Mario's Cyberspace Station: AN APPRAISAL OF THE TECHNOLOGIES OF POLITICAL CONTROL

Intelligence and Counterintelligence

Political Control

1. INTRODUCTION

This Study represents a summarised version of an Interim Study, 'An Appraisal of the Technology of Political Control' (PE 166.499), referred to throughout this document as the Interim Study, prepared by the Omega Foundation in Manchester and presented to the STOA Panel at its meeting of 18 December 1997 and to the Committee on Civil Liberties and Internal Affairs on 27 January 1998.
When it became known that the issue of electronic surveillance was to be on the agenda of the September 1998 part-session of the European Parliament, the Omega Foundation was requested to prepare an updated Executive Summary of the Interim Study for use as a background document. The updated Executive Summary covers the various areas of the subject of technologies of political control dealt with in the Interim Study. However, the document in its present form concerns only the specific topic of electronic surveillance. The full version alone contains the footnotes and bilbiography.
The Interim Study aroused great interest and the resultant high-profile press comment throughout the European Union and beyond indicates the level of public concern about many of the innovations detailed by the Study. This updated Executive Summary is framed by the same key objectives as the Interim Study, namely:-
(i) To provide Members of the European Parliament with a succinct reference guide to recent advances in the technology of political control;
(ii) To identify and describe the current state of the art of the most salient developments, further clarifying and updating the areas of the Interim Study which have aroused the greatest public concern and comment;
(iii) To present MEP's with an account of current trends both within Europe and Worldwide;
(iv) To suggest policy options covering regulatory strategies for the future democratic control and management of this technology;
(v) To provide some further succinct background material to inform the Parliament's response to the proposed declaration by the Commission on electronic evesdropping which has been put on the agenda for the plenary session of the European Parliament, on Wednesday 16 September 1998.

2. DEVELOPMENTS IN SURVEILLANCE TECHNOLOGY

Surveillance technology can be defined as devices or systems which can monitor, track and assess the movements of individuals, their property and other assets. Much of this technology is used to track the activities of dissidents, human rights activists, journalists, student leaders, minorities, trade union leaders and political opponents. A huge range of surveillance technologies has evolved, including the night vision goggles; parabolic microphones to detect conversations over a kilometre away; laser versions, can pick up any conversation from a closed window in line of sight; the Danish Jai stroboscopic camera can take hundreds of pictures in a matter of seconds and individually photograph all the participants in a demonstration or March; and the automatic vehicle recognition systems can tracks cars around a city via a Geographic Information System of maps.
New technologies which were originally conceived for the Defence and Intelligence sectors have after the cold war rapidly spread into the law enforcement and private sectors. It is one of the areas of technological advance, where outdated regulations have not kept pace wit attitude to CCTV camera networks varies greatly in the European Union, from the position in Denmark where such cameras are banned by law to the position in the UK, where many hundreds of CCTV networks exist. Nevertheless, a common position on the status of such systems where they exist in relation to data protection principles should apply in general. A specific consideration is the legal status of admissibility as evidence, of digital material such as those taken by the more advanced CCTV systems. Much of this will fall within data protection legislation if the material gathered can be searched eg by car number plate or by time. Given that material from such systems can be seemlessly edited, the European Data Protection Directive legislation needs to be implemented through primary legislation which clarifies the law as it applies to CCTV, to avoid confusion amongst both CCTV data controllers as well as citizens as data subjects. Primary legislation will make it possible to extend the impact of the Directive to areas of activity that do not fall within community law. Articles 3 and 13 of the Directive should not create a blanket covering the use of CCTV in every circumstance in a domestic context.
A proper code of practice such as that promoted by the UK based Local Government Information Unit (LGIU, 1996) should be extended to absorb best practice from all EU Member States to cover the use of all CCTV surveillance schemes operating in public spaces and especially in residential areas. As a first step it is suggested that the Civil Liberties Committee formally consider examining the practice and control of CCTV throughout the member States with a view to establishing what elements of the various codes of practice could be adopted for a unified code and an enforceable legal framework covering enforcement and civil liberties protection and redress.

2.2 Algorithmic Surveillance Sysytems

The revolution in urban surveillance will reach the next generation of control once reliable face recognition comes in. It will initially be introduced at stationary locations, like turnstiles, customs points, security gateways etc. to enable a standard full face recognition to take place. The Interim Study predicted that in the early part of the 21st. century, facial recognition on CCTV will be a reality and those countries with CCTV infrastructures will view such technology as a natural add-on. In fact, an American company Software and Systems has trialed a system in London which can scan crowds and match faces against a database of images held in a remote computer. We are at the beginning of a revolution in 'algorithmic surveillance' - effectively data analysis via complex algoritms which enable automatic recognition and tracking. Such automation not only widens the surveillance net, it narrows the mesh.(See Norris, C., et. al, 1998)
Similarly Vehicle Recognition Systems have been developed which can identify a car number plate then track the car around a city using a computerised geographic information system. Such systems are now commercially available, for example, the Talon system introduced in 1994 by UK company Racal at a price of £2000 per unit. The system is trained to recognise number plates based on neural network technology developed by Cambridge Neurodynamics, and can see both night and day. Initially it has been used for traffic monitoring but its function has been adapted in recent years to cover security surveillance and has been incorporated in the "ring of steel" around London. The system can then record all the vehicles that entered or left the cordon on a particular day.
It is important to set clear guidelines and codes of practice for such technologi telecommunications traffic. In recent years the widespread practice of illegal and legal interception of communications and the planting of 'bugs' has been an issue in many European States. However, planting illegal bugs is yesterday's technology. Modern snoopers can buy specially adapted lap top computers, and simply tune in to all the mobile phones active in the area by cursoring down to their number. The machine will even search for numbers 'of interest' to see if they are active. However, these bugs and taps pale into insignificance next to the national and international state run interceptions networks.

2.4 National & International Communications Interceptions Networks

The Interim Study set out in detail, the global surveillance systems which facilitate the mass supervision of all telecommunications including telephone, email and fax transmissions of private citizens, politicians, trade unionists and companies alike. There has been a political shift in targeting in recent years. Instead of investigating crime (which is reactive) law enforcement agencies are increasingly tracking certain social classes and races of people living in red-lined areas before crime is committed - a form of pre-emptive policing deemed data-veillance which is based on military models of gathering huge quantities of low grade intelligence.
Without encryption, modern communications systems are virtually transparent to the advanced interceptions equipment which can be used to listen in. The Interim Study also explained how mobile phones have inbuilt monitoring and tagging dimensions which can be accessed by police and intelligence agencies. For example the digital technology required to pinpoint mobile phone users for incoming calls, means that all mobile phone users in a country when activated, are mini-tracking devices, giving their owners whereabouts at any time and stored in the company's computer . For example Swiss Police have secretly tracked the whereabouts of mobile phone users from the computer of the service provider Swisscom, which according SonntagsZeitung had stored movements of more than a milion subscribers down to a few hundred metres, and going back at least half a year.
However, of all the developments covered in the Interim Study, the section covering some of the constitutional and legal issues raised by the USA's National Security Agency's access and facility to intercept all European telecommunications caused the most concern. Whilst no-one denied the role of such networks in anti terrorist operations and countering illegal drug, money laudering and illicit arms deals, alarm was expressed about the scale of the foreign interceptions network identified in the Study and whether existing legislation, data protection and privacy safeguards in the Member States were sufficient to protect the confidentiality between EU citizens, corporations and those with third countries.
Since there has been a certain degree of confusion in subsequent press reports, it is worth clarifying some of the issues surrounding transatlantic electronic surveillance and providing a short history & update on developments since the Interim Study was published in January 1998. There are essentially two separate system, namely:
(i) The UK/USA system comprising the activities of military intelligence agencies such as NSA-CIA in the USA subsuming GCHQ & MI6 in the UK operating a system known as ECHELON;
(ii) The EU-FBI system which is linkeding up various law enforcement agencies such as the FBI, police, customs, immigration and internal security;
As t straight to the requesting country. Whilst there is much information gathered about potential terrorists, there is a lot of economic intelligence, notably intensive monitoring of all the countries participating in the GATT negotiations. But Hager found that by far the main priorities of this system continued to be military and political intelligence applicable to their wider interests.
Hager quotes from "highly placed intelligence operatives" who spoke to the Observer in London. "We feel we can no longer remain silent regarding that which we regard to be gross malpractice and negligence within the establishment in which we operate." They gave as examples. GCHQ interception of three charities, including Amnesty International and Christian Aid. "At any time GCHQ is able to home in on their communications for a routine target request," the GCHQ source said. In the case of phone taps the procedure is known as Mantis. With telexes its called Mayfly. By keying in a code relating to third world aid, the source was able to demonstrate telex "fixes" on the three organisations. With no system of accountability, it is difficult to discover what criteria determine who is not a target.
Indeed since the Interim Study was published, journalists have alleged that ECHELON has benefited US companies involved in arms deals, strengthened Washington's position in crucial World Trade organisation talks with Europe during a 1995 dispute with Japan over car part exports. According to the Financial Mail On Sunday, "key words identified by US experts include the names of inter-governmental trade organisations and business consortia bidding against US companies. The word 'block' is on the list to identify communications about offshore oil in area where the seabed has yet to be divided up into exploration blocks"..."It has also been suggested that in 1990 the US broke into secret negotiations and persuaded Indonesia that US giant AT & T be included in a multi-billion dollar telecoms deal that at one point was going entirely to Japan's NEC.
The Sunday Times (11 May 1998) reported that early on the radomes at Menwith Hill (NSA station F83) In North Yorkshire UK, were given the task of intercepting international leased carrrier (ILC) traffic - essentially, ordinary commercial communications. Its staff have grown from 400 in the 1980s to more than 1400 now with a further 370 staff from the MoD. The Sunday Times also reported allegations that converstaions between the German company Volkswagen and General Motors were intercepted and the French have complained that Thompson-CSF, the French electronics company, lost a $1.4 billion deal to supply Brazil with a radar system because the Americans intercepted details of the negotions and passed them on to US company Raytheon, which subsequently won the contract. Another claim is that Airbus Industrie lost a contract worth $1 billion to Boeing and McDonnel Douglas because information was intercepted by American spying. Other newspapers such as Liberation 21 April 1998) and Il Mondo (20 March 1998, identify the network as an Anglo-Saxon Spy network because of the UK-USA axis. Privacy International goes further. Whilst recognising that 'strictly speaking, neither the Commission nor the European Parliament have a mandate to regulate or intervene in security matters...they do have a responsibility is harmonised throughout the Union.
According to Privacy International, the UK is likely to find its 'Special relationship' ties fall foul of its Maastricht obligations since Title V of Maastricht requires that "Member States shall inform and consult one another within the Council on any matter of foreign and security policy of general interest in order to ensure that their combined influence is exerted as effectivelly as possible by means of concerted and convergent action." Yet under the terms of the Special relationship, Britain cannot engage in open consultatuion wi outlined in a memorandum of understanding, signed by EU states in 1995.(ENFOPOL 112 10037/95 25.10.95) which remains classified. According to a Guardian report (25.2.97) it reflects concern among European Intelligence agencies that modern technology will prevent them from tapping private communications. "EU countries it says, should agree on "international interception standards set at a level that would ensure encoding or scrambled words can be broken down by government agencies." Official reports say that the EU governments agreed to co- operate closely with the FBI in Washington. Yet earlier minutes of these meetings suggest that the original initiative came from Washington. According to Statewatch, network and service providers in the EU will be obliged to install "tappable" systems and to place under surveillance any person or group when served with an interception order.
These plans have never been referred to any European government for scrutiny, nor to the Civil Liberties Committee of the European Parliament, despite the clear civil liberties issues raised by such an unaccountable system. The decision to go ahead was simply agreed in secret by "written procedure" through an exchange of telexes between the 15 EU governments. We are told by Statewatch the EU-FBI Global surveillance plan was now being developed "outside the third pillar." In practical terms this means that the plan is being developed by a group of twenty countries - the then 15 EU member countries plus the USA, Australia, Canada, Norway and New Zealand. This group of 20 is not accountable through the Council of Justice and Home Affairs Ministers or to the European Parliament or national parliaments. Nothing is said about finance of this system but a report produced by the German government estimates that the mobile phone part of the package alone will cost 4 billion D-marks.
Statewatch concludes that "It is the interface of the ECHELON system and its potential development on phone calls combined with the standardisation of "tappable communications centres and equipment being sponsored by the EU and the USA which presents a truly global threat over which there are no legal or democratic controls."(Press release 25.2.97) In many respects what we are witnessing here are meetings of operatives of a new global military-intelligence state. It is very difficult for anyone to get a full picture of what is being decided at the executive meetings setting this 'Transatlantic agenda.' Whilst Statewatch won a ruling from the Ombudsman for access on the grounds that the Council of Ministers 'misapplied the code of access', for the time being such access to the agendas have been denied. Without such access, we are left with 'black box decision making'. The eloquence of the unprecedented Commission statement on Echelon and Transatlantic relations scheduled for the 16th. of September, is likely to be as much about what is left out as it is about what is said for public consumption. Members of the European Parliament may wish to consider the following policy options:-

2.5 POLICY OPTIONS

(i) That a more detailed series of studies should be commissioned on the social, political commercial and constitutional implications of the global electronic surveillance networks outlined in this Study, with a view to holding a series of expert hearings to inform future EU civil liberties policy. These studies might cover:-

The consitutional issues raised by the facility of the US National Security Agency (NSA) to intercept all European telecommunications, particularly those legal commitments made by member States in regard to the Maastricht Treaty and the whole question electronic bugging and tapping devices to private citizens and companies, might be further regulated, so that their sale is governed by legal permission rather than self regulation?
How the use of telephone interception by Member states could be subject to procedures of public accountability referred to in (a) above? (e.g. before any telephone interception takes place a warrant should be obtained in a manner prescribed by the relevant parliament. In most cases, law enforcement agencies will not be permitted to self-authorise interception except in the most unusual of circumstances which should be reported back to the authorising authority at the earliest opportunity).
How technologies facilitating the automatic profiling and pattern analysis of telephone calls to establish friendship and contact networks might be subject to the same legal requirements as those for telephone interception and reported to the relevant Member State parliament?;.
The commission of a Study examining what constitutes best practice and control of CCTV throughout the member States with a view to establishing what elements of the various codes of practice could be adopted for a unified code and a legal framework covering enforcement and civil liberties protection and redress.

(v) Setting up procedural mechanisms whereby relevant committees of the European Parliament considering proposals for technologies which have civil liberties implications (e.g. the Telecommunications Committee) in regard to surveillance, should be required to forward all relevant policy proposals and reports to the Civil Liberties Committee for their observations in advance of any political or financial decisions on deployment being taken.
(vi) Setting up Agreements between Member States Agreement whereby annual statistics on interception should be reported to each member states' parliament in a standard and consistent format. These statistics should provide comprehensive details of the actual number of communication devices intercepted and data should be not be aggregated. (To avoid the statistics only identifying the number of warrants, issued whereas organisations under surveillance may have hundreds of members, all of whose phones may be intercepted).

(1) Common Position EC No/95, Adopted by the Council on 20 February 1995, Directive 95/EC of the European Parliament and the Council, 'On the Protection of Individuals With regard to the Processing of Personal Data and on the Free Movement of Such Data'.
(2) Commission Statement - Transatlantic relations/Echelon System. Transatlantic relations following 18 May EU-US Summit and the use of monitoring techniques in the field of communications.