What is Five Eyes?

Five Eyes is the world's most powerful intelligence-sharing alliance. Dating back to WWII, these five countries cooperate extensively on surveillance, and some argue they use this arrangement to spy on each other's citizens to bypass domestic restrictions.

The Five Eyes Countries

1. United States (NSA)
2. United Kingdom (GCHQ)
3. Canada (CSE)
4. Australia (ASD)
5. New Zealand (GCSB)

History

• 1946: UKUSA Agreement (US + UK)
• 1948-1956: Canada, Australia, NZ added
• Cold War: Focus on Soviet communications
• Post-9/11: Expanded to internet surveillance
• 2013: Snowden revelations exposed extent

How Intelligence Sharing Works

Collection

• Each country operates collection facilities
• Satellite intercepts, undersea cable taps
• Internet backbone access

Sharing

• Raw intelligence shared between members
• Joint databases
• Requests for targeted collection

Potential Loophole

• Country A can't spy on own citizens
• Country B can spy on Country A's citizens
• Countries share information
• Net effect: surveillance of everyone

Privacy Implications

For VPNs and Services

• Providers in FVEY may be compelled to assist
• National security letters (US)
• Gag orders prevent disclosure
• Some jurisdictions better than others

For Users

• Consider jurisdiction when choosing services
• FVEY countries have extensive legal powers
• But: strong rule of law in most
• Trade-offs with other jurisdictions

Expanded Alliances

Nine Eyes (+ 4)

Denmark, France, Netherlands, Norway

Fourteen Eyes (+ 5 more)

Germany, Belgium, Italy, Spain, Sweden

Other Partners

Israel, Japan, South Korea, Singapore

What This Means for Privacy

Risk Factors

• Legal compulsion to assist surveillance
• Data sharing between allies
• Broad interpretation of "national security"

Mitigating Factors

• Strong privacy tools work regardless
• End-to-end encryption protects content
• Jurisdiction is one factor of many
• Some FVEY countries have strong privacy laws