17 September 2015 presentation to Southampton University iCLIC conference on Enrolling Intermediaries in the Law Enforcement Process

1. Communications data
retention by intermediaries
iCLIC Conference, Southampton
17 September 2015
Graham Smith
@cyberleagle

2. Investigatory Powers Bill
3 Reviews, nearly 200 recommendations
● Interception
• Bulk, targeted, thematic
• Content and related communications data
● Equipment interference
● Communications data acquisition and disclosure
● Mandatory communications data retention
==================================
● Encryption?
● Monitoring by intermediaries?Page 2
© Bird & Bird LLP 2015

3. Investigatory Powers Bill
3 Reviews, nearly 200 recommendations
● Interception
• Bulk, targeted, thematic
• Content and related communications data
● Equipment interference
● Communications data acquisition and disclosure
● Mandatory communications data retention
==================================
● Encryption?
● Monitoring by intermediaries?Page 3
© Bird & Bird LLP 2015

4. The return of the Snoopers' Charter?
Page 4
© Bird & Bird LLP 2015

5. From there to here
2001
2003
Page 5
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)

6. From there to here
2001
2003
2006
2009
Page 6
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)
12 mths: fixed & mobile telephony, internet
access, e-mail, internet telephony:
- source/destination identification (traffic
and subscriber info)
- date, time, duration (cell data for mobile)
- type of communication
- user's equipment identification

7. From there to here
2001
2003
2006
2009
April 2014
Page 7
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)
12 mths: fixed & mobile telephony, internet
access, e-mail, internet telephony:
- source/destination identification (traffic
and subscriber info)
- date, time, duration (cell data for mobile)
- type of communication
- user's equipment identification

8. From there to here
2001
2003
2006
2009
April 2014
Page 8
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)
12 mths: fixed & mobile telephony, internet
access, e-mail, internet telephony:
- source/destination identification (traffic
and subscriber info)
- date, time, duration (cell data for mobile)
- type of communication
- user's equipment identification

9. From there to here
2001
2003
2006
2009
April 2014
July 2014
December 2016
Page 9
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)
12 mths: fixed & mobile telephony, internet
access, e-mail, internet telephony:
- source/destination identification (traffic
and subscriber info)
- date, time, duration (cell data for mobile)
- type of communication
- user's equipment identification
CSPs include webmail, social media platforms

10. From there to here
2001
2003
2006
2009
April 2014
July 2014
March 2015
December 2016
Page 10
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)
12 mths: fixed & mobile telephony, internet
access, e-mail, internet telephony:
- source/destination identification (traffic
and subscriber info)
- date, time, duration (cell data for mobile)
- type of communication
- user's equipment identification
and IP address resolution data
CSPs include webmail, social media platforms

11. From there to here
2001
2003
2006
2009
April 2014
July 2014
March 2015
July 2015
(March 2016)
December 2016
Page 11
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)
12 mths: fixed & mobile telephony, internet
access, e-mail, internet telephony:
- source/destination identification (traffic
and subscriber info)
- date, time, duration (cell data for mobile)
- type of communication
- user's equipment identification
and IP address resolution data
CSPs include webmail, social media platforms

12. From there to here
2001
2003
2006
2009
April 2014
July 2014
March 2015
July 2015
(March 2016)
December 2016
Page 12
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)
12 mths: fixed & mobile telephony, internet
access, e-mail, internet telephony:
- source/destination identification (traffic
and subscriber info)
- date, time, duration (cell data for mobile)
- type of communication
- user's equipment identification
and IP address resolution data
Investigatory Powers Bill
CSPs include webmail, social media platforms

13. From there to here
2001
2003
2006
2009
April 2014
July 2014
March 2015
July 2015
(March 2016)
December 2016
Page 13
© Bird & Bird LLP 2015
12 mths: Subscriber info, telephony data
6 mths: SMS, EMS, MMS data (inc. location
when sent/rec'd); E-mail data; ISP data
(logon/off, IP address etc)
4 days: Web activity (services, URLs (excl.
after "/") etc)
12 mths: fixed & mobile telephony, internet
access, e-mail, internet telephony:
- source/destination identification (traffic
and subscriber info)
- date, time, duration (cell data for mobile)
- type of communication
- user's equipment identification
and IP address resolution data
Draft Communications Data Bill – IPB?
- Weblog data (browsing history, digital
footprints)
- OTT communications, extraterritoriality
- Third party data, request filter
- Data generation, specified capability
- Broad powers
2012
Investigatory Powers Bill
CSPs include webmail, social media platforms

14. Graham Smith
graham.smith@twobirds.com
@cyberleagle
Bird & Bird is an international legal practice comprising Bird & Bird LLP and its affiliated and associated businesses.
Bird & Bird LLP is a limited liability partnership, registered in England and Wales with registered number OC340318 and is authorised and regulated by the
Solicitors Regulation Authority. Its registered office and principal place of business is at 15 Fetter Lane, London EC4A 1JP. A list of members of Bird & Bird LLP and
of any non-members who are designated as partners, and of their respective professional qualifications, is open to inspection at that address.
twobirds.com
Thank you