Re: Data retention question

Alex Burr <ajb44.geo-/[email protected]> Thu, 17 Jul 2014 09:36:03 -0700
Newsgroups gmane.law.cryptography.uk
Message-ID <[email protected]>
Okay an update: I found a free 'cell site analysis' guide. It is downloadable from here:
http://www.forensicanalytics.co.uk/services/training/free-resources
but you have to give them contact details. It appears that location for data use *is*
retained in the UK, except by Three. Records do not correspond to packets or tcp sessions, they correspond to 'an entire connectivity session' (I'm not familiar enough of mobile phone protocols to identify that) which are apparently 'closed' due to, for example a time out, which can happen after 5 minutes of inactivity. So it is plausible that a poll every 10 minutes by an email client could cause a comprehensive location record for a UK user, as in the Spitze case. But I don't have evidence of whether this typical.

Alex





> On Tuesday, July 15, 2014 11:41 PM, Alex Burr <ajb44.geo-/[email protected]> wrote:
> > 
> 
>>  On Tuesday, July 15, 2014 9:03 PM, Peter Fairbrother 
> <zenadsl6186-1HOZaDBbGgxaa/[email protected]> wrote:
> 
>>  A better answer - the sort of data you mention are not regularly 
>>  collected in bulk in the UK. The types of data which are regularly 
>>  collected in bulk are fairly limited [1], and relate mostly to calls and 
>>  texts.
> 
> Thanks, that's very helpful. I'm assuming [1] is  from 'The Data 
> Retention (EC Directive) Regulations 2009'. It does seem to have the same 
> interpretation problem you mentioned earlier, in that 'communication' 
> could include internet data and doesn't have defined start and end. Can you 
> say where you found out that these aren't regularly collected? (As well 
> as being interested from a civil perspective, I'm doing academic work so 
> I'm trying to find a citation, but no worries if you don't have one).
> 
> [Further helpful explanation snipped]
> 
> 
> Alex
>