Advanced Search
Content Type: Press release
Privacy International has today written to government ministers, members of the opposition, and oversight bodies reaffirming its call for the UK government to reveal secret intelligence sharing arrangements with the United States.
The original UKUSA agreement — drafted shortly after World War II — allows UK and US agencies to share, by default, any raw intelligence, collection equipment, decryption techniques, and translated documents.
Current arrangements also allow US…
Content Type: Advocacy
This week, from 17th-20th October 2016, the Kingdom of Morocco will be hosting the 38th International Conference of Data Protection and Privacy Commissioners (ICDPPC).
And two scenarios could play out…
Scenario one — like many other occasions, this will be used as wonderfully strategic PR stunt, whereby participants will be whisked directly from the airport to their hotel to the conference venue, and will be enchanted by the genuinely warm Moroccan hospitality. But they will leave…
Content Type: Press release
Key points
Bulk Communications Data (BCD) collection, commenced in March 1998, unlawful until November 2015
Bulk Personal Datasets regime (BPD), commenced c.2006, unlawful until March 2015
Everyone’s communications data collected unlawfully, in secret and without adequate safeguards until November 2015
We maintain that even post 2015, bulk surveillance powers are not lawful
As the Investigatory Powers Bill is set to become law within weeks, we argue that the authorisation and…
Content Type: Long Read
On 17 October 2016, the Investigatory Powers Tribunal handed down judgment in a case brought by Privacy International against the Foreign Secretary, the Home Secretary and the three Security and Intelligence Agencies (MI5, MI6 and GCHQ).
The case concerned the Agencies’ acquisition and use of bulk personal datasets (‘BPD’) – datasets that contain personal data about individuals, the majority of whom are unlikely to be of intelligence interest, such as passport databases and finance-related…
Content Type: Press release
PI Research Officer Edin Omanovic said:
“The European Commission has proposed sweeping updates [PDF] to trade regulations in an effort to modernise the EU’s export control system and to ensure that the trade in surveillance technology does not facilitate human rights abuses or internal repression.
Privacy International welcomes the intentions of the proposed changes in terms of protecting human rights as it does all such moves. More than half of the world’s surveillance…
Content Type: Press release
Key points
Privacy International, Liberty, Amnesty International, and seven other human rights organizations challenge UK mass surveillance and UK access to US mass surveillance at the European Court of Human Rights
This is the first case before the European Court of Human Rights to directly challenge UK and US mass surveillance revealed by the Snowden disclosures
National courts and oversight bodies have failed to rein in mass surveillance practices that impact hundreds of millions of…
Content Type: Advocacy
After the adoption of the EU General Data Protection Regulation, the Data Protection Directive for Law Enforcement Agencies, the EU-US Privacy Shield, your understandable EU privacy policy fatigue is excused.
But when a coalition of tech and telecom industries calls for a relatively obscure EU directive to be repealed, it may unintentionally trigger an atypical Streisand effect: if companies, which often so cavalier to individuals’ privacy, want to get rid of the EU e-privacy…
Content Type: Advocacy
Privacy International has today written to Danish ministers and authorities seeking urgent assurances following a report published two days ago in Information showing that the government has approved the export of an internet surveillance system to China.
The report, which relies in part on documents obtained from the Danish Business Authority – the department which oversees exports of surveillance technology – shows that the government has authorised a company based in…
Content Type: Press release
Previously secret official documents, containing new revelations about the Government's mass surveillance regime, have today been disclosed as a result of litigation brought by Privacy International against the Intelligence Agencies (MI5, MI6, GCHQ). These documents shed further light on the secretive bulk data collection regime operating under section 94 of the Telecommunications Act 1984 and the Bulk Personal Data-set regime.
Documents available:…
Content Type: Press release
Tomorrow, on 26 July, the main hearing will begin in Privacy International's legal challenge against MI6, MI5, and GCHQ's collection of bulk communications data and bulk personal datasets. Previously secret documents will be made public at the hearing, and Privacy International will brief attending journalists about the significance of the disclosed documents.
The hearing will include references to important documents detailing the collection of data on every citizen in the…
Content Type: News & Analysis
Another committee-led scrutiny. Another list of changes that need to be made to the Investigatory Powers Bill. This seems familiar.
The Joint Committee on Human Rights has weighed in with scrutiny of the Investigatory Powers Bill prior to the Bill’s debate and vote in the House of Commons on the 6 and 7 June. The recommendations the report contains once again raise questions about the fitness of the Bill to be passed in its current form.
The Committee identified thematic warrants - which…
Content Type: Press release
Privacy International, the leading global privacy rights NGO, has today filed a Judicial Review at the UK High Court, challenging the Investigatory Powers Tribunal's (IPT) decision that the Government can issue general hacking warrants. This decision means that British intelligence agency GCHQ can continue to hack into the computers and phones of broad classes of people - including those residing in the UK. The Investigatory Powers Bill, currently being debated in Parliament, seeks to…
Content Type: News & Analysis
Should the European Union agree to legitimise trade with a country that refuses to adhere to European legal standards? This is the fundamental question that will be addressed at tomorrow’s meeting among European privacy regulators when they publish their opinion on the data-sharing agreement known as the ‘Privacy Shield’, the replacement to the failed ‘Safe Harbour’ agreement.
Background
Many of the world’s largest companies, such as Google and Facebook, store their customers’ data in…
Content Type: News & Analysis
PI's full analysis can be read here
On 29 February 2016, the European Commission and the US government released the details of the proposed EU-U.S. “Privacy Shield”. The “Privacy Shield” replaces the now defunct so-called “Safe Harbor”.
The Privacy Shield is in fact a significant number of documents from various parts of the U.S. administration, which merely outline the existing, weak U.S. safeguards applicable to personal data of EU citizens. These documents are…
Content Type: Advocacy
Introduction
On 29 February 2016, the European Commission and the US government released the details of the proposed EU-U.S. “Privacy Shield”. The “Privacy Shield” replaces the now defunct so-called “Safe Harbor”.
The Privacy Shield is in fact a significant number of documents from various parts of the U.S. administration, which merely outline the existing, weak U.S. safeguards applicable to personal data of EU citizens. These documents are meant to serve as the basis for an “adequacy”…
Content Type: Advocacy
Privacy International notes New Zealand’s written replies to the list of issues prior to reporting in relation to the New Zealand’s laws, policies and practices related to interception of personal communications.
A review of the security and intelligence legislation is currently underway in accordance with the Intelligence and Security Committee Act. It is expected that the Parliament will consider the review in 2016. Hence this represents a significant opportunity to amend the current…
Content Type: News & Analysis
The major overhaul of data protection laws in Europe is finally over, after three years of arduous and sustained political and lobbying activity by all those with a major stake and interest, including us at Privacy International (See our initial analysis of the two laws in 2012). We welcome this long overdue closure, but is this 91-articled, 200-paged piece of legislation been worth the enormous effort and no doubt millions of euros, dollars and pounds spent on it?
The legislative package…
Content Type: Press release
Human Rights Watch and three individuals have today lodged a legal challenge to establish whether their communications were part of those unlawfully shared between the US National Security Agency (NSA) and UK Government Communications Headquarters (GCHQ).
Despite billions of records being shared every day between the NSA and GCHQ, and that historical sharing having been declared unlawful [PDF], the Investigatory Powers Tribunal (IPT) has not yet confirmed to any claimant that their…
Content Type: Press release
A new report released today by the Royal United Services Institute (RUSI) highlights key technical blind spots in current GCHQ oversight and calls for a new, comprehensive and clear legal framework governing British intelligence agencies' surveillance capability.
The report panel, which included three former British intelligence chiefs, sets out clear deficiencies in the existing technical oversight regime, explaining current oversight "does not check the code [that underlies GCHQ’s…
Content Type: Press release
The Investigatory Powers Tribunal (IPT) today revealed that the UK Government Communications Headquarters (GCHQ) spied on two international human rights organisations, failed to follow ITS own secret procedures and acted unlawfully.
The targeted NGOs are the South African Legal Resources Centre (LRC) and the Egyptian Initiative for Personal Rights (EIPR). Both are leading civil liberties organisations and co-claimants alongside Privacy International, Liberty,…
Content Type: Advocacy
Following today's Justice Ministers Council meeting in Luxembourg where an agreement was reached on the proposal for a General Data Protection Regulation (GDPR), Privacy International and European Digital Rights (EDRi) issued the following statement:
In January 2012, the European Commission, following extensive consultations, published a draft Regulation. The initiative had three priorities - modernisation of the legal framework for the protection of personal data,…
Content Type: Press release
Governments must accept they have lost the debate over the legitimacy of mass surveillance and reform their oversight of intelligence gathering, Privacy International and Amnesty International said today in a briefing published two years after Edward Snowden blew the lid on US and UK intelligence agencies’ international spying network.
“The balance of power is beginning to shift,” said Edward Snowden in an article published today in newspapers around the world. “With each court victory,…
Content Type: Press release
Privacy International and several other human rights organisations are taking the UK Government to the European Court of Human Rights over its mass surveillance practices, after a judgement last year found that collecting all internet traffic flowing in and out of the UK and bulk intelligence sharing with the United States was legal.
The appeal, filed last week by Privacy International, Bytes for All, Amnesty International, Liberty, and other partners, comes in response to a…
Content Type: Press release
The British Government has admitted its intelligence services have the broad power to hack into personal phones, computers, and communications networks, and claims they are legally justified to hack anyone, anywhere in the world, even if the target is not a threat to national security nor suspected of any crime.
These startling admissions come from a government court document published today by Privacy International. The document was filed by the government in response to two …
Content Type: Press release
The UK Parliament's Intelligence and Security Committee's report provides a long-awaited official confirmation that the British government is engaging in mass surveillance of communications. Far from allaying the public's concerns, the ISC's report should trouble every single person who uses a computer or mobile phone: it describes in great detail how the security services are intercepting billions of communications each day and interrogating those communications against thousands of…
Content Type: News & Analysis
Privacy International, Bytes for All and other human rights groups are celebrating a major victory against the Five Eyes today as the UK surveillance tribunal rules that GCHQ acted unlawfully in accessing millions of private communications collected by the NSA up until December 2014.
Today’s judgement represents a monumental leap forward in efforts to make intelligence agencies such as GCHQ and NSA accountable to the millions of individuals whose privacy they have violated.
The…
Content Type: Long Read
As Privacy International celebrates Friday's victory against Britain’s security services - the first such victory this century - we cannot help but feel the success is bittersweet.
After all, we may have convinced the Investigatory Powers Tribunal that GCHQ was acting unlawfully in accessing NSA databases filled with billions of emails and messages, but with a few technical adjustments the intelligence services have managed to insure themselves against any further challenge, at least in…
Content Type: Press release
British intelligence services acted unlawfully in accessing millions of people’s personal communications collected by the NSA, the Investigatory Powers Tribunal ruled today. The decision marks the first time that the Tribunal, the only UK court empowered to oversee GHCQ, MI5 and MI6, has ever ruled against the intelligence and security services in its 15 year history.
The Tribunal declared that intelligence sharing between the United States and the…
Content Type: News & Analysis
The following appeared in the Daily Telegraph, and was written by Carly Nyst, Legal Director of Privacy International:
"Robert Hannigan, the new head of GCHQ, announced his arrival this week with a call for “greater co-operation” with security forces by tech companies. Hannigan’s article in the Financial Times illustrated vividly the destructive ideology that has driven the infiltration by the British and American intelligence agencies into every aspects of the digital realm – an…
Content Type: Long Read
Privacy International in October 2014 made a criminal complaint to the National Cyber Crime Unit of the National Crime Agency, urging the immediate investigation of the unlawful surveillance of three Bahraini activists living in the UK by Bahraini authorities using the intrusive malware FinFisher supplied by British company Gamma.
Moosa Abd-Ali Ali, Jaafar Al Hasabi and Saeed Al-Shehabi, three pro-democracy Bahraini activists who were granted asylum in the UK, suffered variously…