SoylentNews

Arthur T Knackerbracket [soylentnews.org] writes:

Story automatically generated by StoryBot Version 0.2.0a (Development).
Storybot ('Arthur T Knackerbracket') has been converted to Python3

Note: This is the complete story and will need further editing. It may also be covered by Copyright and thus should be acknowledged and quoted rather than printed in its entirety.

FeedSource: [TheRegister] collected from rss-bot logs

Time: 2016-09-19 00:50:52 UTC

Original URL: http://www.theregister.co.uk/2016/09/19/unis_drop_tech_services_to_dodge_metadata_retention_obligation/ [theregister.co.uk] using UTF-8 encoding.

Title: Unis Drop Tech Services To Dodge Metadata Retention Obligation

--- --- --- --- --- --- --- Entire Story Below --- --- --- --- --- --- ---

Unis Drop Tech Services To Dodge Metadata Retention Obligation

Arthur T Knackerbracket has found the following story [theregister.co.uk]:

When Australia's federal government finally revealed who had been given money to help pay for metadata retention efforts [theregister.co.uk] The Register was surprised to see eight Universities on the list.

So we've asked around and figured out why.

Universities have a metadata retention obligation thanks to the Section 187B(a) of the Telecommunications (Interception and Access) Amendment (Data Retention) Act 2015 [legislation.gov.au] which explains that service providers other than carriers and ISPs don't have to retain metadata the comms service they provide: (i)  is provided only to a person's immediate circle (within the meaning of section 23 of the Telecommunications Act 1997); or (ii)  is provided only to places that, under section 36 of that Act, are all in the same area; and

"Immediate circle" includes [austlii.edu.au] staff and students, so WiFi for students doesn't create a metadata retention obligation for the university, although of course the University's internet service provider does have that obligation.

Anne Kealley, CEO of the Council of Australian University Directors of Information Technology (CAUDIT), told The Register that entities like a campus bookstore or privately-funded research outfit with on-campus offices fall outside the immediate circle. That kind of outfit often resides in university buildings and has little alternative other than to use university-provided telephony services. Contractors and charities are also beyond the immediate circle. And so are services like email accounts provided to alumni.

Hence Universities' metadata retention obligations.

Kealley told The Register that once universities realised they had an obligation, some felt they were already compliant so did not need to apply for a grant to build retention infrastructure. Others said "we have an obligation but we are going to change who we are providing the services too, therefore we will remove our obligation."

"If they provided it to a shop on campus they could well say we are going to close out that service and ask the shop to arrange its own phones from now on."

Australia has 43 accredited universities. It is unclear how many had no metadata retention obligations and how many found ways to avoid those obligations.

Universities also had to figure out if their secondary campuses created metadata retention obligations. Universities operate multiple campuses for a host of reasons: they may need more space, want to target a different area or need facilities that can't be located on their main campus.

Whatever the reason, some universities found that their secondary campuses created metadata retention obligations.

Kealley said Universities negotiated with the Attorney-General's Department over those obligations and "did our best to broaden our broaden definition of immediate circle and same area."

"There was some frustration," she said.

And perhaps some frustration for Australian taxpayers as metadata retention grants to Australian universities are at least AU$3,121,270, even though their ISPs also have that metadata collection obligation. And of course the grants are not designed to cover the full cost of retaining metadata.

Original Submission