Skype was embroiled in a mini-controversy last year when reports came out claiming that Skype was spying on its users. The Microsoft-owned company hit back at the reports saying that it only hands over information when law enforcement “follows appropriate procedures.” That explanation, given in July of last year, was apparently not good enough for some advocacy groups.
Reporters without Borders, The EFF, The Action Network and others have sent an open letter to Skype asking the company to clarify its position on the privacy of its users’ communications. The letter states that the service’s users “work in the face of persistently unclear and confusing statements about the confidentiality of Skype conversations, and in particular the access that governments and other third parties have to Skype user data and communications.”
The advocacy groups pushing for more information are concerned that Skype launching on multiple platforms could have worrisome implications for more than just desktop users’ privacy. In fact, Skype will be replacing Windows Live Messenger soon, and it’s rumored to replace Xbox Live chat on the Xbox 360.
The letter calls on Skype to release a transparency report that includes the following information:
Quantitative data regarding the release of Skype user information to third parties, disaggregated by the country of origin of the request, including the number of requests made by governments, the type of data requested, the proportion of requests with which it complied — and the basis for rejecting those requests it does not comply with.
Specific details of all user data Microsoft and Skype currently collects, and retention policies.
Skype’s best understanding of what user data third-parties, including network providers or potential malicious attackers, may be able to intercept or retain.
Documentation regarding the current operational relationship between Skype with TOM Online in China and other third-party licensed users of Skype technology, including Skype’s understanding of the surveillance and censorship capabilities that users may be subject to as a result of using these alternatives.
Skype’s interpretation of its responsibilities under the Communications Assistance for Law Enforcement Act (CALEA), its policies related to the disclosure of call metadata in response to subpoenas and National Security Letters (NSLs), and more generally, the policies and guidelines for employees followed when Skype receives and responds to requests for user data from law enforcement and intelligence agencies in the United States and elsewhere.
The letter’s demands aren’t that absurd. Google, Twitter and others already release frequent transparency reports that detail how much user information is requested from them by governments around the world. In fact, Google just released its latest transparency report that revealed government requests for data have increased yet again.
It’s likely that government requests to Skype for user data have increased in the last year as well. It’s not unreasonable to ask for government requests for user data be made known. We should at least know how many requests are being made every six months. If anything, it will endear Skype to the public even more, and make Microsoft look like it cares about its users.