Guinea: Protect Phone Users’ Privacy
Mass Data Collection Could Expose Personal Information
DAKAR - The Guinean government should ensure telecommunications companies are not required to hand over in bulk the personal data of mobile phone users, Human Rights Watch said yesterday in a letter to Prime Minister Mamady Youla. The government should enact measures to ensure that any intrusion of phone users’ privacy is necessary, proportionate, and clearly defined in law.
On January 6, 2016, Guinea’s telecommunications regulator, the Authority for Regulation of Mail and Telecommunications (Autorité de Régulation des Postes et Télécommunications, ARPT), sent a letter to Guinea’s four major mobile phone companies saying that the ARPT planned to “put in place a center for control and oversight of traffic (voice and data)” to verify revenues of service providers for tax assessment purposes, but that could also allow access to personal data.
“While governments should be able to enforce tax regulations, they shouldn’t do that in a way that impinges on the right to privacy,” said Cynthia Wong, senior Internet researcher at Human Rights Watch. “The ARPT shouldn’t put in place any system that gives them access to customers’ sensitive personal information.”
In a January 19 letter, three telecom operators stated that they would not comply without greater clarity about the objectives and legal basis for the request. ARPT representatives told Human Rights Watch that the information was sought for tax purposes only and that they would meet with phone company operators to try to resolve the issue. Human Rights Watch received information that two of those companies had agreed to comply with the government’s request.
The proposed system, if connected directly to the telecommunications company’s networks and billing systems, could allow the regulator to monitor all data and voice traffic and, if misused, would give the operator, the regulator, and potentially other government departments’ back-door access to customers’ call records.
As part of the implementation of the new system, the ARPT had also requested access to parts of the companies’ phone records – known as “CDRs” – for the month of December 2015, as well as the necessary technical information to decode the CDRs.
Although CDRs do not reveal the contents of a phone call, they can include the phone numbers of both parties on the call, the time and date, the call duration, and even the approximate location of the people making the call. Such data can reveal sensitive information about a person’s contacts and movements, especially when aggregated. Indeed, this information often can reveal more about a person’s private life than the actual content of conversations.
While governments should have the ability to enforce telecommunications and tax regulations, requests for documentation should not disproportionately burden the right to privacy and other related rights. If phone data is being sought for other reasons, such as national security or law enforcement, then any government request should require judicial supervision and specific justification, and should be targeted only at individuals suspected of wrongdoing.
The Guinean government should clarify whether, in requesting records from phone operators, the ARPT, or any other government agency, has obtained or will obtain sensitive customer information. Any sensitive customer information acquired in response to the January 6, 2016 request should be deleted.
Before moving forward with future requests for call data or with a central control system, the government should ensure the necessity and proportionality of any method used to verify tax revenue and prevent fraud that involves intrusions on privacy. The government should also ensure that any effort to gain access to data held by telecommunications companies respects privacy and other rights.
“While Guinea’s phone companies have an obligation to accurately report on their revenue and tax obligations, they should resist any attempt by the government to obtain access to sensitive personal information from their customers,” Wong said. “Phone companies should also be transparent about the government’s demands and the information they share with it.”
This is the world we live in. This is the world we cover.
Because of people like you, another world is possible. There are many battles to be won, but we will battle them together—all of us. Common Dreams is not your normal news site. We don't survive on clicks. We don't want advertising dollars. We want the world to be a better place. But we can't do it alone. It doesn't work that way. We need you. If you can help today—because every gift of every size matters—please do. Without Your Support We Simply Don't Exist.
Human Rights Watch is one of the world's leading independent organizations dedicated to defending and protecting human rights. By focusing international attention where human rights are violated, we give voice to the oppressed and hold oppressors accountable for their crimes. Our rigorous, objective investigations and strategic, targeted advocacy build intense pressure for action and raise the cost of human rights abuse. For 30 years, Human Rights Watch has worked tenaciously to lay the legal and moral groundwork for deep-rooted change and has fought to bring greater justice and security to people around the world.
