The New Zealand Security Intelligence Service (NZSIS) and Government Communications Security Bureau (GCSB) were sent scrambling after the March 15, 2019, mosque shootings, which left 51 people dead.
Just 12 days after the country’s worst domestic terror attack, Andrew Little, the minister in charge of New Zealand’s spy agencies, called in NZSIS director-general Rebecca Kitteridge and GCSB director-general Andrew Hampton for an urgent briefing.
The two agencies were being publicly grilled over why they had not had Australian gunman Brenton Harrison Tarrant — last week jailed for life without parole — on their radars.
Ms Kitteridge began by saying New Zealand was not a surveillance state — despite 2014 claims by the United States’ National Security Agency whistleblower Edward Snowden and journalist Glenn Greenwald that John Key’s then-government was secretly developing a mass surveillance system.
“NZSIS must balance carefully the security of the nation with the rights of individuals, including the right to freedom of expression and to privacy,” Ms Kitteridge said in the March 27, 2019 meeting, according to now unclassified documents released under the Official Information Act.
“New Zealand is not a surveillance state, and nor is that feasible. It is essential that our work, while bounded by practical considerations, is lawful … and guided by the principles of proportionality and necessity.”
All the NZSIS’ domestic security intelligence investigations “have to start somewhere, so they all begin with a ‘lead’ — the initial information that indicates a potential threat to national security”, she said.
The revelations indicate Tarrant had not come to either of the spy agencies’ attentions before he committed mass murder.
More information around what was being done to monitor far Right extremists in New Zealand is expected to form part of the final report by the royal commission of inquiry into the attacks, which was tasked to look at what state sector agencies knew about Tarrant before March 15, and what they did, if anything, with that information, and what they could have done to prevent the attack. It has been delayed three times and is now expected to be released on November 26.
The challenges of the internet faced by the NZSIS in countering terrorism were also outlined in the briefing — in the wake of revelations Tarrant had posted his so-called manifesto and livestreamed his murderous rampage online.
“Monitoring ‘the internet’ is not possible even for those that have the legal mandate (which is not the case in New Zealand) and significantly greater resources,” Ms Kitteridge said.
“In addition, the volume of data available over social media platforms is growing exponentially.”
Again, she stressed the need to have a “lead” before beginning any investigation — including when chasing activity on the internet — and highlighted the “widespread use of anonymised identities” online, which made assessing the credibility of threats “extremely difficult”.
The encryption of websites, chatrooms, apps and other platforms, including gaming sites, was also “a huge challenge for all security and law enforcements agencies”, Ms Kitteridge said.
“Even if we have a warrant in place, they generally cannot be enforced against tech companies based offshore.”
Other details canvassed in the briefing were not released under OIA rules, the reasons cited being the security or defence of New Zealand, the need for ministers and officials to conduct public affairs through “the free and frank expression of opinions” and the need to protect the identity of GCSB and NZSIS staff.
Security expert Paul Buchanan, a former intelligence analyst for US security agencies, said New Zealand’s intelligence and security services had been focused on the threat from Islamic extremism since the 9/11 terror attacks.
However, he did not believe March 15 could be blamed on failures by the GCSB or NZSIS, he said.
New Zealand Police had its own intelligence units, which could have been tasked to monitor right-wing extremists, but “for some reason” no concerns were elevated to the point where the GCSB — with its increased interception capabilities and skills in deciphering “deep coding” in encrypted platforms — was asked for help, Mr Buchanan said.
The Islamic Women’s Council (IWCNZ) earlier told the royal commission of inquiry how police and government agencies had failed to listen to warnings and concerns over repeated threats before the Christchurch mosque massacres.
The group warned police on February 21 last year about a Facebook threat that explicitly mentioned March 15.
Police inquiries found the man who sent the threat, which threatened to burn the Koran outside a Hamilton mosque on March 15, had his location identified in Christchurch — but he was not deemed a threat.
“There were repeated major public service delivery failures in relation to government dealings with and responsibilities towards the Muslim community in Aotearoa New Zealand,” Frances Joychild QC, who represented IWCNZ before the royal commission, said.
“It is likely that, but for the failures (particularly of the security services and police), the horrific events of March 15, 2019, might not have occurred.”
New Zealand Police said it would be inappropriate to comment before the royal commission of inquiry had reported back.
“What we can say is that extremist rhetoric continues to attract attention in New Zealand and elsewhere and has become increasingly visible beyond the usually closed groups or private chat sessions that have previously contained this type of material. NZ Police remains vigilant to the incidence of extremist rhetoric in New Zealand,” a spokeswoman said.
Immediately after the March 15 attack, the SIS launched a 24/7 response with three aims: to get a full picture of the alleged attacker, including whether other attacks were planned; reviewing what the agency knew about extreme right-wing groups to detect potential copycat attacks; and to see if there was any suggestion of a revenge attack either in New Zealand or against New Zealand interests offshore.
Ms Kitteridge later told Parliament’s intelligence and security committee: “We must learn from this horrific event — and we will.”