CALEA: Expensive data gathering
Wiretapping tools will never be needed by most service providers
'Net Insider
By
Scott Bradner
,
Network World
, 05/15/2007
- Share/Email
- Tweet This
- Print
A report about the deployment of telecom equipment that is compliant with the Communications Assistance for Law Enforcement
Act and another report about the use of legal wiretaps in the United States have just been published. Both come in time to
help explain the costs and usefulness of CALEA before the May 14 compliance deadline for its extension to facilities-based broadband Internet access and interconnected VoIP providers.
It is still less than clear who has to comply with this extension, but those organizations that must comply should have done
so by now.
(See "Do you have to be ready to be tapped?") If all the facilities-based broadband Internet access and interconnected VoIP providers that are supposed to be in compliance
actually are, it will be a big change from CALEA compliance in the phone world.
The Office of the Inspector General of the Department of Justice Audit Division recently published the results of an audit
of the state of “The Implementation of the Communications Assistance for Law Enforcement Act." This report notes that the FBI estimates only 10% to 20% of wireline phone switches are compliant with CALEA. In the wireless
world, 50% of the pre-1995 and 90% of the post-1995 switches are in compliance, and that is after the U.S. government spent
more than $450 million on the problem (mostly to pay for software licenses). Note that the new CALEA extension does not come
along with government money to support compliance like the original rules did.
Compliance is costly. The Justice Department audit report includes the example of a VoIP provider paying out $100,000 to a
third party just to be ready to comply. In addition, the VoIP provider has to pay for the modification of its own software.
If all of the U.S. facility-based ISPs, facilities-owning enterprises and VoIP providers have to pay the same, we are talking
about very big money. The audit also notes that there is no technical standard for CALEA implementation approved by the FBI
so any provider that has paid to get compliant may have to shell out still more when a standard finally gets approved.
So what are we getting for all this money? Coincidentally, the Administrative Office of the U.S. Courts has just published
the 2006 edition of its annual wiretap report that details the use on legal wiretaps in the United States. This report covers wiretaps authorized by U.S. State and Federal
Courts but not those authorized by the Foreign Intelligence Surveillance Act Court.
Comment