American Civil Liberties Union

My colleague Ben Wizner and I are in Brussels this week, partly to meet with European lawmakers and others about the new privacy regime that the EU is in the process of putting into place. Unlike the United States, Europe has a set of basic rules and institutions in place to protect individuals’ privacy, and is trying to update its existing rules and institutions for the digital age.

The United States needs similar protections—a basic, overarching privacy law, and institutions with the teeth to enforce it. We are an outlier in the world in lacking those things. However, some U.S. companies seem to be terrified at the prospect of basic, fair privacy rules being put into place in Europe. Not only are companies such as Facebook and Google furiously lobbying against those rules, but the U.S. government has “shocked” Europeans by also lobbying hard against many elements of this update.

In April, ACLU of Colorado filed public records requests seeking to learn about their local law enforcement agencies’ policies, procedures, and practices for tracking cell phones, bringing the total count of ACLU-filed cell phone location tracking public records requests to over 400. (We’ve written about what we’ve learned nationwide here, here, here, here, and here, and our findings were featured in a front page story in the New York Times in April). What Colorado learned is particularly interesting because a remarkable number of law enforcement agencies in Colorado are getting probable cause warrants before tracking cell phone location information—Arvada, Boulder, Colorado Springs, Denver, and El Paso County always get warrants in investigative circumstances—and because Denver’s practices pretty much follow existing legislative proposals, proving these bills totally workable.

Internet-based text message apps are one of the most common means of communicating today. But when it comes to this relatively new technology, surveillance law is behind the times in important ways, and as is so often the case when the law lags technology, our privacy suffers as a result.

Text messages have for some time been a cash cow for the wireless carriers—back in 2007, annual global SMS revenue was estimated to be 60 billion dollars. Charging consumers 25 cents per 140 character text message is a great way to make money, but when those same consumers are already paying for internet connectivity to their smartphones, the market was ripe for disruption. In recent years, a number of internet companies have entered the text message market. In some cases, they have offered low-cost or free SMS services that interoperate with the carriers’ existing SMS system. In other cases, large companies like Facebook, Apple and WhatsApp have offered closed text message services to their smartphone using customers. Often seeking to reduce their monthly telephone bills, millions of consumers have migrated from smartphone text message services provided by the wireless carriers to smartphone text message services provided by internet companies.

There has been a lot of attention recently to the issue of audio recording being added to surveillance cameras on public buses. This issue first came onto our radar in 2009, but resurfaced again in Maryland in October (see this October Baltimore Sun article). In December the Washington Post and The Daily reported that the practice is spreading widely across the United States.