from @privacyint
As states around the world seek to expand their surveillance capabilities and harness the power of data to deliver public services, they are often tempted to use the services of private technology companies – through public-private partnerships (‘PPPs’). These collaborations are taking on a new form, diverging from traditional public procurement relationships and becoming much more co-dependent. The privatisation of public responsibilities requires more scrutiny than ever to ensure human rights are not quietly abused. This is particularly true when the systems deployed are used for surveillance and mass processing of personal data. Private companies have been known to play with the limits of what can legally and ethically be done with individuals’ identities and data, without the same level of accountability required of public authorities – a significant affront to fundamental rights when used to deliver a public service. Civil society has the power to expose the risks and issues that emerge from these partnerships, through investigation and public reporting. But identifying concrete risks and potential human rights abuses is not an easy task for anyone as it requires a multilevel understanding of the tech, law and governance mechanisms involved. Building on our own investigative work and on the expertise of our partners around the world, Privacy International has designed a handbook for civil society organisations, non-governmental organisations, academics and individuals to navigate these partnerships, providing keys to obtain crucial information, understand the technology at stake and identify privacy and governance concerns. To support anyone trying to find out more about a public-private surveillance partnership and identify key risks and issues, this handbook is divided in to four main sections: the first section covers investigative risks, the second section explains how to gather key information related to the partnership through a variety of means, the third section provides some methods to investigate the technology at play in the partnership, and the fourth section looks into governance concerns and safeguards, including international best practice, data protection issues, and other governance mechanisms. The checklists provided at the end of this handbook can be used as an overview of key things to investigate, and to help you keep track of your work. This handbook is intended to help you: Investigate a public-private partnership, find out relevant information Ask the right questions to the partners involved (private and public) Identify concerns related to the technology involved and the governance of the partnership We have separately developed a set of safeguards for public-private surveillance partnerships, that you can use for advocacy ideas once you have identified concerns through this handbook. Download the full handbook (pdf) Download the checklists (pdf) Télécharger la version française du manuel (pdf) Descargar la versión completa del manual en español (pdf) قم بتحميل النسخة العربية الكاملة للدليل (pdf) Acknowledgements With thanks to our partner organisations: ADC, TEDIC, and another organisation that wishes to remain anonymous who contributed to this handbook. The Association of Technology, Education, Development, Research and Communication (TEDIC) is a Paraguayan NGO founded in 2012 that develops open civic technology and defends digital rights for a free culture on the internet. Asociación por los Derechos Civiles (ADC) is a civil society organization based in Argentina that, since its foundation in 1995, works to defend and promote of civil and human rights in Argentina and Latin America.