Unveiling the Data Broker Files: A Deep Dive into Mobile Surveillance
0:00:27 Introduction: Rebecca and Sebastian from Netzpolitik.org present their research on how apps and data brokers contribute to mass surveillance.
0:01:42 Data Broker Files Overview: The investigation analyzed 3.6 billion cell phone location data points, revealing detailed movement patterns of individuals.
0:01:42 Scope of Research: The research involved a large team and focused on analyzing location data extrapolated from cell phone activity.
0:02:14 Visualizing the Data: Examples of visualized data showed individuals' movements, including visits to sensitive locations like the Bundestag, military bases, and the NSA's German branch.
0:02:54 Sensitive Locations: The data revealed visits to sensitive locations like the Bundestag, military bases, and a BND (German intelligence) facility.
0:04:31 Geopolitical Context: Recent events, such as drone espionage and cyberattacks, highlight the relevance of this data for intelligence agencies.
0:05:33 Value for Intelligence Agencies: The data is highly valuable for intelligence agencies, allowing them to track individuals working in security-relevant places.
0:06:58 Data Set Details: Each data entry includes a timestamp, advertisement ID, OS type, and geographical coordinates.
0:08:54 Data Acquisition: The data was obtained from a data broker platform called Datarade, where brokers advertise and sell data.
0:09:57 Data Samples: Data brokers typically provide free samples before requiring payment for full access.
0:10:29 Data Analysis Challenges: The large volume of data required automated analysis using tools like OpenStreetMap to identify visits to specific locations.
0:11:48 Automated Analysis: OpenStreetMap data was used to identify visits to 1,700 military bases and consulates in Germany.
0:12:30 Open Source Intelligence (OSINT): Publicly available information, such as phone book entries, was used to confirm the validity of movement patterns.
0:12:57 Problem Scope: The issue extends beyond individuals in security-relevant positions, affecting millions whose data is being collected and analyzed.
0:13:29 Online Advertising Exploitation: The online advertising industry's infrastructure is being used to generate and sell location data.
0:14:13 "Ad-Tech as a Service": Services like Locate X offer practical tools for searching and tracking individuals based on their location data.
0:14:25 International Data Sales: Companies like Venntel and X-Mode sell location data to government agencies, including the FBI and potentially Chinese entities.
0:14:51 German Intelligence Agencies: German intelligence agencies are aware of the data's availability but have not provided information on whether they purchase it.
0:15:29 Legal Loopholes: Existing laws in Germany do not directly address this type of data brokerage, but legal interpretations suggest it might be permissible.
0:16:16 Data Transfer Mechanisms: Location data is transferred through apps, often via SDKs or the online advertising market.
0:17:44 App Types: Data brokers primarily collect data from navigation, gaming, weather, and dating apps.
0:17:55 Data Brokers: Data brokers like Data Stream aggregate and sell data, often operating through trading platforms like Datarade.
0:18:46 Role of Mobile Advertising IDs: Mobile advertising IDs, assigned by Apple and Google, enable the tracking and identification of individuals for advertising purposes.
0:19:24 Public and Industry Reactions: Reactions to the research ranged from indifference to calls for regulatory changes and the abolition of personalized advertising.
0:21:54 GDPR Implications: The practice of collecting and selling location data raises concerns about informed consent, data security, and data subject rights under the GDPR.
0:23:53 Enforcement Challenges: Data protection agencies face challenges in enforcing regulations due to the decentralized nature of the data brokerage ecosystem and lack of resources.
0:24:54 Legal Loopholes in Germany: The Berlin data protection agency has determined that Datarade, as a marketplace, is not subject to the GDPR.
0:25:36 Proposed Solutions: Suggested solutions include banning personalized advertising, strengthening data protection enforcement, closing legal loopholes, and increasing transparency in intelligence agency data use.
0:27:47 Digital Self-Defense: Individuals can take steps to protect their data, such as removing advertisement IDs, revoking location permissions, and using privacy-focused alternatives.
0:28:49 Data Broker Checker: Netzpolitik.org developed a tool that allows individuals to check if their advertising ID is in the obtained dataset.
0:29:37 Ongoing Research: Netzpolitik.org is continuing its research and plans to publish further findings.
0:30:29 Data Cost and Availability: Data brokers offer data for sale, with real-time data being particularly expensive. The specific dataset analyzed by Netzpolitik.org was from a three-week period and cost around $14,000.
0:31:54 GDPR Rights and Data Tracing: Individuals can request information about their data from data brokers, but tracing the data's origin can be difficult due to contractual limitations and data brokers' lack of transparency.
0:33:48 Data Actuality: While the analyzed data was from the end of the previous year, it remains relevant due to individuals' habitual movement patterns.
0:35:18 Finding Your Advertising ID: Instructions for finding advertising IDs on Apple and Android devices are provided in the accompanying article.
0:35:38 Data Removal Services: Services that claim to remove individuals from data broker lists may be ineffective due to the decentralized nature of the data brokerage ecosystem.
0:36:48 Data Protection Agency Actions: Data protection agencies could take coordinated action to address the structural issues in the data brokerage industry.
0:38:16 Intelligence Agency Concerns: Intelligence agencies are aware of the risks posed by the availability of this data to foreign adversaries but have limited options for action.