Ministers could use powers granted under proposed new spy laws to compel internet companies to provide technical assistance to the Government Communications Security Bureau and no-one might ever know, officials have confirmed.
Mega chief executive Vikram Kumar said the prospect that such orders could be issued confidentially added to his concerns about the Telecommunications Interception Capability and Security Bill, which is being examined by a select committee.
“When you go and target an individual company and it is entirely at the discretion of a minister, plus it is secret, that is entirely unacceptable,” he said.
However, Business, Innovation and Employment Ministry officials said such confidentiality was necessary and normal. Protections were in place, both for companies that might be required to provide the extra assistance to the GCSB and their customers, they said.
The bill would oblige traditional telecommunications firms to provide technical assistance to the GCSB, as required by the spy agency, to make their networks capable of being intercepted.
Telcos would also need to get the GCSB’s approval before making changes to their networks that could affect the bureau’s work.
But most controversy has arisen over other clauses in the bill that would let ministers extend those obligations to companies other than traditional network operators, without going back to Parliament for approval.
These could either be individual firms, which would be roped in through “ministerial directives”, or “classes” of firms, such as internet telephony or secure email providers, which would be included through regulation.
Officials said any ministerial directives issued under the legislation would be confidential “so as not to publicly disclose any operational, commercial or strategic information that could impinge on the agencies’ investigations”.
The companies that were subject to the orders could also be prevented from discussing them.
“The need for confidentiality reflects the fact that the bill . . . deals with sensitive law enforcement and national security interests, as well as potentially sensitive commercial interests, where public discussion about individual levels of capability would be detrimental,” they said.
Under the current act, exemptions to the obligation to be intercept-capable were granted by the minister in charge of the GCSB on a confidential basis, so “confidentiality in these circumstances is not new”, officials said.
Kumar said that if an internet company did disclose it had received a ministerial directive ordering it to provide the same co-operation to the GCSB that any of the traditional network operators were compelled to provide, then that could have a “huge” effect on them. It could potentially “drag them out of business”.