What is U.K's IP Act and how will it affect you?

[mr.robot]

What more does U.K. want to hear on indirect communication channels as she already has access to direct channels...

In December 2016, politicians in the UK passed the Investigatory Powers Act. The legislation has been hailed as the biggest reform of the country's surveillance years for decades but privacy experts have heavily criticised measures it contains.

Liberty. This follows the European Court of Justice's December ruling that bulk data collection is unlawful.

Despite the legal challenge, the law currently remains a piece of legislation. Not all of the provisions within the Act have been implemented yet, but here's an overview of what is contained within the law.

Leaked documents reveal how the government will demand your data under the Snooper's Charter

Leaked documents reveal how the government will demand your data under the Snooper's Charter
By MATT BURGESS
After more than 12 months of debate, jostling and a healthy dose of criticism, the United Kingdom's new surveillance regime is officially becoming law.

It was first introduced by then-Home Secretary Theresa May in November 2015 and has often been referred to as the Snooper's Charter.

MI6, MI5 and GCHQ 'unlawfully collected private data for 10 years'

MI6, MI5 and GCHQ 'unlawfully collected private data for 10 years'

• Privacy
• 17 Oct 2016

24-hour drone squads are ready to police Devon and Cornwall

24-hour drone squads are ready to police Devon and Cornwall
By LIAT CLARK
The Home Office has said the provisions listed within it are needed to help protect the country's national security and give more oversight than ever before. While civil rights groups and those in opposition to the powers say it is intrusive and draconian.

Ahead of its Royal Assent in December 2016, home secretary Amber Rudd said: “This Government is clear that, at a time of heightened security threat, it is essential our law enforcement, security and intelligence services have the powers they need to keep people safe.

“The internet presents new opportunities for terrorists and we must ensure we have the capabilities to confront this challenge. But it is also right that these powers are subject to strict safeguards and rigorous oversight.

“The Investigatory Powers Act is world-leading legislation that provides unprecedented transparency and substantial privacy protection.

“I want to pay tribute to the independent reviewers, organisations, and Parliamentarians of all parties for their rigorous scrutiny of this important law which is vital for the safety and security of our families, communities and country.”

Following the Bill passing both the Lords and Commons, however, there was a backlash over its measures. More than 100,000 people have signed an online petition calling for it to be repealed.

Facebook has banned developers from using data for surveillance

Facebook has banned developers from using data for surveillance
By LIAT CLARK
"This is an absolute disgrace to both privacy and freedom and needs to stop," the petition created by Tom Skillinger says. "It has only made it this far due to it being snuck past the population in relative secrecy. It isn't too late. We can fix this before the UK is turned into a dystopian surveillance state."

And following today's news about the Royal Assent, executive director of the Open Rights Group, Jim Killock, said: “Amber Rudd says the Investigatory Powers Act is world-leading legislation. She is right, it is one of the most extreme surveillance laws ever passed in a democracy.

“Its impact will be felt beyond the UK as other countries, including authoritarian regimes with poor human rights records, will use this law to justify their own intrusive surveillance regimes. “Theresa May has finally got her snoopers’ charter and democracy in the UK is the worse for it.”

More recently, in a rare public speech, the chief of MI6 has said new surveillance laws have provided British intelligence services with the legality it needs to battle the “existential threat” brought by data and the internet. But that MI6 must never “undermine the values we defend”.

Body cams are being trialled in UK schools to keep an eye on students

Body cams are being trialled in UK schools to keep an eye on students
By ALEXANDRA SIMON-LEWIS
Alex Younger said the “checks and balances” the law provides, “including a double-lock of Ministerial and independent judicial authorisation for the most intrusive activities” are vital “as a means of ensuring your confidence, even as our activities remain secret”.

Here's a reminder of what the legislation includes:

Hacking power
For the first time, security services will be able to hack into computers, networks, mobile devices, servers and more under the proposed plans. The practice is known as equipment interference and is set out in part 5, chapter 2, of the IP Bill.

This could include downloading data from a mobile phone that is stolen or left unattended, or software that tracks every keyboard letter pressed being installed on a laptop.

Safer Internet Day 2017: how to stay safe from online spies

Safer Internet Day 2017: how to stay safe from online spies
By KEREN ELAZARI
"More complex equipment interference operations may involve exploiting existing vulnerabilities in software in order to gain control of devices or networks to remotely extract material or monitor the user of the device," a draft code of conduct says.

The power will be available to police forces and intelligence services. Warrants must be issued for the hacking to take place.

Bulk hacking
For those not living in the UK, but who have come to the attention of the security agencies, the potential to be hacked increases. Bulk equipment interference (chapter 3 of the IP Bill) allows for large scale hacks in "large operations".

Data can be gathered from "a large number of devices in the specified location". A draft code of practice says a foreign region (although it does not give a size) where terrorism is suspected could be targeted, for instance. As a result, it is likely the data of innocent people would be gathered.

All hail the privacy pioneers! DuckDuckGo's ambitious plans to be more than a search engine

All hail the privacy pioneers! DuckDuckGo's ambitious plans to be more than a search engine
By MATT BURGESS
Security and intelligence agencies must apply for a warrant from the Secretary of State and these groups are the only people who can complete bulk hacks.

Commissioners
To help oversee the new powers, the Home Office is introducing new roles to approve warrants and handle issues that arise from the new powers. The Investigatory Powers Commissioner (IPC) and judicial commissioners (part 8, chapter 1 of the IP Bill) will be appointed by Theresa May, or whoever the serving prime minister is at the time.

The IPC will be a senior judge and be supported by other high court judges. "The IPC will audit compliance and undertake investigations," the government says.

"The Commissioner will report publicly and make recommendations on what he finds in the course of his work," guidance on the original bill says (page 6). "He will also publish guidance when it is required on the proper use of investigatory powers."

Snooper's Charter is going to court: Liberty successfully crowdfunds its legal challenge

Snooper's Charter is going to court: Liberty successfully crowdfunds its legal challenge
By MATT BURGESS
Web records
Under the IP Bill, security services and police forces will be able to access communications data when it is needed to help their investigations. This means internet history data (Internet Connection Records, in official speak) will have to be stored for 12 months.

Keeping Britain safe: how GCHQ's new cyber security agency will protect us from hackers

Keeping Britain safe: how GCHQ's new cyber security agency will protect us from hackers

• Security
• 18 Oct 2016

Communications service providers, which include everything from internet companies and messenger services to postal services, will have to store meta data about the communications made through their services.

The who, what, when, and where will have to be stored. This will mean your internet service provider stores that you visited WIRED.co.uk to read this article, on this day, at this time and where from (i.e. a mobile device). This will be done for every website visited for a year.

Protect your privacy by moving to the dark web

Protect your privacy by moving to the dark web
By SILKIE CARLO
Web records and communications data is detailed under chapter 3, part 3 of the law and warrants are required for the data to be accessed. A draft code of practicedetails more information on communications data.

Bulk data sets
As well as communications data being stored, intelligence agencies will also be able to obtain and use "bulk personal datasets". These mass data sets mostly include a "majority of individuals" that aren't suspected in any wrongdoing but have been swept-up in the data collection.

These (detailed under part 7 of the IP Bill and in a code of practice), as well as warrants for their creation and retention must be obtained.

"Typically these datasets are very large, and of a size which means they cannot be processed manually," the draft code of practice describes the data sets as. These types of databases can be created from a variety of sources.

Real-time surveillance
Draft reuglations published in May 2017 reveal how the IP Act's provisions will work in practice. The technical regulations, which put obligations on internet communication companies, say "communications and secondary data" about a person will have to be provided "in near real time" to authorities when a warrant has been obtained.

Also, the regulations, which were being consulted on with UK technical groups, say that where possible 'electronic protection' (also known as encryption) should be removed by communications companies where it is possible to do so.

More on the IP Act
During the past two years, WIRED has covered the passage of the IP Bill through parliament until it became the IP Act. Here's some more reading on the bill's journey from WIRED and beyond:

– Full bill as passed by House of Lords: read more

– UN warns UK's IP Bill 'undermines' the right to privacy: read more

– Government codes of practice: read more

read more

– Snooping law must be 'fundamentally rethought and rebuilt,' Lord Strasburger says: read more

http://www.wired.co.uk/article/ip-bill-law-details-passed