1. EU Data Retention Directive Team 5 March 21 st, 2006 Jeff Barger Jin Qiu Hunang Tim Schultz Tim Reiner

2. Why Data Retention Directive? Proposed after Madrid Train bombings Proposed after Madrid Train bombings Expedited after London attacks Expedited after London attacks Uses: Uses: Map out terrorist networks Map out terrorist networks Diffuse possible attacks Diffuse possible attacks Convict criminals Convict criminals

3. EU Data Retention Directive Data is to be retained for 6 to 24 months. Data is to be retained for 6 to 24 months. ISPs, fixed line operators, and mobile providers are affected. ISPs, fixed line operators, and mobile providers are affected. Content of communications is not stored. Content of communications is not stored. The data will be used to fight terrorism and organized crime. The data will be used to fight terrorism and organized crime. Retention consists of data necessary to trace and/or identify: Retention consists of data necessary to trace and/or identify: source of a communication source of a communication destination of a communication destination of a communication date, time and duration of a communication date, time and duration of a communication type of communication type of communication communication device communication device location of mobile communication equipment location of mobile communication equipment

4. US Data Retention Same industries are affected. Same industries are affected. 90 day retention, which can be renewed. 90 day retention, which can be renewed. Also requires the disclosure similar communication info. Also requires the disclosure similar communication info. Name Name Local Address Local Address Connection records Connection records Length of service Length of service Subscriber # Subscriber # Billing info Billing info Contents must be disclosed if they contain relevant info in regards to an on going criminal investigation. Contents must be disclosed if they contain relevant info in regards to an on going criminal investigation.

5. Ease of being targeted Ease of being targeted Billions of transactions per day Billions of transactions per day Requires precise intel Requires precise intel Depth of information stored Depth of information stored Only transaction information Only transaction information No detailed information of transaction No detailed information of transaction Can be used to determine terrorist “chatter” Can be used to determine terrorist “chatter” Which looks more suspicious? Which looks more suspicious? Ed has been in contact with a terrorist suspect in the last 4 months Ed has been in contact with a terrorist suspect in the last 4 months Ed called Grandma Smith 3 times Ed called Grandma Smith 3 times Data Retention Overview

6. Data Retention Effects on People You DO NOT really feel it You DO NOT really feel it It is not a invasion of your privacy It is not a invasion of your privacy Protection from harassment Protection from harassment Protecting yourself against illegal group activity (Enron Case) Protecting yourself against illegal group activity (Enron Case) Can be used as evidence for prosecution against violators, for example (No-Call- Law) (Federal Junk Fax Law) Can be used as evidence for prosecution against violators, for example (No-Call- Law) (Federal Junk Fax Law)