UK Parliamentary Committee rejects Government DNA proposals

The House of Commons Home Affairs Select Committee has rejected a key part of the UK government’s new plans for the National DNA Database (NDNAD). The plans came in response to the ruling by the European Court that the NDNAD was being operated contrary to human rights law by keeping the profiles of innocent people indefinitely. The database has been filled largely through the provisions of a very vague and wide-ranging provision that allowed the police to take DNA from anyone arrested for an indictable offence, and to keep it even if they were never even charged (let alone charged and not convicted). The result had been that long-standing prejudices within the police had meant a bias in the databases against young black men, and a rapidly expanding set of profiles of children and the entirely innocent.The NDNAD had also been attacked by the HUman Genetics Commission (the government’s own watchdog) which recommended multiple reforms.

One of the main parts of the government’s response to the European Court ruling was that DNA should be retained for 6 years – the committee has recommended that this be halved to 3 years (we are still talking about the DNA of innocent people here…), and that there should be some proper national system for deciding who gets deleted entirely (at the moment it is at the discretion of Chief Constables of local police forces!). Of course all of these leaves the wider question of fairness and rights undebated. There are only two properly just ways to run a database of this sort. One would be to include only the DNA of those convicted of a crime or suspected in an ongoing investigation. The other would be to include everyone (as the UAE has decided to do). At the moment, the NDNAD is, like most things in Britain, an unaccountable mess of law, customary practice and happenstance that pleases no-one and is also remarkably ineffective for the money and effort put into it. This will only improve slightly even if the select committee’s recommendations are accepted.

German Constitutional Court shoots down new ‘Lawful Access’ Provisions

Germany’s Constitutional Court is one of the few such national institutions that has been brave enough to interpret the right to privacy as actually meaning something that might outweight the state’s desire to know. According to the BBC, in a really strong decision, it has just ruled that a 2008 law, requiring all telecommunications traffic data to be stored for 6 months, violated privacy rights of citizens and should be struck out. Germany had already threatened to veto the European Union’s Telecommunications Directive 2006/24/EC (which came into force last year), a move which prompted the Council of Minister to take the unethical and devious step of redefining the Directive as belonging to the ‘commercial’ field (which requires only majority vote) as opposed to being a matter of ‘security’ (in which there has to be unanimity). We will now see what is the reaction of the German government to their own law being declared unconstitutional, and indeed, what international reverberations this have – the USA will certainly not like this.

(Thanks to ‘Unkraut’ for the pointer)

Security and the Economy (again)

The whole body scanners issue has once again brought to the fore the question of the relationship of security and the economy (see here, here and here). This is a more complex question than the political economy which argues that security companies benefit, therefore there are economic interests behind every surveillance surge than occurs. Of course, some companies, scanner makers, Rapiscan and L3 in particular in this case, make a lot of money form their patented systems: each one of the 44 L3 Scanners that Canadian airports are installing costs around $250,000 CAN (125,000 Euro), which adds up to a hefty income to L3. And of course there are connections to the revolving door of US Homeland Security governance at least: Michael Chertoff, the former Head of HOmeland Security from 2005-9 was making the case for scanners immediately after the December 25th thighbomber’s failed attempt, yet he neglected to mention his role as consultant to Rapiscan, which was awarded millions of dollars of contracts under his watch.

However, there are other interests here, notably the aviation industry, airlines and airports, not to mention those of travelers. The Toronto Globe and Mail today reports how airlines in Canada are increasingly concerned that already growing security levies from government (to provide security) will only spiral with every new measure introduced. The airlines expect the government to bear the costs. The government has merely said that it will try to ensure that costs passed on are minimised. However someone has to pay, somewhere along the line. If airlines (or their passengers) are not paying, then tax-payers are and it’s debatable whether ultimately, subsidising the security costs of international travelers is really what taxes should be for when times are hard. Of course no government wants this to come down to a ‘security versus the economy’ argument, but that has to be discussed, alongside the still largely unaddressed issues of privacy and other individual and collective liberties.

What now for the UK’s anti-terrorism laws?

On the 12th of January, the European Court of Human Rights (ECHR) ruled in the case of Gillan and Quinton v. the United Kingdom, that UK police powers to randomly stop and search people under Sections 44-47 of The Terrorism Act (2000) were unlawful. This is the third recent ruling by the ECHR against the current direction of the UK’s security policies (after the ruling in S. and Marper v. the UK, against the police retaining DNA profiles and fingerprints from people not convicted of any offence). It also follows the furore over the London Metropolitan Police’s interpretation of Sections 43, 44 and 58s of The Terrorism Act in relation to public photography.* The case was brought by two people, Pennie Quinton a journalist who was on her way to cover a demonstration against an arms fair in London in September 2003,, and Kevin Gillan, who was cycling past.

Section 44 allows the police to stop and search anyone on the basis of a ‘reasonable suspicion’ that they may be in posssession of information or items that may be useful in committing an act of terrorism. The case in the ECHR was on several principles, most of which were rejected, but most importantly the Court found that arbitrary stop and search dis violate Article 8 of the European Convention, on the right to privacy. This was because “the use of the coercive powers conferred by the legislation to require an individual to submit to a detailed search of his person, his clothing and his personal belongings amounts to a clear interference with the right to respect for private life”.

Furthermore the UK government once again argued, as it did equally unsuccessfully in the case of Peck v. UK back in 2003, that Article 8 did not apply as there was no right privacy in public places. This argument, the Court not only rejected but actually argued that the publicness of the stop and search made the violation of privacy worse:

“Although the search is undertaken in a public place, this does not mean that Article 8 is inapplicable. Indeed, in the Court’s view, the public nature of the search may, in certain cases, compound the seriousness of the interference because of an element of humiliation and embarrassment. Items such as bags, wallets, notebooks and diaries may, moreover, contain personal information which the owner may feel uncomfortable about having exposed to the view of his companions or the wider public.”

This was a well-thought out ruling which made the arguments pretty clear. However the response of the UK government, as in the DNA case, leaves a lot to be desired. In fact, it has basically said, “make me”! The government intends to ignore the ruling in everyday practice, as it did with Peck, and will continue to allow police to carry out such searches whilst it appeals the case. This also means that there will be no disciplinary action against any officer who follows this policy, despite its now being unlawful.

*This of course is by no means over either, and there will be a mass photography action, “I’m a Photographer Not a Terrorist!”, on January 23rd at 12 Noon, Trafalgar Square in London.

US wiretapping information release

From Chris Parsons:

“Christopher Soghoian, a PhD Candidate at Indiana University, has released the information on US wiretap/pen register information along with documents received through FOIA that are inquiring into the costs that telecommunications carriers demand for the two aforementioned services. He also has full recordings of sessions from (the closed door) ISS World: Intelligence Support Systems for Lawful Interception, Criminal Investigations and Intelligence Gathering. An executive summary of his draft thoughts are below, followed by a link to the full piece he’s written. He has made available his recordings and the responses to his FOIA requests to the public at large, all accessible at the link below.

Executive Summary

Sprint Nextel provided law enforcement agencies with its customers’ (GPS) location information over 8 million times between September 2008 and October 2009. This massive disclosure of sensitive customer information was made possible due to the roll-out by Sprint of a new, special web portal for law enforcement officers.

The evidence documenting this surveillance program comes in the form of an audio recording of Sprint’s Manager of Electronic Surveillance, who described it during a panel discussion at awiretapping and interception industry conference, held in Washington DC in October of 2009.

It is unclear if Federal law enforcement agencies’ extensive collection of geolocation data should have been disclosed to Congress pursuant to a 1999 law that requires the publication of certain surveillance statistics — since the Department of Justice simply ignores the law, and has not provided the legally mandated reports to Congress since 2004.”


UK Home Secretary posts response to HGC Report

The UK Home Secretary, Alan Johnson, has posted a comment piece on The Guardian website as a response to the Human Genetics Commission Report on the UK police National DNA Database (NDNAD). It basically says, there’s a long history of balancing security and liberty, we’ve got it right and we won’t be changing anything – all padded out with a lot of nothing. Johnson seems like a decent person (unlike many recent holders of this office) and it seems a shame that he’s reduced to producing this substandard waffle in defence of the indefensible. I do wonder what it would take to convince this government, which is now clearly on its last legs, that they were wrong about anything…

The Vancouver Statement on the 2010 Winter Olympics

Following recent discussion, a number of leading surveillance researchers have signed and issued the following ‘Vancouver Statement’ of which I did the first draft (followed by multiple revisions from many hands!). If you are a researcher who has done any work on mega-event security and surveillance, and agree with the statement, you are encouraged to send your name and affiliation to Adam Molnar at UVic. It is being press-released and hopefully discussed in the BC Legislative Assembly.

The Vancouver Statement of Surveillance, Security and Privacy Researchers about the Vancouver 2010 Olympic Winter Games

As researchers from Canada and the wider world, who are conducting research on the global security dynamics of mega-events, we agree:

  • that the Olympic Games should be a celebration of human achievement, friendship and trust between people and nations.

However, having analysed past and planned Olympics and other mega events, from a variety of historical and international perspectives, we recognise:

  • that recent Games have increasingly taken place in and contributed to a climate of fear, heightened security and surveillance; and
  • that this has often been to the detriment of democracy, transparency and human rights, with serious implications for international, national and local norms and laws.

Therefore, we ask the City of Vancouver, the Province of British Columbia and the Government of Canada:

  • to moderate the escalation of security measures for Vancouver 2010 and to strive to respect the true spirit of the event;
  • to be as open as possible about the necessary security and surveillance practices and rationales;
  • to withdraw temporary bylaws that restrict Charter rights of freedom of speech and assembly;
  • to work constructively with the Provincial and Federal Privacy Commissioners;
  • to respect the rights of all individuals and groups, whether they be local people or visitors, and pay particular attention to the impacts on vulnerable people;
  • to conduct a full, independent public assessment of the security and surveillance measures, once the Games are over, addressing their costs (financial and otherwise), their effectiveness, and lessons to be learned for future mega-events;
  • not to assume a permanent legacy of increased video surveillance and hardened security measures in the Vancouver/Whistler area, and to have full and open public discussion on any such proposed legacy.

We hope that these recommendations will contribute to a unique and positive Olympic legacy by which Vancouver, British Columbia and Canada will be remembered for setting the highest ethical standards.

For further information, contact:

Richard Smith, tel: 778-782-5116; or Colin Bennett

And there’s now more on Richard’s blog!

Olympic surveillance legacies

David Loukidelis, the Information and Privacy Commissioner of British Columbia, speaking today at The Surveillance Games workshop, has made it quite clear that his office does not want the Winter Games to leave a legacy of securitization in the city or indeed, fear (as the Assistant Federal Privacy Commissioner, Chantal Bernier, put it), in the consciousness of its residents. In particular he argued that the 600 (yes, 600) cameras that are being installed at the Olympic venues and beyond should not be allowed to remain after the games. I hope that his office is able to deliver on this view, but I doubt that it will. As Kevin Haggerty and Phil Boyle have noted, security architecture is now an actual deliverable of the Olympics, and as many other researchers have shown, such architecture, including in particular CCTV but also adjusted local or national laws on the thematic and spatial limits of protest and freedom of expression (which, as Michael Vonn of the BCCLA and Chris Shaw, a leading anti-games activist, are describing at this very moment in the conference, are themselves often illegal and unconstitutional) tends not only to persist but to act as a kind of Trojan Horse for an expanded surveillance. And as Vonn’s group has also shown – the city is building a permanent CCTV control centre as part of the security architecture for the Games, and you don’t do that for cameras that are going to be removed.

UK pushes forward with online data retention plans

Like Canada, the UK is pushing forward with new plans to force telecommunications companies and ISPs to retain online data, despite opposition from both the industry and ordinary service users. The New Labour govenrment had delayed the plans from last year, faced with the strength of the opposition and launched a ‘consulation’. The consultation apparently still generated 40% opposition, which one would think was enough to tell them that something was wrong. But, as I said last year, “the collection of such traffic data will still go ahead… partly at least because the Americans want it; there is pressure on many countries for this kind of data collection and storage – see for example, the FRA law in Sweden. Networking these databases together with others is a major aim of the FBI’s secretive ‘Server in the Sky’ project.”

However, now the UK plans go further than many other countries’ schemes in this area, as they would cover not only traffic data but also a whole range of data which would not normally have been regarded as  traditional communications like social networking activity and even internal online gaming data. This would seem to be in line with US programs that regard the behaviour of – let’t not forget, fantasy – game and virtual world avatars as somehow indicative of real-world tendencies and practices (e.g.: Projects VACE and Reynard), an extremely dubious assumption and one which extends the reach of the state into people’s fantasy and dream lives.

The BBC story mentions an estimated 2Bn GBP (around $3.5 CAN) cost for this – which will no doubt be passed on to service users – but given the immense problems posed by some of this data, I would reckon that this could a massive underestimate, especially if one takes into account the UK state’s history of appallingly-managed computerisation and database-building schemes. The original plans also would have allowed all agencies empowered under the Regulation of Investigatory Powers Act (RIPA) to make use of such data, and the RIPA consultation response from the UK government did contain some indications that some new agencies would be given powers of access, but I am still not sure whether the government will keep the list of agencies as long as it was in last year’s draft Communications Bill.