Press release: Privacy International fights to unearth police use of intrusive mobile phone monitoring technology

• Privacy International, represented by Liberty, is challenging court decision allowing police to ‘neither confirm nor deny’ they hold certain information on IMSI catchers
• Privacy rights organisation has fought for almost two years for public disclosure of records on how UK police purchase and use mobile phone surveillance technology

Privacy International has today filed an appeal challenging police forces’ refusal to disclose information on their purchase and use of IMSI catchers.

IMSI catchers are surveillance tools which mimic mobile phone towers, tricking phones into connecting with them and revealing personal information. Some IMSI catchers can also intercept data, including the content of calls, text messages and internet traffic, and even edit your communications or block your service.

An IMSI catcher is able to gather data about everyone’s phone in its vicinity.

The technology could be used at public events such as demonstrations to help identify everyone in attendance.

In 2016 Privacy International submitted freedom of information requests to police forces identified by media collective The Bristol Cable as having purchased the monitoring tools.

Each force refused every category of the request on grounds that they could “neither confirm nor deny” (NCND) whether they held the information.

Represented by human rights campaign organisation Liberty, Privacy International is challenging the police forces’ reliance on a ‘neither confirm nor deny’ position — which has allowed the secret purchase and deployment of this intrusive and indiscriminate surveillance technology for years.

The police’s refusal to disclose this information means the public remains in the dark about the implications for privacy rights, free speech and freedom of association.

The forces’ stance is supported by the Information Commissioner’s Office. Privacy International and Liberty argue it is a violation of the Freedom of Information Act — and have today appealed to the First-tier Tribunal.

Scarlet Kim, Legal Officer for Privacy International said:

“For years, the police forces have relied on a knee-jerk ‘neither confirm nor deny’ reaction to requests for information about their purchase and use of IMSI catchers, even as reports continue to trickle out that they have spent hundreds of thousands of pounds on this technology. This secrecy is all the more troubling given the indiscriminate manner in which IMSI catchers operate. These tools are particularly ripe for abuse when used at public gatherings, such as protests, where the government can easily collect data about all those attending.

“The purpose of the Freedom of Information Act is to empower the public to seek this very type of information — information about government activity that impacts the rights and lives of millions across the country. Instead, the police forces have attempted to strip it of its very meaning. We hope that the First-tier Tribunal will finally permit us to shed much-needed light on police use of this intrusive surveillance technology.”

Megan Goulding, Lawyer for Liberty and Privacy International’s solicitor said:

“We welcome the Tribunal’s examination of an inept system where public bodies are free to ‘neither confirm nor deny’ they hold significant information with next to no rigorous scrutiny of their position.

“It is vital the public is able to access information on the indiscriminate surveillance technology used against us. We hope the Tribunal acknowledges the threat to our rights and encourages a more diligent approach from the Information Commissioner’s Office.”

Background

• Privacy International has been fighting for nearly two years for the disclosure of information related to UK police purchase and use of IMSI catchers.
   
• In November 2016, the privacy rights organisation sent freedom of information requests to Avon & Somerset Police, the Metropolitan Police Service, South Yorkshire Police, Staffordshire Police, Warwickshire Police, West Mercia Police and West Midlands Police regarding their use and regulation of IMSI catchers. Each force responded to say it could ‘neither confirm nor deny’ it held the requested information.
   
• In July 2018, in an appeal to the Information Commissioner’s Office (ICO), Privacy International successfully argued that police forces cannot ‘neither confirm nor deny’ that they hold information in relation to legislation, codes of practice, or brochures or other promotional materials related to the surveillance tools.
   
• However, the ICO said police could ‘neither confirm nor deny’ that they hold information for several other categories of information — including policies or other guidance related to the regulation of IMSI catchers as well as contracts and other records related to the purchase of this technology.
   
• Privacy International and Liberty argue that this decision violates the Freedom of Information Act and are seeking disclosure of these records.
   
• The organisations argue the police should not be allowed to hide behind ‘neither confirm nor deny’ in order to keep the public in the dark about the purchase and use of this intrusive and indiscriminate mobile phone surveillance technology.
   
• The public has a right to know how its funds are being expended and how police surveillance may seriously interfere with their civil liberties and human rights. Without the information requested by Privacy International, the public cannot properly debate, scrutinise and hold the police accountable for their actions.

Ends

Media enquiries: [email protected] / 020 3422 4321

Notes to Editors

UK Police and IMSI Catchers:

· IMSI catchers are intrusive pieces of surveillance technology that mimic mobile phone base stations in order to trick all phones within a particular radius to connect to them. Once connected to an IMSI catcher, mobile phones reveal their location and identifying information. Some IMSI catchers can intercept or even manipulate communications and data, by editing or re-routing them. All of this happens without the mobile phone user’s knowledge.

· IMSI catchers are indiscriminate surveillance tools, affecting all mobile phones within their radius. They can be used to identify and track who is attending a public event, such as a political demonstration.

· One of the earliest reports of UK police use of IMSI catchers dates back to 2011, when The Guardian published an article indicating that the Metropolitan Police Service (Met) had acquired an IMSI catcher from the Leeds-based company Datong plc. Over the next few years, other media reports suggested the use of IMSI catchers throughout London.

· In October 2016, The Bristol Cable published an article citing to evidence revealing that, in addition to the Met, six other police forces have purchased IMSI catchers (Avon & Somerset, South Yorkshire, Staffordshire, Warwickshire, West Mercia and West Midlands). Purchase records indicated that the Met had spent over £1 million on IMSI catchers in 2015. They further revealed that in a similar period, Avon and Somerset Police spent nearly £170,000 and South Yorkshire Police spent £144,000 on IMSI catchers.