Hey UK.gov – cute tweaks to snoop regime. Your EU law reading needs work
Privacy bods rip into attempts to make Investigatory Powers Act legal
Posted in Policy, 26th January 2018 11:12 GMT
The government's attempt to bring the UK's data retention regime in line with European Union laws have been slammed by privacy campaigners, which has accused politicians of trying to avoid making necessary changes.
A landmark ruling from the Court of Justice of the European Union deemed indiscriminate data retention illegal, forcing the UK government to set out a series of tweaks to the controversial Investigatory Powers Act.
These included a proposal for a new independent body that authorises access to surveillance data – rather than the public authorities themselves – and plans to lower the bar for what constitutes "serious crime".
However, in its response (PDF) to the proposed changes, privacy campaign group Big Brother Watch said that the government's interpretations of the judgment are flawed and called for them to be reconsidered.
Among these are the government's interpretation of the Watson judgment – after Labour deputy leader Tom Watson who brought the case – as applying to traffic (or events) data, not subscriber (or entity) data, which Big Brother Watch said was "evidently wrong".
The campaign group also disagreed with the government's assertion that the UK's existing data retention regime isn't "general and indiscriminate" – which is the basis for the CJEU's first ruling.
"The government appears to be seeking to evade the effect of the ruling," the group said, arguing that the UK's regime "is plainly general and indiscriminate, as it captures the data of millions of people who are of no intelligence interest."
Despite this view, the government did propose adding a list of factors for the secretary of state to consider when issuing a data retention notice to a telco.
UK.gov admits Investigatory Powers Act illegal under EU lawREAD MORE
But this include a consideration of whether to restrict the notice to a geography or exclude groups of people, which Big Brother Watch said "demonstrates that the default position will be to issue mass data retention notices that are not restricted".
The group also takes umbrage at the government's position that the judgment in Watson does not apply to activities of the UK's intelligence agencies, even when data is sought in relation to crime.
This view is "particularly objectionable and demonstrates an open disregard" for the ruling, the group said.
"The adoption of this proposal would mean that a significant amount of communications data sought in the UK would be retained and accessed in absence of the mandatory safeguards required by law, and would remain accessible via self-authorisation within the Agencies."
Big Brother Watch also expressed disappointment that the proposed Office of Communications Data Authorisations – which will sign off on communications data requests – would not be a judicial body.
And it warned the creation of the office might mean an "unwelcome rollback" on safeguards that limit councils' use of investigatory powers.
Existing laws require a magistrate's approval for local authorities' use of IPA powers, the response said, but the new proposals would remove this check.
"We are concerned that this marks a return to a purely administrative request and authorisation procedure by which local authorities can be empowered with intrusive investigatory powers," it said.
Elsewhere in its consultation response, Big Brother Watch warned against lowering the threshold of serious crime to being that an adult should be "capable" of being imprisoned for six months.
This "extremely watered-down definition" would render it "almost meaningless" in practice, the response said.
Liberty director Martha Spurrier was similarly unimpressed with this proposal when the consultation was launched, saying it "fails to propose the robust system of independent oversight that is so vital to protect our rights". ®