RCMP use of technology to identify cellular devices for law enforcement purposes
April 5, 2017
Ontario
Statement
Technology used to identify and locate cellular devices, commonly referred to as Mobile Device Identifiers (MDI), has been the subject of recent media coverage.
In the interest of transparency, the RCMP confirms the use of MDI technology to identify and locate a suspect's mobile device. This capability can be used to further criminal investigations relating to national security, serious and organized crime, and other serious Criminal Code offences that impact the safety and security of Canadians.
The RCMP uses MDI technology in full compliance with Canadian laws, including the Charter of Rights, and proper judicial processes. Except in extremely urgent cases (i.e., to prevent death or imminent harm), the RCMP must get a judge's authorization before using the technology.
There are a limited number of authorized and trained RCMP operators who can use MDI technology and its use is subject to very strict rules, senior management approval, and judicial authorization prior to deployment.
What does it do?
RCMP MDI technology is an important investigative tool used to identify a suspect's cellular device, such as a mobile phone. It helps the RCMP identify an unknown cellular device used by a target (suspect) under investigation by collecting limited signaling information, or for other policing matters, such as identifying the location of a known cellular device linked to a missing person.
In very simple terms, when a trained officer deploys MDI technology, it attracts and momentarily connects cell phones in the immediate proximity, before returning them to their own networks. The technology collects International Mobile Subscriber Identity (IMSI) and International Mobile Equipment Identity (IMEI) data associated with the phones, allowing the operator to identify the phone used by the suspect. The IMSI and IMEI are internationally standardized unique numbers to identify a mobile subscriber and device, respectively.
What doesn't it do?
RCMP MDI technology does not collect private communication. In other words, it does not collect:
voice and audio communications
email messages
text messages
contact lists
images
encryption keys
basic subscriber information
Information that is not relevant to the investigation is immediately destroyed after court proceedings, appeal periods, and any specific orders from a judge.
How does it help investigations?
MDI technology provides valuable assistance to criminal investigations and other policing duties. It may be used to help identify an unknown cellular device associated with an individual under investigation by collecting limited information from devices within range of the technology. It may also be used to locate cellular devices which are already known to police.
How is it deployed?
After getting authorization from a judge, the MDI is deployed for a short period of time to attract and collect limited information (IMSI and IMEI data) from cellular devices in close proximity. This data can be used to help identify a cellular device used by a suspect under investigation.
How often is this technology deployed?
There are a limited number of authorized and trained RCMP operators who can use this technology. Further, its use is limited to only the most serious cases, and only when there are grounds to believe that a suspect is using an unknown cell-phone to conduct criminal activities. Its use requires a judge's authorization, as well as authorization at very senior levels of the RCMP. There are also strict reporting requirements for each use.
In 2016, the RCMP used MDI technology in only 19 investigations.
Who makes the decision to deploy the technology and what oversight is there of their use?
Before this technology is deployed, senior officer approval and a valid judicial authorization are required. Prior judicial authorization is not required, in extremely urgent cases where the police reasonably believe there is a need to deploy the technology to prevent imminent harm or death.
Those authorized to use the technology have received specialized training and each use is reported and recorded by the operator.
What happens to the data the MDI technology collects?
The limited data collected by MDI technology (IMSI and IMEI data) is stored in an isolated system that is only accessible by those managing the technology.
To further a criminal investigation beyond this limited data, the RCMP must get a production order from a judge to obtain basic subscriber details associated with the IMSI or IMEI data from a Telecommunications Service Provider (e.g., the telephone number, name and address of the subscriber).
Information that is not relevant to the investigation is immediately sequestered by the operator and not shared with investigators. It is destroyed after court proceedings, appeal periods, and any specific orders from a judge.
Does this impact other cell phone users in the area?
MDI technology can cause limited cellular interference for devices within range of the tool. The RCMP makes every effort to deploy the technology in a way that causes the least disruptions to service and public safety.
–30–
