UK slows down plan for sweeping electronic surveillance

The British government is slowing down a proposal that would give law enforcement sweeping power to collect electronic data as a measure to prevent terrorism.

The proposal, in the Communications Data Bill, would allow the government to collect data on phone calls and other electronic communication. The government planned to put the proposal in Parliament's upcoming legislative agenda, but opted instead on Wednesday to conduct a consultation next year due to concerns about intrusive monitoring of private citizens.

"It's a sensitive issue, and there needs to be a proper public debate," a Home Office spokesman said Thursday.

Home Secretary Jacqui Smith said on Wednesday the legislation is needed because of the difficulty in collecting evidence against terrorists.

"These are not like other criminal investigations," Smith said during a speech at the Institute for Public Policy Research. Law enforcement "put a very high premium on pre-emptive intelligence because we are trying to stop a criminal act and not investigate one which has already taken place."

Critics contend that allowing the government to create a "super database" that logs e-mails, phone calls and Web sites visits raises privacy concerns as well as potential security problems over how the data would be stored.

Smith denied the government seeks a super database. "There are no plans for an enormous database which will contain the content of your e-mails, the texts that you send or the chats you have on the phone or online."

But collecting data such as the location and identity of someone making a phone call "is vital to fighting terrorism and combating serious crime," she said.

The government has not made a draft of the Communications Data Bill publicly available.

However, it is modeled in part on European Union Directive 2006/24/EC, which requires that communication providers retain a vast array of data including IP (Internet Protocol) address, physical address and user ID used for communications such as e-mail.

The actual content of the communication should not be retained, but data around how it was sent and when should be retained for at least six months and up to two years, the directive says.

The directive was propelled in part by the July 2005 terrorist attacks in London. E.U. countries were required to comply in part with the directive by September 2007, but can delay the Internet access and e-mail monitoring until March 2009.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

• Email
• Print
• Share
  • Slashdot
  • Digg
  • Stumble
  • Reddit
  • Newsvine