The Data Retention (EC Directive) Regulations 2009

Roland Perry ukcrypto at chiark.greenend.org.uk
Thu, 12 Feb 2009 16:06:20 +0000


In article <49944754.2000805@complicity.co.uk>, Zoe O'Connell 
<zoe-ukcrypto@complicity.co.uk> writes
>On 12/02/09 14:56, Roland Perry wrote:
>> In article <4994339A.40602@complicity.co.uk>, Zoe O'Connell 
>><zoe-ukcrypto@complicity.co.uk> writes
>>> As a smaller provider, we had significant trouble with RIPA once the 
>>>Home Office took over from the informal Police system and created the 
>>>SPoC list.
>>
>> The SPoC list (and associated training scheme) existed for many years 
>>before RIPA came into force, and wasn't what I'd normally call 
>>"informal".
>
>I'm possibly using incorrect or misleading terminology.
>
>There are two RIPA-related systems I'm aware of - one was the old 
>Police spreadsheets.

But that scheme existed long before RIPA. There were transitional 
arrangements while RIPA was made fully operational.

>I believe there were two spreadsheets, one for ISPs which listed SPoCs 
>at various forces and another which was distributed to police forces 
>and listed contact details for service providers. Getting on the 
>spreadsheets and getting a copy of the police SPoC spreadsheet is easy 
>- we just asked the first police force who sent us a RIPA request and 
>they directed us at the police force that maintained the spreadsheet.

That's broadly speaking correct.

>The other system is the newer web-based Home Office SPoC system, which 
>is very hard to get access to. I don't know if they track service 
>provider contacts but we've certainly had more misdirected requests 
>(Sent to generic support or sales addresses, sometimes in other parts 
>of the group who don't know about the subject matter anyway) since the 
>police system stopped.

There's a whole bunch of people whose job it is to make sure you aren't 
left out in the cold. I'm a bit disappointed you have been treated in 
this way.

-- 
Roland Perry