Showing posts with label Privacy. Show all posts
Showing posts with label Privacy. Show all posts

A Short Update on AMP v Person's Unknown

Since the decision in AMP came out I have received many messages telling me the approach will never work. Some of these have come directly to me via email, some have been posted on this site while others were posted on news reports of the case. One such example was posted on the Daily Mail Report:
Never heard of the Streisand effect then? Attempts to remove or ban online content inevitably leads to further interest and publication.I expect those images will go viral by the end of the week now that everyone knows about them. 
Well that didn't happen and neither did any of the other things suggested by the naysayers. The only blip we seem to have had to date in enforcing the order is that some wag decided to post a link to identifying information on AMP via the Daily Telegraph comments section on the story (now removed obviously) where actually another wag wrote "You don't need to publish the lady's name, because we know already. It's Ms. Canute."

Well happily so far the naysayers have been proven wrong. The pictures have not gone viral - a quick search of all the key search engines and social network sites reveals this. There has been (as we predicted) no Streisand effect. This confirms predictions I made in my book The Regulation of Cyberspace, that the online community function as a network and that regulation is likely to be effective when the community perceives that regulation or control as fair and justified. As AMP is perceived mostly as a victim, most people want the order to succeed. This may be contrasted with celebrities such as Barbara Streisand who seek to control unreasonably through a misapplication of the law (see also CTB).

Have we succeeded in removing the images from BitTorrent though? Well I've received a text from Matthew Richardson which reads
You will be pleased to hear that I think as of Monday morning we will have purged all of AMP's pictures from readily available websites...A great result I think. 
So as we stand it seems we have been broadly successful. There is a problem with digital goods in that there are surely still many copies of the pictures available in the hard drives of people who made copies before the order. AMP will have to live with this knowledge. What she won't have to put up with is the continued dissemination of the pictures. At least that's how things stand now.

New Approach to Privacy: AMP v Persons Unknown

I mentioned on Twitter last week that I was involved in a potentially ground breaking court case but that I couldn't say any more. Well the judgement came out this morning. The case is AMP v Person's Unknown [2011] EWHC 3454 (TCC) and the impact it may have is far reaching in terms of an alternative to orders being sought against essentially unregulatable (for the UK courts) offline platforms such as Twitter or Facebook (see entries passim on CTB v Twitter such as this one or my evidence to the Select Committee on Privacy and Injunctions.  


The reporting of AMP has to be done carefully as there is a Contra Mundum order in effect (for very good reason) so I will restrict myself to only those things said in the judgement and those things which are clearly not subject to the order.  Firstly all credit for the innovative order passed down today rests with the excellent and always innovative Matthew Richardson who made headlines two years ago with his innovative approach to online impersonation via Twitter - the so called Blaney Blarney Order (see here and here). I suspect the AMP order may have the same impact and provides a new approach to the regulation of online content for individuals and companies by applying Chris Reed's "Internet Fallacy" argument to a practical situation. This is people are people wherever they are and people may be regulated and controlled by the courts of the jurisdiction they are in. 


What happened and how was the order won? Well as I said I have to remain within the judgement given the wider Contra Mundum order. Essentially AMP either lost or had her mobile phone stolen (it was reported as stolen with the police) and with it sexually explicit images of the claimant - although the judgement is not clear we can assume she was "sexting" her boyfriend. It is clear that (a) AMP owned the copyright in these images and (b) they were private images obtained illegally via the theft. Soon thereafter the images appeared on a Dutch file hosting site for a short period but were removed from there at the request of the claimant but not before the images had been downloaded by others. As the judgement makes clear a number of blackmail demands followed, possibly from the same person. 


The images then found their way onto a BitTorrent site and a three year legal battle was begun to essentially block the sharing of the BitTorrent content. This is where Matthew and then later I (in a very minor role) became involved. Everyone knows BitTorrent content is unregulatable, or at least that is the orthodoxy, Matthew though came up with a novel approach. You cannot ask Torrent Trackers or the providers of Torrent Clients to block as they essentially cannot do so due to the nature of BitTorrent. What you can do though is prevent people from seeding Torrents if they are within the jurisdiction of the Court. Matthew surmised (and I agreed) that as AMP is not a celebrity (or in any way famous) anyone sharing the images was likely to know her personally either from her circle of acquaintances at home (ex school colleagues etc) or from University. These people would be based in the UK (England & Wales) and would be the key to seeding the Torrent. Take out the key Seeders and the Torrent would pretty much wither on the vine. 


What Matthew needed to do was to convince the Court to award an order that he could serve on anyone seeding the Torrent. As most of them would be located within the jurisdiction of the Court it would be effective. He developed a number of claims including claims under the Copyright, Designs and Patents Act 1988 but essentially it came down to two claims: (1) Privacy under Article 8 of the ECHR and (2) Protection from Harassment. The stronger claim was under the Protection from Harassment Act 1997 as an infringement of a harassment order is a criminal offence. The full judgement is available below but to cut a long story short Ramsay J. agreed that the actions of the Seeders was harassment and made an order under s.3 of the 1997 Act.  A breach of this order is an offence under s.3(6)(b). 


Matthew will now no doubt go about serving this order on anyone who seeds the files in question. This may involve a Norwich Pharmacol application but assuming we are right in our earlier assumption that overwhelmingly seeders will know AMP and are therefore within the jurisdiction of the Court we expect seeders to quickly stop sharing once the nature of the order is made known to them. Hopefully AMPs lack of celebrity means this will not lead to any kind of Streisand Effect - in fact this is not a free speech issue in any way the images were private and were stolen.      


Thus content on BitTorrent may just be regulatable after all. Although we accept this is a very unusual case and its wider application may be limited. 


The judgement is available here.


UPDATE - Just spoke to Matthew and applications for third party identities will be done under CPR 31.17 not Norwich Pharmacol. This is quicker, easier and cheaper. Also Matthew pointed out that the seeders do not have to be based within England & Wales to be brought under the jurisdiction of the order - thanks to a European Arrest Warrant anyone within the EU is bound by the order.

Evidence to the Joint Committee on Privacy and Injunctions

I spent a fun afternoon yesterday with a mixture of MPs and Lords and three other excellent expert witness on internet industries and regulation/governance discussing what should be done about individuals with accounts on social network sites such as Twitter breaching privacy and super injunctions. Our evidence session was about one hour and we were followed by executives from Northern and Shell (publishers of Express Newspapers and owners of Channel 5).

Update You can also access the video stream from the BBC Democracy Live site which is better quality than the Parliament Stream and may work better on Apple Devices

Giving Parliamentary Evidence Tomorrow

Tomorrow afternoon I am taking a jaunt to provide evidence to the Joint Select  Committee on Privacy and Injunctions. I'm on at circa 2.15pm with Dr. Ian Brown of the Oxford Internet Institute, Ashley Van Haeften, Trustee of Wikimedia UK and Nicholas Lansman, Secretary General of the Internet Service Providers Association. The whole thing can be watched live (and then archived) from the UK Parliament Channel - http://www.parliamentlive.tv/Main/Home.aspx I have a list of questions but can't share them with you, I also have my suit pressed and a new pair of shoes. 


It is a busy day tomorrow as I'm teaching 12 - 1, then at 6.00pm we have the excellent and entertaining Barefoot Technologist discussing the key themes of her book Barefoot into Cyberspace. If you are in the vicinity of the LSE's new Academic Building at 6.00pm - we're in the Moot Court Room on the seventh floor - join us.

CTB and Twitter: I Could Have Saved CTB Time, Money and Publicity

This is my first commissioned blog post.

Yesterday afternoon during the height of the CTB/Twitter fire-storm a message came through from popular Twitter artist/comedian/lawyer @loveandgarbage "BREAKING: Public demand Murray blogpost on CTB issue"

I realised this story did demand my attention but it was sunny and I was sitting in the garden eating an ice cream. As the world was going to end at 6pm I wasn't about to go inside and write. Tomorrow I told @loveandgarbage - I would do it tomorrow (assuming tomorrow would never come).

Today  

Well unlike Little Orphan Annie for me tomorrow has come (to the disappointment of Harold Camping). As I said I wasn't about to start blogging yesterday afternoon in case all my readers were Raptured before the end of the day (or I suppose it should be the End of Days).  Now that I seem quite sure we're all going to be here to enjoy Survival Sunday (c'mon Blackpool) it seems the perfect time to talk about CTB and his battle to keep his identity as professional footballer CTB under wraps. 


Survival Sunday now means something else for CTB. For those of you unfamiliar with the story (is there anyone?) - CTB allegedly had a sexual relationship with Big Brother star (is this right - star?) Imogen Thomas. This would not be a problem except CTB is married and has a family. When Miss Thomas threatened to go public with details of the affair CTB obtained an injunction against publication. It seems (and I might be wrong in this) that it is wrong to refer to it as a superinjunction (at least now) as the order was varied by Justice Eady to allow for Miss Thomas to be named in the press. A superinjunction cannot be reported at all - like the one which is held by the sitting MP who obviously cannot be named (although like CTB most of us know who they are). Apparently on Wednesday last week CTB's lawyer's Schillings applied for a Norwich Pharmacal Order against Twitter and persons unknown. In legal terms this is the sensible next step and there is a form of precedent for this in the Blaney Blarney Order. But the big difference with Blaney and CTB is who the order is being served on. In Blaney Matthew Richardson came up with the frankly brilliant idea of serving on the account and asking the account holder to identify themself, whereas as far as I can glean Schillings have gone for a straight Norwich Pharmacal which they served on Twitter on Friday. 


CTB Schillings and Twitter  


The effect of serving the order was to throw fuel onto a fire that had started to smoulder. As I discussed earlier about this case it is the hint of the forbidden that causes people to gossip.As the identity of CTB and other injunction holders entered the public consciousness people started to slowly lose interest. Hash Tags such as #superinjunction which had been trending seven days before had stopped trending and attention turned to the wider issue of the Neuberger Report. Then Schillings and CTB threw fuel onto the smouldering fire. As one would expect an explosion occurred. It has been reported that Twitter had barred CTB's real name from trending but that upon receiving the order removed the block. this seems highly unlikely instead it was simply that a sudden weight of interest in the story coupled with two effects (below) caused the star's name to trend with reports that it was being tweeted sixteen times per minute. What caused this perfect storm?  



Well first there is the Streisand Effect. This states that when someone tries to suppress information online the internet interprets this as damage and routes around it - causing greater publication of the data. The second is the #IAmSpartacus Effect. This was seen clearly in the Paul Chambers case. Users of Twitter have an unusually strong community spirit. If you attack one you attack them all. When Schillings launched the Norwich Pharmacal Order on Twitter it meant that there was an attack on the community. People who would never name CTB began doing so in solidarity with the members under attack. Suddenly CTB's name was everywhere - across Twitter, across Wikipedia and elsewhere (even appearing in several jokes on online sick humour site Sickipedia). As a method to keep his identity private it was without doubt the worst thing he could have done.

What next then? Well the Norwich Pharmacal Order is still in play so the next move is Twitter's. Now as has been pointed out ad nauseum Twitter is not directly subject to the jurisdiction of the Courts of England & Wales but a source that I spoke to some time ago (makes me sound like a proper journalist) said that Twitter had indicated it would comply with recognised orders of any Court. Now though comes the litmus test. Will Twitter hand over account holder details to Schillings and the English Courts? If they do so they risk massive commercial damage as users leave Twitter over a perceived failure to protect their identity. If they do not they will be seen as failing to assist the Court in the lawful pursuit of its duties. For Twitter this really is a catch 22. They will hope that the reaction to the story causes Schillings/CTB to drop the action. This gives them an easy way out. If not they will have to decide whether to voluntarily accept the order or to reject it and make a first amendment argument. Watch this space.

How I could have saved CTB Time and Money (and Needless Publicity)

The CTB Twitter story is for me the perfect case study which finally proves my theory of symbiotic regulation.For some six years now my research has been focussed upon how one brings about effective regulation in Cyberspace.  Why do some attempts to use legal (or even extra-legal) controls fail while other succeed. I know that the traditional model (the Cyberpaternalist model) wasn't true. It suggested that control could be effected through a mixture of law and code - a perfectly controlled designed environment where you could only say or do what the regulators allowed. This only works if you imagine the internet is a communications device only. The internet though is made up of communities of people and communities require socio-legal controls to be effective. These ideas began to coalesce into my 2007 book The Regulation of Cyberspace.  You can read the preface and chapter one on my website. Basically my view is that online communities require to be controlled through regulatory settlements which are socially (politically) acceptable to that community. Otherwise the community will design a response to the attempted control which undermines the attempted control and often (as we see here) overwhelms it. The answer is symbiotic regulation - regulation designed to harness the political will of the community not one which attacks its core values. Two short papers with variations on the symbiotic regulation argument are available from my Selected Works page. They are Symbiotic Regulation and Regulating the Post-Regulatory Cyberstate.  

What should CTB have done from a Symbiotic point of view?

This is a difficult case as it depends upon his aims. I would have managed his expectations and said he was unable to keep his identity secret. In order he should do the following:

  1. Apologise to his wife and take his family away from the UK for a short period (as John Terry did during the Veronica Perroncel story).  
  2. Make a public statement admitting the affair (assuming it is true, otherwise deny) and asking for people to respect his children's privacy - (this kicks in the PCC Rules and appeals to the family responsibility sentiments of most Twitter users. Although they feel no sympathy for the player they do for his family, especially his children). 
  3. Wait about 10 days and bring the family home.
This wouldn't prevent the children being exposed to the story, the only thing which would have prevented this is not to have an affair in the first place. But in the ten days his family were away much of the story would have burnt itself out. Obviously there would be media interest in the family's return to the UK but the PCC rules would protect the children to some extent. The online forums and Twitter would though mostly have moved on to something else - probably the actor/prostitute story (have you noticed it has started to fade away because they didn't seek a Norwich Pharmacal?)

Final Thoughts

In the 1890s it was the Box Brownie camera. Today it is Twitter. The relationship between technology and privacy will always be problematic.  What though can we learn from the past? Well as Mark Easton points out the famous Warren and Brandeis Harvard Law Review article The Right to Privacy found the highly influential lawyers railing against the invasive effect of the portable camera. They noted that "modern enterprise and invention" were being used by the press "to satisfy a prurient taste" for the details of sexual relations. This they said was "overstepping in every direction the obvious bounds of propriety and decency" and argued the press had "invaded the sacred precincts of private and domestic life".


One hundred and twenty one years on how have things improved? Have the press taken account of the Warren and Brandeis argument? Are things better? Let's look and see? 




Final thought. Based on this is there any way you can imagine the blunt instrument of the court order will be effective on Twitter?

The Problem of Gossip, Rumour, Privacy and Superinjunctions

Super-injunctions are the order of today, with the media obsessed currently over the Twitter breaches which although specifically highlighted in the last 48 hours have been ongoing for the last few weeks ever since the initial rash of reports that there were three injunctions involving a married footballer who had had an affair with a former big brother contestant, a "leading actor's" visit to a prostitute and that a TV actor had an affair with a colleague.  If you want to read the standard commentary then go to any one of a hundred news sites who are foaming to give you the clues to unmask these people (and others including the second footballer who had an affair with model Kim West, a chef who used the process to gag reports of an ongoing tribunal, the TV personality caught in pictures enjoying the company of another celebrity and the actor/comedian who enjoys something more "interesting" in the bedroom) - a good example of such a story is this one in the Daily Mail. A few journalist are actually doing a fair job of analysing the legal position such as Dan Sabbagh's story for the Media Guardian but I'm here to argue something different: super-injunctions are harmful to privacy rather than a positive defence of it.

Why are super-injunctions counter productive?


Let's look at what has happened in the four weeks since the original stories surfaced. Some things have been revealed such as Fred Goodwin had an injunction preventing him from being named as a banker in a story relating to an affair and Andrew Marr had a long held injunction preventing him from being named in relation to a child born of a woman he had had an affair with. What would have happened without these injunctions? The aphorism is today's news tomorrow's chip paper. We would have had a very short splash in the papers about these affairs and then probably they would have been forgotten (footballers and politicians aside news of affairs tends to quickly fade from the memory) - who remembers honestly that Ralph Fiennes split from his long term partner Francesca Annis after a rumoured affair with a Romanian singer (or that he met Annis while still married to Alex Kingston) - if you argue that was five years ago what about this story from March this year? Honestly did you remember them?

The problem of the injunction (super or otherwise) is twofold: (1) It extends the life of the story and (2) It causes anguish to others (in breach of their Article 8 Right). Both these have the same root cause - the human desire for knowledge. We crave what we do not have, what we do not know, but quickly forget these things when we have them. How often have you desired the latest gadget, craved it, and after you have bought it found it quickly relegated to the sidelines as you more on to the next new thing? The same is true of knowledge and information - we always want what we're told we can't have. The injunction makes it forbidden knowledge so we know we must have it. If you knew (or know) who the actor or the comedian is you would know it would have gone the same way as the story from March which I referred to earlier. In fact the actor/comedian story only came about allegedly because he was so obscure and insecure he said to a prostitute the immortal line "do you know who I am?" Daniel Solove knew about this in 2007 when he wrote his book The Future of Reputation: Gossip, Rumour and Privacy on the Internet. 


Solove noted that one of the core activities of humans is gossip. We all do it. Stereotypically woman gossip in the hairdressers or over coffee while men gossip in the pub. Today we have built a global gossip engine (it's not the World Wide Web more the Global Gossip Gadget. We continually update Facebook with comments about people we know, we Tweet things we know (or think we know - see below), we Blog, we Comment, we Gossip. The problem is gossip is not based upon factual knowledge but about innuendo and rumour, this causes potentially much greater harm than simple facts. The danger is that innocent parties get harmed.


Why are super-injunctions harmful to privacy?


On Sunday a new Twitter account was opened by someone who thought they knew all the facts about current injunctions. I can't tell you who they are or the address of the account. I can't tell you what they said but it looks something like this:
The Redacted Twitter Feed

















The problem is they didn't know it all and an innocent party was dragged in. They claimed (and I can report this) that the TV personality caught in embarrassing photographs with another celebrity was Jeremy Clarkson with Jemima Khan. This is not true yet two innocent people have been caught up in a glare of publicity because a third party wishes to deflect publicity from themselves. As Khan tweeted yesterday:
I hope the people who made up this story realise that my sons will be bullied at school because of it. Plus I'm getting vile hate tweets.
This is the crux of the problem. The injunction has not protected the net privacy of everyone involved instead it had moved the privacy invasion from one person to another - it is a re-allocation of the effect and as there is more interest in the story due to the "illicit nature" of the story the net invasion of privacy is magnified. One person (who I cannot name for legal reasons) is protected (for the moment eventually the truth will out) while another has her private life unnecessarily infringed to harmful effect for her and her family. Why should Jemima Khan suffer because another celebrity wants to protect his family? The question therefore is "should judges take into account the possible effects on third parties before awarding such injunctions?"

Jemima Khan is not the only one to suffer. The "well known actor" who visited prostitute Helen Wood and who "kissed like a virgin" has been named extensively on Twitter and Wikipedia. Despite this there are still today people who are falsely naming him to be Ewan McGregor. This was due to the way the media reported the story at the time. They said he was a world famous movie star who was very protective of his family who had done TV work. This led to rumour sites like this one recklessly suggesting Ewan McGregor as he was one of the few internationally famous UK actors who fitted the bill. It never was Ewan McGregor yet his family have been subject to a month of rumour and speculation and because he is famously protective of his private life unlike Jemima Khan he has stayed quiet - which for some people mean it must be true. Another family's privacy destroyed by an injunction.

Of course these two are not the only two affected. Also harmed have been Gabby Logan and Alan Shearer.

I'm going to finish with words I never thought I would write. I agree with much of what Steven Glover has written in the Daily Mail.  I do not agree though that what I argue should be a green light for the mainstream media to do what they like. Bizarrely I may be arguing for super-injunctions over injunctions as if we are never aware of the injunction there is no gossip. The problem is these types of injunctions are rarely watertight and once their existence becomes known the harm to others begins. You cannot ban gossip and gossip based on incomplete knowledge will almost always harm innocent parties. Judges need to consider this (a) in decising whether to grant an injunction and (b) deciding what details about it may be reported.

Freedom of Information in the WikiLeaks Era


Sorry for the long silence. I have been busy though and more frequent posts should follow. I have a couple of upcoming seminars/symposia which like this one I will post on after the event. On Friday I'm speaking at the TILT/Academie voor Wetgeving Symposium "Regulation by Technology" in The Hague and on 23rd February I'm speaking at the UWE event "Cloud Computing: Legal, Organisational and Technological Issues".

This post though is about an event I attended on Monday evening. the rather excellent BIICL debate on Freedom of Information in the WikiLeaks Era. Surrounded on all sides by expert ex tempore speakers, and given that as an academic I can only speak in 50 minute blocks I decided to write down my talk in advance. It was still a little long so thanks to Joshua for allowing me a degree of freedom. Those of you there on the night heard an edited version to get it (nearly) to 10 minutes. Below is the full unedited version.

Freedom of Information in the WikiLeaks Era – The Need for Balance

Introduction

I am pleased to be here tonight among a panel of expert commentators. I believe the role of the academic on occasions such as this is to provide the broader viewpoint that is afforded by the freedom of not having to support either a client viewpoint or a professional one. Although all the panellists tonight are speaking a private capacity their views are always going to be the product of their experiences and one of the vital roles of academia is academic freedom to explore the unsaid and sometimes unsayable. Thus I start, I suspect from a radically different position to the many of the others on the panel. 

My starting point is Wikileaks is bad for democracy, bad for freedom of information and generally an example of the type of behaviour in the information society which fails to comply with socially normative behaviour outside of a small self‐referential grouping as predicted by Cass Sunstein in his book Republic.com. With my position clearly set out I should say I will also try to position myself within the panel but of course at the time of preparing this I had not had the benefit of the presentations of the other speakers – hence why I have no doubt been scribbling notes in the margins during the preceding presentations.

Wikileaks, Cablegate and Freedom of Information

Let me begin by turning to the two things which are at the focus of this evening’s event: the nature of Wikileaks; and the legal principles of Freedom of Information.

Wikileaks describes itself as “a not‐for‐profit media organisation [whose] goal is to bring important news and information to the public.” They employ a simple mechanic: “We provide an innovative, secure and anonymous way for sources to leak information to our journalists (via an electronic drop box).” The site then goes on to (in a very self congratulatory way) describe the value and importance of Wikileaks noting: “WikiLeaks has sustained and triumphed against legal and political attacks designed to silence our publishing organisation, our journalists and our anonymous sources. The broader principles on which our work is based are the defence of freedom of speech and media publishing, the improvement of our common historical record and the support of the rights of all people to create new history. We derive these principles from the Universal Declaration of Human Rights. In particular, Article 19 inspires the work of our journalists and other volunteers.”

Let’s step back for a minute and look at how Wikileaks works. Material is placed in their care (anonymously); Wikileaks then investigates that material to check veracity and accuracy. Then assuming the material passes these tests it will be published usually alongside a journalistic article about the material. Where does this material originate from? From anyone, anywhere globally, for as Wikileaks acknowledges: “we operate a number of servers across multiple international jurisdictions and we do not keep logs. Hence these logs cannot be seized. Anonymisation occurs early in the Wikileaks network, long before information passes to our web servers.”

With this in mind with whose legal norms apply? And whose social norms? Legally they are making use of what Post and Johnson called the “borderless nature of the internet”. As they indicated, as long ago as 1996, “Cyberspace radically undermines the relationship between legally significant (online) phenomena and physical location. The rise of the global computer network is destroying the link between geographical location and: (1) the power of local governments to assert control over online behaviour; (2) the effects of online behaviour on individuals or things; (3) the legitimacy of the efforts of a local sovereign to enforce rules applicable to global phenomena; and (4) the ability of physical location to give notice of which sets of rules apply.” This allows for an effect called regulatory arbitrage, where online organisations or even individuals may effectively absent themselves from the legal or social norms of any individual state (or even bloc of states) by the use of remote servers, mirrors and other tools.

Let us look at the role Wikileaks plays against this backdrop. Wikileaks claim they are a media organisation with free speech at their heart. It is of course trite to state that freedoms are won not given, and that freedoms are earned not expected. One of my favourite quotes is that found in the work of comic book artist Stan Lee “with great power comes great responsibility”, itself a reworking of the biblical quote “much will be required of the person to whom much is given” from Parable of the Faithful Servant

This is a statement media organisations must remember as they do not operate outwith legal or social norms. A UK‐based media organisation may make use of many tools to ensure that “publishing improves transparency”. They may make a Freedom of Information Request under the FOIA. Generally under s.1 of the FOIA: “Any person making a request for information to a public authority is entitled: (a) to be informed in writing by the public authority whether it holds information of the description specified in the request; and (b) if that is the case, to have that information communicated to him.”

Now of course we are well aware of a number of restrictions to this. For example under s.27 the information may be prevented from being released if “its disclosure under this Act would, or would be likely to, prejudice (a) relations between the United Kingdom and any other State, (b) relations between the United Kingdom and any international organisation or international court, (c) the interests of the United Kingdom abroad, or (d) the promotion or protection by the United Kingdom of its interests abroad.” Thus the Embassy Cables would probably have been exempt from a FOIA request in the UK. What about whistle‐blowing defences? The Public Interest Disclosure Act made amendments to the Employment Act 1996. This protects certain forms of disclosure where the employee believes illegal or harmful activity is taking place and where they fear victimisation or concealment of evidence by their employer. This is an extremely strict defence and usually requires the employee to speak to their employer, an external prescribed person (such as a regulator) or their legal counsel before public disclosure is justified. Wikileaks seems not to be a whistle‐blowing site in the traditional sense of the term as we would use it in UK legal normative language.

What is Wikileaks then in legal normative terms? It seems to me it is an Information Society Service Provider. In other words it is an online information provider. It is not (in my view and one I accept may be challenged by others) a media outlet. Why not? In my view a key characteristic of a media outlet is that it complies with legal and social normative principles: that is it submits itself to the courts in claims of defamation, invasion of privacy, copyright infringement etc. and to the necessary regulatory body – the PCC perhaps – in other matters. It seems to me that Wikileaks subverts both forms of regulation, legal and social‐normative by exploiting the regulatory arbitrage effect. Now, in the second half of my talk I will argue this is potentially harmful and damaging to society and we need to revisit this.

States and Privacy

We must start from the principle that there are no absolute freedoms. My right to privacy may be subverted in the interests of national security, or criminal investigation or to collect taxation etc. Similarly my right to free expression does not encompass a right to language likely to cause immediate harm – shouting “fire in a theatre”, which incites hatred or violence, which libels or which infringes another’s copyright. Sticking with these two “basic” rights – one of which Wikileaks brings to the fore and another it relegates to the background, we find that there is a natural tension between the two. Our right to free expression has a natural tension with our right to privacy – see Von Hannover, Campbell v MGN or Mosley v News Group Newspapers. The balance is struck in a democratic society by a mixture of legal and social norms with the preponderance of weight being on the legal norms. Social norms though do play a role: see for example the different way illegally obtained material is covered by the majority of media outlets. Material illegally obtained by the News of the World via phone hacking in breach of the Regulation of Investigatory Powers Act and the Data Protection Act is (rightly) vilified by columnists in popular newspapers; while material (probably) illegally obtained by Private Bradley Manning forms the focus of a widespread series of publications by a number of leading global newspapers and is lauded generally by press outlets – why? The only distinction seems to be the socially normative distinction – the first is not socially acceptable as it involves the illegal interception of personal communications while the second involves communications between states. Maybe as other panellists or audience members would like to point out this may be a legal normative distinction as under Art.8 of the ECHR “Everyone has the right to respect for his private and family life, his home and his correspondence.” i.e. the legal normative right is a personal right and not open to states‐actors.

Seven years ago I predicted exactly this issue would arise (at that time in relation to blogs and rolling news as I could not foresee then Wikileaks) when I wrote a paper entitles “Should States Have a Right to Informational privacy?”. We think of states as being non‐human actors. As such they do not benefit from traditional privacy rules designed to protect individuals, but is this so? The internet society is markedly different from days past where the Westminster Lobby or the Whitehouse Press Corps worked closely with government (admittedly often too closely) to protect the government from the full glare of scrutiny while policy was made and deals were done. Why do we protect individual privacy? The best work on this in my view is Alan Westin’s 1967 work “Privacy and Freedom”. Here he argues that “man’s need for privacy may be rooted in his animal origins”; “the animal’s struggle to achieve a balance between privacy and participation provides one of the basic processes of animal life. In this sense, the quest for privacy is not restricted to man alone, but arises in the biological and social processes in all life.”

Such a definition of privacy suggests that the need for individual and group privacy is a bio‐social function: in part a biological response to certain stimuli such as a reaction to bereavement or a precursor to procreation. Also it is societal: reflecting the social norms of the community, family and individual. As Westin says, “limits are set to maintain a certain degree of distance at certain crucial times in his life.” This definition seems to offer little scope for extending protection to non‐human actors such as States. As non‐biological actors, States do not possess the necessary biological element. This suggests it would require an accepted social norm, to extend privacy protection to States. Although historically there appears to be little demand to do so, it my contention that it may be time to reconsider our social contract with the State. As Westin himself had noted, there is a need for privacy protection to be offered to organisations as well as individuals. In particular privacy is necessary during the early stages of policy formulation, or in Wdstin’s terminology “their staging processes”. The danger is that with the changes to society brought about by the rise of the information society we may now not be affording the necessary level of privacy protection to State actors to allow them to properly carry out this staging process.

Prior to the advent of digital media, the relationship between the State and its citizens was well defined by a clear social contract. Representatives were elected to carry out the wishes of the public. These representatives were primarily scrutinised by other elected, and in the case of the House of Lords unelected, representatives. External scrutiny came from a variety of sources, all of which were to a greater or lesser degree in a symbiotic relationship with representatives. Primarily, this external scrutiny was effected by the Fourth Estate. Media organisations, be they print or broadcast media, employed lobby correspondents: the relationship between representatives and lobby correspondents being a closely defined one. If a journalist failed to respect the privacy of any representative, particularly a member of the government, sanctions would quickly follow. As editors had a duty to protect their lobby correspondents, they would often self‐censor any story which breached this relationship of trust. In this fashion the social contract was respected by both the State and the media. Secondly, a degree of information would be put into the public domain through publications such as Hansard and through official reports and papers. Such reports and publications, though widely available in public libraries, were little read. Expensive to buy, individuals wishing to read such documents usually had to obtain them through their library, frequently encountering a delay should the report prove popular. In effect these reports were mostly only read by two sets of interested parties. The first of these were journalists, who as already discussed were required to respect the privacy of representatives in order to cultivate access. The second were academics. Scholarly comment on government initiatives and policy implementation would in time follow from professors of politics, sociology, government and law. Such comment was though of little impact upon the privacy rights of the State for three reasons. Firstly, they were usually generated by reference to such publicly available documents as those discussed above: thus the data carried little privacy implications. Secondly, the extended time before publication of such reports usually meant that the “staging process” had long since concluded and finally, they were overwhelmingly comment written by academics for academics: the readership of such commentaries being on the whole extremely narrow.

The advent of the always on, digital society has blasted this social contract wide open. Maybe this is a good thing – the expenses scandal showed how the agreement had arguably got too cosy, but just because we can point to one positive example does not make a statement proven. The Wikileaks cables have arguable undone a considerable amount of goodwill and diplomacy. Wikileaks argues that “Publishing improves transparency, and this transparency creates a better society for all people.” Not necessarily. Publishing may lead to greater obfuscation. In future records may not be kept at all or may be “spun” to give a different impression should a leak occur. This we have already seen. In response to the “greater transparency” of 24 hour news the UK Government has employed more “communications directors” and staff and less civil servants. We know their names: Alastair Campbell, Charlie Whelan, Damian McBride, Andy Coulson. All are massively controversial individuals. All did the same job: spin the news to suit their masters. Spin is the natural response of governments to invasions of their privacy. Spin does not improve transparency. We cannot know what harm the cable gate issue may do. Already there is evidence it may have harmed a carefully nurtured position with Beijing over North Korea, more harm will undoubtedly have been done though. We should not publish because we can but because it is in the interests of society to do so. This means complying with legal and social normative principles.

 In terms of the UK position I believe Wikileaks fails to comply with the former; its compliance with the latter is a matter for debate.