Police ask a provider for bulk interception of communications without discussing lawful authority or safeguards. At concept level, what should a privacy professional emphasise?
Select an answer to reveal the explanation.
Short Explanation
Wiretapping-scale access is not a polite favour you grant because someone has a badge. Interception sits under strict legal authority and safeguards. Bulk “just send us everything” without that process is a non-starter.
Full Explanation
When police ask a provider for bulk interception of communications without discussing lawful authority or safeguards, a privacy professional should emphasise at concept level that interception of communications is highly regulated and requires lawful authority plus appropriate safeguards; bulk requests cannot skip that analysis. Interception is not a courtesy favour granted because someone has a badge—it is a fundamental-rights flashpoint. Saying providers may approve any bulk interception request as a courtesy to law enforcement fails legality. Claiming interception becomes lawful solely because the requester is a public authority fails—authority plus process and safeguards are required. Asserting the GDPR always permits unrestricted interception if labelled ‘security’ fails by turning a slogan into a blank warrant. Exam caveat: detailed interception regimes are often in national laws and the Law Enforcement Directive context; CIPP/E expects the high-level insistence on lawful authority and safeguards rather than informal bulk dumps. Operational check: require written legal process, involve counsel before disclosing content or metadata at scale, log requests, refuse informal bulk asks, and document the legal basis relied upon.