We perish because we know not… #TLENews
Mass surveillance of the internet by the British monitoring agency GCHQ was unlawful until the end of last year, the UK’s most secretive court has ruled.
The Investigatory Powers Tribunal (IPT) ruled on Friday that the agency’s access to intercepted information obtained by the US National Security Agency (NSA) breached human rights law.
Human rights groups said the decision raised questions about the legality of intelligence-sharing operations between the UK and the US. The ruling appears to suggest that aspects of the operations were illegal for at least seven years – between 2007, when the Prism intercept programme was introduced, and 2014.
The critical judgment marks the first time, since the judicial oversight body was established in 2000, that it has upheld a complaint against any of the UK’s intelligence agencies.
An “order” posted on the IPT’s website early on Friday declared: “The regime governing the soliciting, receiving, storing and transmitting by UK authorities of private communications of individuals located in the UK, which have been obtained by US authorities … contravened Articles 8 or 10” of the European convention on human rights.
Article 8 relates to the right to private and family life; article 10 refers to freedom of expression.
The decision, in effect, refines an earlier judgment issued by the tribunal in December, when it ruled that Britain’s current legal regime governing mass surveillance of the internet by intelligence agencies – which has been recently updated to ensure compliance – did not violate the human rights of people in the UK.
The challenges were brought by Liberty, Privacy International and other civil liberties groups who claimed that GCHQ’s receipt of private communications intercepted by the NSA through its mass surveillance programmes Prism and Upstream was illegal.
The existence of Prism and Upstream was revealed by the Guardian from documents provided by the NSA whistleblower Edward Snowden. The challenge brought by Liberty and Privacy International was the first in the UK to GCHQ’s participation in these programmes. Lawyers argued that receiving information from the NSA sidestepped protections provided by the UK legal system.
Eric King, deputy director of Privacy International, said: “For far too long, intelligence agencies like GCHQ and NSA have acted like they are above the law. Today’s decision confirms to the public what many have said all along – over the past decade, GCHQ and the NSA have been engaged in an illegal mass surveillance sharing programme that has affected millions of people around the world.
“We must not allow agencies to continue justifying mass surveillance programmes using secret interpretations of secret laws. The world owes Edward Snowden a great debt for blowing the whistle, and today’s decision is a vindication of his actions.
“But more work needs to be done. The only reason why the NSA-GCHQ sharing relationship is still legal today is because of a last-minute clean-up effort by the government to release previously secret ‘arrangements’. That is plainly not enough to fix what remains a massive loophole in the law, and we hope that the European court decides to rule in favour of privacy rather than unchecked state power.” James Welch, legal director for Liberty, said: “We now know that, by keeping the public in the dark about their secret dealings with the NSA, GCHQ acted unlawfully and violated our rights. That their activities are now deemed lawful is thanks only to the degree of disclosure Liberty and the other claimants were able to force from our secrecy-obsessed government.
“But the Intelligence Services retain a largely unfettered power to rifle through millions of people’s private communications – and the tribunal believes the limited safeguards revealed during last year’s legal proceedings are an adequate protection of our privacy. We disagree, and will be taking our fight to the European court of human rights.”
However, a GCHQ spokesperson contested the significance of the latest ruling, saying: “We are pleased that the court has once again ruled that the UK’s bulk interception regime is fully lawful. It follows the court’s clear rejection of accusations of ‘mass surveillance’ in their December judgment.”
The statement added that: “The IPT has, however, found against the government in one small respect in relation to the historic intelligence-sharing legal regime.”
The GCHQ spokesperson continued: “Today’s IPT ruling re-affirms that the processes and safeguards within the intelligence-sharing regime were fully adequate at all times – it is simply about the amount of detail about those processes and safeguards that needed to be in the public domain. We welcome the important role the IPT has played in ensuring that the public regime is sufficiently detailed.
“By its nature, much of GCHQ’s work must remain secret. But we are working with the rest of government to improve public understanding about what we do and the strong legal and policy framework that underpins all our work. We continue to do what we can to place information safely into the public domain that can help to achieve this.”
During hearings at the IPT last year, Matthew Ryder QC, for Liberty, had alleged that the intelligence services were constructing vast databases out of accumulated interceptions of emails.
Ben Jaffey, for Privacy International, had claimed that the Regulation of Investigatory Powers Act (Ripa) was no longer providing the significant safeguards it once guaranteed against interception of communications without an individual warrant.
The legal challenge was the first of dozens of GCHQ-related claims to be examined in detail by the IPT, which hears complaints against British intelligence agencies and government bodies that carry out surveillance under Ripa. Some of the most sensitive evidence about interceptions was heard in private sessions from which the rights groups were excluded.
In defence documents that were released, the government’s most senior security official, Charles Farr, explained how searches on Google, Facebook, Twitter and YouTube, as well as emails to or from non-British citizens abroad, could be monitored legally by the security services without obtaining an individual warrant because they were deemed to be external communications.
Farr said he could neither confirm nor deny the existence of Tempora, another interception programme revealed by the Guardian from the Snowden documents, although he did acknowledge that Prism exists “because it has been expressly avowed by the executive branch of the US government”.
Much of the tribunal’s deliberations therefore proceeded on the basis of agreed hypothetical facts, such as the assumption that Tempora exists. Lawyers for the government refused again, during a short hearing after the judgment, to say whether Tempora exists.