GCHQ To Spy On Consumer Shopping Data

A privacy campaigner has warned Parliament that the proposed Investigatory Powers Bill is too broad, and it could allow the intelligence service unfettered access to people’s bank accounts and even shopping habits.

So said Jim Killock, executive director of the privacy campaign group the Open Rights Group.

Bulk Data

Killock was quoted by the BBC as making the comments to MPs sitting on the Parliamentary committee examining the draft Investigatory Powers Bill.

The bill is highly controversial, as it will force Internet Service Providers (ISPs) to store the details of people’s online activity for a year. And it includes a lesser-known clause would let the security services download personal details from “bulk” databases.

GCHQ

According to Jim Killock, this could even include shopping purchases listed on schemes such as Tesco’s Clubcard or Sainbury’s Nectar card.

“What is a bulk data set? Which have been accessed and grabbed by GCHQ so far? Who might that apply to?” Killock was quoted as saying. “Just about every business in the country operates a database with personal information in it.”

“This could be Tesco Clubcard information,” he reportedly said. “It could be Experian’s data around people’s financial transactions, it could be banking details, it could certainly be any government database that you care to mention. It’s kind of hard to see where surveillance ends with bulk data sets.”

Snoopers Charter Mark Two?

The government has long contended that the bill has dropped the more “contentious” aspects of its 2012 predecessor, the infamous “snooper’s charter”.

Home Secretary Theresa May has previously claimed the new bill would no longer require communications service providers to store Internet traffic from companies abroad, and she insisted it includes “strong” warrant authorisation requirements for authorities wanting to gain access to a user’s detailed Internet browsing history.

Yet despite this government assurance of strict safeguards, including a ban on councils accessing people’s internet records, there remains plenty of highly controversial aspects to the new bill.

Campaigners fear that the legislation will give security services’ carte blanche to hack, bug and spy on people’s online habits, with judicial oversight that is still to be determined.

There is little doubt that the government wants ISPs to keep the meta data of all their customers’ use of the web, including their phones and social media interactions for 12 months. It should be noted that this meta data will not include the content, which has to be authorised by a ministerial intercept warrant.

Are you a security pro? Try our quiz!

Tom Jowitt

Tom Jowitt is a leading British tech freelancer and long standing contributor to Silicon UK. He is also a bit of a Lord of the Rings nut...

View Comments

  • Even a ministerial intercept warrant on its own is not sufficient safeguard, it needs to be signed by an independent Judge. Remember governments themselves may become the enemy of the people. We have a separate judicial system for a very good reason to protect the people from the Government.

    i.e. This government might be trustworthy (or not!), but will the next one?

Recent Posts

President Biden Signs TikTok Ban Or Divest Bill Into Law

TikTok pledges to challenge 'unconstitutional' US ban in the courts, after President Joe Biden signs…

1 hour ago

UK CMA Seeks Feedback On Microsoft, Amazon AI Partnerships

British regulator invites feedback on major partnerships Microsoft and Amazon have struck with smaller AI…

17 hours ago

Google Fires More Staff Over Israel Protest

Another 20 staff have been fired by Google over Israel protest and their “completely unacceptable…

18 hours ago

Australian PM Hits Out At Elon Musk Over Knife Attack Video

Censorship row brewing down under, after the Australian Prime Minister calls Elon Musk an 'arrogant…

19 hours ago

US SEC Seeks $5.3 Billion Fine From Terra’s Do Kwon

Financial regulator asks New York judge to impose $5.3 billion in fines against Terraform Labs…

20 hours ago

Microsoft Launches Smallest AI Model, Phi-3-mini

Lightweight artificial intelligence model launched this week by Microsoft, offering more cost-effective option for Azure…

24 hours ago