Now you [don't] see me: how have new legislation and changing public awareness of the UK surveillance state impacted OSINT investigations?
Now you [don't] see me: how have new legislation and changing public awareness of the UK surveillance state impacted OSINT investigations?
复制标题
现在你[没有]看到我：新的立法和公众对英国监控国家的认识的变化如何影响开源情报调查？
DOI：
10.1080/23738871.2020.1832129
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
Shere A
中科院分区：
文献类型：
--
作者：
Shere A
公开来源情报收集和分析技术由于其可获得性和特殊的确证能力，被来自各个领域的调查人员所使用。以前有人认为，拟议中的数据保护立法可能会使新闻自由降温，但没有研究评估这种改革对更普遍的OSINT能力的影响。欧盟的《通用数据保护条例》（GDPR）通过2018年的《数据保护法》（DPA）在英国实施，以保护个人数据免受利用。这项研究调查了公共和私营部门的16名OSINT收集和分析从业人员，以确定GDPR/DPA的实施对他们成功运营OSINT分析师的能力有什么影响，其次，他们是否注意到英国公众对监控状态和数字隐私问题的看法发生了任何变化。我认为，这项初步调查表明，GDPR只是建立社会期望和数字隐私法规的第一步。虽然已经报道了对OSINT实践的一些变化，但到目前为止，在GDPR/DPA出现一年后，对OSINT方法或分析的实质性变化几乎没有产生或似乎准备生效。
Open-source intelligence (OSINT) gathering and analysis techniques are used by investigators from a variety of fields, owing to their accessibility and exceptional capacity for corroboration. It has previously been argued that proposed data protection legislation can chill the free press, but there have been no studies assessing the effect of such reforms on more general OSINT capabilities. European Union’s General Data Protection Regulation (GDPR) was implemented in the UK through the 2018 Data Protection Act (DPA) to protect personal data against exploitation. This study surveyed 16 OSINT gathering and analysis practitioners across public and private sectors to determine firstly, what, if any impact the implementation of the GDPR/DPA have had on their ability to successfully operate as OSINT analysts and secondly, if they have noticed any subsequent changes in UK public perception around issues of the surveillance state and digital privacy. I argue that this initial survey shows that the GDPR is merely a first step in establishing societal expectations and regulations around digital privacy. While some changes to OSINT practice have been reported, to date few substantive changes to OSINT methods or analysis resulted or seemed poised to take effect, one year after the advent of the GDPR/DPA.