Vodafone Group Plc (VOD), the second-largest mobile-phone company, stirred an outcry from privacy groups from the U.K. to Italy as it revealed the extent of wire-tapping of users by governments around the world.
In its first law-enforcement disclosure report, Vodafone said 29 governments from Albania to the U.K. asked for access to its network or user data. The requests range from wiretapping, or intercepting calls and messages, to accessing data such as call and Web-browsing records, according to the report released yesterday, which covered the year through March 31.
The disclosure is the most extensive made by a global communications provider, even as carriers including AT&T Inc. (T:US) and Deutsche Telekom AG (DTE) have published similar reports after documents leaked by former U.S. National Security Agency contractor Edward Snowden exposed the range of government surveillance tactics and prompted a public backlash.
“It’s unacceptable governments carry out surveillance work so massive, widespread and indiscriminate as that revealed by Vodafone’s report,” Antonello Soro, chairman of Italy’s Data Protection Authority, said in a statement. “Just as it is not acceptable that governments have access directly to the phone calls of citizens outside the safeguards prescribed by law and without a measure of the judiciary.”
While in most countries Vodafone maintains full operational control over the infrastructure used to enable lawful interception, in “a small number of countries” the law dictates that authorities have direct access to an operator’s network. That means agencies can access networks via their own direct link, without asking for the carrier’s permission or help, Vodafone said.
Matt Morgan, a Vodafone spokesman, said six nations have direct access to Vodafone’s network. He declined to identify them because of potential repercussions for employees.
“This type of unfettered access permits uncontrolled mass surveillance of Vodafone’s customers and anyone in contact with them,” Privacy International, a London-based organization campaigning for privacy and transparency, said in a statement. “This is mass surveillance at its most severe.”
Several nations covered by the report, including Egypt, India and Turkey, forbid disclosing what type and how many requests carriers receive from authorities, Vodafone said. Vodafone said it doesn’t comply with demands that are unlawful.
Vodafone has more than 400 million customers in countries stretching from the U.K. to South Africa, India to Australia. The only carrier with more users is China Mobile Ltd. Vodafone this year exited the U.S. after selling its stake in Verizon Wireless to Verizon Communications Inc. for $130 billion.
“One year after the Snowden revelations, this shows again the scale of collection by governments,” European Union Justice Commissioner Viviane Reding told reporters in Luxembourg yesterday. “There should not be unregulated, direct and automatic mass access by law enforcement authorities to data of citizens held by private companies -- only where there is a clear suspicion.”
In Germany, Deutsche Telekom last month published numbers on data handed over to authorities. The country’s top prosecutor is set to start a formal investigation into whether U.S. intelligence agents tapped Chancellor Angela Merkel’s mobile phone, potentially heightening tensions between the two countries over spying.
Deutsche Telekom said it’s evaluating whether it will publish information about regulatory requests in markets outside of Germany, spokeswoman Alexia Sailer said by phone.
“In our view, it is governments –- not communications operators –- who hold the primary duty to provide greater transparency on the number of agency and authority demands issued to operators,” Newbury, England-based Vodafone said in the report, which it plans to update annually.
Of the 29 countries covered by the report, a dozen forbid carriers from disclosing “lawful interception” attempts. Some governments, such as Germany and the U.K., report such numbers themselves. In nine of the countries, Vodafone doesn’t have the capability to intercept communications, for example because local legislation prohibits such technology.
Vodafone reported the number of interception requests for two of the countries, with its Spanish unit receiving 24,212 demands and the Czech Republic 7,677.
The company also reported government requests for communications data, including the locations where phones were used, length of calls and other so-called meta-data related to use of Vodafone’s network.
Vodafone’s Italian unit received 605,601 such requests. The Tanzanian business was asked for such data 98,765 times and Hungary reported 75,938 requests, though the number for that country excludes inquiries related to national security.
AT&T, the largest U.S. phone company, received 301,816 demands for information from U.S. federal, state and local courts, including subpoenas, court orders and search warrants, in 2013. It had 22 requests from governments outside the U.S.
Verizon Communications, AT&T’s biggest rival, reported 321,545 subpoenas, orders and warrants from law enforcement in 2013, in addition to more than 1,000 national security letters, it said in January. Verizon said that outside the U.S., the country with the most inquiries was Germany. It made almost 3,000 requests last year, followed by France’s 1,347 and Belgium’s 473.
Ed McFadden, a Verizon spokesman, said the carrier plans to update its transparency report for the first half of 2014 “in the July timeframe.” AT&T spokesman Mark Siegel said the company releases its reports semi-annually.
Vodafone cited some challenges in putting together the report. In some countries that are experiencing “significant political tension,” it is difficult to inquire about matters related to national security without potentially putting employees at risk of harassment or sanctions, Vodafone said.
The carrier’s home country defended its interception practices today. Jean-Christophe Gray, spokesman for U.K. Prime Minister David Cameron, said the country’s security services are “operating under clear legal frameworks as well as oversight and scrutiny by independent commissioners and independent parliamentary committee.”
The U.K. forbids Vodafone from disclosing lawful interception attempts. The government’s commission for the interception of communications publishes its own annual survey. Last year, 2,760 communications interception warrants were authorized, according to the report.
Vodafone shares gained 1.5 percent to 207 pence in London. They are down 30 percent this year, valuing the carrier at 54.7 billion pounds ($92 billion).
To contact the reporters on this story: Amy Thomson in London at firstname.lastname@example.org; Daniele Lepido in Milan at email@example.com
To contact the editors responsible for this story: Kenneth Wong at firstname.lastname@example.org Mark Beech