Regulation of Investigatory Powers Act 2000
From Wikipedia, the free encyclopedia
Regulation of Investigatory Powers Act 2000 (RIP or RIPA) is a United Kingdom law covering the interception of communications. It was introduced to take account of technological change such as the growth of the Internet and strong encryption. It also puts other techniques for monitoring citizens on a statutory footing. The long title of the Act is:
- An Act to make provision for and about the interception of communications, the acquisition and disclosure of data relating to communications, the carrying out of surveillance, the use of covert human intelligence sources and the acquisition of the means by which electronic data protected by encryption or passwords may be decrypted or accessed; to provide for the establishment of a tribunal with jurisdiction in relation to those matters, to entries on and interferences with property or with wireless telegraphy and to the carrying out of their functions by the Security Service, the Secret Intelligence Service and the Government Communications Headquarters; and for connected purposes.
Contents |
[edit] Controversy
Critics claim that the spectres of terrorism, internet crime and paedophilia were used to push the act through and there was little substantive debate in the House of Commons. The act still has numerous critics, most regarding the RIPA regulations as dangerously excessive and a grave threat to civil liberties in the UK. Critics such as Keith Vaz, the chairman of the House of Commons home affairs committee, have expressed concern that the act is being abused for "petty and vindictive" cases.[1] Similarly, Brian Binley, MP for Northampton South has urged councils to stop using the law, accusing them of acting like comic strip detective Dick Tracy[1].
In April 2008, it became known that the act was used by council bureaucrats in Dorset to put three young children and their parents under surveillance at home and in their daily movements to check whether they lived in a particular school catchment area[2][3]. The same council used RIPA to put fishermen under covert surveillance[2]. Other councils in the UK have invoked RIPA for undercover operations against dog fouling and fly-tipping.[1]According to the Daily Telegraph newspaper, local councils are conducting over a thousand RIPA-based covert surveillance operations every month for such petty offences as under-age smoking and breaches of planning regulations [3]. David Smith, deputy commissioner at the ICO (Information Commissioner's Office) has stated that he is concerned about the surveillance which has taken place in Poole[4].
Especially contentious was Part III of the Act which (under some circumstances) might require persons to supply the cryptographic key to a duly authorised person if the actual encrypted traffic was not supplied. Failure to disclose encrypted traffic (or if appropriate the relevant key) would be a criminal offence, with a maximum penalty of two years in jail. Using the mechanism of secondary legislation, some parts of the Act required activation by a ministerial order before attaining legal force. Such orders have been made in respect of the relevant sections of Part I and Part II of the RIP Act and Part III. The latter became active in October 2007[4]. The first case where the powers were used was against animal rights activists in November 2007. [5] It has been suggested that the "plausible deniability" features in free software such as FreeOTFE, TrueCrypt and BestCrypt will make the task of investigations featuring RIPA much more difficult.
Critics claim that the provisions of Part III are too complex, and possibly unworkable, and that this might be a reason for government reluctance to activate this part of the legislation.[citation needed] Another possibility is that the government wishes to have the powers in reserve, such that if they were deemed necessary they could be implemented more quickly and easily than if new primary legislation were required.[citation needed] Another possibility is that relevant government agencies might reasonably believe that it is easier to use pre-existing judicial procedures to compel production of evidence rather than the more cumbersome and difficult procedures that ultimately found their way into Part III.[citation needed]
Another objection is that the Act requires sufficiently large UK Internet Service Providers to install technical systems to assist law enforcement agencies with interception activity. Although this equipment must be installed at the ISPs' expense, RIPA does provide that Parliament will examine appropriate funding for ISPs if the cost burden became unfairly high.
RIPA can be invoked by any certain government officials specified in the Act on the grounds of national security, preventing or detecting crime, preventing disorder, public safety, protecting public health, or in the interests of the economic well-being of the United Kingdom.
The Regulation of Investigatory Powers (RIP) Bill was introduced in the House of Commons on February 9, 2000 and completed its Parliamentary passage on July 26. The Bill received Royal Assent on July 28.
In September 2003, Home Secretary David Blunkett announced wide-ranging extensions to the list of those entitled to see information collected under the RIPA. The list now includes jobcentres, local councils, and the Chief Inspector of Schools. Civil rights and privacy campaigners have dubbed these extensions a "snoopers' charter". At the passing of the act only nine organisations (including the police and security services) were allowed to invoke it, but as of 2008, it was 792 organizations (including 474 councils).[1]
[edit] Summary
The RIPA allows the government to access a person's electronic communications in a very unrestricted manner, thus infringing in the privacy of their correspondance in a manner many would not tolerate regarding their postal communications. The act:
- Enables the government to demand that an ISP provides access to a customer's communications in secret;
- Enables mass surveillance of communications in transit;
- Enables the government to demand ISPs fit equipment to facilitate surveillance;
- Enables the government to demand that someone hands over keys to protected information;
- Allows the government to monitor people's internet activities;
- Prevents the existence of interception warrants and any data collected with them from being revealed in court
[edit] References
- ^ a b c Gordon Rayner and Richard Alleyne: Council spy cases hit 1,000 a month. The Daily Telegraph, April 14, 2008
- ^ Family's shock at council spying, BBC 11th April 2008
- ^ Council admits spying on family, BBC 11th April 2008
- ^ "Contested UK encryption disclosure law takes effect", PC World
- ^ BBC NEWS | Technology | Campaigners hit by decryption law
[edit] See also
- Mass surveillance
- Rubber-hose cryptanalysis
- Plausible deniability
- United States v. Boucher, a case before the courts on whether a criminal defendant in the U.S. can be forced to reveal his encryption passphrase.
[edit] External links
- Official text of the statute as amended and in force today within the United Kingdom, from the UK Statute Law Database
- Text of the Regulation of Investigatory Powers Act 2000
- Regulation of Investigatory Powers Information Centre (against RIP)
- Parliament "didn't understand RIP Act"
- Articles on aspects of RIPA and Surveillance Law
- BBC News Website (April 2008) - RIPA Spy law 'used in dog fouling war'