Disclosure¶

“Known” is not a simple condition in Ankh-Morpork. It has layers.

Some things are known to the Patrician. Some things are known to the guilds. Some things are known to the city’s professional information-handlers, in the way that things come to be known when enough people have seen them and agreed not to say so. None of these is the same as publicly known, and none of them, the MCLU would argue, constitutes adequate disclosure.

This investigation has established, to the degree possible without formal legal powers we have repeatedly asked for and not received, that:

• A cloud provider has been operating surveillance capabilities supplied by a third party

• The data collected flows to that third party without client knowledge or consent

• The arrangement is undocumented, and both parties have conducted themselves accordingly

• Clients have been exposed, some handling data that carries its own obligations to third parties