GarethNiblett,BCSISSGLegalDay,22ndJanuary2010

Iamnotalawyer,butIknowenoughtowanttocovermyself…Anyinformationprovidedissimplymyview,whichcomesfrommanyyearsexperiencewithRIPAandrelatedareas,fromtheoriginaldraftBillthroughtobeingbeingresponsibleforlawfulintercept,dataretentionanddisclosureforvoice&dataservices.Itmaydifferfromtheviewsandexperienceofothers.Alotofinformationhasbeenleftout.Figuresarefrommanysources,maybeoutofdate,rounded,deliberatelyimprecise,orsimplywrong.

 PartI,ChapterI  IntelligenceAgencies,withNTACascentralfocus

 PartI,ChapterII Around650PublicAuthorities LargestcontingentisPolice&Intelligence▪ 80Forces,LawEnforcement&IntelligenceAgencies▪ FromAvon&SomersettoWiltshire;▪ SOCA,CEOP,PeCU,SO15,SFO,HMRC,RAF,MoD

▪ PoliceSPoCs–600(500Internettrained)▪ ABCSPoCs–20

 PartI,ChapterI Rawvoiceordatainreal‐time

 PartI,ChapterII

 Split80/20–TelephonyvsInternet

Have Want Amount

PhoneNumber Name&Address 80%

Address Name&Number

20%IP/EmailAddress Name,Address&Number

Name&Address/Number ItemisedBilling

Name&Address/Number Miscellaneous

 PartI,ChapterI▪  InterestsofNationalSecurity▪ Preventionordetectionofseriouscrime▪ SafeguardtheeconomicwellbeingoftheUK

 PartI,ChapterIIRIPA Purpose Amount

22(2)a InterestsofNationalSecurity 40%

22(2)b Preventing/DetectingCrime 50%

22(2)c InterestsofUKEconomy <1%

22(2)d InterestsofPublicSafety <1%

22(2)e ProtectingPublicHealth <1%

22(2)f AssessingorCollectingTax 7%

22(2)g PreventingDeathorInjury 2%

22(2)h OrderbySecretaryofState <1%

 PartI,ChapterI WarrantsignedbyHomeSecretary,ordesignate,isservedonaCommunicationsServiceProvider(CSP);advancenotice&feasibilitycheckusual.▪ Canutiliseastandingcapabilityorrequirerecipienttoco‐operateindeployinginterceptinatimelyfashion.

 PartI,ChapterII ARIPANoticeauthorisedbyaDesignatedPersonissentbyanAccreditedSinglePointofContact(SPoC)totheCSP;exceptforGrade1(verbal).

 PartI,ChapterII

0%10%20%30%40%50%60%70%80%

Grade1Grade2

Grade3

 PartI,ChapterII

  IntelligenceuseofRIPA

 PartI,ChapterII

 Questionswelcome,eithernoworlater.

 Moreofme:▪ Blog–www.infosecmaven.org▪ Twitter–www.twitter.com/INFOSEC_Maven▪ LinkedIn–uk.linkedin.com/in/garethniblett▪  Ifyouwantdirectcontactdetails,pleaseask…