Data Retention

Proposals to require companies to retain customers' data in case security agencies wish to look at it

CISPA Remains Fatally Flawed After Secret Committee Markup

By Michelle Richardson, Legislative Counsel, ACLU Washington Legislative Office at 12:20pm

The House Permanent Select Committee on Intelligence on Wednesday marked up CISPA, the controversial cybersecurity bill that allows companies to share their customers' sensitive internet information with each other and the government. The bill's sponsors and corporations are not only declaring victory, but aggressively arguing that all privacy and civil liberties problems have been solved.

This couldn't be further from the truth.

We have flagged four general categories of problems in CISPA that have to be fixed before it is passed, and the markup only substantially fixed one of them:

Senate Homeland Security Committee Misses the Mark with Statement on DHS “Fusion Center” Program

By Kara Dansky, Senior Counsel, ACLU Center for Justice at 2:35pm

Last week, the Senate Homeland Security Committee’s Subcommittee on Investigations issued a report criticizing the Department of Homeland Security for its failure to ensure proper oversight over state and local “fusion centers.”  Shortly thereafter, the committee issued a statement denouncing the report and lauding fusion centers as playing a “significant role in many recent terrorism cases.”

Monitoring Internet Usage Patterns Has Privacy Implications Too

By Catherine Crump, Staff Attorney, ACLU Speech, Privacy and Technology Project at 4:34pm

The New York Times Sunday Review included a striking op ed suggesting that universities could one day deploy software to analyze students’ internet usage for the purpose of assessing their mental health. The writers, Sriram Chellappan and Raghavendra Kotikalapudi, support their argument by explaining that they conducted a study on university students that demonstrated a correlation between depression and certain patterns of internet usage (for example, “very high e-mail usage”). The study involved screening 216 students at Missouri University of Science and Technology for depression and then having “the university’s information technology department provide us with campus Internet usage data for our participants . . . . This didn’t mean snooping on what the students were looking at or whom they were e-mailing; it merely meant monitoring how they were using the Internet” (so, for example, if they were surfing the web, checking email, using p2p programs, etc.).

Build It And They Will Snoop

By Sandra Fulton, ACLU Washington Legislative Office at 5:19pm

Late last month a Montreal homicide detective was found guilty of accessing a police database to pass citizens’ information to an organized crime ring to help it ship stolen vehicles overseas. We always keep an eye on these kinds of stories because abuse is one of the risks that is created by governments’ collection of personal data on citizens at all levels. These include records containing sensitive medical and employment history, contact details like email addresses or phone numbers, and even bank and credit card information. But when proponents argue for new databases, the fact that at least some of these records are almost certain to be exposed by crooked insiders is rarely accounted for.

Statistics image