GCHQ To Spy On Consumer Shopping Data

A privacy campaigner has warned Parliament that the proposed Investigatory Powers Bill is too broad, and it could allow the intelligence service unfettered access to people’s bank accounts and even shopping habits.

So said Jim Killock, executive director of the privacy campaign group the Open Rights Group.

Bulk Data

Killock was quoted by the BBC as making the comments to MPs sitting on the Parliamentary committee examining the draft Investigatory Powers Bill.

The bill is highly controversial, as it will force Internet Service Providers (ISPs) to store the details of people’s online activity for a year. And it includes a lesser-known clause would let the security services download personal details from “bulk” databases.

GCHQ

According to Jim Killock, this could even include shopping purchases listed on schemes such as Tesco’s Clubcard or Sainbury’s Nectar card.

“What is a bulk data set? Which have been accessed and grabbed by GCHQ so far? Who might that apply to?” Killock was quoted as saying. “Just about every business in the country operates a database with personal information in it.”

“This could be Tesco Clubcard information,” he reportedly said. “It could be Experian’s data around people’s financial transactions, it could be banking details, it could certainly be any government database that you care to mention. It’s kind of hard to see where surveillance ends with bulk data sets.”

Snoopers Charter Mark Two?

The government has long contended that the bill has dropped the more “contentious” aspects of its 2012 predecessor, the infamous “snooper’s charter”.

Home Secretary Theresa May has previously claimed the new bill would no longer require communications service providers to store Internet traffic from companies abroad, and she insisted it includes “strong” warrant authorisation requirements for authorities wanting to gain access to a user’s detailed Internet browsing history.

Yet despite this government assurance of strict safeguards, including a ban on councils accessing people’s internet records, there remains plenty of highly controversial aspects to the new bill.

Campaigners fear that the legislation will give security services’ carte blanche to hack, bug and spy on people’s online habits, with judicial oversight that is still to be determined.

There is little doubt that the government wants ISPs to keep the meta data of all their customers’ use of the web, including their phones and social media interactions for 12 months. It should be noted that this meta data will not include the content, which has to be authorised by a ministerial intercept warrant.

Are you a security pro? Try our quiz!

Tom Jowitt

Tom Jowitt is a leading British tech freelancer and long standing contributor to Silicon UK. He is also a bit of a Lord of the Rings nut...

View Comments

  • Even a ministerial intercept warrant on its own is not sufficient safeguard, it needs to be signed by an independent Judge. Remember governments themselves may become the enemy of the people. We have a separate judicial system for a very good reason to protect the people from the Government.

    i.e. This government might be trustworthy (or not!), but will the next one?

Recent Posts

SoftBank Promises To Invest $100bn In US

Japanese tech investment firm SoftBank promises to invest $100bn during Trump's second term to create…

8 hours ago

Synopsys, SiMa.ai To Collaborate On AI Car Chips

Synopsys to work with start-up SiMa.ai on joint offering to help accelerate development of AI…

9 hours ago

AI Start-Up Basis Raises $34m For Accountancy Agent

Start-up Basis raises $34m in Series A funding round for AI-powered accountancy agent to make…

9 hours ago

Databricks Raises $10bn In Huge AI Funding Round

Data analytics and AI start-up Databricks completes huge $10bn round from major venture capitalists as…

10 hours ago

Congo Files Complaints Against Apple Over Conflict Minerals

Congo files legal complaints against Apple in France, Belgium alleging company 'complicit' in laundering conflict…

10 hours ago