How 'Cloud Extraction' tools can be used at a protest

This guide explains how the police can access data to your Cloud-based services and the apps that store data in there, such as Slack, Telegram and WhatsApp. (UK edition)

Explainer

Post date

5th May 2021

Key points

Cloud extraction tools enable access to the data stored in your Cloud-based service including numerous communication apps.
Your cloud data does not just reveal information about you, it can also reveal much about your friends, family, and anyone else you interact with online.
You should think about switching off cloud back-up in the applications on your phone that you use, and logging out of all cloud-based services.
There are other steps you can take too, but none are perfect solutions...

What are ‘cloud extraction tools’ and what do they do?

Cloud extraction technology enables the police to access data stored in your ‘Cloud’ via your mobile phone or other devices.
The use of cloud extraction tools means the police can access data that you store online. Examples of apps that store data in the Cloud include Slack, Instagram, Telegram, Twitter, Facebook and Uber.

How might cloud extraction tools be used at a protest?

In order to extract your cloud data, the police would need to physically access your mobile phone. The police might confiscate your phone if you have been detained or arrested during a protest, but also if you have witnessed a crime and even if you are a victim of a crime (See also Protest Guide about mobile phone extraction).
All of this information could be used to identify protesters and organisers and find out about the location of protests and actions.
Your cloud data does not just reveal information about you, it can also reveal much about your friends, family, and anyone else you interact with online, such as fellow protestors. For example, you may have old contacts stored in the Cloud, which have been deleted from the phone itself.

What to think about when going to a protest

While you could consider leaving your phone at home, if that is not a realistic solution, you should think about switching off cloud back-up in the applications on your phone that you use, and logging out of all cloud-based services. This will avoid data being stored in the Cloud and prevent access to this data from your mobile phone.
Before going to a protest, you should be aware that even if you use end-to-end encrypted messaging through WhatsApp, if you back up your WhatsApp messages to the Cloud, these encrypted backups could be accessed by the police using cloud extraction tools on your phone.
Some applications, such as Uber, Twitter, WhatsApp and Facebook will allow you to switch off the location data being stored in the Cloud. This may prevent the police being able to track where you have been.

You can download this guide as a jpeg by saving the image below, or by downloading the pdf version in 'Attachments'.

Our campaign

Defending Democracy and Dissent

Free to Protest (UK)

Police unlocking your data in the cloud

Phone Data Extraction: digital stop and search

Our fight

Contesting Government Data and System Exploitation

Defending Democracy and Dissent

Protecting Civic Spaces

Learn more

Protest Surveillance

Policing

Policing and Technology

Target Profile

Government

Attachments

Cloud Extraction guide

What PI is calling for

Governments must uphold and extend the rule of law, to protect human rights as technology changes.

PI holds governments to account for their powers.

Privacy and autonomy: Redefining boundaries for Indigenous communities

The concept of privacy is essential for Indigenous peoples to exercise their right to autonomy and self-determination, enabling them to better protect their cultural heritage and prevent external control, exploitation, and surveillance of their lands and identities.

Long Read

Protecting personal data during elections – the Council of Europe's new guidelines on the processing of personal data for the purposes of voter registration and authentication

in June 2024 the Council of Europe adopted its Guidelines on the protection of individuals with regard to the processing of personal data for the purposes of voter registration and authentication. PI welcomes these very comprehensive Guidelines which complement a previous set of recommendations outlining the safeguards for the Processing of Personal Data by and for Political Campaigns.

Long Read

Social media monitoring in the UK: the invisible surveillance tool increasingly deployed by government

Privacy International presents how the use of social media monitoring by governments and companies is an increasingly prevalent one, and as this article explores, largely unregulated.

Advocacy

UN Human Rights Committee urges United Kingdom to respect the right to privacy

On 3rd May, 2024, the Human Rights Committee (HRC), the body of independent experts that monitors implementation of the International Covenant on Civil and Political Rights (ICCPR) issued its concluding observations on the eighth periodic report of the United Kingdom of Great Britain and Northern Ireland. Ahead of the HRC’s review of the UK, PI had made a submission highlighting key concerns in relation to the current UK communications’ surveillance regime and the proposal for its reform; the surveillance of migrants; and the surveillance of peaceful assemblies.