RIPA and file-sharing??

Peter Fairbrother ukcrypto at chiark.greenend.org.uk
Thu, 31 Jan 2008 19:26:21 +0000


PeteM wrote:
> Nicholas Bohm wrote  on 31-01-08 18:51:
>> Peter Fairbrother wrote:
>>> PlusNet blame RIPA for revealing IP addresses:
>>>
>>> http://community.plus.net/trafficmanagement/2007/11/28/file-sharing-letters 
>>>
>>>
>>> "An example would be where English law dictates a different path, and
>>> specifically considering the issue of file sharing, the Regulation of
>>> Investigatory Powers Act (or RIPA) is relevant. [..] Amongst its powers
>>> under RIPA, the High Court can request from an ISP details about
>>> particular customers."
>>>
>>>
>>> AFAICT, while it doesn't prevent it, RIPA doesn't give the Court any
>>> such power.
>>>
>>> Anyone know under what authority such demands are issued?
> 
> I was just about to ask the same question. I spent an hour this morning 
> trying to find it in RIPA.
> 
>>
>> Against ISPs, probably Norwich Pharmacal Co. v The Commissioners of
>> Customs and Excise http://www.ipo.gov.uk/mcps/norwich.htm
>>
> 
> So, not RIPA then?

Nope; from a recently sent email:

"Part I of RIPA (which covers interception) makes unauthorised 
interception an offence, and says what interception is, when it is 
allowed, etc. The only even vaguely relevant clause is in Part 1. 
Section 2(5) says that obtaining communications data is not an interception.

However that is, in this case, pretty obvious (though elsewhere in Part 
I they stretch the meaning of the word beyond recognition), as no-one is 
intercepting anything when they give out IP addresses.



Part IIa of RIPA (which covers the disclosure of communications data) 
does give "designated persons" the authority to demand comms data - but 
these persons are all policemen and the like, not lawyers acting for 
MPAA/RIAA etc.

Unfortunately Part IIa of RIPA doesn't make it an offence otherwise to 
disclose comms data (unlike interception, in part I) - that is left to 
the Data Protection Act.

I don't know exactly under what authority the Courts issue warrants to 
obtain this data, but it doesn't come from RIPA. There is no mention of 
it there."



not sure about the DPA bit ...

-- Peter Fairbrother