The Data Retention (EC Directive) Regulations 2009

Zoe O'Connell ukcrypto at chiark.greenend.org.uk
Thu, 12 Feb 2009 15:59:16 +0000


On 12/02/09 14:56, Roland Perry wrote:
> In article <4994339A.40602@complicity.co.uk>, Zoe O'Connell 
> <zoe-ukcrypto@complicity.co.uk> writes
>> As a smaller provider, we had significant trouble with RIPA once the 
>> Home Office took over from the informal Police system and created the 
>> SPoC list.
>
> The SPoC list (and associated training scheme) existed for many years 
> before RIPA came into force, and wasn't what I'd normally call 
> "informal".

I'm possibly using incorrect or misleading terminology.

There are two RIPA-related systems I'm aware of - one was the old Police 
spreadsheets. I believe there were two spreadsheets, one for ISPs which 
listed SPoCs at various forces and another which was distributed to 
police forces and listed contact details for service providers. Getting 
on the spreadsheets and getting a copy of the police SPoC spreadsheet is 
easy - we just asked the first police force who sent us a RIPA request 
and they directed us at the police force that maintained the 
spreadsheet. (I forget which force this was now, we did have a 
particular name of who to contact there however)

The other system is the newer web-based Home Office SPoC system, which 
is very hard to get access to. I don't know if they track service 
provider contacts but we've certainly had more misdirected requests 
(Sent to generic support or sales addresses, sometimes in other parts of 
the group who don't know about the subject matter anyway) since the 
police system stopped.