Police are hacking into hundreds of people’s voicemails, text messages and emails without their knowledge,*The Times*has discovered.
Forces are using a loophole in surveillance laws that allows them to see stored messages without obtaining a warrant from the home secretary.
Civil liberties campaigners reacted with concern to the disclosure that police were snooping on personal messages so often, without any external monitoring and with few safeguards.
Surveillance laws protect the public from having live phone messages, texts and emails accessed by police unless a warrant is granted by the home secretary.
Forces are able to get round these rules if the messages have been sent and are in storage. Officers can simply obtain production orders from a judge and force telecoms and computer companies to hand over records of customers’ messages.
This newspaper asked the biggest provincial police forces how often they used production orders to access stored communications.
West Midlands police did so on 329 occasions during a three-year period. At the same time, Northumbria police obtained 72 production orders, Merseyside 25 and Thames Valley 16.
EE, the mobile phone operator with more than 27 million customers in Britain, said that it was receiving about 150 production orders a month from police.
Northumbria police, asked why its officers applied for production orders rather than requesting a warrant from the home secretary, said: “Warrants from the secretary of state are to intercept a communication that is in the process of transmission. However, stored communications can be accessed by means other than a warrant, through existing statutory powers such as a production order or a search warrant. There is a subtle but significant difference between the two.”
Customers may be unaware that police have been reading or listening to their messages. “They are alerted if the message is to be used as evidence, otherwise it is handled and disposed of,” Northumbria police said.
Gavin Millar, QC, of Doughty Street Chambers, whose areas of expertise include privacy, said: “If one force used it 300 times it is being misused because there couldn’t be that many serious cases in the jurisdiction of one force. It needs an oversight mechanism. There has to be legislation for this.”
He said of the production order process: “There’s no hearing. You never find out what’s happening. I’m a little sceptical about how closely the judges look at the material put in front of them. There’s no oversight of what the judges or [police] forces are doing. They are coming into your data records. You know nothing about it.”
In Northumbria a superintendent authorises an approach to a judge; in Thames Valley a detective inspector, a more junior rank, must give authority to apply for an order. Merseyside said that its production orders related to four inquiries. Greater Manchester police said that its counter-terrorism unit had used the power. West Yorkshire police did not give statistics, citing cost.
When police want access to live messages they must apply to the home secretary under the Regulation of Investigatory Powers Act. The regime is presided over by the interception of communications commissioner, whose spokeswoman said that production orders were outside his remit.
Production orders are granted by circuit judges who need be satisfied that an indictable offence has been committed; that the material is held by the communications provider; that it would be of substantial value to the investigation; and that it is in the public interest to hand it over.
Julian Huppert, the Liberal Democrat member of the home affairs select committee, said: “Clearly there are a number of occasions where production orders like these can be incredibly helpful to the police, but they need to be constrained by appropriate safeguards.
“It doesn’t seem right that we don’t keep track of cases where [information] has been stored as we would do if it was still being transmitted.”
EE said: “We are legally required to release the information as set out in the order by a judge. EE strongly supports a balance between supporting law enforcement agencies and protecting our customers’ privacy and data.”
The Home Office said: “A production order will only be agreed by a judge if the request meets strict criteria.”