EFF to Inter-American Court of Human Rights: Colombia’s Surveillance of Human Rights-Defending Lawyers Group Violated International Law

EFF, Article 19, Fundación Karisma, and Privacy International, represented by Berkeley Law’s International Human Rights Law Clinic, urged the Inter-American Court of Human Rights to rule that Colombia’s existing legal framework regulating intelligence activities, and the unlawful and arbitrary surveillance of members of the Jose Alvear Restrepo Lawyers Collective (CAJAR) and their families, violated a constellation of human rights, including the rights to privacy, freedom of expression, and association, and forced CAJAR members to limit their activities, change homes, and go into exile to avoid violence, threats, and harassment.

Members of CAJAR, a Colombian human rights organization defending victims of political persecution, indigenous people, and activists for over 40 years, have had their communications intercepted by Colombian intelligence agencies and faced ongoing threats and intimidation since the 1990s, EFF and its partners said in an amicus brief submitted to the court in CAJAR’s lawsuit against the Colombian state. Since at least 1999, Colombian authorities have subjected CAJAR members to constant, pervasive secret surveillance on every facet of their professional and personal lives, including their locations, activities, finances, travel, contacts, clients, and protection measures.

The brief demonstrates that Colombia's intelligence law and unlawful communication surveillance practices violate the right to privacy and other human rights under the American Convention on Human Rights. The brief also provides evidence of the range of targeted and mass surveillance tools employed by the state. In short:

“While international law permits targeted surveillance in limited circumstances and with strict safeguards, mass surveillance is an inherently disproportionate interference with the international human rights to privacy.  But in the last few years, law enforcement and intelligence services in Colombia have purchased tools to expand their pervasive spying network and capture large amounts of communication data."

As the brief explains, Colombia employs both targeted and mass surveillance tools. Colombian authorities collect, monitor, and intercept, in real-time, individual audio and data communications from mobile and landline phones. Intelligence authorities intercept communications data without prior authorization or judicial oversight, with direct access to communication networks, despite the fact that Colombian law does not authorize any agency to engage in communications interception outside the confines of criminal investigations and without judicial oversight. Colombian intelligence services also have conducted intrusive operations exploiting software, data, computer systems, or networks to gain access to user information and devices.

This case presents an unprecedented opportunity for the court to examine whether Colombia’s intelligence surveillance practices and legal regime comport with the American Convention, the brief, filed on May 24, said. If it finds violations, the court can establish measures to be taken by Colombia to strengthen safeguards against government surveillance. These include requiring prior judicial authorization, effective independent oversight, and transparency measures, like notifying people targeted by surveillance to ensure effective remedies in case of abuse.

Testimony during the hearing presenting the case to the court in May has also provided clear indications of abusive government surveillance practices. An expert witness defending Colombia's Intelligence Law's compliance with human rights standards explained that the monitoring of electromagnetic spectrum–a surveillance measure authorized by the law–could entail monitoring conversations within an entire city zone (public hearing at 2:28:00, in Spanish). He mentioned the random nature of the monitoring, which is not targeted to specific persons, as a positive feature and justification for not requiring a prior judicial authorization. However, such random, dragnet surveillance can’t be deemed compatible to the American Convention’s necessity and proportionality standards.

The expert witness also said the use of malicious software for intelligence activities is regulated in Colombia “in the sense it is channeled within the monitoring tasks,” as per the Intelligence Law (public hearing at 2:00:13, in Spa