Privacy International defends the right to privacy across the world, and fights surveillance and other intrusions into private life by governments and corporations. Read more »


PI commences legal action to suspend unlawful activities of finance giant

The privacy watchdog organisation Privacy International has today filed simultaneous complaints with Data Protection and Privacy regulators in seventeen countries concerning recent revelations of secret disclosures of millions of records from the banking giant SWIFT to US intelligence agencies.

This disclosure of data has been undertaken on the grounds of counter-terrorism. The disclosures involve the mass transfer of data from the SWIFT centre in Belgium to the United States, and possibly direct access by US authorities both to data held within Belgium and data residing in SWIFT centres worldwide.

The complaints allege that the activity was undertaken without regard to legal process under Data Protection law, and that the disclosures were made without any legal basis or authority whatever. The scale of the operation, involving millions of records, places this disclosure in the realm of a fishing exercise rather than legally authorised investigation.

The issue was first brought to light on Friday June 23rd 2006, when the New York Times and the Los Angeles Times published details of the private arrangement between SWIFT and the United States Government that involved the covert disclosure to the US of customer financial data. Neither the US Government nor SWIFT was prepared to provide details of the extent of the disclosures. However the office of the Belgium Prime Minister confirmed that: “the cooperative (SWIFT) had received broad administrative subpoenas for millions of records”.

The complaints also expressed concern that this data could be used by US authorities for a range of unrelated activities, including espionage.

The complaints call for action to suspend SWIFT’s disclosure programme:

We are concerned that the practice substantially violates Data Protection law and we request that your office institutes an investigation without delay. We also ask that you intervene to seek the immediate suspension of the disclosure programme pending legal review. 

"The disclosures have taken place on the grounds of counter-terrorism. This complaint does not seek to challenge the existence of provisions to disclose personal information on legitimate grounds of national security or counter-terrorism. Such disclosures must be subject to established legal procedures. The relevant procedures appear not to have been engaged either by SWIFT or by the United States government. In our view, therefore, the disclosures are unlawful and should be brought to a halt."

Privacy International’s Director, Simon Davies, said:

"This unlawful activity shows yet again how the US wilfully disregards the privacy rights not only of its own citizens, but also the rights of foreign nationals. The scale of the operation is breathtaking, and the extent of privacy violation is almost without parallel. We will work to bring the programme to a halt pending further investigation."

Ends

Notes to editors

Privacy International (PI) is one of the world's oldest privacy organisations, and has been instrumental in establishing the modern international privacy movement. The London-based organisation was formed in 1990 as a privacy, human rights and civil liberties watchdog. PI has organised campaigns and initiatives in more than fifty countries. It has members from 30 countries.

SWIFT is the financial industry-owned co-operative that supplies secure, standardised messaging services and interface software to 7,800 financial institutions in more than 200 countries. SWIFT's worldwide partnership includes banks, broker/dealers and investment managers, as well as their market infrastructures in payments, securities, treasury and trade. The organization generates authorizations concerning almost two billion transactions per year amounting to around 2000 trillion US dollars.

Related articles:

European Parliament resolution on SWIFT builds on PI work
Pulling a Swift one? Bank transfer information sent to U.S. authorities