Australia Moves to Strip ACIC of Dark Web Hacking Powers After Review

The Australian government is preparing to revoke the controversial cyber hacking powers of the Australian Criminal Intelligence Commission (ACIC). This comes after a thorough review of Australia’s legislation regarding cyber monitoring showed misapplication of certain issues with the powers and the need for more protection.

Investigators in Australia have “certain powers” that allow them to combat serious crime electronically (e.g., drug trafficking, terrorism, and child exploitation) since 2021. Critics were concerned about the permissive nature of the tools, that there was not enough oversight over the tools, and that they could be excessively intrusive.

In this case, the recommendations from the review include restricting the powers that were previously available to ACIC and transferring some responsibilities to different law enforcement authorities.

Government Review Questions “Extraordinary” Surveillance Powers

The proposed change comes after a review by Australia’s Independent Security Legislation Monitor, which examined how federal agencies use digital surveillance tools. The review suggested that the ACIC should no longer have authority to carry out “digital disruption” operations, such as hacking into criminal networks or altering data on the dark web.

These powers allow investigators to secretly access and interfere with online accounts or systems used by suspected criminals. In theory, the tools can help authorities disrupt illegal activity by deleting harmful material, tracking offenders, or preventing crimes before they happen.

But the review described such capabilities as “extraordinary and invasive,” meaning they should be used only in rare situations and with strict oversight.

Yet without these powers, law enforcement would be blind to the massive data dumps that appear on dark web forums, including the Nova Scotia Power customer information that was recently leaked, putting hundreds of thousands of Canadians at risk of identity theft and fraud.

The Australian Federal Police (AFP) would still have access to the authority to use the hacking tools, while the Australian Criminal Intelligence Commission (ACIC) would no longer have access. Those supporting this recommendation believe there will be greater accountability with fewer agencies having access to these tools, as well as a lower chance of misuse of the tools.

The review also raised concerns about the current system used to approve surveillance warrants. At present, members of the Administrative Review Tribunal acting in a personal capacity can issue some warrants rather than judges. Experts say this system may not be strong enough for decisions involving complex cyber-surveillance technologies.

Few Warrants Used Since the Introduction of the Powers

Interestingly, authorities have used the hacking powers sparingly since they became law. The review shows that law-enforcement agencies requested fewer than 50 warrants during the first three years of the legislation.

Most of those requests came from the Australian Federal Police rather than the ACIC. Authorities have primarily used their hacking abilities to investigate serious crimes, including the crime of drug trafficking, money laundering, child exploitation offences, and terrorist activities.

Supporters of these crime-solving tools feel they are necessary due to the fact that criminals are increasingly using encrypted platforms and dark web marketplaces. Many traditional investigative methods struggle to penetrate these underground networks.

However, privacy advocates believe these crime-fighting tools are too intrusive; they allow authorities, without any knowledge of the target, to covertly access and manipulate an individual’s data or account, thus they may raise legal and ethical concerns.

Also, these categories of individuals feel that all types of government hacking should have strict controls in place, along with sufficient judicial oversight.

Push for Stronger Safeguards and Clearer Rules

A complete removal of digital surveillance capabilities was not part of the review. Rather, it suggested a more proportionate overall tactic to retain capabilities while tightening usage rules.

A key recommendation was that, when evaluating requests for digital surveillance warrants, judges should sign the warrant rather than members of a tribunal. Again, judges should have access to independent technical advice to enable an understanding of the complex cyber tools the authorities require for approval.

Also, the report mentioned the design and implementation of a Commonwealth public interest monitor to oversee applications for surveillance warrants and ensure adequate consideration of privacy rights.

Experts believe that these changes will assist Australia in complying with international human rights obligations and allow law enforcement agencies to use the tools available to combat cybercrime in contemporary society.

If the reforms come into play, they will clarify how Australia will investigate and enforce laws on the dark web and will bring attention to the continued global challenge to governments in determining the proper balance between national security and protection of an individual’s personal privacy.