by David Christopher
Finally. After years of obfuscation, the RCMP has admitted they are using invasive surveillance devices known as IMSI-catchers or Stingrays to spy on Canadians’ cell phones. The admission came early last month, seemingly prompted by revelations from CBC News that Stingray devices had been in use in downtown Ottawa and at the international airport in Montreal.
In those instances, Public Safety Minister Ralph Goodale issued a strong denial that Canadian agencies, such as the RCMP or CSIS, were involved, but the controversy brought a great deal of public attention to the RCMP’s own use of Stingray devices.
Stingrays are deeply problematic for a number of reasons. About the size of a small suitcase, they operate by mimicking a wireless tower, tricking all cell phones within a radius of up to two kilometres into switching their connection to the Stingray. Once that connection is made, instead of targeting just a single device, Stingrays indiscriminately vacuum up sensitive personal information from all devices within range, essentially making them a tool of mass surveillance.
There’s no need to be a target of a police investigation to have your private information compromised; you just need to be in the wrong place at the wrong time. And when you consider just how many cell phones are located within a two-kilometre radius of, say, a downtown Toronto intersection, that gives some indication of just how many Canadians have likely been impacted.
Secondly, Stingrays are capable of collecting information on everything from your location to details of every call, email and text you make. They can even listen in on and record the content of cell phone calls. Nor should we be reassured by the RCMP saying they only use Stingrays to collect location and device identification metadata. As Brenda McPhail of the Canadian Civil Liberties Association points out, “Metadata includes location information. That is intimately personal. The fact that they only collect metadata doesn’t let them off the hook.”
For those of us working in the field of digital privacy, the RCMP’s belated admission did not exactly come as a surprise. It will, however, hopefully prompt the informed democratic debate Canadians deserve about whether the use of these surveillance devices can ever be justified and, if so, what safeguards are necessary to protect the public’s privacy?
Unfortunately, the RCMP left many important questions unanswered. Why not tell us how many innocent Canadians have had their private information compromised over the past 10 years? Or let us know whether Stingrays have ever been used to monitor a political protest? And why did the RCMP wait until just a few weeks ago before applying for permission from Innovation, Science, and Economic Development Canada to use the devices?
Last, but far from least, the fact that the use of Stingrays can apparently be authorized based merely on suspicion of wrongdoing is hugely worrying. Surely, a much higher standard of evidence should be required, given the serious privacy implications for the general public?
It’s clear we deserve answers to all these questions from Public Safety Minister Ralph Goodale. Canadians should keep up the pressure on the government by supporting our 48,000-strong campaign at StopStingrays.org
David Christopher is communications manager for OpenMedia, a community-based organization that works to keep the Internet open, affordable and surveillance-free. openmedia.org