The UK’s domestic-facing intelligence agency, MI5, today admitted that it captured and read Privacy International’s private data as part of its Bulk Communications Data (BCD) and Bulk Personal Datasets (BPD) programmes, which hoover up massive amounts of the public’s data. In further startling legal disclosures, all three of the UK’s primary intelligence agencies – GCHQ, MI5, and MI6 – also admitted that they unlawfully gathered data about Privacy International or its staff.
The intelligence agencies have repeatedly denied that their BPD and BCD programmes are tantamount to mass surveillance of people not suspected of any wrongdoing. Documents published today demonstrate that Privacy International, an international NGO, has been caught up in MI5’s investigations because its data was part of the UK intelligence agencies vast databases.
These revelations came during the course of Privacy International’s challenge to the BPD and BCD powers, which is currently pending before the Investigatory Powers Tribunal (IPT), a court which is set up to hear claims against the UK intelligence services. The IPT is required to inquire into any unlawful activity by the UK intelligence agencies, and to provide a summary of such activity to any claimant that comes before it.
Today’s news comes in the wake of last week’s judgment by the European Court of Human Rights which found another of the UK’s mass surveillance programmes – the mass interception of internet communications – to be unlawful. A major aspect of the Court’s criticism of the mass interception programmes was the lack of oversight and safeguards surrounding how the data is collected, searched, and accessed. Today’s revelations highlight the danger that can arise from such a lack of safeguards, the absence of which has allowed an intelligence agency to extract data about a human rights charity from that massive trove.
As a result, Privacy International has today written to the UK’s Home Secretary, Sajid Javid MP, to request urgent action. In particular, Privacy International is asking that he confirms what changes will be made to the Investigatory Powers Act (more commonly known as the Snoopers’ Charter) provisions as a result of last week’s ECHR judgment. Privacy International is also calling on MI5 to provide a full explanation of the circumstances behind their surveillance of Privacy International.
Caroline Wilson Palow, General Counsel Privacy International said:
“Today’s revelations are troubling for a whole host of reasons. The UK intelligence agencies’ bulk collection of communications data and personal data has been shown to be as vast we have always imagined – it sweeps in almost everyone, including human rights organisations like Privacy International.
“Not only was Privacy International caught up in the surveillance dragnet, its data was actually examined by agents from the UK’s domestic-facing intelligence agency – MI5. We do not know why MI5 reviewed Privacy International’s data, but the fact that it happened at all should raise serious questions for all of us. Should a domestic intelligence agency charged with protecting national security be spying on a human rights organisation based in London? Shouldn’t such spying, if permitted at all, be subject to the strictest of safeguards? In an era when human rights and democracy are under threat all over the world, the UK should demonstrate leadership by protecting human rights defenders.
“Privacy International therefore urges the UK government to critically examine its mass surveillance powers, as enshrined in the Investigatory Powers Act 2016. They have now been called into question twice in two weeks – by today’s revelations and by last week’s judgment from the European Court of Human Rights. The UK should be a beacon of light in a world where democracy is under threat. Its refusal to curtail the mass surveillance powers of its intelligence agencies casts a shadow over all of us.”
– ENDS –