Re: [Hampshire] Code base and Emergency Data Laws

Top Page

Reply to this message
Author: James Courtier-Dutton
Date:  
To: lug, Hampshire LUG Discussion List
Subject: Re: [Hampshire] Code base and Emergency Data Laws
On 16 July 2014 20:21, Damian L Brasher <lug@???> wrote:
> Hi
>
> Emergency data laws, when I upload new code to open source game codebase
> i.e. file bombs.c will it trigger an alert? I recently updated and added
> quite a lot of new code to
> http://sourceforge.net/p/dspaceinvadors/code/HEAD/tree/dsi/
>
> I sent some of the below to my local (Labour) MP asking about the effect
> on the Data Protection Act and Safeguarding consumers. I received a
> prompt and authentic response - but no detail other than available
> on-line. There is very little detail. House of Commons is about to enter
> summer recess.
>
> I hope others do the same and send a letter or email to their MP with
> technical or other concerns.
>
> After all, the changed EU directive that triggered these Emergency Data
> Laws, retracted privatised data retention.
>
> --- snip ---
>
> I believe the emergency data retention and investigation powers,
> internet data laws (DRIP) are unfair to consumers. The two areas of
> greatest concern are Data Protection and Safeguarding.
>
> Data Protection Act 1998 (DPA) - Part IV Exemptions, Section 28
> ---------------------------------------------------------------
>
> DRIP, as it stands in context with DPA, will surely effectively render
> itemised phone usage information, currently readily available,
> inaccessible to consumers - the data will be kept in the interest of
> national security.
>
> If access to phone usage is retained, will access to internet browsing
> meta data, email meta data be allowed (by default non exempt)?
>
> Safeguarding consumers against side effects of DRIP
> ---------------------------------------------------
>
> How will users protect themselves against faulty data? Identity mix-ups
> by ISP staff is [very] common. [think of moving house]
>


Hi,

I have a friend who is in the Police and they explained to me what DRIP/RIPA is.
1) There are no "triggers".
2) Police make a request to the phone company with a search key of say
"phone number". They can then get a report of all the calls that user
has made within a small time period. They can also obtain details of
where the phone was used during that time period. There are various
other request types they can make, all listed in the RIPA documents.
Also only a select few police people are allowed to make such
requests. These are ones with the rank "superintendent". Normally
these requests also need to be supported by court authorizations.
3) DRIP is much the same as RIPA, and RIPA has been around since at
least the year 2000.
4) The requests are definitely aimed at being of use to police
investigating a crime. For example, they can search by a fraudulent
bank account number. If that bank account number paid a phone bill,
they can then obtain the phone number of that phone, and then request
the location of that phone.

If you are particularly interested in what they can ask for, google
for RDHI (Retained Data Handover Interface) , it is an ETSI standard
and lists all the request types used by RIPA.

Summary: I don't think anything has changed since the year 2000.

Kind Regards

James

--
Please post to: Hampshire@???
Web Interface: https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL: http://www.hantslug.org.uk
--------------------------------------------------------------