Law Enforcement Liaison

Media.com regularly interacts with public sector agencies, including law enforcement, intelligence agencies, regulators, and other government entities. The Law Enforcement Liaison Policy outlines the principles governing these interactions. This procedure specifically delineates the methods and practices Media.com employs to implement this policy effectively within the organisation.

Trust and Safety roles and responsibilities relevant to this procedure are contained in the following table.

When liaising with public Sector Agencies media.com staff are to apply the following principles:

1. Priority is to prevent and stop criminal activity, particularly that causing any form of harm to individual users, stakeholders, and the organisation.
2. Ethical and accountable decision-making and record keeping
3. A culture of clear and effective internal communication, both vertically and horizontally, when matters are actioned

In the normal course of business, requests for information (RFI) are to be received electronically via the LERT shared mailbox ([email protected]). RFI received elsewhere in the organisation are to be forwarded to the LERT mailbox. RFI may take the form of

1. Formal requests for information or assistance
2. Emergency requests
3. Preservation requests
4. Legal requests from official government agencies by way of subpoena, court order or warrant
5. Requests from official government agencies under Mutual Legal Assistance Treaties (MLAT) or similar international legal processes

Actioning RFI's is the responsibility of the LERT.

Reasonable steps should be taken to ensure the identity and veracity of the RFI to identify RFI that are suspicious, unverifiable, or from sanctioned jurisdictions. Such RFI should be referred to Director Public Sector Relations.

Upon receipt of an RFI, LERT is to triage the RFI to determine:

1. Validity of the RFI
2. Relevant Jurisdiction
3. Category of the RFI (Category 1 or 2)

Category 1 RFI’s are those that that may be sufficiently serious, sensitive or likely to become public in an impactful way, particularly those causing any form of harm to individual users, stakeholders and/or the organisation, are likely to require a coordinated response, or may be expected to have a significant media attention.

Category 2 RFI’s are those that can be described as routine or “business as usual requests” that can be assessed and actioned within the public sector relations team without significant assistance.

Where an RFI is determined to be a category 1 RFI, LERT is to notify:

1. Director, Public Sector Relations
2. Head of Trust and Safety
3. Head of Trust and Safety
4. Any other departments relevant to the specific matter.

The question of jurisdiction is both complex and fundamental to any incoming RFI to media.com.

Potential indicators of jurisdiction may include:

• The jurisdiction of the requesting authority
• In the case of a legal document, the jurisdiction of the authorising court or tribunal
• IP addresses related to the relevant material or account
• The place of residence or business of any involved party

Upon receiving an RFI, LERT is to determine the jurisdiction relating to the RFI.

RFI related to third party civil proceedings are to be referred to media.com legal.

Staff may detect criminal activity occurring on or through the media.com platform such as:

• Hate Speech or Terrorism
• Cyberbullying and Harassment
• Fraud and Scams
• Attempted or actual fraud during account creation

All actual or suspected criminal activity should be reported to the LELO. The LELO is to determine:

• Whether a criminal activity is suspected or known to have occurred
• The relevant jurisdiction in which the (alleged) activity occurred
• An assessment of any obligation to report the activity to law enforcement or other agency.

In ambiguous cases or where the criminal threshold is not clear, advice should be sought from legal counsel as to the requirement to undertake this procedure.

The LELO is responsible for discharging any reporting obligation that arises. The authorising authority for reporting is the Director - Public Sector Relations.

Account holder (customer) data should not be disclosed to any party, unless the requesting agency has complied with the relevant laws and regulations in both its own and Media dot com Inc’s jurisdiction.

LERT is responsible for gathering data to comply with RFI. Authority for release of customer data in response to RFI is:

• Category 1 RFI - Head of Trust and Safety
• Category 2 RFI - Director - Public Sector Relations

The relevant information should be transferred to the requesting official government agency by 'safe hand' physical transfer or through an approved secure network upon approval. In all cases, this transfer should be recorded in a verifiable manner and recorded as such.