Ordinance
on the Surveillance of Post and Telecommunications
(SPTO)

¹ Each TSP, with the ex­cep­tion of those with re­duced sur­veil­lance du­ties (Art. 51), and each PDCS with more ex­tens­ive sur­veil­lance du­ties (Art. 52) must be able to con­duct the sur­veil­lance activ­it­ies in Sec­tions 8–12 of this Chapter (Art. 54–69) that re­late to ser­vices that they provide, or they must be able to ar­range for third parties to con­duct the sur­veil­lance. PDC­Ss with more ex­tens­ive sur­veil­lance du­ties are not re­quired to con­duct the types of sur­veil­lance in Art­icles 56a, 56b, 67 let­ters b and c and 68 para­graph 1 let­ters b and c.⁹⁹

² The pro­vider shall en­sure its abil­ity to con­duct sur­veil­lance of tele­com­mu­nic­a­tions from the com­mer­cial launch of a ser­vice provided to cus­tom­ers.

³ It shall en­sure that it can ac­cept sur­veil­lance as­sign­ments out­side nor­mal work­ing hours in ac­cord­ance with Art­icle 10 and can con­duct them or ar­range for third party to do so in ac­cord­ance with the FD­JP re­quire­ments.

⁴ It shall guar­an­tee that with­in the peri­od spe­cified in the sur­veil­lance as­sign­ment sur­veil­lance will be con­duc­ted of all tele­com­mu­nic­a­tions traffic car­ried on the in­fra­struc­tures un­der its con­trol provided the traffic is part of the ser­vices un­der sur­veil­lance and can be as­signed to the tar­get ID¹⁰⁰.

⁵ It shall sup­port the PTSS, at its re­quest, in or­der to en­sure that the trans­mit­ted sur­veil­lance data ac­tu­ally cor­res­ponds to the tele­com­mu­nic­a­tions traffic spe­cified in the sur­veil­lance as­sign­ment.¹⁰¹

⁶ If ad­di­tion­al iden­ti­fi­ers are as­so­ci­ated with the tar­get ID (e.g. IMPI with IM­PU, email ad­dress with ali­as ad­dress, ex­tra-SIM, multi-device), the pro­vider shall en­sure that these iden­ti­fi­ers are also mon­itored as part of the type of sur­veil­lance.¹⁰²

⁷ In the case of real-time sur­veil­lance of mo­bile ser­vices, rel­ev­ant net­work ele­ments such as HLR, HSS and UDM shall also be mon­itored, in par­tic­u­lar to re­cord in­form­a­tion about the net­work provid­ing the ser­vice, a change in the as­signed ser­vice and device iden­ti­fi­ers, loc­a­tion-re­lated events, a change in the net­work ele­ment provid­ing the ser­vice, and iden­ti­fic­a­tion and au­then­tic­a­tion events in­volving the tar­get ID and shall be trans­mit­ted to the IRI in stand­ard­ised form.¹⁰³

⁸ In the case of real-time sur­veil­lance in the IMS, de­term­in­a­tion of loc­a­tion data for the tar­get ID from the net­work side shall if ne­ces­sary be ini­ti­ated.¹⁰⁴

⁹ If a new ter­min­al device (multi-device) or a new SIM (ex­tra SIM) is ad­ded to a ser­vice when real-time sur­veil­lance or peri­od­ic po­s­i­tion de­term­in­a­tion is already act­ive, this device or SIM must also be mon­itored. No ad­di­tion­al fee is pay­able for this and no ad­di­tion­al com­pens­a­tion is paid. If ne­ces­sary, the pro­vider may re­quest an ad­di­tion­al ad­min­is­trat­ive iden­ti­fic­a­tion num­ber for the sur­veil­lance.¹⁰⁵