IT Minister Vaishnaw denies use of spyware against politicians, activists, journalists, others
New Delhi, July 19, 2021
Union Minister of Electronics & Information Technology Minister Ashwini Vaishnaw today strongly denied media reports which suggested the use of spyware by the Government against politicians, activists, journalists and others and asserted that illegal surveillance was not possible in the country, given the checks and balances in place.
"Let us look at India’s established protocol when it comes to surveillance. I’m sure my colleagues in the opposition who have been in Government for years would be well aware of these protocols. Since they have governed the country, they would also be aware that any form of illegal surveillance is not possible with the checks and balances in our laws and our robust institutions," Vaishnaw said in a statement in Parliament.
The statement came after The Wire in India and 16 other media organisations across the world, including the Washington Post of the US and the Guardian in the UK, carried out an investigation into a massive data leak about the use of hacking software sold by the Israeli surveillance company NSO Group.
According to the first of a series of reports put out by the media organisations, their investigations had identified at least 10 governments believed to be NSO customers: Azerbaijan, Bahrain, Kazakhstan, Mexico, Morocco, Rwanda, Saudi Arabia, Hungary, India, and the United Arab Emirates (UAE).
Rwanda, Morocco, India, and Hungary denied having used Pegasus to hack the phones of the individuals named in the list.
The governments of Azerbaijan, Bahrain, Kazakhstan, Saudi Arabia, Mexico, and the UAE did not respond to invitations to comment.
"In India, there is a well established procedure through which lawful interception of electronic communication is carried out for the purpose of national security, particularly on the occurrence of any public emergency or in the interest of public safety, by agencies at the Centre and States. The requests for these lawful interception of electronic communication are made as per relevant rules under the provisions of section 5(2) of Indian Telegraph Act,1885 and section 69 of the Information TechnologyAct, 2000," Vaishnaw said in his statement in Parliament.
The Minister described as "highly sensational" the story published by The Wire yesterday night and said "many over the top allegations have been made around this story".
"The press reports have appeared a day before the Monsoon session of Parliament. This cannot be a coincidence," he said.
"In the past, similar claims were made regarding the use of Pegasus on WhatsApp. Those reports had no factual basis and were categorically denied by all parties, including in the Supreme Court. The press reports of 18th July 2021 also appear to be an attempt to malign the Indian democracy and its well established institutions," he said.
"We cannot fault those who haven’t read the news story in detail. And I request all Hon’ble Members of the House to examine the issues on facts and logic," he said.
Vaishnaw said the basis of the report was that there is a consortium which has got access to a leaked database of 50,000 phone numbers.
"The allegation is that individuals linked to these phone numbers were being spied upon. However, the report says that:
"The presence of a phone number in the data does not reveal whether a device was infected with Pegasus or subject to an attempted hack.
"Without subjecting a phone to this technical analysis, it is not possible to conclusively state whether it witnessed an attack attempt or was successfully compromised.
"Therefore, the report itself clarifies that presence of a number does not amount to snooping," he said.
Vaishnaw said NSO, the company which owns the technology, had said that claims provided to the news organisation were based on misleading interpretation of leaked data from basic information, such as HLR Lookup services, which, it said, had no bearing on the list of the customers’ targets of Pegasus or any other NSO products.
"Such services are openly available to anyone, anywhere, and anytime, and are commonly used by governmental agencies as well as by private companies worldwide. It is also beyond dispute that the data has nothing to do with surveillance or with NSO, so there can be no factual basis to suggest that a use of the data somehow equates to surveillance," the company said.
Vaishnaw went on to point out that NSO had also said that the list of countries shown using Pegasus was incorrect and that many of the countries mentioned were not even its clients. It also said that most of its clients were western countries.
"It is evident that NSO has also clearly rubbished the claims in the report," he said.
The Minister said that, in India, each case of interception or monitoring is approved by the competent authority. These powers are also available to the competent authority in the state governments as per IT (Procedure and Safeguards for Interception, monitoring and Decryption of Information) Rules, 2009.
"There is an established oversight mechanism in the form of a review committee headed by the Union Cabinet Secretary. In case of state governments, such cases are reviewed by a committee headed by the Chief Secretary concerned. The law also provides an adjudication process for those adversely affected by any incident.
"The procedure therefore ensures that any interception or monitoring of any information is done as per due process of law. The framework and institutions have withstood the test of time.
"In conclusion, I humbly submit that:
"The publisher of the report states that it cannot say if the numbers in the published list were under surveillance. The company whose technology was allegedly used has denied these claims outrightly. And the time tested processes in our country are well-established to ensure that unauthorised surveillance does not occur. When we look at this issue through the prism of logic, it clearly emerges that there is no substance behind this sensationalism," he added.