What role did personal data and digital strategies played during the events of the independence referendum in the fall of 2017?
Eticas Foundation partnered with Tactical Tech to look behind the headlines and clarify the role that personal data played during the climactic events of the independence referendum, in which there was never a definitive majority for either side of the debate, and in which personal data and digital strategies played a surprisingly prominent role.
In collaboration with international partners, Tactical Tech has produced 14 studies to identify and examine some of the key aspects and trends in the use of data and digital strategies in recent and/or upcoming elections or referendums. In our report, we explore how digital influence determined most of the notable events during the Catalan referendum
On 1 October 2017, the day of the independence referendum, the Catalan Government decided to create a new universal census to track voter participation, rather than basing voter verification on local districts usually administered by the Spanish national Statistics Institute. This meant that voters could vote in any district, regardless of where they were registered. The Catalan government used an encrypted app to ensure voters didn’t vote more than once.
The personal data used to create the new alternative census became highly contested, with the Spanish government accusing the Catalan government of accessing the data illegally and possibly exposing it to security risks.
This led to a protracted dispute between pro-independence and anti-secessionist forces and between the Spanish Data Protection Agency (AEPD) and the Catalan Data Protection Agency (APDCAT), with accusations of breaches of data protection laws at the forefront of the disagreements.
The conflict resulted in the Spanish National Police raiding the offices of the Catalan Statistics Institute (Idescat) and arresting and detaining senior figures and technologists at Idescat and the Catalan Ministry of Economics.
Along with legal battles and physical clashes, the struggle between the two sides of the debate erupted into the digital space, in what Eticas Foundation’s report speculates may have been “Europe’s first civil cyberwar.”
A number of civil society organisations have criticised the Spanish government’s alarmist intervention in the Catalan referendum on the grounds of data protection of citizens, stating that, in fact, the security of the census was cryptographically sound and that the risks to the implemented personal data was low.
Information communication technologies became a battleground between Spanish security forces and hackers on both the pro-independence and anti-secessionist sides. The Spanish government employed aggressive tactics to suppress data and digital information about the independence movement.
Spanish security forces shut down the official website of the Catalan referendum and several other sites affiliated with the movement, as well as compelling Internet service providers, the .cat domain registry and major telecom operators to monitor and block all web presence related to the referendum – a move that was criticised for its suppression of freedom of information and speech.
In response, several opposition activists established mirror sites to circumvent these outages, for which they were subsequently arrested.
The day before the referendum, Spanish military police occupied the office of the Catalan Telecommunications and IT Center (CTTI) to block and suspend all information services which could be used to facilitate the referendum, as well as arresting and detaining strategists and technologists.
Hackers from both sides also traded blows via numerous DDoS and other cyber-attacks on each others web infrastructures and information outlets.
In a game of cat-and-mouse, members of the pro-independence movement fought back by continuing to mirror websites and using VPNs to access blocked sites, while using the WhatsApp and Telegram messaging platforms to organise and share information.
More details on the legal battle over personal data and the universal census, the digital warfare between the competing positions and an assessment of the role of fake news and disinformation can be found in Eticas Foundation’s full report.
An introduction to the Influence Industry project can be found at The Influence Industry: The Global Business of Using Your Data in Elections.
An introduction to the methods used by the political data industry can be found at Tools of the Influence Industry
Unless otherwise noted content on this site is licensed under a Creative Commons Attribution 4.0 International License
