st October 2007 and require service providers to retain fixed and mobile telephony traffic data of everyone's calls and SMS and MMS for one year and hand it over on request.

More than 650 public authorities can lawfully obtain communications data, including intelligence and law enforcement agencies, emergency services and other public authorities, such as the Financial Services Authority, local councils and the Home Office's UK Border Agency.

These regulations were superseded this week (on 6th April 2009), by the 2009 Regulations eventually completing the implementation of the European directive by adding the requirement to retain Internet access, email and Internet telephony traffic data as well.

What has to be retained in all cases is data necessary to trace and identify the source and destination of a communication and to identify the date, time and duration, and the communication's type. For mobile telephony and for Internet access, email and telephony, there's also a requirement to retain data necessary to identify users' communication equipment (or what purports to be their equipment) and the location of mobile communication equipment. The detail of exactly what needs to be retained has been regrouped in an easy to read list in a schedule to the Statutory Instrument (S.I.).

Earlier this year, Sir David Omand, a former Cabinet Office security and intelligence coordinator, gave a clear indication of what some in Whitehall have on their wish-list:

[A]pplication of modern data mining and processing techniques does involve examination of the innocent as well as the suspect to identify patterns of interest for further investigation.[...] Finding out other people's secrets is going to involve breaking everyday moral rules. So public trust in the essential reasonableness of UK police, security and intelligence agency activity will continue to be essential.

One extension to the traffic data retention guidelines that fits within this agenda is the building of a massive central silo for all UK communications data. Another is the e-Borders database (in pilot schemes, 0.0035 per cent of people screened were arrested); the location of your mobile phone had better match the country you declared you would be in.

Professor Steve Peers offers a glimmer of hope:

What is the relevance of [the European Court of Human Rights DNA database ruling] Marper to that? To what extent can it regulate or stop what is clearly an ongoing development?

Marper is very relevant if it rules out the sweeping collection of personal data regardless of the stigmatisation factor and regardless of the UK factor (the distinction between the UK and the rest of the Council of Europe countries). If we ignore these factors and say what is wrong here is purely sweeping collection of personal data, then this is a very significant judgement. Then it's profoundly important. It really stands in the way of what we're already doing across Europe, not just in the UK.

Of course the ruling may be interpreted to have no relevance outside its application to the retention of DNA and fingerprints. Then Sir David Omand's national security strategy may be further implemented and carrying a mobile phone - an electronic tag - could become a necessity, if you don't want people to think you have something to hide.

David Mery is a scribbler and technologist based in London. Two years ago he was one of 64 who asked the Metropolitan Police to have their DNA samples destroyed, and DNA profiles and associated records purged. His request was one of 18 that were deemed exceptional enough to be granted. His website is gizmonaut.net.

The essential guide to IT transformation

More from The Register

next story
Britain's housing crisis: What are we going to do about it?
Rent control: Better than bombs at destroying housing
Top beak: UK privacy law may be reconsidered because of social media
Rise of Twitter etc creates 'enormous challenges'
GCHQ protesters stick it to British spooks ... by drinking urine
Activists told NOT to snap pics of staff at the concrete doughnut
What do you mean, I have to POST a PHYSICAL CHEQUE to get my gun licence?
Stop bitching about firearms fees - we need computerisation
Ex US cybersecurity czar guilty in child sex abuse website case
Health and Human Services IT security chief headed online to share vile images
We need less U.S. in our WWW – Euro digital chief Steelie Neelie
EC moves to shift status quo at Internet Governance Forum
Oz biz regulator discovers shared servers in EPIC FACEPALM
'Not aware' that one IP can hold more than one Website
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.