American Civil Liberties Union

On Thursday, Idaho Governor Butch Otter signed into law the first bill in the nation protecting individuals from unfettered surveillance by unmanned aerial vehicles.

Virginia enacted the very first drones bill nationwide on April 3. Their bill imposes a two-year moratorium on law enforcement drone use, except in emergencies, in order to give the VA legislature time to put in place legal protections for domestic drone use. On Thursday, Idaho put those legal protections in place.

A video touting software created by Raytheon to mine data from social networks has been attracting an increasing amount of attention in the past few days, since it was uncovered by Ryan Gallagher at the Guardian.

Internet-based text message apps are one of the most common means of communicating today. But when it comes to this relatively new technology, surveillance law is behind the times in important ways, and as is so often the case when the law lags technology, our privacy suffers as a result.

Text messages have for some time been a cash cow for the wireless carriers—back in 2007, annual global SMS revenue was estimated to be 60 billion dollars. Charging consumers 25 cents per 140 character text message is a great way to make money, but when those same consumers are already paying for internet connectivity to their smartphones, the market was ripe for disruption. In recent years, a number of internet companies have entered the text message market. In some cases, they have offered low-cost or free SMS services that interoperate with the carriers’ existing SMS system. In other cases, large companies like Facebook, Apple and WhatsApp have offered closed text message services to their smartphone using customers. Often seeking to reduce their monthly telephone bills, millions of consumers have migrated from smartphone text message services provided by the wireless carriers to smartphone text message services provided by internet companies.

Wow.  Sometimes one word says it all.  The New York Times reports that in response to letters from Rep. Edward Markey (D-MA) and Rep. Joe Barton (R-TX), mobile phone providers disclosed that they received approximately 1.3 million law enforcement requests for customer records last year alone. What an extraordinary number: more than a million accounts subject to at least some level of law enforcement investigation just in 2011. As we have discussed elsewhere, beyond what is reported by carriers in these letters, there is absolutely no reporting or tracking regarding how these numbers are handled.  

Even more amazing, as you dig into the article and read the underlying letters it becomes clear that this is actually a vast undercount of the number of Americans who have been affected by this tracking.  Sprint disclosed that it received approximately 500,000 subpoenas in 2011 (a subpoena is a written request for information from law enforcement that isn’t reviewed by a judge) and that “each subpoena typically requested subscriber information on multiple subscribers.” In addition, several carriers disclosed that they sometimes provide all the information from a particular cell tower or particular area.   Metro PCS for example charges:

$50 for Cell Tower Dump per tower for a 2 hour period

$100 for an Area Dump (if you know the location but do not know the cell towers that affect the area) for a maximum of 2 cell towers for a 2 hour period per cell tower search

Everyone whose phone has been used by a particular cell tower over a particular time period—likely hundreds or thousands of people—could have their data examined by investigators.  And these dragnet data requests are on the rise.  Verizon estimates that over the last 5 years it has seen an average increase of 15% annually, and T-Mobile reported increases of approximately 12%-16%.  This has also led to at least some possible abuse; T-Mobile disclosed that in the last three years it has referred two inappropriate law enforcement requests to the FBI.