What kind of phone data can the NSA collect exactly?

According to an explosive report in the Guardian on Wednesday, the National Security Agency (NSA) has been granted wide-ranging access to the call records of Verizon business customers. Under the arrangement described in court documents obtained by the Guardian, Verizon is required to hand over phone records for all calls made within the United States and calls originating domestically and reaching an international number. The Foreign Intelligence Surveillance Court -- better known by its acronym, FISA -- also ordered Verizon to hand over extensive metadata for the phone calls.

But what exactly is telephone metadata, and what is it good for?

First, have a look at the relevant section of the court order that describes what Verizon is required to provide the NSA:

IT IS HEREBY ORDERED that, the Custodian of Records shall produce to the National Security Agency (NSA) upon service of this Order, and continue production on an ongoing daily basis thereafter for the duration of this Order, unless otherwise ordered by the Court, an electronic copy of the following tangible things: all call detail records or "telephony metadata" created by Verizon for communications (i) between the United States and abroad; or (ii) wholly within the United States, including local telephone calls. This Order does not require Verizon to produce telephony metadata for communications wholly originating and terminating in foreign countries. Telephony metadata includes comprehensive communications routing information, including but not limited to session identifying information (e.g., originating and terminating telephone number, International Mobile Subscriber Identity(IMSI) number, International Mobile station Equipment Identity (IMEI) number, etc., trunk identifier, telephone calling card numbers, and time and duration of call. Telephone metadata does not include the substantive content of any communication as defined by 18 U.S.C. § 2510(8), or the name, address, or financial information of a subscriber or customer.

Some of what the NSA is receiving is fairly straightforward. "Originating and terminating telephone number" is exactly what it sounds like, as is "time and duration of call." But some of the other information is far more cryptic. Here's what you need to know about the information the government is empowered to collect, according to this FISA court order.

(Many thanks to Allan A. Friedman, a technology expert at Brookings, for helping make sense of these various categories.)

Comprehensive communications routing information

The phrase "comprehensive communications routing information" is a catch-all term for the kinds of information the court empowered the NSA to collect. The term itself does not describe specific data and is fairly broad in terms of what it can include.

According to Friedman, it might include, for example, data tracking how a cell phone user moves from one cell phone tower to another while traveling -- information that would obviously be useful for tracking the whereabouts of an individual. Interestingly, such data is not specifically named in the court order, and it's unclear if Verizon provided that data to the NSA.

International Mobile Subscriber Identity [IMSI] number

The IMSI number is a system through which an individual user is tied to a phone. According to Friedman, the system was conceived as a way of facilitating billing for mobile users, essentially giving cell phone comapnies the ability to track customers through identifying codes.

Having the number itself does not provide the NSA with the identity of an individual cell phone user -- but it would make it easier for the agency to determine a user's identity. Unless the NSA managed to get its hands on that information through clandestine channels, it would probably have to return to court to obtain the information.

The IMSI number also provides important geographic information on the user. The first part of the typically 15-digit number identifies the network operator of a specific country, providing the NSA a handy shorthand guide to a user's location.

International Mobile station Equipment Identity [IMEI] number

Whereas the IMSI number ties a user to a phone, the IMEI number is merely used to identify an individual phone. It is typically found in the battery compartment of a phone and, according to Friedman, is a system that was put in place in order to prevent cell phone "spoofing" -- or the practice of cloning one phone to imitate another. When one phone begins broadcasting using the same IMEI number as another, a network can detect a spoof.

For the purposes of the NSA, the number is extremely useful in tracking individual pieces of equipment.

Trunk identifier

The trunk identifier provides additional data on how a call is routed through a telephone system and where it originated. In a landline system, for example, the trunk identifier can be used to identify the regional center through which a call is routed.

It's a number that provides the NSA with an additional geographic data point on the calls they track.

Telephone calling card numbers

A useful method for preventing calls from being tracked to a specific number, telephone calling cards can be used to mask the origins of a phone call. If for example, I were to call you from Foreign Policy headquarters using a calling card number, my call would not come up as originating from FP but rather from the number associated with the card.

By collecting calling card numbers, Friedman explained, the NSA can at least begin to track the use of such numbers across different phones. This approach is, of course, easily counteracted by using different calling cards, but it allows the NSA to build up a network from which it can mine the information it seeks. If a person, for example, receives 10,000 calls from various calling cards, that would probably result in an automatic red flag in the NSA's system.


The FISA court order contains a mysterious "etc." in its designation of the type of data Verizon is required to hand over to the NSA. Does that mean that the NSA is empowered to collect additional information not specified by the FISA court? We don't know. Could the NSA perhaps be empowered to also collect what mobile phone users browse and download on the Internet under the authority of an "etc."?

It sounds unlikely, but, hey, so does the fact that Verizon would be required to hand over comprehensive call records.

Justin Sullivan/Getty Images


Debating the anti-Muslim backlash to Britain's Woolwich attack

Two weeks ago, the dramatic murder of British soldier Lee Rigby in broad daylight on a London street gripped the world. But what has attracted less attention since the grisly killing is a reported increase across Britain in violence, vandalism, and slurs against Muslims. Just yesterday, a mosque and Islamic community center in London burned down in a suspected arson attack. Investigators found the words EDL -- an apparent reference to the far-right English Defence League -- written on the side of a building on the site (the EDL has denied involvement in the fire).

The spike in incidents has been widely interpreted as a response to the fact that the two main suspects in Rigby's death are Muslims who claimed to be exacting revenge for Muslim deaths at the hands of British soldiers. But others have questioned just how substantial the anti-Muslim backlash to the Woolwich attack has been.

Tell MAMA, a British group that fights prejudice against Muslims, notes that there have been more than 200 anti-Muslim incidents since Rigby's killing on May 22, including roughly a dozen attacks on mosques as shown in their map below. A joint statement with the nonprofit Faith Matters called attention to a "huge rise in hate incidents reported against Muslims" since the Woolwich attack.

View Tell MAMA in a larger map


According to Tell MAMA's leader, Fiyaz Mughal, 17 incidents have involved physical abuse such as throwing objects at Muslims or attempting to pull off Islamic clothing. Many of the other episodes tracked by the group have involved statements made online.

But some Britons are questioning the narrative of a massive anti-Muslim backlash stemming from the Woolwich attack. The Telegraph's Andrew Gilligan, for instance, has argued that most incidents have been non-violent, and that they've paled in comparison with the retaliatory violence that followed the terrorist attacks in London on July 7, 2005:

Tell Mama confirmed to The Sunday Telegraph that about 120 of its 212 "anti-Muslim incidents" - 57 per cent - took place only online. They were offensive postings on Twitter or Facebook, or comments on blogs: nasty and undesirable, certainly, but some way from violence or physical harm and often, indeed, legal. Not all the offending tweets and postings, it turns out, even originated in Britain.

Tell Mama has no written definition of what it classes as an anti-Muslim incident, but has in the past adopted a wide definition. Last November, the cross-bench Asian peer, Baroness Flather, told a newspaper it was "pointless for the Conservatives to chase Muslim votes. They are all on benefits and all vote Labour". Tell Mama added this admittedly crass and untrue remark to its database as an "anti-Muslim incident," though it said it had deleted it following an explanation from Lady Flather....

What the data broadly show, in short, is that Drummer Rigby's killers have failed. The breakdown in community relations has not come. There has been a rise in incidents, but it appears to be very short-term, overwhelmingly non-violent and even then almost entirely at the lower end of the scale.

The counterterrorism chief for London's Metropolitan Police has drawn similar conclusions. "Every single incident is horrible," she told British lawmakers this week, "but compared with previous times we have had slightly less" hate crime.

Still, Britain has undeniably suffered a series of mosque attacks recently, with this week's fire at a London mosque just the latest incident. On May 23, the day after Rigby's murder, someone lit a bottle and threw it onto the roof of a mosque in Bletchley, northwest of London, while a function took place inside the building (members were able to climb onto the roof and extinguish the fire). Police arrested a man in Braintree for walking into a mosque with a knife and an incendiary device, and found "Islam=Evil" scrawled on a mosque in the northern town of Bolton. The chairman of a mosque in the seaport town of Grimsby told a local newspaper that members were "discussing how to thank our neighbors for the support they have shown us over the past few days" when they heard a bang and had to extinguish fire bombs thrown at the mosque's door.

Meanwhile, the far-right English Defence League has organized marches across the country. On the night of the Woolwich attack, more than 100 EDL members gathered near the scene, chanting "no surrender to the Muslim scum," and clashed with riot police.

Prime Minister David Cameron, for his part, has sought to distinguish the Woolwich suspects' invocation of Islam from Islam itself and denounced the backlash. "Just as we will not stand for those who pervert Islam to preach extremism, neither will we stand for groups like the English Defence League who try to demonise Islam and stoke up anti-Muslim hatred by bringing disorder and violence to our towns and cities," he said in a speech to Parliament on Monday.

Cameron noted that he has created a task force on tackling extremism and radicalization in the country, which will ask questions like "whether we do enough to help mosques expel extremists and recruit imams who understand Britain." But he quickly added another objective for the task force -- one that seems appropriate in light of the events of recent weeks: "We will also look at new ways to support communities as they come together and take a united stand against all forms of extremism," he pledged.

John Downing/BWP Media/Getty Images