{"id":864894,"date":"2025-08-14T21:05:17","date_gmt":"2025-08-15T02:05:17","guid":{"rendered":"https:\/\/newsycanuse.com\/index.php\/2025\/08\/14\/watching-the-watchers-is-the-technical-advisory-panel-a-match-for-mi5-mi6-and-gchq\/"},"modified":"2025-08-14T21:05:17","modified_gmt":"2025-08-15T02:05:17","slug":"watching-the-watchers-is-the-technical-advisory-panel-a-match-for-mi5-mi6-and-gchq","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2025\/08\/14\/watching-the-watchers-is-the-technical-advisory-panel-a-match-for-mi5-mi6-and-gchq\/","title":{"rendered":"Watching the watchers: Is the Technical Advisory Panel a match for MI5, MI6 and GCHQ?"},"content":{"rendered":"<section id=\"content-body\">\n<p>For Dame Muffy Calder and the small group of academics, former spies and technical experts that advise Britain\u2019s oversight body for intelligence agencies and police on developments in technology, their work is all about \u201ctrust\u201d.<\/p>\n<p>Calder, a distinguished computer scientist whose research interests include <a href=\"https:\/\/www.techtarget.com\/searchenterpriseai\/tip\/The-history-of-artificial-intelligence-Complete-AI-timeline\">artificial intelligence (AI)<\/a>, computational modelling and automated reasoning, is the chair of the <a href=\"https:\/\/www.ipco.org.uk\/who-we-are\/technology-advisory-panel\/\">Technical Advisory Panel<\/a> (TAP), a group of six experts charged with advising Britain\u2019s surveillance oversight body.<\/p>\n<p>The role of the TAP is to advise the <a href=\"https:\/\/www.ipco.org.uk\/\">Investigatory Powers Commissioner\u2019s Office (IPCO)<\/a>, overseen by Brian Leveson in his role as investigatory powers commissioner, and nine judicial commissioners who provide independent oversight of the police and intelligence services\u2019 use of intrusive surveillance powers.<\/p>\n<p>In Calder\u2019s first public interview, the chair of the TAP said rapid developments in technology were having a huge impact on intelligence and investigatory powers.<\/p>\n<p>\u201cIt\u2019s absolutely obvious that we were going to be doing something on AI,\u201d she says. \u201cPeople are very rightly raising issues of fairness, transparency and bias, but they are not always unpicking them and asking what this means in a technical setting,\u201d she says.<\/p>\n<p>TAP, for example, has advised on automated speaker recognition, following the emergence of publicly available tools capable of automatically transcribing conversations and recognising the voices of individual speakers.<\/p>\n<section data-menu-title=\"Can the TAP keep pace?\">\n<h2><i data-icon=\"1\"><\/i>Can the TAP keep pace?<\/h2>\n<p>Can this small group of experts act as an effective counterbalance to organisations such as GCHQ, MI5 and MI6, which had a <a href=\"https:\/\/questions-statements.parliament.uk\/written-questions\/detail\/2022-02-25\/HL6445\/\">combined budget of \u00a34.5bn in 2004-2005<\/a>?<\/p>\n<p>Calder is confident that they can. \u201cWe have a broad range of expertise, and all of our expertise overlaps. I don\u2019t want to use the word polymath, but I have just said it,\u201d she says.<\/p>\n<blockquote>\n<p><img decoding=\"async\" src=\"https:\/\/cdn.ttgtmedia.com\/rms\/computerweekly\/Muffy-Calder-University-of-Glasgow-140x180px.jpg\" alt>\n  <\/p>\n<p><span><strong><span>\u201cIt\u2019s obvious that we were going to be doing something on AI. People are very rightly raising issues of fairness, transparency and bias, but they are not always unpicking them and asking what this means in a technical setting\u201d<\/span><\/strong><\/span><\/p>\n<p><em><span>Muffy Calder, Technical Advisory Panel<\/span><\/em><\/p>\n<\/blockquote>\n<p>\u201cWe are able to contribute to areas outside of our particular expertise and we have lots of different networks, so when we don\u2019t know about something, we know who to ask,\u201d she adds.<\/p>\n<p>The TAP\u2019s close working relationship with the intelligence services has prompted some to ask whether the regulator may be too trusting.<\/p>\n<p>The BBC reported in June 2025, for example, that MI5 persuaded IPCO to change a report into MI5\u2019s handling of a violent neo-Nazi agent after the spy agency provided it with false information.<\/p>\n<p><a href=\"https:\/\/www.bbc.co.uk\/news\/articles\/c0572v3j7dvo\">IPCO told the BBC that it had been \u201cmisled\u201d<\/a> into amending its draft report and that assurances provided by MI5 were \u201cincorrect\u201d.<\/p>\n<\/section>\n<section data-menu-title=\"IPCO approved Apple \u2018backdoor\u2019\">\n<h2><i data-icon=\"1\"><\/i>IPCO approved Apple \u2018backdoor\u2019<\/h2>\n<p>One of the investigatory powers commissioner\u2019s most recent controversial decisions was to sign off on a <a href=\"https:\/\/www.computerweekly.com\/news\/366625724\/Government-using-national-security-as-smokescreen-in-Apple-encryption-row\">technical capability notice (TCN)<\/a> issued by the home secretary, Yvette Cooper, against Apple in January 2025.<\/p>\n<p>Rather than comply with the order, <a href=\"https:\/\/www.computerweekly.com\/news\/366619614\/Apple-withdraws-encrypted-iCloud-storage-from-UK-after-government-demands-back-door-access\">Apple withdrew its Advanced Data Protection (ADP) service from the UK<\/a>, though it remains available in the rest of the world.<\/p>\n<p>The existence of the order was protected by a secrecy order, until it was leaked to the <em><a href=\"https:\/\/www.washingtonpost.com\/technology\/2025\/02\/07\/apple-encryption-backdoor-uk\/\">Washington Post<\/a><\/em>.<\/p>\n<p>Computer Weekly understands that Leveson did not consult the TAP before he approved the TCN against Apple. Calder is unable to comment on the Apple case.<\/p>\n<p>\u201cI feel that we are consulted appropriately and that we can make our voice heard appropriately,\u201d she says. \u201cI am very comfortable that when we are asked, our answers are taken very seriously. It would be rare that we get involved in specific details,\u201d she adds.<\/p>\n<\/section>\n<section data-menu-title=\"Turning on the TAP\">\n<h2><i data-icon=\"1\"><\/i>Turning on the TAP<\/h2>\n<p>The <a href=\"https:\/\/ipco-wpmedia-prod-s3.s3.eu-west-2.amazonaws.com\/Technology-Advisory-Panels-Working-Protocol-with-the-Investigatory-Powers-Commissioner-January-2022.pdf\">TAP<\/a> began life shortly after IPCO was formed in September 2017. Sir <a href=\"https:\/\/bernardsilverman.co.uk\/\">Bernard Silverman<\/a>, former chief scientific advisor to the Home Office and professor of statistics at Oxford University, became its first chair.<\/p>\n<p>Muffy Calder, professor of formal methods (computing science) at Glasgow University, Derek McAuley, professor of digital economy at the University of Nottingham, and John Davies, a former chief technology officer from BAE Systems Applied Intelligence, were the first to join the panel in 2018.<\/p>\n<p>Today, the panel has grown to six people, split equally between three academics and three technology experts with backgrounds in the defence industry and the intelligence services (<a href=\"http:\/\/www.computerweekly.com\/#TAP_members\">see box: <em>Current members of the Technical Advisory Panel<\/em><\/a>).<\/p>\n<p>Panel members spend their time roughly equally on three tasks. The first is advising judicial commissioners \u2013 the serving or retired judges responsible for authorising surveillance warrants for the police and intelligence services \u2013 on technical aspects of surveillance and privacy.<\/p>\n<p>They accompany judicial commissioners to on-site inspections of intelligence and police organisations. And they act as an antenna for IPCO to pick up trends in technology and brief the organisation on the implications of those trends for oversight of intelligence and surveillance.<\/p>\n<p>\u201cWe try to keep a balance. Are we responding to a question or a query? Are we doing horizon scanning, thinking about changing technologies? Are we educating ourselves and making sure that we are up to date with changing technologies? And are we going out on inspections? Because that helps us understand how technology is being applied,\u201d she says.<\/p>\n<\/section>\n<section data-menu-title=\"Horizon scanning\">\n<h2><i data-icon=\"1\"><\/i>Horizon scanning<\/h2>\n<p>The TAP\u2019s day-to-day work is to advise IPCO on the potential impact of technologies that could be used by the intelligence services before they are deployed.<\/p>\n<blockquote>\n<div>\n<figure>\n    Our members all bring something to the table. They have a lot of expertise, and they are able to contribute. You can\u2019t shut us up<br \/>\n   <\/figure><figcaption>\n    <strong>Muffy Calder, Technical Advisory Panel<\/strong><br \/>\n   <\/figcaption><\/div>\n<\/blockquote>\n<p>\u201cWe might raise a technology because we could see its potential, not because we knew it was going to be used, but we could imagine that it could be used. So, we would raise something that we are [horizon] scanning about, but that\u2019s kind of why we are here,\u201d she says.<\/p>\n<p>One of the biggest challenges facing IPCO is the impact of artificial intelligence on surveillance oversight. AI enables computers to make deductions and draw links from <a href=\"https:\/\/greydynamics.com\/gchq-monitoring-programmes-a-timeline\/\">vast amounts of data gathered by GCHQ<\/a>, from probes into internet cables, harvesting passwords and user names, and exploiting vulnerabilities to access mobile phones and computers.<\/p>\n<p>IPCO contracts TAP members to work 20 days a year, but Calder says the work is interesting and rewarding, so she ends up putting in more time than her allotted hours.<\/p>\n<p>The TAP is not a committee, which means it operates informally, says Calder.<\/p>\n<p>\u201cOur members are all there because they bring something to the table. They have got a lot of expertise, and they are able to contribute. You can\u2019t shut us up. We always have things to talk about and new areas of technology,\u201d she says.<\/p>\n<\/section>\n<section data-menu-title=\"Why it is not possible to measure intrusion\">\n<h2><i data-icon=\"1\"><\/i>Why it is not possible to measure intrusion<\/h2>\n<p>When the TAP first began its work, its members were interested in finding a way of scientifically measuring the intrusiveness of different surveillance measures.<\/p>\n<p>The panel organised a <a href=\"https:\/\/ipco-wpmedia-prod-s3.s3.eu-west-2.amazonaws.com\/Formal-report-Metrics-of-Privacy-Conference-Final-9April2019.pdf\">workshop in Cambridge<\/a>, opening it up to academics with a range of views on privacy, including the civil society organisations Privacy International and the Open Rights Group.<\/p>\n<p>As a mathematician and a computer scientist, Calder wanted to investigate whether there was a way to scientifically measure the degree of intrusion into privacy caused by different surveillance methods.<\/p>\n<p>\u201cI thought, we can quantify this. It\u2019s not just the quantity, it\u2019s the nature of the data. For example, how to compare [the privacy impact of] data for a few people over a longer period of time against data held on a few people over a shorter period of time \u2013 you can start to quantify it.\u201d<\/p>\n<p>But mathematics alone cannot provide a meaningful measure of intrusion. Too much depends on context.<\/p>\n<p>\u201cIncreasingly, our view, and certainly my view, has become much more sophisticated about how we make the judgement about what is less intrusive,\u201d she says. \u201cI am not sure we will ever have metrics of intrusion in a quantified sense.\u201d<\/p>\n<\/section>\n<section data-menu-title=\"Internet connection records\">\n<h2><i data-icon=\"1\"><\/i>Internet connection records<\/h2>\n<p>The TAP has advised IPCO over a new investigatory power introduced under the Investigatory Powers Act 2016, which allows intelligence and law enforcement agencies to monitor <a href=\"https:\/\/assets.publishing.service.gov.uk\/media\/5a80d70340f0b62305b8d718\/Internet_Connection_Records_factsheet.pdf\">internet connection records<\/a> (ICRs).<\/p>\n<p><a href=\"https:\/\/www.gov.uk\/government\/publications\/investigatory-powers-amendment-bill-factsheets\/investigatory-powers-amendment-bill-communications-data-and-internet-connection-records\">Internet connection records<\/a>, which are collected and retained by phone and internet service providers, record the services people have accessed through the internet. They could range from a website or the use of an instant messaging app, such as Signal or WhatsApp, or a service like Google Maps.<\/p>\n<p>They do not include the content of a website or messaging apps, but can be used, for example, to identify everyone who has visited a particular website, or the communication services used by a particular individual or group of individuals.<\/p>\n<p>The <a href=\"https:\/\/www.computerweekly.com\/news\/365531020\/Investigatory-Powers-Act-Home-Office-proposes-rethink-of-safeguards-on-bulk-data-collection\">Investigatory Powers Act was amended last year<\/a> to allow government agencies to monitor who is accessing websites or web services <a href=\"https:\/\/www.theyworkforyou.com\/pbc\/2023-24\/Investigatory_Powers_%28Amendment%29_Bill\/02-0_2024-03-07a.37.11\">without the need for independent approval from the Investigatory Powers Commissioner, in a move that opposition MPs said would lead to \u201cfishing expeditions\u201d<\/a>.<\/p>\n<p>The UK is the only country among the Five Eyes nations (Australia, Canada, New Zealand, UK, US) to have required communications companies to store ICRs for 12 months, but its expansion has been gradual because it requires service providers to have the right technology in place to capture records.<\/p>\n<p>A TAP member advised a judicial commissioner before the commissioner approved two communications data retention notices issued to two unidentified telecommunications companies in 2019 for the first <a href=\"https:\/\/www.wired.com\/story\/internet-connection-records-uk-surveillance\/\">trial<\/a> of ICR surveillance.<\/p>\n<p>The National Crime Agency (NCA) briefed TAP members on the trial, which focused on monitoring access to websites whose sole purpose was to provide access to illegal images of children. It identified more than 120 subjects of interest.<\/p>\n<p>The Home Office\u2019s <a href=\"https:\/\/www.computerweekly.com\/news\/366580133\/Police-forces-check-intelligence-and-criminal-databases-after-errors-discovered-in-02-phone-data\">National Communications Data Service<\/a> quietly expanded the use of ICRs in 2022, when it awarded a <a href=\"https:\/\/www.contractsfinder.service.gov.uk\/notice\/d64272c6-65ad-4a46-b56f-aa9f694ad9a2\">contract<\/a>, worth up to \u00a32m, to BAE Systems Applied Intelligence as part of a programme to create a National ICRs Service, first <a href=\"https:\/\/www.publictechnology.net\/2022\/07\/29\/business-and-industry\/government-appoints-2m-firm-to-help-build-search-tool-for-citizens-internet-records\/\">reported by <em>Public Technology<\/em><\/a>.<\/p>\n<p>Calder was not personally involved in IPCO\u2019s consultations over ICRs but other members of the TAP \u201cwere certainly out, helping and advising on the trials\u201d.<\/p>\n<p>This included providing briefings for judicial commissioners and IPCO\u2019s legal advisors and inspectors on ICRs and producing internal guidance for IPCO staff.<\/p>\n<p>The TAP was able to make a \u201csignificant\u201d difference by offering advice on the intricacies of internet addresses, including, for example, the differences between a website address and website content \u2013 a line that is not always clear cut, says Calder.<\/p>\n<p>\u201cThe whole thing is very dynamic and changing. What constitutes an internet address, what constitutes data, and what constitutes metadata,\u201d says Calder.<\/p>\n<\/section>\n<section data-menu-title=\"The risks of AI to intelligence oversight\">\n<h2><i data-icon=\"1\"><\/i>The risks of AI to intelligence oversight<\/h2>\n<p>In 2019, the then director of GCHQ, Jeremy Flemming, <a href=\"https:\/\/www.dni.gov\/files\/ICIG\/Documents\/Partnerships\/FIORC\/Executive%20Summaries\/2019\/Executive%20Summary%20-%20FINAL.pdf\">warned of the risks posed by accelerating technology, particularly AI<\/a>, to proper oversight of the intelligence agencies.<\/p>\n<p>He told a meeting of the Five Eyes Intelligence Oversight and Review Council in London that changes in technology were \u201cidentifying potential weaknesses or gaps in regulatory standards, governance structures and ethical norms\u201d.<\/p>\n<p>AI has the potential to automate every aspect of surveillance, from automating applications for warrants, to speeding up the collection, analysis and assessment of intelligence.<\/p>\n<p>That raises new questions for IPCO, including whether AI will, as appears inevitable, allow greater numbers of people to be covertly monitored and investigated. What will that mean for individuals\u2019 privacy rights when they are deliberately targeted, and what will it mean for the privacy rights of people accidentally caught up in covert surveillance as collateral damage?<\/p>\n<p>\u201cWhile AI holds the potential to generate new insights and predictions, its application could have significant implications for privacy if not managed responsibly,\u201d the oversight body warned in a <a href=\"https:\/\/ipco-wpmedia-prod-s3.s3.eu-west-2.amazonaws.com\/IPCOs-Scope-of-Interest-in-AI.pdf\">policy document<\/a> about AI published in March.<\/p>\n<p>AI now inevitably forms a significant part of the TAP\u2019s work. Its members have \u201cengaged\u201d with the UK intelligence community, with the aim of ensuring compliance and safeguards are built into AI developments, rather than considered as an afterthought.<\/p>\n<p>TAP members have taken part in AI workshops at GCHQ, received briefings from other intelligence agencies and developed a three-tier training programme for judicial commissioners and other IPCO staff.<\/p>\n<p>The panel has also produced an \u201c<a href=\"https:\/\/ipco-wpmedia-prod-s3.s3.eu-west-2.amazonaws.com\/AI-Assessment-Framework.pdf\">assessment aid<\/a>\u201d to assist police, intelligence services and around 600 other government agencies regulated by IPCO, to think about whether the use of AI is proportionate and minimises invasion of privacy. It is also available to other organisations.<\/p>\n<p>AI may also have the potential to automate oversight of the government agencies monitored by IPCO, for example, by detecting inappropriate database use and activities that may not be legally compliant. However, Calder says that is not part of the TAP\u2019s remit.<\/p>\n<p>\u201cWe are more concerned with the use of AI in the bodies we oversee, not how we use it ourselves,\u201d she adds.<\/p>\n<p>And how are those bodies using it? Calder says that\u2019s a question best addressed to them.<\/p>\n<\/section>\n<section data-menu-title=\"Accompanying IPCO inspection teams\">\n<h2><i data-icon=\"1\"><\/i>Accompanying IPCO inspection teams<\/h2>\n<p>One of the key roles of the TAP is to accompany <a href=\"https:\/\/www.ipco.org.uk\/what-we-do\/inspections\/\">inspection teams<\/a> on visits to law enforcement and intelligence agencies, where they can explain technical issues (<em><a href=\"http:\/\/www.computerweekly.com\/#TAP_visits\">see box: Technical Advisory Panel inspections and visits<\/a><\/em>).<\/p>\n<p>IPCO has three specialist inspection teams, one focusing on interception agencies, including the UK intelligence community, the ministry of defence and the National Crime Agency (NCA).<\/p>\n<p>Another inspects a wide range of government bodies that have access to records of phone and internet communications data, showing, for example, who phoned or emailed whom, how long the call took and when it took place, but not the content of the communication.<\/p>\n<p>A third inspects public authorities\u2019 use of surveillance, covert human intelligence sources and property interference powers.<\/p>\n<p>According to the <a href=\"https:\/\/www.ipco.org.uk\/what-we-do\/inspections\/inspection-statistics\/\">most recent full-year figures available<\/a>, IPCO carried out more than 380 inspections in 2023, including over 130 inspections on local authorities, 115 on law enforcement and police, 54 on prisons and 38 on intelligence agencies.<\/p>\n<p>By attending inspections, Calder says TAP members can gain a better understanding of what IPCO does, allowing them to offer better advice. TAP members can also help to explain technical issues to the inspectors.<\/p>\n<p>\u201cWe can understand what the inspector is trying to get at, but they might not know the details of the technology, so we can help them phrase the question, or indeed understand the answer,\u201d she says.<\/p>\n<\/section>\n<section data-menu-title=\"The equities process\">\n<h2><i data-icon=\"1\"><\/i>The equities process<\/h2>\n<p>Since 2021, TAP members have <a href=\"https:\/\/www.ipco.org.uk\/what-we-do\/additional-functions\/equities-process\/\">attended inspections of GCHQ\u2019s \u201cequities process\u201d.<\/a> This is the process where <a href=\"https:\/\/www.gchq.gov.uk\/information\/equities-process\">GCHQ and other government agencies decide<\/a> whether to alert businesses and technology suppliers to known security vulnerabilities, or keep them secret so they can be lawfully used by intelligence and law enforcement agencies for hacking into computer systems and phones.<\/p>\n<p>Calder says she has no views on where the balance lies between disclosing vulnerabilities so that organisations can secure their computer systems, or keeping them secret so they can be used as a tool by law enforcement and intelligence services for equipment interference (hacking).<\/p>\n<p>\u201cWe don\u2019t set policy. We don\u2019t set views. We are scientific and technical advisors,\u201d she says.<\/p>\n<p>\u201cBut we would listen, and we might be able to contribute because there is a subjective decision being made there, and we might be able to contribute to the implications of going either way,\u201d she says.<\/p>\n<p>That could mean, for example, advising on the technical consequences of greater disclosure, or lower disclosure.<\/p>\n<\/section>\n<section data-menu-title=\"David and Goliath?\">\n<h2><i data-icon=\"1\"><\/i>David and Goliath?<\/h2>\n<p>Since it became fully operational in 2019, the TAP has had multiple briefings with intelligence agencies on the technical aspects of interception and surveillance.<\/p>\n<p>According to public reports, it has received briefings from GCHQ on developments in computing, including AI and machine learning, legal issues and bilateral arrangements on data sharing between the UK and the US.<\/p>\n<p>\u201cIt is important that we are briefed, so that we understand the context on which we are giving advice, so we understand what is being used now and what might be used in the future,\u201d she says.<\/p>\n<\/section>\n<section data-menu-title=\"Trust versus legal powers\">\n<h2><i data-icon=\"1\"><\/i>Trust versus legal powers<\/h2>\n<p>The Technical Advisory Panel has legal powers under Section 247 of the Investigatory Powers Act to require organisations to disclose documents and information required for its work.<\/p>\n<p>In practice, the TAP has never used these powers. The work of the TAP, Calder suggests, is less about invoking legal powers and more about building a trusted relationship with the agencies that IPCO oversees.<\/p>\n<p>\u201cI think, theoretically, we are allowed to go anywhere and ask anything we want to, except we can\u2019t hold up an investigation [by police or an intelligence agency],\u201d she says.<\/p>\n<p>Over the years, the TAP\u2019s relationship with the organisations IPCO oversees has \u201cchanged and evolved as we figured out how to work with the agencies\u201d, she says. \u201cIt feels like we are in a position of trust.\u201d<\/p>\n<\/section>\n<section data-menu-title=\"When trust fails\">\n<h2><i data-icon=\"1\"><\/i>When trust fails<\/h2>\n<p>There are occasions when trust between IPCO and the organisations it oversees becomes strained.<\/p>\n<p>The Security Service, MI5, has been criticised by the Investigatory Powers Tribunal for its less than candid approach to the oversight body and the courts.<\/p>\n<p>BBC journalist Daniel De Simone revealed in June 2025 that MI5 had given false statements to IPCO and had provided false evidence to multiple courts.<\/p>\n<p>MI5 had previously attempted to dissuade De Simone from reporting the activities of an MI5 agent known as X, a violent right-wing extremist who violently assaulted his girlfriend.<\/p>\n<p>When that failed, it took legal action to prevent the agent from being named, despite the risk X posed to other women.<\/p>\n<p>MI5\u2019s false evidence led IPCO to rewrite a previously critical report about MI5 in a positive light, according to the BBC report.<\/p>\n<p>De Simone wrote that the episode \u201craises questions about how easily IPCO accepts false assurances from MI5, when it is supposed to ensure the Security Service works within the law and in the public interest\u201d.<\/p>\n<p>Calder and IPCO said that with proceedings ongoing, it would be inappropriate to comment on the case until after the court had given its judgment.<\/p>\n<\/section>\n<section data-menu-title=\"MI5\u2019s technical environment\">\n<h2><i data-icon=\"1\"><\/i>MI5\u2019s technical environment<\/h2>\n<p>Members of the TAP also took part in inspections of MI5\u2019s computer systems, known as the \u201ctechnical environment\u201d, after the intelligence service failed to disclose serious compliance issues that put MI5 in breach of the law.<\/p>\n<p>MI5 knew about the problems with some of the data collected as early as 2015 and 2016, describing the problem areas as akin to the \u201cWild West\u201d in internal documents, but had failed to alert the home secretary or oversight bodies such as IPCO.<\/p>\n<p>The Investigatory Powers Tribunal found in 2023 that MI5 had unlawfully gathered and retained millions of people\u2019s private data and that successive home secretaries continued to sign off on surveillance warrants, even after they had received clear indications that it was acting unlawfully.<\/p>\n<p>Caroline Wilson Palow, director of Privacy International, which together with Liberty, brought the case against MI5, tells Computer Weekly: \u201cUnfortunately, the agencies have a history of not always living up to the trust placed in them by oversight bodies.<\/p>\n<p>\u201cMI5 knew about these failures for years without revealing them to either the home secretary or relevant oversight bodies. When it comes to oversight, we must verify, not trust alone.\u201d<\/p>\n<\/section>\n<section data-menu-title=\"The case for transparency\">\n<h2><i data-icon=\"1\"><\/i>The case for transparency<\/h2>\n<p>Ian Brown, a consultant on internet regulation, particularly relating to information security and privacy, argues that there is a case for more transparency over the TAP\u2019s advice and how judicial commissioners have responded to it.<\/p>\n<p>He suggests that members of the TAP could appear before Parliament\u2019s Intelligence and Security Committee \u2013 in private when it\u2019s necessary \u2013 to discuss matters of national security for greater democratic scrutiny.<\/p>\n<p>The TAP produces classified versions of its reports, which are sent to the home secretary and Scotland\u2019s cabinet secretary for justice. Unclassified versions are published in IPCO\u2019s annual report, the most recent of which was published in 2022.<\/p>\n<p>\u201cI don\u2019t want to stray into having an opinion here, but I will say I am very content with this,\u201d says Calder. \u201cI think our relationships are built on trust, and we actually have a lot of trust in the system, and you are just going to have to trust me when I say this.<\/p>\n<p>\u201cI do think this setup is world-leading, and it works very well because we work on trust. I don\u2019t think there would be anything to be gained; it would become so much more bureaucratic and formulaic,\u201d she adds.<\/p>\n<p>Calder is confident that judicial commissioners take the advice of the TAP under genuine consideration when they make decisions. The role of the TAP is not simply to provide \u201ctechnology washing\u201d to judicial decisions.<\/p>\n<p>\u201cI simply wouldn\u2019t be in this role if that wasn\u2019t the case. It\u2019s my professional personal standing. This is something that matters. I wouldn\u2019t do it if it was a token.\u201d<\/p>\n<p>During her time in the TAP, Calder says that there has not been a case of the TAP\u2019s advice being ignored. And if it was, she would feel very comfortable about raising it with the investigatory powers commissioner.<\/p>\n<\/section>\n<section data-menu-title=\"How to join the TAP\">\n<h2><i data-icon=\"1\"><\/i>How to join the TAP<\/h2>\n<p>It is not possible to apply to become a member of IPCO\u2019s Technical Advisory Panel. Jobs are not advertised. Candidates are invited.<\/p>\n<p>One of the requirements is that candidates have to be prepared to go through \u201cdeveloped vetting\u201d, the most comprehensive and intrusive level of security clearance, required for people having regular access to top secret material.<\/p>\n<p>Candidates can come from the intelligence and defence community, academia and industry.<\/p>\n<p>\u201cIn the panel, we discuss who we might need and what skills we might need, and where potential candidates might come from. But it\u2019s very much on their expertise and their ability to work within the TAP.\u201d<\/p>\n<p>The investigatory powers commissioner, on the advice of the chair of the TAP, makes the ultimate decision.<\/p>\n<p>The TAP in 2025 is split 50:50 between academics and people with backgrounds in the defence industry and the intelligence services. Out of three non-academics on the TAP, at least two have had careers in GCHQ, and one with BAE Systems, which has close connections with the intelligence community. BAE Systems, for example, makes probes used by the intelligence community to intercept data from communications cables.<\/p>\n<p>The TAP has been criticised for being too close to the intelligence services and law enforcement to give entirely objective views on the proportionality of the surveillance techniques it oversees.<\/p>\n<p>But Calder says that is not the case.<\/p>\n<p>\u201cI think you have to come back to our remit. First of all, our members aren\u2019t representing anything. They are experts. They have expertise and they have an ability to work with each other to offer scientific and technical advice,\u201d she says.<\/p>\n<p>IPCO says it regularly engages with non-governmental organisations (NGOs) that advocate privacy. They have been invited to contribute to consultations and information days with judicial commissioners.<\/p>\n<p>In the past, IPCO\u2019s attempts at transparency have foundered. An early attempt by IPCO to hire an expert on the Investigatory Powers Act, supported by former members of the police and intelligence services, was abandoned following objections from MI5.<\/p>\n<p>A court found that the Home Office had unfairly withdrawn Eric Kind\u2019s security clearance after MI5 had complained that his work with pro-privacy NGOs raised questions over his trustworthiness with classified material.<\/p>\n<p>Recently, IPCO has taken steps towards greater openness, with both investigatory powers commissioner <a href=\"https:\/\/www.ipco.org.uk\/news\/a-lawyer-talks-podcast\/\">Leveson<\/a> and the chairman of TAP giving public interviews.<\/p>\n<p>IPCO has also held private meetings with NGOs in recent months, with more scheduled. According to one person who attended a meeting, however, the approaches have felt more like \u201cbox-ticking\u201d than a genuine attempt to engage with civil society.<\/p>\n<\/section>\n<section data-menu-title=\"Understanding the law\">\n<h2><i data-icon=\"1\"><\/i>Understanding the law<\/h2>\n<p>Calder says she has found her time on the TAP extremely interesting and rewarding, but admits that getting to grips with understanding the law has been intellectually challenging.<\/p>\n<blockquote>\n<div>\n<figure>\n    We had to dedicate a lot of time and effort to understanding the Investigatory Powers Act. It would have been much easier if it had been written in technical language<br \/>\n   <\/figure><figcaption>\n    <strong>Muffy Calder, Technical Advisory Panel<\/strong><br \/>\n   <\/figcaption><\/div>\n<\/blockquote>\n<p>\u201cWe are technologists, and I am a computer scientist. I hadn\u2019t really thought much about the law before, and I was handed this big book, the Investigatory Powers Act, and it\u2019s an awful lot to learn.\u201d<\/p>\n<p>The IPA was not written with technology experts in mind, and even legal professionals find it difficult to interpret.<\/p>\n<p>\u201cWe had to dedicate a lot of time and effort to understanding this legislation. It would have been much easier if it had been written in technical language,\u201d says Calder.<\/p>\n<p>\u201cThe lawyers do help us, and they talk to us as well. It\u2019s a sort of team activity to help us understand. This is very niche technical advice. We really have to understand the domain,\u201d she says.<\/p>\n<\/section>\n<\/section>\n<p><a href=\"https:\/\/www.computerweekly.com\/news\/366627619\/Watching-the-watchers-Is-the-Technical-Advisory-Panel-a-match-for-MI5-MI6-and-GCHQ\" class=\"button purchase\" rel=\"nofollow noopener\" target=\"_blank\">Read More<\/a><br \/>\n Rebecka Redner<\/p>\n","protected":false},"excerpt":{"rendered":"<p>For Dame Muffy Calder and the small group of academics, former spies and technical experts that advise Britain\u2019s oversight body for intelligence agencies and police on developments in technology, their work is all about \u201ctrust\u201d. Calder, a distinguished computer scientist whose research interests include artificial intelligence (AI), computational modelling and automated reasoning, is the chair<\/p>\n","protected":false},"author":1,"featured_media":864895,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[46,28840,1875],"tags":[],"class_list":["post-864894","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","category-watchers","category-watching"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/864894","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=864894"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/864894\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/864895"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=864894"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=864894"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=864894"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}