Blog of Rights

Court Ruling Gives FBI Too Much Leeway on Surveillance Technology

By Linda Lye, Staff Attorney, ACLU of Northern California at 5:09pm

Today, a federal district judge in Arizona issued a very disappointing decision concerning the government’s obligations to be candid with courts about new technologies they are seeking a warrant to use.

The case involves Daniel Rigmaiden, who is being criminally prosecuted for an alleged electronic tax fraud scheme. The government used a surveillance device known as a stingray to locate Mr. Rigmaiden. A stingray operates by simulating a cell tower and tricking all wireless devices on the same network in the immediate vicinity to communicate with it, as though it were the carrier’s cell tower. In order to locate a suspect, a stingray scoops up information not only of the suspect, but all third parties on the same network in the area. This means that when the government uses a stingray to conduct a search, it is searching not only the suspect, but also tens or hundreds of third parties who have nothing to do with the matter. When the FBI sought court permission to use the device to locate Mr. Rigmaiden, it didn’t explain the full reach of stingrays to the court.

The ACLU and the Electronic Frontier Foundation filed an amicus brief arguing that when the government wants to use

FBI Documents Suggest Feds Read Emails Without a Warrant

By Nathan Freed Wessler, Staff Attorney, ACLU Speech, Privacy & Technology Project at 10:31am

New documents from the FBI and U.S. Attorneys’ offices paint a troubling picture of the government’s email surveillance practices. Not only does the FBI claim it can read emails and other electronic communications without a warrant—even after a federal appeals court ruled that doing so violates the Fourth Amendment—but the documents strongly suggest that different U.S. Attorneys’ offices around the country are applying conflicting standards to access communications content (you can see the documents here).

Last month, in response to a Freedom of Information Act request, the ACLU received IRS documents indicating that the agency’s criminal investigative arm doesn’t always get a warrant to read Americans’ emails. Today we are releasing these additional documents from other federal law enforcement agencies, reinforcing the urgent need for Congress to protect our privacy by updating the laws that cover electronic communications.

The FBI and Electronic Communications: Where’s the Warrant?

The documents we received from the FBI don’t flat out tell us whether FBI agents always get warrants, but they strongly suggest that they don’t.

In 2010, the Sixth Circuit Court of Appeals decided in United States v. Warshak that the government must obtain a probable cause warrant before compelling email providers to turn over messages to law enforcement. But that decision only applies in the four states covered by the Sixth Circuit, so we filed our FOIA request to find out whether the FBI

Homeland Security, May I Earn a Living?

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 4:43pm

One of the things in play in the current wrangling over immigration reform is whether we will see the E-Verify work authorization program expanded nationwide and made mandatory. We’ve just put out a white paper summarizing “The 10 big Problems With E-Verify.”

Overall, E-Verify represents a move toward the creation of a “Mother may I” or “permission society” in the United States. In an attempt to stop the tiny percentage of those starting jobs in the United States each year who are unauthorized workers, E-Verify would force everyone to obtain affirmative permission from government bureaucracies before engaging in the core life functions of working and earning a living. That not only inverts the relationship between the individual and government, but will lead to a number of other serious problems, which we set forth in the paper.

They’re Watching: FBI Business Records Requests Jump 900 Percent Compared to 2009

By Robyn Greene, ACLU Washington Legislative Office at 12:14pm

Last week served as yet another reminder of the threats posed to Americans' privacy by the post-Patriot Act surveillance state...

The Privacy-Invading Potential of Eye Tracking Technology

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 9:42am

Eye tracking technology received new attention recently due to its inclusion in the Samsung Galaxy IV phone, where it can (with mixed results, according to reviewers) let users scroll the screen with their eyes or dim the screen when they look away. Clearly this is a technology that has the potential for a lot of clever applications. But what are the privacy implications?

Eye tracking for research was used for over a century before computers (see the quick history outlined in this article). The earliest research, in the 19th century, actually involved direct mechanical contact with the cornea. Already by 1898, researchers were discovering some really cool phenomena of the human brain. Motion pictures were applied to the problem as early as 1905, and the first head-mounted eye-tracker was developed in 1948, which freed study subjects from having to keep their heads still. In the mid-1970s the first remote trackers were developed that were truly unobtrusive to the subject. By then, research and writing based on eye tracking was booming, not only on the part of psychologists but also the military.

Chertoff on Google Glass

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 5:56pm

We’ve been doing a fair amount of thinking about the implications of consumer wearable cameras like Google Glass, and I’m sure we’ll have more to say in this space on the subject. But meanwhile, we’re pleasantly surprised to report a very trenchant analysis of the technology’s implications for our privacy by none other than Michael Chertoff. Writing on CNN’s web page, the former DHS chief writes,

So, who owns and what happens to the user's [video] data? Can the entire database be mined and analyzed for commercial purposes? What rules will apply when law enforcement seeks access to the data for a criminal or national security investigation? For how long will the data be retained? ….

Even those who might be willing to forgo some degree of privacy to enhance national security should be concerned about a corporate America that will have an unrestricted continuous video record of millions.

What is to prevent a corporation from targeting a particular individual, using face recognition technology to assemble all uploaded videos in which he appears, and effectively constructing a surveillance record that can be used to analyze his life?

Chertoff says he’s inclined to think that government regulation may be needed. I haven’t seen Chertoff say anything about the threat of pervasive government surveillance, which would make him a kind of anti-libertarian on privacy—in favor of restricting corporations, but not the government. For the average, relatively powerless person trying to live their life, the threat comes from both directions.

The Burdens of Total Surveillance

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 1:33pm

Last week’s Washington Post report that the CIA had requested that Boston bomber Tamerlan Tsarnaev be placed on a terrorist watch list raises an interesting point about total surveillance societies: in addition to all their negative implications for citizens, they actually bring some disadvantages for the authorities as well.

It’s not clear what information the CIA’s request was based upon, but reportedly it came from Russian authorities. It is also possible that Tsarnaev’s communications were flagged by US agencies such as the NSA. Either way, it seems as though there’s a real possibility that Tamerlan’s name came to the attention of the authorities through some dragnet-style surveillance technique.

If so, the conundrum for the authorities is this:

Do Young People Care About Privacy?

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 10:00am

Everywhere I go, I hear some variation of the claim that “young people today just don’t care about privacy.” This is something that people widely seem to believe is “just true.” The latest claim to this effect comes in the form of a new poll, the release of which was trumpeted with unfortunate headlines like “Millennials don’t worry about online privacy.”

In fact, the poll, which was conducted by the University of Southern California’s corporate-partnered Center for the Digital Future, showed no such thing. Although there were some differences between younger and older respondents,

One Small Step by the Senate Judiciary Committee, One Giant Leap for Online Privacy

By Sandra Fulton, ACLU Washington Legislative Office at 3:50pm

Yesterday marked a major step for Americans taking control of their privacy online. In a rare demonstration of bipartisan support, the Senate...

The House Hearing on Location Tracking Law (or the Lack Thereof)

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 1:44pm

My colleague Catherine Crump testified before Congress today on location tracking and privacy, and the GPS Act that would increase legal protections for our location data. The hearing was before the House Judiciary Subcommittee on Crime, Terrorism, Homeland Security and Investigations, and you can read her written testimony submitted here.

The chairman of the committee, Rep. Jim Sensenbrenner (D-Wis.), is a strong supporter of updating the law. He opened the hearing by acknowledging that the law has not kept pace with new technology—certainly a truism, and certainly true with regards to location tracking in particular, but one that is good to hear accepted as fact by powerful lawmakers.

Sensenbrenner also slammed the Justice Department for not sending a witness to the hearing. The reason, he reported, is that “it lacks a clear policy position on ECPA,” referring to the 1986 Electronic Communications Privacy Act. When Sensenbrenner was reading Catherine’s bio, which included mention of her efforts to find out how the DOJ is interpreting