Can data retention laws cope with the Internet of Things?

Sunshine Coast Daily

ONE of the many things that is troubling about the current Australian government's metadata retention proposals is how rooted in the past they are, which could make them obsolete before they even come into force.

The Telecommunications Interception Act was first enacted in 1979, when telephony was the only widespread and available communications service. Updates to the act have really only been at the edges, keeping in place the assumption that communications is essentially telephony with a few additional services.

However, as has been pointed out many times before, modern communications is much more than telephony. Modern communications is used more and in many different ways by far more of us than was the case with the simple telephone. Yet interception is still built on a telephony model, most apparently in the continued distinction between data and metadata.

Lawful interception of telephony distinguishes between "intercept related information" (metadata) and "call content" (the actual voice conversation). In telephony, metadata consists of the parties to a call, the duration of the call, any call forwarding and perhaps (in mobile telephony) the location of the parties.

In telephony, distinguishing between metadata and call content made sense. In modern communications it does not. Attempting to identify the boundary between what is and what is not metadata in the modern communications environment leads to all manner of contradictions and confusion.

For example, when it was suggested that compulsorily retained metadata might include websites that were visited, there was such an uproar that the legislation will now explicitly exclude such information. But why should it? Why is it necessary to distinguish between different types of metadata? The answer is that some metadata is more sensitive than others.

The problem is that developments in modern communication make the concept of metadata meaningless. There is really only data, some of which is of greater or lesser sensitivity depending on the circumstances. New technologies have made the contradictions inherent in basing legislation on a telephony model increasingly apparent. Worryingly, emerging technologies risk making the contradictions even more absurd than they already are.

Keeping tabs on the Internet of Things

For example, there is a great deal of interest in massively increasing the number of devices connected to the internet. This is the so-called "Internet of Things" (IoT) or "Internet of Everything". Cisco believes that by 2020 there may be 50 billion "things" connected to the internet. Proponents envision that any object in your house or place of work may well have a wireless transmitter, receiver, IP address and be able to communicate autonomously with other systems.

IoT has great potential in industrial applications, particularly manufacturing but also in domestic applications. The possibilities range from the mundane to the bizarre.

A mundane example is that your refrigerator might note that you are getting low on yogurt and order in some more. A slightly bizarre possibility is that your toaster might decide you are not eating enough toast to warrant keeping it and decide to sell itself. A vaguely alarming proposal is that your toilet might do some analysis of what you flush and let you know if you should see a doctor.

Whether these things happen, and whether they should happen, is a discussion for another time. But if the number and variety of devices connected to the internet massively increases, how will legislation relating to compulsory retention of metadata be applied to it? New technology developments may make the distinction between metadata and data even more of a problem than it is now.

A fundamental question is what constitutes metadata in these circumstances? Often the message sent from one device will be for another to switch on or off. The metadata may well be little more than the message.

Will ISPs be required to keep metadata, whatever it is defined to be, relating to all these devices? iiNet believes the cost of retaining all metadata for a single person per year will be around $130.

Between data and metadata

Unfortunately we don't yet know what metadata is to be kept, but have been assured that not all metadata will be, so the cost will probably not be quite that high. But presumably there will be some cost, and if the number of end devices increases by several orders of magnitude, it is likely to be significant.

Metadata can already provide deep insights into how we live our lives. Stores of such information are likely to be an attractive hacking target. What new threats to privacy will metadata from our household objects create? And what new exclusions, similar to that for web browsing, will need to be enacted?

Interception legislation needs to be brought up to date. A good place to start will be to dispense with the outdated distinction between metadata and data.

As noted earlier, in modern communications there is only data, some of which is more sensitive than others. That should be reflected in the legislation. Otherwise the revised legislation risks being out of date not long after it is released.

Topics:  metadata the conversation

Hervey Bay boy, 12, 'severely bullied' by girl on school bus

PROTECT MY BOY: Bay mum Tarsha Esteves has turned to the police to protect her son Kyle, 12, from severe bullying.

Kyle was 'choked, kicked and pulled over the seats', his mum says.

FRUIT AND VEG WATCH: How Debbie will impact your shopping

Frog - Fraser Coast Organic Goodness, Celine Louie.

Business owner's tip: Stock up on bananas.

Local Partners

MOVIE REVIEW: Crazy Boss Baby story is a little far-fetched

After nailing Trump, Alec Baldwin’s career takes a strange detour as Boss Baby

MKR’s Amy blasts Josh’s ‘sl*t’ slur

Amy Murr, pictured with brother Tyson, said rival contestant Josh Meeuwissen crossed the line when he called her a ‘sl*t’.

AMY responds after being called a ‘sl*t’ by MKR’s villain Josh.

MKR recap: The ‘slut’ comment that shocked everyone

Yep, MKR’s Josh has done it again.

JOSH has always been annoying, but this time he went way too far.

MOVIE REVIEW: LEGO Batman best caped crusader yet

A scene from the movie The Lego Batman Movie.

Nana! Nana! Nana! Nana! Nana! Batman!

Future Islands gear up for Splendour gig

Future Islands is an American synthpop band composed of Gerrit Welmers (keyboards and programming), William Cashion (bass, acoustic and electric guitars), and Samuel T. Herring (lyrics and vocals).

Their new album is "music from the heart than from the mind".

MOVIE REVIEW: Power Rangers way out of their league

Becky G., Dacre Montgomery, Naomi Scott, Ludi Lin, and RJ Cyler in a scene from the movie Power Rangers.

A Lego action figure is capable of running rings around teen misfits

Bliss N Eso announce a stack of regional tour dates

Aussie rappers Bliss N Eso are hitting the road in May for a 27-date national tour.

AUSSIE rappers hitting the road in May with new album.

Calling all renovators at heart

Solid home on 617sq m between beach and CBD development

This is what Sunshine Coast living is all about

Life's a breeze at stylish Alexandra Headland apartment

Timing pays dividends in Kawana health hub precinct


Construction starts at Sunshine Coast mixed-use project in Birtinya

Coffee king snaps up gym

Mooloolaba Healthworks site sells for $2.1million

Luxury hotel expands $400m water park development

Developer to push on with second stage of massive new water park

Ready to SELL your property?

Post Your Ad Here!