Ethical OSINT

Open-Source Intelligence (OSINT) has been in operation for many decades. It is a capability for acquiring information from open sources, such as media outlets and hard copy publications like newspapers, and then turning that information into actionable intelligence. Recently, with the advent of the internet and social media, OSINT has expanded like never before.

Conducting OSINT is not illegal, but once information has been acquired, stored, and disseminated, certain legal requirements may come into effect, such as the General Data Protection Regulation (GDPR) 2016. In the United Kingdom (UK), the body regulating data management is the Information Commissioner's Office (ICO), which is responsible for upholding information rights for individuals in the UK, promoting openness by public organizations, and ensuring data privacy for individuals.

Conducting OSINT research or investigations requires a commitment to ethics, particularly regarding privacy, transparency, and honesty. This is crucial because information obtained about a subject can have serious detrimental outcomes. Therefore, creating and adhering to a policy of ethical OSINT is critical for maintaining confidence in securing reliable, authentic, accurate, and credible OSINT outcomes.

Possessing and maintaining the necessary knowledge and skills to conduct effective OSINT is vital for several reasons: ensuring the accuracy of information acquisition, maintaining up-to-date acquisition tools, being aware of the latest relevant techniques, and ensuring adherence to the latest legal and policy parameters.

Without ongoing personal development, an individual’s lack of self-confidence and professional knowledge may result in unreliable OSINT results. Having a good understanding of evidential continuity is also important when conducting OSINT inquiries.

OSINT can be a beneficial tool for society, helping to identify risk factors, prevent harm, and maintain appropriate oversight of the world around us. However, it can also be dangerous and intrusive. Therefore, identifying ethically motivated individuals and organizations to conduct such work as third parties must be a main priority.