Ombudsman Questions Police Access To Telco Data

Serious compliance issues with law enforcement under Australia’s telecommunications interception laws
14 September 2022

The Commonwealth Ombudsman has found law enforcement access to metadata and content under  Australia’s telecommunications interception laws have  “serious compliance issues”, and have increased over the last three years.

Under the Telecommunications (Interception and Access) Act, “telecommunications data” includes subscriber information and the date, time and duration of calls (metadata); and,  “stored communications” which includes, Short Message Service (SMS), Multimedia, Messaging Service (MMS), emails and voicemails.

Only an external issuing authority like a judge or member of the Administrative Appeals Tribunal is permitted to issue a warrant to access stored communications, while agencies themselves can authorise telecommunications data access.

The Ombudsman said:  “There were instances where we were not satisfied with the remedial action agencies took in response to previous compliance findings, including implementing previous recommendations and suggestions made by our Office.”

One of the key issues identified – which forms the basis of nine recommendations – was whether authorised officers had “sufficient information” necessary to consider making an authorisation, with clear records not always available.

The Ombudsman called out the AFP and Victoria Police in this instance, noting that the “examples are illustrative of findings or risks that are relevant to all agencies that exercise powers” under the Act.

Issues identified related to agencies securing warrants from an ineligible authority, failing to demonstrated that preservation notices were properly given and other data vetting and quarantining concerns.

- CyberBeat

About CyberBeat

CyberBeat is a grassroots initiative from a team of producers and subject matter experts, driven out of frustration at the lack of media coverage, responding to an urgent need to provide a clear, concise, informative and educational approach to the growing fields of Cybersecurity and Digital Privacy.

Contact CyberBeat

If you have a story of interest, a comment, a concern or if you'd just like to say Hi, please contact us

Terms & Policies >>

Sponsors

We couldn't do this without the support of our sponsors and contributors.