Ordinance
on the Surveillance of Post and Telecommunications
(SPTO)

¹ Sur­veil­lance Type RT_24_TEL_IRI com­prises the real-time sur­veil­lance of a tele­phony and mul­ti­me­dia ser­vice and, if ap­plic­able, con­ver­ging ser­vices, in par­tic­u­lar SMS, voice mail and RCS. The fol­low­ing sec­ond­ary tele­com­mu­nic­a­tions data of the tele­com­mu­nic­a­tion that is sent, pro­cessed or re­ceived via the ser­vices un­der sur­veil­lance must be trans­mit­ted in real time:

a.

the date and the time of log­ging-in and log­ging-out pro­cesses and their res­ult;

b.¹⁹

the AAA in­form­a­tion used by the ser­vices un­der sur­veil­lance and the in­form­a­tion on re­gis­tra­tion and sub­scrip­tion events and the cor­res­pond­ing re­sponses, in par­tic­u­lar the sub­scriber iden­ti­fi­er (e.g. SIP URI, IMPI) and the IM­SI in the case of mo­bile com­mu­nic­a­tions;

b^bis.²⁰

if ap­plic­able, the cus­tom­er’s and serv­er’s IP ad­dresses and port num­bers as well as de­tails of the pro­tocol used;

c.

the sig­nalling in­form­a­tion, in par­tic­u­lar on the serving sys­tem, on sub­scriber status and on ser­vice qual­ity;

d.

if ap­plic­able, the pres­ence in­form­a­tion;

e.

in the case of com­mu­nic­a­tions, com­mu­nic­a­tion at­tempts and tech­nic­al modi­fic­a­tions (e.g. in­clu­sion of ad­di­tion­al ser­vices, in­clu­sion of or change to con­ver­ging ser­vices, changes in mo­bile com­mu­nic­a­tions tech­no­logy, loc­a­tion up­dates), if ap­plic­able:

1.

their type, the date and the time of their start and if ap­plic­able their end,

2.

the ad­dress­ing ele­ments (e.g. MS­ISDN, E.164-num­ber, SIP URI, IM­PU) of all sub­scribers in com­mu­nic­a­tion and their role,

3.

the ac­tu­al known des­tin­a­tion ad­dress and the avail­able in­ter­me­di­ate ad­dresses where the com­mu­nic­a­tion or the com­mu­nic­a­tion at­tempt is di­ver­ted or for­war­ded,

4.

the unique device iden­ti­fi­ers in ac­cord­ance with in­ter­na­tion­al stand­ards for the ter­min­al devices of the ser­vices un­der sur­veil­lance (e.g. IMEI, MAC ad­dress),

5.

the oth­er avail­able iden­ti­fi­ers,

6.

the reas­ons for the ter­min­a­tion of com­mu­nic­a­tion or its non-ma­ter­i­al­isa­tion or for the tech­nic­al modi­fic­a­tion,

7.

the sig­nalling in­form­a­tion on ad­di­tion­al ser­vices (e.g. con­fer­ence calls, call for­ward­ing, DTMF),

8.

the status of the com­mu­nic­a­tion or of the com­mu­nic­a­tion at­tempt,

9.

and in the case of mo­bile loc­a­tion ser­vices, the avail­able cur­rent loc­a­tion data for the tar­get or the cell used by the tar­get or for the WLAN ac­cess point used by the tar­get in ac­cord­ance with para­graph 2.

² The loc­a­tion data com­prise:

a.

the iden­ti­fi­ers or a com­bin­a­tion of iden­ti­fi­ers (e.g. CGI, ECGI, SAI, RAI, TAI, BSSID) and the geo­graph­ic­al co­ordin­ates of the cell or the WLAN ac­cess point and, if avail­able, the type of mo­bile com­mu­nic­a­tions tech­no­logy used;

b.

the po­s­i­tion of the tar­get de­term­ined by the net­work, for ex­ample in the form of geo­graph­ic­al co­ordin­ates and the re­lated un­cer­tainty value, or in the form of poly­gons, with de­tails of the geo­graph­ic­al co­ordin­ates of each poly­gon point as well as the type of mo­bile com­mu­nic­a­tions tech­no­logy used; or

c.

if avail­able, oth­er de­tails in ac­cord­ance with in­ter­na­tion­al stand­ards rel­ev­ant to the loc­a­tion of the tar­get or the cell or of the WLAN ac­cess point, and the type of mo­bile com­mu­nic­a­tions tech­no­logy used.