HOPE REWARD OPPORTUNITY Australian Government-Attorney General Department Telecommunications Sector Security Reform (TSSR) Initiative, July 2015 From: Selva (Kidnapillai Selvarajah) Remarks: My views expressed in this submission do not necessarily reflect the views of my past employers or present employer or any other community or voluntary organisations that I am currently involved. Note: This submission can be made to the public after removing my residential address Due Diligence -> Submission Summary The role of the government should be always both as a Facilitator and Enabler of the Technological Innovation in the Telecom Market By enacting this TSSR package, apparently an attempt has been made to redefine the role of the government in a competitive telecom market Whilst the national security has been challenged by the technological innovation however TSSR is not the best way to address such challenge in today’s context Telecommunications Act 1997 was amended in 2004 to provide a power for the Attorney-General to direct a person to prevent or cease the supply of a telecommunications service on national security grounds. It has not been used so far. Law enforcement agencies already have enough powers to access telecom data, issue data preservation notices and seek a warrant to intercept communications. Based on simple analysis using the G-TIPS model(Government(TSSR) = f(T,I, P,S)), it seems we have not tried to strike a right balance among the parameters, viz, Technology, Innovation, Privacy, and Security in this reform package TSSR will not enhance the $45billion Telecom industry to attract more investment TSSR package will hinder technological innovation in the market Cloud computing and big data will be discouraged if we proceed with this reform Apparently, the intent of the TSSR is just to give more intrusive powers to a few government security agencies. According to Article 17 of the United Nation’s International Covenant on Civil and Political Rights, everyone has the right to privacy and protection of the privacy by law. Did we consider in this TSSR initiative? I strongly believe that Regulatory Impact Statement (RIS) has not taken into account the full impact of the regulatory cost relating to this reform package We have tried to provide invasive powers for Government via this reform to intervene in the commercial operations of telecom operators, probably not seen in any Liberal Democracy in the modern internet society Finally, are we trying to invent a new role for the Government in the competitive telecom market by enacting this package as a Legislation? Exposure Draft: Telecommunications and Other Legislation Amendment Bill 2015 An Individual Submission for Consideration Background: The Parliamentary Joint Committee on Intelligence and Security (PJCIS) undertook a review of potential reforms to Australia’s national security legislation and published its Report of the Inquiry into Potential Reforms of Australia’s National Security Legislation. I have made an individual submission to this inquiry and made my concerns known to the members of the committee. Following the public consultation process, the PJCIS recommended that Government amend the Telecommunications Act 1997 to establish a security framework to protect the Australia’s telecommunications infrastructure. The joint media statement released by both the Attorney-General and the Minister for Communications stated that Australia’s economic prosperity and the wellbeing of our people are heavily dependent on the telecommunications networks and data flows across them. Therefore both believe that it is vital to maintain the security and resilience of the telecommunications networks. The main intent of this proposed legislation will require telecommunication carriers, carriage service providers and carriage service intermediaries (C/CSPs) to protect their networks from unauthorised access and interference. It will also provide government with new regulatory powers to request information and to issue directions to help promote compliance. It will formalise and enhance existing information sharing and relationships between Government and C/CSPs to ensure greater consistency, transparency and accountability for managing national security risks across all parts of the telecommunications sector. Role of the Government: Continued unprecedented technological development, driven by cloud-based services and the introduction of more powerful smart phones, sensors, big data and Internet of Things (IoT) is set to accelerate the technological development and the world has become a Networked Society. The Telecom Market has seen the role of the government both as Facilitator and Enabler in these technological advancements and innovation. By considering the move of the government to amend the Telecommunications Act 1997 to strengthen the current framework for managing national security risks to the Australian Telecommunications Network, I doubt whether the government is trying to redefine its role in the telecommunications Sector. We agree that the national security has been challenged by the technological innovation but I still question whether the proposed Telecommunications Security Reform Initiative is the BEST way to address this challenge, violating individual Privacy and deterring Innovation by the Telecom Operators and thereby hindering the overall development of the Telecom and Information Technology Sectors. Have ever thought this before embarking our journey in this TSSR initiative? Telecommunications Act 1997: Due to the enactment of the Telecommunications Act 1997, the telecom sector has gone through a spectacular development and advancement in Australia. The post July, 1997 telecom regulatory framework for the Australian telecommunications industry could be described as technology neutral, market-driven and emphasising a form of self-regulatory framework. The Telecommunications Act 1997 was amended in 2004 to provide a power for the Attorney-General, in consultation with the Prime Minister and Minister for Communications, to direct a person to prevent or cease the supply of a telecommunications service on national security grounds. Since its enactment, the power has not been exercised. As per Attorney-General Department notes, our Security agencies rely on the power in section 581(3) as a basis for engagement and encouraging cooperation. The government believes that this approach is risky for numerous reasons and involves often lengthy and costly engagement (for both Government and industry) on a case-by-case basis. Recently enacted the Telecommunications (Interception and Access) Amendment (Data Retention) Act 2014 will force telecommunications operators and internet service providers (ISPs) to collect and store for two years an enormous amount of data about their customers' communications. If you scan through the public consultation and the submission made PJCIS, the majority of the stakeholders are against all these changes in the law. Even media has reported that even the normally docile Inspector-General of Intelligence and Security has flagged concerns about these expanded powers last year. I believe the only people pushing for these amendments are a small set of government agencies. It is to be noted here that the law enforcement agencies already have the power to access telecommunications data, issue data preservation notices and seek a warrant to intercept communications. With the passing of the Telecommunications (Interception and Access) Amendment (Data Retention) Act 2014, they also have data retention powers. We believe that even they have extraordinary powers, and received more “Special Intelligence Operations” provisions which makes it legal for ASIO officers to break the law, including lying to Parliament and the courts. No tangible evidence has been provided as to why any these new powers are actually necessary, including interfering the commercial operations of the telecom networks. Further, it is still not clear why the existing legislative provisions are insufficient and why we really need this current Telecommunications Sector Security Reform Initiative? The current TSSR would have an impact on the Telecom Industry that has an annual turnover around $45Billion. We hope the intention of TSSR is to enhance $45billion industry to attract further investment but not interfere in the commercial operations of the network. G-TIPS Model: The Government should always try enact any technology related legislation by considering the impact on at least four vital parameters, viz, Technology (T), Innovation (I), Privacy (P) and Security(S). It is very hard to compromise among these parameters when addressing the national security and related risks, but we believe we should be able to strike a right balance in this regard. Let us analyse the major provisions of the reform package using this simple but logical model G(TSSR) = f(T,I, P,S) that could be used to arrive at a conclusion whether this new legislation really striking the right balance required to mitigate the national security risks arising out from the telecommunications networks. Technology and Innovation: Technology and Innovation can be frustrating to watch in action. We have seen the Australian Telecommunications Networks have been continued to adopt new technologies in the market, launching innovative products and services. The ability to innovate has become a top priority for telecom operators in the Australian market. The speed at which innovation occurs is accelerating, and consumers are hungry for the new products, services and experiences coming their way. The responsible government should recognise the competitive nature of the Telecom business. At present, due to the fierce competitive nature, the telecom market presents considerable challenges to telecom operators. The major telecom operators, viz Telstra, Optus and Vodafone have been looking at the ways to reduce the costs without degrading the quality of service provided to the consumers. When there are cost pressures and telecom operators tend to look for options such as outsourcing and how this is feasible under the proposed TSSR package? The scope of telecom market innovation has also expanded. It is no longer just a case of pushing products out of the market but, rather, of creating value for customers by personalising the entire customer experience. So forging an organisational culture that promotes technological innovation, getting closer to customers to find out what they really want and directing your innovation accordingly, is more important than ever. We wonder whether telecom operators will have free hands for these types of market innovation whilst tolerating the interference of the bureaucrats attached to the Attorney-General Department who are expected to control the global supply chain for Telecommunications equipment. Do we have any qualitative and quantitative analysis on the impact of the TSSR in terms of new technology introduction, outsourcing options, innovation in products and services and choosing only particular type of vendors(I guess the Australian government probably would not like to have a particular vendor/vendors due to geo-political reasons) in the supply of equipment? I have extracted some data from the web site of the Department of Prime Minister and Cabinet re the Regulatory Impact Statement (RIS) that was prepared by the AttorneyGeneral’s Department and assessed as compliant and consistent with best practice by the Office of Best Practice Regulation (OBPR). The RIS estimates the average annual additional regulatory cost to be $220,000 a year and identifies offsets. The OBPR has agreed to the regulatory cost and offset estimates. I strongly believe this RIS cost of $220,000 has not taken into account the full regulatory impact of the proposed by this legislation. Privacy and Security: Advances in communications technology, including the internet access, have dramatically changed the way we collect and use our personal information. Our personal data can be transferred universally and more rapidly now than ever before. This has influenced the way we perceive about our individual privacy and the protection of our personal records. The expectations relating to individual privacy have exponentially increased. It is the duty of any government to seriously look into this enhanced expectation of the citizens safeguarding the individual privacy. With the enactment of the Telecommunications (Interception and Access) Amendment (Data Retention) Act 2014, we have expanded the ability of our law enforcement agencies to monitor various forms of communications activities including online internet access would harm individual privacy, anonymity, and free expression. According to Article 17 of the United Nation’s International Covenant on Civil and Political Rights, everyone has the right to privacy and protection of the privacy by law. It would become a hindrance for us to use the various technologies to undertake our legitimate tasks on a daily basis. I would like to pose a few thoughts on the privacy and the national security that could be relevant to this TSSR package: Will the imperatives of individual privacy and national security be reconciled after enacting this package? Is it possible to enhance national security by regulating the global supply chain of the telecommunication equipment? Will this TSSR package conducive to the Coalition government BIG Data idea and the Digital Transformation Office Initiative to conduct the affairs with citizens via electronically? Will the TSSR override our civil liberties in favour of national security after the enactment? Will the proposed reform package protect our civil liberties that are part of any Liberal Democracy? I believe the Coalition government in particular the current Minister for Communications Malcolm Turnbull MP have had a strong view that the measures such as Internet Filtering intended to provide a safe online passage protecting our kids could end up tarnishing the internet freedom that we have been enjoying. It seems that current TSSR package is worse than the introduction of Internet Filtering and I wonder how we still going ahead with this reform. Conclusion: Australians always have the view that national security always paramount importance to conduct their socio-economic life unhindered. We acknowledge the importance of the objective of protecting Australian telecommunications networks and the date flows across them. We should recognise that the owners of the telecom infrastructure have a strong interest and demonstrated expertise in ensuring Australia’s Telecom networks are secured and resilient not only in providing the services to their consumers but also supporting the other critical infrastructures. The proposed Telecom Security Reform Package goes too far in the name of national security by creating wide-ranging powers for a few security agencies and AttorneyGeneral Department to intervene in the affairs commercial operational decisions such as outsourcing, buying equipment and choosing equipment vendors and requesting commercially sensitive information from vendors involved in the telecommunications industry. Telecom Operators normally sign NDA (Non-Disclosure Agreement) with vendors who are contracted to supply the equipment and services for the smooth functioning of the telecom networks. By enacting this TSSR package, we are creating another LAYER of UNWANTED COMPLEXITY for the telecom operators. Probably, we have tried to create intrusive powers for Government to intervene in the commercial operations of telecom operators, not seen in any Liberal Democracy in the modern internet society. Not last but least, we are we trying to invent a new role for the Government in the competitive telecom market via this reform. All the Stakeholders except a few government security agencies have not convinced that there are sufficient grounds to warrant the proposed TSSR initiative. The costs and intrusion into the commercial operations of Australian telecommunications operators and their equipment vendors that they represent would be staggering. Do we really need this package? Thank you.