Monday, March 28, 2016

Seminar 5 Position Statement: Prof. Mark Phythian


Surveillance and Oversight – The Intelligence and Security Committee and the Post-Snowden Debate

Prof. Mark Phythian

Politics & International Relations, Univ. of Leicester


The parliamentary Intelligence and Security Committee (ISC) has had a chequered history. However, it is too useful to government and the intelligence agencies to be replaced, and this is the secret of its resilience. At the same time, though, the ISC can be under no illusions following the mini ‘season of inquiry’ that occurred in the UK during 2015 as a consequence of the Snowden leaks. It has few friends outside of government and limited legitimacy – no surprise if legitimacy is understood as arising out of the historical effectiveness of a system in dealing with a circumscribed set of national problems.[1] It needs to up its game.
The post-Snowden mini ‘season of inquiry’ of 2015 comprised three separate inquiries that reported within a short space of time between March and July: the March 2015 report into Privacy and Security from the ISC;[2] the June 2015 report, A Question of Trust, from David Anderson QC, the Independent Reviewer of Terrorism Legislation;[3] closely followed by the July 2015 report of the Independent Surveillance Review (ISR), A Democratic Licence to Operate, set up at the instigation of then-Deputy Prime Minister Nick Clegg.[4] The Anderson report hadn’t been sought and wasn’t particularly wanted by government, but had been granted as a concession accompanying the rapid parliamentary passage of the Data Retention and Investigatory Powers Act 2014 (DRIPA) - in just four days - in July 2014. It was also the most radical of the three. It recommended that all warrants for interception should be judicially rather than ministerially authorised (although with regard to warrants relating to national security, the relevant secretary of state would have a significant role in certifying that the warrant was required for the purposes stated, in which case the Judicial Commissioner could only depart on the basis of the principles of judicial review).[5] It also recommended that these be authorised by a Judicial Commissioner of an Independent Surveillance and Intelligence Commission (ISIC), which would replace the existing system of three separate commissioners (the Interception of Communications Commissioner, the Intelligence Services Commissioner, and the Chief Surveillance Commissioner). Like the ISC earlier in the year, Anderson recommended overhauling the existing legislative framework, with the withering observation that: “RIPA, obscure since its inception, has been patched up so many times as to make it incomprehensible to all but a tiny band of initiates. A multitude of alternative powers, some of them without statutory safeguards, confuse the picture further. This state of affairs is undemocratic, unnecessary and – in the long run – intolerable.”[6]
Anderson saw ISIC as a body that would be “public-facing, transparent and open to diverse ideas (including from all sectors of the community in all parts of the UK, from other countries, from international institutions and from young people who have grown up online)”, and would draw on a wide range of expertise “from the worlds of intelligence, computer science, technology, academia, law and the NGO sector” and participate in conferences, “invite dialogue”, be accessible to traditional media and have an active social media presence.[7]
This was a long way from the culture of oversight adopted over a long period by the ISC, notwithstanding reforms and incremental improvements in its approach to openness and engagement since 2013. Anderson was aware of the limitations of the ISC, pointing out that the ISC “as an institution did not receive significant support from those making submissions to us”, with some advocating its abolition.[8] As a result, the Anderson report did not support the continuation of the ISC in its current form. While making clear the importance of some form of parliamentary oversight of intelligence, Anderson proposed that ISIC and ISC functions should not overlap – which would represent a contraction of the ISC’s remit (for example, its Privacy and Security report would have been infeasible under such an arrangement). Anderson’s report also suggested that Parliament should consider whether to maintain the ISC but strengthen it by appointing a Chair from outside the governing party or parties, whether to transfer its investigative resource to ISIC in due course, or whether to recast it as a Select Committee, possibly merged with the Defence Select Committee.[9]
The Independent Surveillance Review (ISR) panel was established by Deputy Prime Minister Nick Clegg in response to the Snowden leaks. It was chaired by Michael Clarke, Director General of the Royal United Services Institute, and contained a cross-section of leading figures from the worlds of technology, policing, intelligence and academia, including Sir David Omand, former head of MI6 and Chair of the Joint Intelligence Committee Sir John Scarlett and investigative journalist and privacy campaigner Heather Brooke. As with the Anderson report, the ISR recommended that the existing three commissioners be replaced by a single organisation, the National Intelligence and Surveillance Office (NISO), with its independence guaranteed by statute, but that the judicial commissioners who would authorise warrants should not be part of it. As with Anderson’s vision for the ISIC, public education would be a key plank of the proposed NISO’s role. The ISR report, like Anderson’s, also noted the lack of public confidence in the ISC and the problem this created in terms of intelligence and security legitimacy.
One consequence of this mini ‘season of inquiry’ is that oversight that commands public trust is now clearly accepted as being essential to the legitimacy of intelligence and security practice. As the ISR report observed:
There is certainly a problem of trust in the system of oversight, and particularly the lack of popular visibility of the oversight arrangements that currently exist. A clear and transparent new legal framework and a more coherent, visible and effective oversight regime should be the basis for a public discussion about the appropriate and constrained power the British state should have to intrude into the lives of its citizens.[10]

But does all of this suggest that the idea of parliamentary oversight is a busted flush given issues of time, complexity and lack of expertise? Do a combination of structural realities and the ISC’s past performance mean that there is a growing acceptance that parliamentary oversight is not the answer, and that primary responsibility should be transferred to lawyers whose job is, in essence, to check for compliance with legislation? For a number of years now I have been critical of the performance of the ISC, but this criticism was not an argument for downgrading legislative oversight in favour of judicial oversight. This would create clear problems – not least the risk that this becomes little more than a tick-box exercise establishing compliance with legislation when the lesson of the past (and not just in the UK) is that the law is often the problem. Moreover, oversight should be concerned with normative and policy issues (for example, look at the range of work undertaken by the Defence Committee or Foreign Affairs Committee) rather than simply ruling on legal compliance. However, posing this question does beg another one; what would adequate legislative oversight require in terms of staffing and support?
The current ISC, which came together in September 2015, post-dates the regime criticised by Anderson and the ISR. It may be that these processes and reports, together with the recasting of the ISC - with new chairman Dominic Grieve (interestingly, a critic of the ISC prior to the election of the coalition government in 2010) replacing the disgraced Sir Malcolm Rifkind, and with just three surviving members of the previous ISC (one of whom, Fiona Mactaggart, only joined in May 2014) – constitute a Damascene moment for its members. Confronted with intimations of its mortality, its members may seek to up their game and be more assertive. There is some evidence of this in the ISC’s response to the government’s initial investigatory powers bill, published in draft form in late 2015 to enable pre-legislative scrutiny. The ISC was critical:
Taken as a whole, the draft Bill fails to deliver the clarity that is so badly needed in this area. The issues under consideration are undoubtedly complex, however it has been evident that even those working on the legislation have not always been clear as to what the provisions are intended to achieve. The draft Bill appears to have suffered from a lack of sufficient time and preparation.[11]
Then again, there are structural reasons for believing that the ISC remains hobbled by design, as Anderson seemed to recognise. It is still chaired by a member of the governing political party and has lost key expertise with the departure of members such as Lord Butler, which it is not immediately clear it has replaced. However, it is worth making a final point; the development of intelligence oversight is not a linear process leading, inevitably, to some Francis Fukuyama-style ‘end of history’ moment at which point the ideal form will have been arrived at. It is, rather, a contested process with ebbs and flows – reflecting the fact that executive, agencies, legislators and public have different understandings of the purpose of oversight and, consequently, different expectations of it. It is more useful to consider the emerging legislative framework as representing another episode in this history of contestation rather than arrival at a mythical end-state for oversight and accountability of intelligence.



[1] As per the definition in E. C. Hargrove, The Power of the Modern Presidency (New York: Knopf, 1974), p.20.
[2] Intelligence and Security Committee, Privacy and Security: A Modern and Transparent Legal Framework (HC 1075 - London: HMSO, March 2015).
[3] David Anderson, QC, A Question of Trust: Report of the Investigatory Powers Review (London, HMSO, June 2015) [henceforward ‘Anderson report’], https://terrorismlegislationreviewer.independent.gov.uk/a-question-of-trust-report-of-the-investigatory-powers-review/
[4] Independent Surveillance Review, A Democratic Licence to Operate (London, Royal United Services Institute, July 2015) [henceforward ‘ISR report’].
[5] Anderson report, paras. 15.30, 15.47.
[6] Ibid, para.35.
[7] Ibid, para.111.
[8] Ibid, para.12.93.
[9] Ibid, paras. 118-120. The director of Liberty, Shami Chakrabarti illustrated the lack of support for the ISC in welcoming the publication of the Anderson report: “This thoughtful report is in sharp contrast with the defensive whitewash from the discredited intelligence and security committee of the last parliament...While we don’t agree with all his conclusions, Mr Anderson’s intervention could be the beginning of re-building public trust in surveillance conducted with respect for privacy, democracy and the law.” Richard Ford, ‘Cameron in Showdown over Spying’, The Times, 12th June 2015.
[10] ISR Report, para. 5.30.
[11] ISC, Press Release, 9th February 2016.

Seminar 5: Tackling Transparency Beyond the Nation-State



Tackling Transparency Beyond the Nation-State


 31 March 2016
 Cardiff University
Law Building, Rm 1.29
Museum Avenue, CF10 3AX,
10am to 5pm

Your seminar leaders, Madeline Carr and Claudia Hillebrand, welcome you to the fifth of six seminars in the ESRC-funded DATA-PSST! seminar series.

Advanced technologies and the increased interconnectedness of state and private actors across borders allow for a constant flow of data around the globe. This provides opportunities for law enforcement and intelligence authorities to monitor terrorist suspects and criminals – but also the ordinary citizen. In the context of counter-terrorism, this kind of surveillance often also involves cooperation between states but also with private enterprises, such as banks and other financial authorities, as well as companies like Google and Facebook. Given the cross-border and cross-sector nature of these practices, questions arise about the utility of trying to regulate and control data-sharing at the national level only. In addition, tensions emerge between expectations of sovereign rights and responsibilities on the one hand and regional and global cooperation on the other hand. Increasingly, regional actors, such as the EU and the Council of Europe, and also the UN are involved in regulating data-sharing, protecting privacy and challenging excessive surveillance by security authorities.

This seminar will focus on the ongoing attempts at the European and international level to regulate, confine and oversee the global flow of information. To do so, it brings together scholars and practitioners of international relations, political science, media, international law and human rights to examine key debates, analyse strengths and weaknesses of existing mechanisms of regulation and oversight and explore the question of which political level is most suitable to fulfill such a demanding mandate.

Some of the subsidiary questions that will frame this seminar include:
-       How are concepts of borders, states and territory relevant in the practice of safeguarding human rights online?
-       What are the key regional and global mechanisms in place for regulating data-sharing, protecting privacy and challenging excessive surveillance by security authorities? How are these being adhered to, negotiated and/or contested?
-       What tensions have emerged in the UK and the EU in the context of attempts to impose international controls on data-sharing and privacy safeguards?

The seminar will be organized around these key questions and all participants will be able to actively contribute to the debate. In addition to short keynote talks, the seminar will function by means of position statements (which you can find on this blog) and roundtable discussions (a summary of which will be posted on the DATA-PSST website).

Two Roundtables / open discussions
1.     Surveillance and transparency in the international sphere 
2.     Strengths and weaknesses of existing oversight regimes and regulatory mechanisms

Schedule 
10 - 10.15:       Registration
10.15 - 10.30: Summary of previous seminars (Vian Bakir) followed by introduction to today’s seminar (Madeline Carr/Claudia Hillebrand) 
10.30 - 11.00: Peter Mantello and Joseph Connor (10 mins each) 
11.00 - 11.30: Eneken Tikk-Ringas and Rocco Bellanova (10 mins each) 
11.30 - 12.00: Coffee 
12.00 - 1.15:    Roundtable 1: Surveillance and transparency in the international sphere 
1.15 - 2.15:      Lunch 
2.15 - 2.45:      Gilad Rosner (15-20 mins) 
2.45 - 3.15:      Peter Gill and Mark Phythian (10 mins each) 
3.00 - 3.30:      Coffee 
3.30 - 4.30:      Roundtable 2: Strengths and weaknesses of existing oversight regimes and regulatory mechanisms
4.30 - 5:00       Plenary
5.30 - 8:00       DRINKS AND NO HOST DINNER - 29 Park Place.

Location
The seminar will be held at:

Cardiff University
Law Building, Rm 1.29
Museum Avenue, CF10 3AX

You can enter the Law Building either from Park Place or Museum Avenue. It’s a short(ish) walk from Central Station but you can get a train to Cathays Station if you prefer (see map). There is some on street parking available but it’s metered.

Wednesday, February 3, 2016

From Steve Mann: new Veillance article


Here is a Veillance article I wrote that was selected by the editors as a "Feature".

‪I show how Veillance (surveillance or sousveillance) can be sensed and measured using an effect I discovered in my childhood, in which a light source can cause a form of optoelectric feedback in response to veillance.

Thursday, November 19, 2015

UK/EU Public Feeling on Privacy, Security & Surveillance post-Snowden: Academic policy report





Fed up of not knowing what the public think on Privacy, Security & Surveillance, post-Snowden? Confused by contradictory polls? A new policy report by DATA-PSST and DCSS summarises a range of polls and in-depth studies since 2013. It makes observations and recommendations that will be of great interest to anyone legislating or campaigning on Privacy, Security and Surveillance, and wishing to retain public trust.


Is the public prepared to give up privacy for security?


Edward Snowden’s revelations in June 2013 prompted major debates around the topics of privacy, national security, and mass digital surveillance.  Within these debates, the British government and its intelligence agencies regularly invoke British public opinion as:
a)     desiring greater security, and;
b)     probably being prepared to give up privacy to enhance security.

But what does the public actually think on privacy, security and the Snowden leaks? Is the public prepared to give up privacy for security?

Studies consulted


To answer these questions, this report draws on the following studies:
-       The ongoing Digital Citizenship and Surveillance Society Project (DCSS) at Cardiff University into UK public opinion on the Snowden leaks, comprising analysis of opinion polls and in-depth focus groups with different demographics of the public in England and Wales.
-       The published in-depth, participatory study, Surveillance, Privacy and Security (SurPRISE), of 2000 citizens from nine European countries (Austria, Denmark, Germany, Hungary, Italy, Norway, Spain, Switzerland and United Kingdom) on attitudes towards surveillance-oriented security technologies and privacy (Pavone et al. 2015).
-       Published advertising industry studies (opinion polls) on privacy and commercial surveillance.

Synthesising these studies, we provide the following observations and recommendations.


Observations

 

1.    Unlike the UK government, the British public sees bulk data collection as constituting mass surveillance.

2.    The topics of UK state surveillance of digital communications and online privacy matter to the British, and wider EU public. This is confirmed by opinion poll data since 2013 and in-depth studies.
3.    The EU and UK public think some surveillance technologies are useful/effective for combating national security threats, and should be used, but acceptability varies according to whether the surveillance is of communications or bodies, and blanket or targeted. Surveillance of physical bodies (smart CCTV) and targeted surveillance of digital communications (smartphone location tracking) are more accepted than blanket surveillance of digital communications (deep packet inspection).
4.    The EU and UK public think that although certain surveillance technologies are useful/effective for combating national security threats, they compromise human rights and are abused by security agencies. These concerns especially apply to deep packet inspection.
5.    In the UK, those under 60 see UK state surveillance of digital communications as going too far, and an infringement upon the right to privacy. Over 60s do not. This finding is echoed by EU-wide studies.

6.    In the UK, it is younger people & ethnic minorities who are most concerned about lack of transparency & consent when it comes to state surveillance of digital communications.

7.    There are identifiable criteria for what makes security-oriented surveillance technologies acceptable for EU publics. Targeted rather than blanket surveillance is preferred, as are clear communications to citizens about what is going on, with strong regulatory oversight.

8.    All age groups in the UK, especially those over 55, are strongly concerned about commercial surveillance, and increasingly take concrete steps to defend against intrusive behaviour by advertising companies. This suggests that if people could do more about state surveillance, they would.
9.    There are a range of tools and behaviour change open to people to defend against state surveillance.


Recommendations


1.    Given Observation 1, the UK government has more work to do if it wants to persuade the British public that Bulk Data Collection is different to mass digital surveillance.
2.    Given Observation 2, the UK government should take into consideration public views on digital surveillance and privacy.
3.    Given Observation 3, the UK government has a public mandate to use some surveillance technologies for combating national security threats. However this mandate is much weaker for blanket surveillance of digital communications (deep packet inspection) than more targeted surveillance of digital communications (smartphone location tracking) or surveillance of physical bodies (Smart CCTV).
4.    Observation 4 shows that the UK government has more work to do if it wants to persuade the British public that its security agencies do not abuse their surveillance powers, especially concerning deep packet inspection. Observations 5 and 6 show that the least persuaded are those under 60 and ethnic minorities.
5.    Given observation 7, governments seeking a popular mandate for digital surveillance should ensure that such surveillance is targeted rather than blanket, accompanied by strong regulatory oversight and clear communications to citizens about what is going on.
6.    Given public concerns over blanket digital surveillance, observation 8 which shows people taking increasing action against commercial digital surveillance, and observation 9 which shows that there are things people can use and do to mitigate state surveillance, this suggests that unless the UK government provides a digital surveillance architecture that is acceptable to its people, it is quite possible that people will refuse this surveillance.

 
See Vian Bakir, Jonathan Cable, Lina Dencik, Arne Hintz, Andrew McStay. (November 2015).  Public Feeling on Privacy, Security and Surveillance: A Report by DATA-PSST and DCSS. ESRC