Online Privacy

VIDEO: Is Law Enforcement Reading Your Email Without a Warrant?

By Noa Yachot, Communication Strategist, ACLU at 2:38pm

The FBI doesn't think it needs a warrant to read emails and other electronic communications – despite the fact that a federal court has ruled that doing so violates the Fourth Amendment. Ben Wizner appeared today on Democracy Now! to discuss this and other ACLU revelations regarding government surveillances practices.

The ACLU this week released documents that paint a disturbing picture of the authority the government claims to access a wide range of our communications – from emails to Facebook messages and much more. These latest developments reinforce what has long been clear: it is well past time to modernize ECPA, the egregiously outdated law that governs our electronic privacy but hasn't been updated since 1986, before the World Wide Web was even invented. As Wizner said:

FBI Documents Suggest Feds Read Emails Without a Warrant

By Nathan Freed Wessler, Staff Attorney, ACLU Speech, Privacy & Technology Project at 10:31am

New documents from the FBI and U.S. Attorneys’ offices paint a troubling picture of the government’s email surveillance practices. Not only does the FBI claim it can read emails and other electronic communications without a warrant—even after a federal appeals court ruled that doing so violates the Fourth Amendment—but the documents strongly suggest that different U.S. Attorneys’ offices around the country are applying conflicting standards to access communications content (you can see the documents here).

Last month, in response to a Freedom of Information Act request, the ACLU received IRS documents indicating that the agency’s criminal investigative arm doesn’t always get a warrant to read Americans’ emails. Today we are releasing these additional documents from other federal law enforcement agencies, reinforcing the urgent need for Congress to protect our privacy by updating the laws that cover electronic communications.

The FBI and Electronic Communications: Where’s the Warrant?

The documents we received from the FBI don’t flat out tell us whether FBI agents always get warrants, but they strongly suggest that they don’t.

In 2010, the Sixth Circuit Court of Appeals decided in United States v. Warshak that the government must obtain a probable cause warrant before compelling email providers to turn over messages to law enforcement. But that decision only applies in the four states covered by the Sixth Circuit, so we filed our FOIA request to find out whether the FBI

The Privacy-Invading Potential of Eye Tracking Technology

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 9:42am

Eye tracking technology received new attention recently due to its inclusion in the Samsung Galaxy IV phone, where it can (with mixed results, according to reviewers) let users scroll the screen with their eyes or dim the screen when they look away. Clearly this is a technology that has the potential for a lot of clever applications. But what are the privacy implications?

Eye tracking for research was used for over a century before computers (see the quick history outlined in this article). The earliest research, in the 19th century, actually involved direct mechanical contact with the cornea. Already by 1898, researchers were discovering some really cool phenomena of the human brain. Motion pictures were applied to the problem as early as 1905, and the first head-mounted eye-tracker was developed in 1948, which freed study subjects from having to keep their heads still. In the mid-1970s the first remote trackers were developed that were truly unobtrusive to the subject. By then, research and writing based on eye tracking was booming, not only on the part of psychologists but also the military.

The Burdens of Total Surveillance

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 1:33pm

Last week’s Washington Post report that the CIA had requested that Boston bomber Tamerlan Tsarnaev be placed on a terrorist watch list raises an interesting point about total surveillance societies: in addition to all their negative implications for citizens, they actually bring some disadvantages for the authorities as well.

It’s not clear what information the CIA’s request was based upon, but reportedly it came from Russian authorities. It is also possible that Tsarnaev’s communications were flagged by US agencies such as the NSA. Either way, it seems as though there’s a real possibility that Tamerlan’s name came to the attention of the authorities through some dragnet-style surveillance technique.

If so, the conundrum for the authorities is this:

One Small Step by the Senate Judiciary Committee, One Giant Leap for Online Privacy

By Sandra Fulton, ACLU Washington Legislative Office at 3:50pm

Yesterday marked a major step for Americans taking control of their privacy online. In a rare demonstration of bipartisan support, the Senate...

IRS Says It Will Respect 4th Amendment With Regard to Email, But Questions Remain

By Nathan Freed Wessler, Staff Attorney, ACLU Speech, Privacy & Technology Project at 4:07pm

With tax day behind us, taxpayers may soon have something else to celebrate from the IRS. In testimony before the Senate Finance Committee today, IRS Acting Commissioner Steven Miller was questioned aggressively about documents released by the ACLU last week that indicate that the IRS does not think it needs a warrant to read all emails and other electronic communications during criminal investigations. Under pressure from senators, Miller agreed to update IRS policy documents within 30 days to state that a warrant is required for access to all emails, regardless of their age.

Smashing Success: Thousands of ACLU Supporters Petition President to Veto CISPA, Get Full Page Ad in Politico

By Robyn Greene, ACLU Washington Legislative Office & Kaitlyn Newman, Campaigner, ACLU Action at 5:14pm

You did it! In the two months since Reps. Rogers (R-Mich.) and Ruppersberger (D-Md.) reintroduced their privacy-busting bill CISPA, 49,513 (and counting) ACLU supporters signed one of our biggest petitions of all time, urging President Obama to protect Americans' privacy and civil liberties and veto CISPA!

To make sure members of Congress hear your passionate plea as well, we've printed a full-page ACLU Action ad opposing CISPA in today's Politico – the go-to newspaper for the who's who of Capitol Hill! Hopefully, the president and your legislators caught a glimpse of the compelling graphic while they drank their morning coffee.

Reading of Emails Without Warrant Likely Extends Beyond IRS

By Nathan Freed Wessler, Staff Attorney, ACLU Speech, Privacy & Technology Project at 8:23am

The ACLU released documents last week indicating that the criminal investigative arm of the IRS doesn’t think it always needs a warrant to read people’s email when investigating them for tax crimes. The revelation garnered widespread media attention (see examples here, here, and here). We called on the IRS to clarify its policy but, unfortunately, the agency issued only a brief, confusing statement that failed to explain its actual policy and practices. As we said last week, because our emails, text messages, and other electronic communications contain some of our most sensitive and private information, it is crucial that federal law enforcement agencies obtain a warrant from a neutral judge before accessing them.

CISPA Remains Fatally Flawed After Secret Committee Markup

By Michelle Richardson, Legislative Counsel, ACLU Washington Legislative Office at 12:20pm

The House Permanent Select Committee on Intelligence on Wednesday marked up CISPA, the controversial cybersecurity bill that allows companies to share their customers' sensitive internet information with each other and the government. The bill's sponsors and corporations are not only declaring victory, but aggressively arguing that all privacy and civil liberties problems have been solved.

This couldn't be further from the truth.

We have flagged four general categories of problems in CISPA that have to be fixed before it is passed, and the markup only substantially fixed one of them:

Why Won’t the IRS Deploy Basic Web Security?

By Katie Haas, ACLU Human Rights Program & Chris Soghoian, Principal Technologist and Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 10:45am

This tax season, when you visit the IRS’s website seeking tax information, can you be certain that no one else is monitoring which pages you browse?

Unfortunately, right now the answer to that question is “no.” Unlike Facebook, Twitter, Google Mail (Gmail), and virtually every bank and credit card company, the IRS, like most government agencies, does not use HTTPS for encryption and authentication on its website. If you try typing “mail.google.com” into your browser right now, you will see that the URL you end up at is actually “https://mail.google.com.” That “s” after the “http” may seem insignificant, but it means a lot. It signifies that Google is using Secure Sockets Layer encryption, or SSL, to both encrypt and authenticate its communications. When you visit google.com and you see “https” at the beginning of the address, it lets you know that your connection is secure, and that third parties – such as your internet service provider, employer, or university cannot monitor what you’re doing through the use of network interception technology.

Statistics image