Spy agencies, prime minister's adviser defend Wi-Fi data collection

The head of Canada's communications surveillance agency defended its use of metadata Monday and argued a test using Canadian passengers' data revealed by CBC News last week didn'trun in real-time and wasn't an actual operation.

John Forster, chief of the Communications Security Establishment Canada, defended the cybersecurity agency overrevelations contained in a document releasedby U.S.National Security Agency whistleblower Edward Snowden.

Forster was appearing before the Senate national defence committee along with the head of CSIS and the prime minister's national security adviser days after a CBC News report on the document that showed CSECused airportWi-Fito track the movements of Canadian passengers, includingwhere they'd been before and after the airport.

• Watch: Heads of CSIS, CSEC testify
• Watch: PM's national security adviser testifies
• Snowden docs: CSEC used Wi-Fi to track travellers

Forster said the agency used metadata to develop a model that showed they could track an internet user's network activity "around a public access mode," and that the tracking didn't happen in real time.

Metadata can reveal a trove of information, including, for example, the location and telephone numbers of all calls a person makes and receives. It does not include the content of the call, which would legally be considered a private communication and cannot be intercepted without a warrant.

"This exercise involved a snapshot of historic metadata collected from the global internet. There was no data collected through any monitoring of the operations of any airport. Just a part of our normal global collection," he said.

"We weren't targeting or trying to find anyone or monitoring individuals' movements in real time. The purpose of it was to build ananalyticalmodel of typical patterns of network activity around a public access mode," Forster said.

The spy chief said the agency also usesmetadatato ensure it isn't inadvertently directing investigative efforts at a Canadian phone number orIPaddress. The agency is supposed to stick to foreign intelligence, not domestic.

Is metadata discarded?

Metadata, Forster said, is essential to CSEC's work. But he said the agency doesn't use it to build profiles on Canadians, and that its own staff would report CSEC to itscommissioner watchdog if the agency started tracking Canadians.

Speaking to reporters after the committee meeting, Forster allowed that Canadianmetadatais being collected.

"There are foreign and Canadian information mixed together in the internet," he said, responding to a question about whether the agency picks up data belonging to Canadians.

The collection ofmetadatawas approved by a ministerial directive, Forster said. The first directive was issued in 2005 under a Liberal government, with the latest one issued in 2011 under the Conservatives.

Asked whether the data collected for the model had been discarded, Forster referred to a directive about how long it could be stored.

"After a maximum amount of time that data, if it hasn't already been discarded, is discarded," he said.

CSIS denies mass surveillance

Ontario Privacy Commissioner Ann Cavoukiansaid the law needs to be updated to include metadata, a term that appears nowhere in the current act.

"So it is fiction to say that the act authorizes metadata. It's an interpretation the way I interpret it, any interception is not permitted,"Cavoukian told Evan Solomon, host of CBC News Network's Power & Politics.

The head of Canada's spy agency, the Canadian Security Intelligence Service, told senatorsthe agency doesn't perform mass surveillance of Canadians.

"I can assure you thatCSISwarrants authorized by the Federal Court do not allow the mass surveillance of Canadians and we do not engage in such activities," MichelCoulombesaid.

"Our warrants are directed against specific individuals who pose a threat to the security of Canada, a threshold that is clearly articulated in theCSISAct."

Earlier, Prime Minister Stephen Harper's national security adviser, StephenRigby, defended the collection of Canadians'metadataby Canada's surveillance agency, calling it "data about data."

Rigby said he is "not totally persuaded" that Canada's spy agencies tapped into airport Wi-Fi.

"I think that the document that has been released clearly indicates that there has been collection ofmetadata,"Rigbysaid.

"That is a well-known fact.It does not represent a compromise of private communications by Canadians. It's data about data," making it "well within the legal parameters" of agencyoperations, he said.

Privacy concerns

Canada's interim privacy commissioner, Chantal Bernier, said in a report last week that she had serious concerns about how spy agencies use social media to collect information. Bernier said the potential for privacy invasion calls for commensurate protection, including an updated law.

Rigby said Bernier presented Parliament with some interesting ideas, but that the current controls "are reasonably robust."

"I think to a certain extent there's been a lot of public debate about some of the actions of our security agencies as a result of Mr. Snowden's disclosures," he said.

"I'm not persuaded at the end of the day that all of them are 100 per cent accurate."

Rigby said Bernier's ability to auditCSIS and CSECis a check in itself.

"I think that the annual reports that are tabled by the commissioner, by SIRC [CSIS's review body the Security Intelligence Review Committee]and by the director of CSIS, for example, all represent opportunities to comment on privacy issues and the checks that are in place to assure Canadians that they have reasonable privacy protections in place," he said.

'That, simply put, is spying'

Opposition members in the House of Commons have long demanded more parliamentary oversight of the country's national security agencies.

NDP defence critic Jack Harris tabled a motion last fall to create a parliamentary committee todetermine the best way to oversee CSEC and CSIS. The motion was defeated.

Liberal public safety critic Wayne Easter is tablinga motion in the House Tuesday to order CSEC to end all illegal monitoring of Canadians and increase proper oversight of the cybersecurity agency via a national securityparliamentary committee.

"When Canadian citizens transferring through airports and using Wi-Fi havetheir metadata collected, that, simply put, is spying," Easter said in the House Monday.

A report by the commissioner from last June, Easter said, notedthat some activities may have been directed at Canadians.