The British government on Wednesday published a proposed new law to reform and dramatically expand surveillance powers in the United Kingdom. The 190-page Investigatory Powers Bill is thick with detail and it will probably take weeks and months of analysis until its full ramifications are understood. In the meantime, I’ve read through the bill and noted down a few key aspects of the proposed powers that stood out to me — including unprecedented new data retention measures, a loophole that allows spies to monitor journalists and their sources, powers enabling the government to conduct large-scale hacking operations, and more.
Internet connection records
In the days prior to the publication of the Investigatory Powers Bill, the British government’s Home Secretary Theresa May claimed that the law would not be “giving new powers to go through people’s browsing history.” However, the text of the bill makes clear that this is precisely what the government is trying to do.
Under the proposed law, Internet companies in the U.K. would be forced to record and store for up to 12 months logs showing websites visited by all of their customers. The government has tried to present this as “not a record of every web page” accessed (emphasis added). This is technically true, but it’s also extremely misleading. The logs will show every web site you visited — for example, bbc.com — as opposed to the specific pages on that website, for example, bbc.com/news.
This information, especially when accumulated over a period of a year, would still be highly personal, potentially revealing your political preferences, sexuality, religion, medical problems, and other details that could be used to draw inferences about your private life.