Three of Britain’s four mobile phone networks – EE, Vodafone and Three – are providing call records to police forces across the UK on request at the click of a mouse, according to a new investigation.
The data is handed over without a warrant or any other safeguards under the Regulation of Investigatory Powers Act (RIPA), which was introduced in 2000. RIPA is also the enabling act that allows GCHQ to conduct mass surveillance of people’s web activity.
The law has called into question after police used it to identify journalists’ sources in the story over former Liberal Democrat MP Chris Huhne’s speeding fine.
Mobile operators are legally obliged to store one year of call records of all of their customers, which police forces and other agencies can then access without a warrant under RIPA. The proposed Communications Data Bill, which is an implementation of a 2006 EU directive, would extend this to internet activity and, therefore, make people’s web browsing available to police under RIPA without a warrant.
The Communications Data Bill was put forward by Home Secretary Theresa May at the Conservative Party conference in September as an essential tool in the “war against terrorism” – although attempts to introduce it have already been twice defeated in the House of Commons after vociferous protests by privacy campaigners.
Documents from software providers and interviews with mobile phone company staff by The Guardian newspaper, however, have revealed how easy it has become for police to access any phone record held by EE, Vodafone or Three. The “vast majority” of records demand by the police, according to The Guardian, are delivered via an automated system without staff even needing to vet the requests.