Ordinance
on the Surveillance of Post and Telecommunications
(SPTO)

Sur­veil­lance Type HD_28_NA in­cludes the ret­ro­act­ive sur­veil­lance of sec­ond­ary tele­com­mu­nic­a­tions data of a net­work ac­cess ser­vice. The fol­low­ing sec­ond­ary tele­com­mu­nic­a­tions data of the past tele­com­mu­nic­a­tion that has been sent or has been re­ceived via the net­work ac­cess ser­vice un­der sur­veil­lance must be trans­mit­ted:

a.

the date and the time of the start and if ap­plic­able the end or the dur­a­tion or the ses­sion;

b.

the type and status of the net­work ac­cess;

c.

the iden­ti­fi­er that was used for au­then­tic­at­ing the user at the ac­cess point un­der sur­veil­lance, for ex­ample the user name;

d.

the IP ad­dresses or ad­dress ranges as­signed to the tar­get and their type;

e.

if avail­able, the unique device iden­ti­fi­er of the ter­min­al device used by the tar­get in ac­cord­ance with in­ter­na­tion­al stand­ards (e.g. MAC ad­dress, IMEI in the case of mo­bile com­mu­nic­a­tions);

f.

if avail­able, the volumes of data that were up­loaded and down­loaded dur­ing the ses­sion;

g.

in the case of ac­cess to the net­work via mo­bile com­mu­nic­a­tions: the GPRS or EPS in­form­a­tion (in par­tic­u­lar IM­SI or MS­ISDN) and the fol­low­ing loc­a­tion data at the be­gin­ning and the end of the ses­sion as well as dur­ing the ses­sion if avail­able; if known, ad­di­tion­al loc­a­tion in­form­a­tion from mari­time nav­ig­a­tion or avi­ation must be trans­mit­ted:

1.

the cell and re­gion iden­ti­fi­ers as well as the geo­graph­ic­al co­ordin­ates, the postal ad­dresses and if ap­plic­able the main dir­ec­tions of emis­sion the cells used by the tar­get, or

2.

the po­s­i­tions of the tar­get de­term­ined by the net­work (e.g. in the form of geo­graph­ic­al co­ordin­ates and the re­lated un­cer­tainty value, or in the form of poly­gons with de­tails of the geo­graph­ic­al co­ordin­ates of each poly­gon point) as well as the re­lated postal ad­dresses, or

3.

oth­er de­tails in ac­cord­ance with in­ter­na­tion­al stand­ards of the tar­get’s loc­a­tions or the cells that he or she used, as well as the re­lated postal ad­dresses;

h.

in the case of ac­cess to the net­work via a pub­lic WLAN: the BSSID, and, if avail­able, the SSID and the loc­a­tion data in the form of geo­graph­ic­al co­ordin­ates and the postal ad­dress of the WLAN ac­cess point used by the tar­get; the user name, the type of au­then­tic­a­tion, the avail­able ad­di­tion­al in­form­a­tion on user au­then­tic­a­tion (tele­phone num­ber, MAC ad­dress, IM­SI, user iden­ti­fi­er and pass­word used for au­then­tic­a­tion) and the IP ad­dress of the WLAN ac­cess point. If avail­able, ad­di­tion­al loc­a­tion in­form­a­tion from mari­time nav­ig­a­tion or avi­ation must be trans­mit­ted;

i.

in the case of fixed net­work ac­cess: the ad­dress­ing ele­ments of the ac­cess to the net­work and. if avail­able, the postal ad­dress.