Council Regulation (EU) 2018/647Show full title

‘ANNEX III Equipment, technology and software referred to in Articles 3b and 3c

General Note

Notwithstanding the contents of this Annex, it shall not apply to:

(a)

equipment, technology or software which are specified in Annex I to Regulation (EC) No 428/2009 or the Common Military List; or

(b)

software which is designed for installation by the user without further substantial support by the supplier and which is generally available to the public by being sold from stock at retail selling points, without restriction, by means of:

(i)

over-the-counter transactions;

(ii)

mail order transactions;

(iii)

electronic transactions; or

(iv)

telephone order transactions; or

(c)

software which is in the public domain.

The sections A, B, C, D and E refer to the sections referred to in Regulation (EC) No 428/2009.

The “equipment, technology and software” referred to in Articles 3b and 3c is:

A.

List of equipment

• Deep Packet Inspection equipment

• Network Interception equipment including Interception Management Equipment (IMS) and Data Retention Link Intelligence equipment

• Radio Frequency monitoring equipment

• Network and Satellite jamming equipment

• Remote Infection equipment

• Speaker recognition/processing equipment

• IMSI(1), MSISDN(2), IMEI(3), TMSI(4) interception and monitoring equipment

• Tactical SMS(5)/GSM(6)/GPS(7)/GPRS(8)/UMTS(9)/CDMA(10)/PSTN(11) interception and monitoring equipment

• DHCP(12)/SMTP(13), GTP(14) information interception and monitoring equipment

• Pattern Recognition and Pattern Profiling equipment

• Remote Forensics equipment

• Semantic Processing Engine equipment

• WEP and WPA code breaking equipment

• Interception equipment for VoIP proprietary and standard protocol

B.

Not used

C.

Not used

D.

“Software” for the “development”, “production” or “use” of the equipment specified in A above.

E.

“Technology” for the “development”, “production” or “use” of the equipment specified in A above.

Equipment, technology and software falling within these sections is within the scope of this Annex only to the extent that it falls within the general description “internet, telephone and satellite communications interception and monitoring systems”.

For the purpose of this Annex “monitoring” means acquisition, extraction, decoding, recording, processing, analysis and archiving call content or network data.’’.

(1)

IMSI stands for International Mobile Subscriber Identity. It is a unique identification code for each mobile telephony device, integrated in the SIM card and which allows identification of such SIM via GSM and UMTS networks.

(2)

MSISDN stands for Mobile Subscriber Integrated Services Digital Network Number. It is a number uniquely identifying a subscription in a GSM or a UMTS mobile network. Simply put, it is the telephone number to the SIM card in a mobile phone and therefore it identifies a mobile subscriber as well as IMSI, but to route calls through him.

(3)

IMEI stands for International Mobile Equipment Identity. It is a number, usually unique to identify GSM, WCDMA and IDEN mobile phones as well as some satellite phones. It is usually found printed inside the battery compartment of the phone. Interception (wiretapping) can be specified by its IMEI number as well as IMSI and MSISDN.

(4)

TMSI stands for Temporary Mobile Subscriber Identity. It is the identity that is most commonly sent between the mobile and the network.

(5)

SMS stands for Short Message System.

(6)

GSM stands for Global System for Mobile Communications.

(7)

GPS stands for Global Positioning System.

(8)

GPRS stands for General Package Radio Service.

(9)

UMTS stands for Universal Mobile Telecommunication System.

(10)

CDMA stands for Code Division Multiple Access.

(11)

PSTN stands for Public Switch Telephone Networks.

(12)

DHCP stands for Dynamic Host Configuration Protocol.

(13)

SMTP stands for Simple Mail Transfer Protocol.

(14)

GTP stands for GPRS Tunnelling Protocol.