A PUBLICATION OF THE SILHA CENTER FOR THE STUDY OF MEDIA ETHICS AND LAW | FALL 2018 Facebook, Google Fail to Protect Users’ Data; Tech Companies and Federal Government Pursue Federal Data Privacy Frameworks hroughout 2018, social network platform Facebook them that user profi le data would be collected for academic was the target of investigations and widespread purposes. Kogan’s data collection began in 2014, and only about criticisms over allegations that it failed to adequately 270,000 Facebook users consented to sharing their Facebook protect users’ data. The scrutiny began in March profi le data with the app. However, the app also harvested 2018 after several news outlets reported that data from profi les of the users’ friends, even though the friends TFacebook was aware that Cambridge Analytica, a political data had not consented to data collection. Ultimately, more than 87 fi rm connected to President Donald Trump’s 2016 campaign, million raw data profi les were shared with Cambridge Analytica. had gained unauthorized access to personal information of Both The New York Times and The Observer reported that millions of Facebook users in 2015. In the wake of the reports, Cambridge Analytica, which had received substantial funding lawmakers and regulators in the United States and abroad from Republican donor Robert Mercer, planned to use the data opened investigations into why Facebook had waited until 2018 to develop comprehensive psychographic profi les of individuals to inform its users that their data may have been improperly with the intent to infl uence voting behaviors. accessed. Facebook CEO Mark Zuckerberg was also asked to In a March 16 blog post, Facebook announced that the appear before Congressional committees to answer lawmakers’ company had suspended Cambridge Analytica and the SCL questions about his company’s privacy missteps and tech Group from the social media site, as well as Kogan and companies’ growing reach into people’s daily lives. former Cambridge Analytica employee turned whistleblower Later in 2018, Facebook and Google faced criticism over Christopher Wylie for violations of Facebook’s terms of service. separate privacy incidents. On September 28, Facebook “Although Kogan gained access to this information in a legitimate announced that a security attack affected the data of over 50 way and through the proper channels that governed developers million user accounts. On October 8, Google announced that the on Facebook at the time, he did not subsequently abide by company had previously discovered and remedied a software our rules. By passing information on to a third party, including bug that allowed third party developers access to the personally SCL/Cambridge Analytica and Christopher Wylie of Eunoia identifi able information of as many as 500,000 Google+ users, Technologies, he violated our platform policies,” Facebook including their names, email addresses, ages, occupations, and Vice President and Deputy General Counsel Paul Grewal wrote. relationship status. “When we learned of this violation in 2015, we removed his app Meanwhile, tech companies, the Trump administration, and from Facebook and demanded certifi cations from Kogan and a U.S. Representative each took different actions related to all parties he had given data to that the information had been adopting a new federal law or framework protecting internet destroyed. Cambridge Analytica, Kogan and Wylie all certifi ed to users’ privacy and security online, prompting support from some us that they destroyed the data.” observers and concerns from others. In a March 17 update to its initial blog post, Facebook pushed back against reports that Cambridge Analytica’s access to social Political Data Firm Improperly Obtained Data From media users’ information should be considered a data breach. Millions of Facebook Users Rather, Facebook maintained that Kogan obtained information On March 17, 2018, The New York Times and The Observer of from users who chose to use his app and provided consent. London reported that Cambridge Analytica, a subsidiary of the “People knowingly provided their information, no systems were British based political data analysis company SCL Group, had infi ltrated, and no passwords or sensitive pieces of information harvested personal data from more than 50 million Facebook were stolen or hacked,” Grewal wrote. users without permission. Cambridge Analytica obtained the data The reports that Cambridge Analytica had improperly from a Facebook app called “thisisyourdigitallife,” developed by accessed millions of Facebook users’ data prompted Cambridge University researcher Aleksander Kogan. The app condemnation of the social media platform in the United States paid Facebook users to complete a personality quiz and informed Privacy, continued on page 3 Inside This Issue Fall 2018: Volume 24, No. 1
1 Facebook, Google Fail to Protect Users’ Data; Tech 45 Stearns County Releases State Documents from the Companies and Federal Government Pursue Federal Data Wetterling Investigation Privacy Frameworks Privacy Cover Story 47 Ninth Circuit Ruling and Federal Lawsuit Target U.S. 9 President Trump Continues Anti-Press Rhetoric and Actions Customs and Border Protection for First and Fourth First Amendment Amendment Violations Law Enforcement 17 Journalists in the United States and Abroad Face Threats of Violence and Incarceration 51 Federal Judge Indicates the Public and the Press Have First Reporters in Danger Amendment Right to Witness All Portions of California Executions 23 President Trump Prevails in Two Federal Courts’ First Access Amendment Rulings, Faces New First Amendment Lawsuit First Amendment 52 Defamation Cases Continue for Right-Wing Radio Host and BuzzFeed; Former Political Candidates Bring Defamation 28 First Amendment Coalition Sues Department of Justice Lawsuits Over Secret Collection of Journalist’s Telephone and Email Defamation Records FOIA 58 Ninth Circuit Declines a Second Look at the Monkey Selfi e Case 30 Brett Kavanaugh Sworn In as the 114th U.S. Supreme Court Copyright Justice Supreme Court News 59 Fourth Circuit Allows Lawsuit Targeting North Carolina Ag-Gag Law to Continue; District Court Rules Wyoming Law 34 Repeal of Net Neutrality Rules Continues to Face Legal Unconstitutional Uncertainty Ag-Gag Laws Net Neutrality 62 33rd Annual Silha Lecture Addresses the Free Speech
38 Investigations, Prosecutions, and Sentencing Continue In Implications of the #MeToo Movement Goverment Leak Cases Silha Center Events Leak Investigations
43 Trump Administration Threatens Regulation of Social Media Companies and Google for Alleged Political Bias Tech Censorship
SILHA C ENTER S TAFF
JANE E. KIRTLEY SILHA C ENTER D IRECTOR AND S ILHA P ROFESSOR OF M EDIA E THICS AND L AW
SCOTT M EMMEL SILHA BULLETIN E DITOR
KIRSTEN N ORDSTROM SARAH W ILEY SILHA R ESEARCH A SSISTANT SILHA R ESEARCH A SSISTANT
CASEY C ARMODY ELAINE H ARGROVE FORMER S ILHA R ESEARCH A SSISTANT SILHA C ENTER S TAFF
2 Privacy, continued from page 1 and we need to know that users can trust Facebook. With the and abroad. Given widespread concerns that foreign countries information we have now, our trust has been broken.” used Facebook to meddle in American elections, many critics Facebook also faced challenges and criticisms over its expressed alarm that the data had been collected by a foreign handling of users’ data in the individual litigation realm. On political consulting company. In a March 18 statement to The April 9, Bloomberg BNA reported that the Cambridge Analytica Washington Post , U.S. Sen. Amy Klobuchar (D Minn.) called on scandal had prompted at least 18 lawsuits against Facebook Facebook CEO Mark Zuckerberg to appear before Congress. throughout the United States. The lawsuits, fi led by users “They say ‘trust us,’ but Mark Zuckerberg needs to testify before and investors, levied several accusations against the social the Senate Judiciary Committee about what Facebook knew media company, ranging from alleged privacy violations, user about misusing data from 50 million Americans in order to target agreement breaches, consumer fraud, unfair competition, political advertising and manipulate voters,” Sen. Klobuchar said. negligence, securities fraud, and racketeering. Attorney Marc On April 10, in response to the Cambridge Analytica Melzer told Bloomberg BNA on April 9 that the wide ranging revelations, Sens. Richard Blumenthal (D Conn.) and Ed Markey lawsuits would require Facebook to proceed carefully. (D Mass.) introduced the Customer Online “Facebook’s having to fi ght on multiple fronts, with potentially Notifi cation for Stopping Edge Provider confl icting strategies and obligations, is what will make this COVER STORY Network Transgressions (CONSENT) ‘litigation swarm’ problematic,” Melzer said. Act. The bill would require an online Beyond U.S. borders, lawmakers and data privacy regulators service, such as Facebook, to provide information to consumers announced that they too would investigate Facebook’s failure about data collection, use, and sharing processes. The bill also to prevent Cambridge Analytica from improperly obtaining would require that online services obtain opt in consent from users’ data. The UK Information Commissioner’s Offi ce (ICO) users before using, sharing, or selling consumer data and would compel companies to develop data storage protections so that “Facebook has made promises about individuals cannot be identifi ed. The CONSENT Act identifi ed the users’ privacy in the past, and we need Federal Trade Commission (FTC) as the primary agency tasked to know that users can trust Facebook. with enforcing the new rules. The full text of the bill is available online at: https://www.congress.gov/bill/115th congress/senate With the information we have now, our bill/2639/text. As the Bulletin went to press, the bill remained trust has been broken.” in the U.S. Senate Committee on Commerce, Science, and Transportation. — National Association of Attorneys General Additionally, on March 26, the FTC formally announced that it was investigating whether Facebook’s failure to secure users’ data from unauthorized collection violated a 2011 consent announced on March 19 that it planned to investigate “the decree barring the company from making deceptive claims about use of personal data for political campaigns,” which included its data privacy practices. The 2011 consent decree required “the acquisition and use of Facebook data.” On July 10, the Facebook to obtain affi rmative consent from users before ICO announced that it would issue a £500,000 (approximately making changes to the site that would override users’ privacy $644,000) fi ne against Facebook for failing to adequately protect preferences. “The FTC is fi rmly and fully committed to using all users from Cambridge Analytica’s improper data collection and of its tools to protect the privacy of consumers. Foremost among the lack of transparency regarding how others may have also these tools is enforcement action against companies that fail to harvested user data without consent. The fi ne was announced honor their privacy promises . . . or that engage in unfair acts as part of an ICO report on possible misuse of personal social that cause substantial injury to consumers in violation of the FTC media data during the UK’s referendum on whether to retain Act,” FTC Bureau of Consumer Protection acting director Tom membership in the European Union (EU), also known as Pahl wrote in the March 26 press release. “Companies who have “Brexit.” The £500,000 fi ne was the maximum amount that could settled previous FTC actions must also comply with FTC order be levied against Facebook under the UK’s now defunct 1998 provisions imposing privacy and data security requirements. Data Protection Act, as the company’s actions had taken place Accordingly, the FTC takes very seriously recent press reports prior to the EU’s General Data Protection Regulation (GDPR) raising substantial concerns about the privacy practices of going into effect in May 2018 and the GDPR was adopted by the Facebook. Today, the FTC is confi rming that it has an open EU in Spring 2016 to replace the previous framework, as well as non public investigation into these practices.” provide greater protection for EU citizens’ data privacy rights. Besides the FTC, several state attorneys general announced (For more information on the GDPR, see “The United States, that they would seek more information from Facebook about its the European Union, and the Irish High Court Wrangle Data failures to prevent Cambridge Analytica from collecting users’ Privacy Concerns” in the Fall 2017 issue of the Silha Bulletin and data. In a March 26 open letter signed by 37 state attorneys Adopted EU General Data Protection Regulation Establishes general, the National Association of Attorneys General wrote ‘Right to Erasure’ in “Right to Be Forgotten Continues to Create that it was calling on Facebook to provide several answers about Challenges for Online Entities” in the Summer 2016 issue.) its data protection and privacy policies. “These revelations raise On Oct. 25, 2018, the ICO offi cially levied the £500,000 fi ne. many serious questions concerning Facebook’s policies and According to the ICO, the fi ne would have been far higher had practices, and the processes in place to ensure that they are Facebook’s actions taken place after the GDPR took effect, followed,” the offi cials wrote. “Even with the changes Facebook including a maximum fi ne of £17 million or four percent of has made in recent years, many users still do not know that their global turnover, whichever is higher, according to the Associated profi le — and personal data — is available to third party vendors. Press (AP). In an October 25 statement, ICO Commissioner Facebook has made promises about users’ privacy in the past, Privacy, continued on page 4 3 Privacy, continued from page 3 this feature.) If you had managed to make Cambridge Analytica scandal, such as your way through a bewildering array of whether Facebook censored conservative Elizabeth Denham said, “We considered option, you might have even discovered speech, how it policed “hate speech,” and these contraventions to be so serious we how to turn the feature off,” Tufekci the racial diversity makeup of Facebook’s imposed the maximum penalty under the wrote. “This wasn’t informed consent. leadership and staff, among other previous legislation.. . . The fi ne would This was exploitation of user data and subjects. inevitably have been signifi cantly higher user trust” (emphasis in original). Throughout his testimony, Zuckerberg under the GDPR.” She added, “One of our In response to mounting criticism, apologized for Facebook’s failures and main motivations for taking enforcement CEO Mark Zuckerberg posted to his own said that his company would attempt to action is to drive meaningful change public Facebook page that he planned to do better in the future. “We didn’t take a in how organisations handle people's take steps, including auditing thousands broad enough view of our responsibility, personal data.” of apps, to address the social media site’s and that was a big mistake. And it was A Facebook spokesperson said in a failure to prevent third party applications my mistake, and I’m sorry,” Zuckerberg separate statement, “We are currently from improperly harvesting users’ data. said. “I started Facebook, I run it, and I’m reviewing the ICO’s decision. While we “We have a responsibility to protect responsible for what happens here.” The respectfully disagree with some of their your data, and if we can’t then we don’t Facebook CEO also acknowledged that fi ndings, we have said before that we deserve to serve you. I’ve been working the company had failed on several fronts. should have done more to investigate to understand exactly what happened and “It’s clear now that we didn’t do enough claims about Cambridge Analytica and how to make sure this doesn’t happen to prevent these tools from being used taken action in 2015.” The spokesperson again,” Zuckerberg wrote. “The good for harm,” Zuckerberg told the senators. added, “We are grateful that the ICO news is that the most important actions to “That goes for fake news, foreign has acknowledged our full cooperation prevent this from happening again today interference in elections, and hate speech, throughout their investigation, and we have already taken years ago. But we as well as developers and data privacy.” have also confi rmed they have found no also made mistakes, there’s more to do, Zuckerberg also pushed back against evidence to suggest UK Facebook users’ and we need to step up and do it.” claims that users have little control over data was in fact shared with Cambridge On March 28 Facebook unveiled a how their data is collected and used on Analytica.” new centralized system that would offer Facebook. In responding to questions Data privacy advocacy groups and users greater control over their privacy about Facebook’s data collection activists also joined the chorus of and security settings. The New York processes being akin to surveillance, criticisms directed at Facebook. In a Times reported that the new system the CEO said that there were signifi cant March 23 post on the American Civil would provide all of Facebook’s privacy distinctions. “The difference is extremely Liberties Union’s (ACLU) “Free Future” and security options on a single page. clear, which is that on Facebook you blog, ACLU of California Technology & Previously, users would need to navigate have control over your information,” Civil Liberties Director Nicole Ozer and to about 20 different sections and pages Zuckerberg said. “The content that you ACLU of Northern California Technology to make changes to their privacy and share, you put there.. . . The information and Civil Liberties Project Policy Attorney security settings. The Times noted that that we collect, you can choose to have Chris Conley argued that Facebook Facebook had begun development on the us not collect. You can delete any of it, has consistently failed to protect users’ centralized privacy settings page in 2017, and of course, you can leave Facebook privacy. “There’s been some debate over but sped up its deployment in the wake of if you want.. . . I know of no surveillance whether this is a ‘data breach,’ but for the Cambridge Analytica scandal. organization that gives people the option the most part that is a red herring,” they Less than a month after The New to delete the data that they have or even wrote. “If anything, this is arguably worse York Times and The Observer stories know what they’re collecting.” than the result of an inadvertent technical about Cambridge Analytica, Zuckerberg As for the scandal that prompted the failure. Instead, it was a predictable appeared before Congress to answer hearings, Zuckerberg placed much of the outcome of the choices that Facebook has lawmakers’ questions about Facebook. blame on Cambridge Analytica and Kogan made to prioritize the bottom line over The CEO appeared before a joint session for violating Facebook’s terms of service. user privacy and safety.” of the Senate Judiciary and Commerce, “When we heard back from Cambridge In a March 19 op ed for The New York Science, and Transportation Committees Analytica that they had told us that they Times , University of North Carolina on April 10 and a single session of the weren’t using the data and deleted it, we (UNC) School of Information and Library U.S. House of Representatives Energy considered it a closed case,” Zuckerberg Science Professor Zeynep Tufekci and Commerce Committee on April 11. said. “In retrospect, that was clearly a maintained that Facebook regularly During two days of testimony, Zuckerberg mistake. We shouldn’t have taken their disregards privacy concerns. “Despite faced a range of questions on topics word for it. We’ve updated our policy to Facebook’s claims to the contrary, including whether Facebook adequately make sure we don’t make that mistake everyone involved in the Cambridge informs users about how their data is again.” Analytica data siphoning incident did not used, whether users actually understand Zuckerberg added that Facebook give his or her ‘consent’ — at least not in how their data is used, and the extent would be investigating whether other any meaningful sense of the word. It is to which Facebook collects data about companies deploying applications on the true that if you found and read all the fi ne individuals who do not have a profi le site had acted improperly. “[Facebook print on the site, you might have noticed account, among other privacy related will be] investigating many apps, tens that in 2014, your Facebook friends had topics. Some lawmakers also took the of thousands of apps, and if we fi nd the right to turn over all your data through opportunity to question Zuckerberg on any suspicious activity, we’re going to such apps. (Facebook has since turned off issues unrelated to data privacy and the conduct a full audit of those apps to 4 understand how they’re using their data Privacy, Technology and the Law, argued or Instagram,” Facebook said in a July and if they’re doing anything improper,” that any sweeping legal reforms regarding 20 statement. “We take these allegations Zuckerberg said. “If we fi nd that they’re data privacy faced signifi cant challenges. seriously, and have suspended the apps doing anything improper, we’ll ban them “Mark Zuckerberg promises that while we investigate.” from Facebook and we will tell everyone Facebook can do better to protect our Ultimately, Facebook’s inability to affected.” privacy. Three times during his testimony put to bed its data privacy missteps Although many agreed that the before Congress[,] . . . he used the same and critics’ subsequent concerns may Facebook CEO deftly handled his fi rst example: Face recognition technology, be indicative of the problems facing appearance before Congress, several he explained, should require ‘special the evolving digital media landscape as observers suggested that the substance consent’ from users. He left out a key fact: a whole. In an August 6 commentary of Zuckerberg’s responses to questions This week, lobbyists paid by Facebook for the “Hard Questions” series on the was often lacking and misleading. In an are working with Illinois lawmakers Facebook “Newsroom” blog, former FTC April 12 column, Washington Post tech backed by Facebook to gut the state’s face Commissioner Terrell McSweeny argued columnist Geoffrey A. Fowler disputed recognition privacy law, the strongest in that a larger discussion about consumer Zuckerberg’s arguments that users have the nation,” Bedoya wrote. “This should privacy and data sharing on all social control over their data. “Whenever he make us very skeptical about any calls media sites is needed now more than was questioned why Facebook collects for a broad, European style privacy law ever. “Most of us are now familiar with so much data, he wheeled out: ‘You have that would apply across technologies and the grand bargain of our digital economy. control over your information.’ That’s like platforms. We cannot underestimate the We enjoy the benefi ts of the innovative saying anyone can control a 747 because tech sector’s power in Congress and in products and services available to us, it has buttons and dials. Many pilots even state legislatures. If the United States tries often for free, in exchange for our data. opt for autopilot,” Fowler wrote. “Yes, to pass broad rules for personal data, that We experience the pleasure and ease they when you publish a photo or post on effort may well be co opted by Silicon bring to our lives when we download apps Facebook, you can set an audience — just Valley, and we’ll miss our best shot at for work, entertainment, transportation, friends or public. (There’s a drop down meaningful privacy protections.” food — almost anything. For the most menu that says ‘Who should see this?’) On July 2, The Washington Post part, we don’t dwell on who has our data But Zuckerberg acts like keeping your reported that several federal agencies and how it’s being used. That is, until cousin from seeing photos of your had partnered to investigate Facebook’s something unexpected occurs that frays escapades in Cancun is the end of the data actions and statements regarding our trust and calls into question whether challenge. It’s not.” Cambridge Analytica. Specifi cally, offi cials consumers are bearing too much risk in In an April 11 post on “Deeplinks,” from the Federal Bureau of Investigation the deal,” McSweeny wrote. “For years Electronic Frontier Foundation (EFF) (FBI), the Securities and Exchange privacy experts have rightly warned researcher Gennie Gebhart agreed that Commission (SEC), the Federal Trade that consumers relinquish too much Zuckerberg oversold the idea that users Commission (FTC), and the Department information with too little understanding could have widespread control over of Justice (DOJ) joined forces to of how it’s used and limited recourse their data on Facebook. “Zuckerberg’s investigate what Facebook knew about when it’s mishandled. Under the current insistence that users have complete Cambridge Analytica’s unauthorized data US data protection framework, so long as control is a smokescreen. Many members collection in 2015 as well as why the a person is properly notifi ed and consents of Congress wanted to know not just company did not reveal more information to how their data will be used, nothing how users can control what their friends to its users and investors. As the Bulletin more is required. Now this framework and friends of friends see. They wanted went to press, the agencies had not is being challenged — in the US and to know how to control what third party publicly announced any developments in elsewhere — and one of the central issues apps, advertisers, and Facebook itself their probe of Facebook. in the global discussion about privacy are able to collect, store, and analyze. After the announcements of is how much control consumers should This goes far beyond what users can see coordinated investigations and fi nes, have over how their data fl ows. This on their pages and newsfeeds,” Gebhart Facebook appeared to revise how it conversation is long overdue.” wrote. “Facebook’s ethos of connection was handling data privacy concerns. and growth at all costs cannot coexist On July 20, The Wall Street Journal 29 Million Facebook Users Have with users’ privacy rights. Facebook reported that Facebook announced Information Hacked in September operates by collecting, storing, and it was preemptively suspending data 2018 Security Breach making it easy to fi nd unprecedented analytics fi rm Crimson Hexagon ahead On Sept. 28, 2018, Facebook amounts of user data. Until that changes of a privacy related audit of the fi rm’s announced that a security attack in a meaningful way, the privacy concerns data collection, storage and sharing compromised the data of almost 50 that spurred these hearings are here to practices. Crimson Hexagon, which has million user accounts, including exposing stay.” a long standing data sharing partnership their names, phone numbers, hometowns, Others warned Congress to tread with Facebook, collects large amounts and genders, among other profi le carefully after many lawmakers called of data from Facebook users’ who have information. After further investigation, for greater regulation of the tech industry made their information publicly available, the company reduced the number of throughout Zuckerberg’s testimony. In according to The Wall Street Journal. affected accounts to 29 million, which is an April 11, 2018 op ed for The New York Facebook said the suspension was still believed to be the largest data breach Times , Alvaro M. Bedoya, a Georgetown necessary to protect its users. “We don’t in Facebook’s history, according to The Law professor and former chief counsel allow developers to build surveillance New York Times on September 28. to the Senate Judiciary Subcommittee on tools using information from Facebook Privacy, continued on page 6 5 Privacy, continued from page 5 GDPR, told CNBC on October 16 that users’ data was accessible, Google approximately three million Europeans itself has no evidence that any data was Facebook’s engineering team were affected by the breach. The agency misused and therefore did not legally need discovered the attack on September 16 also criticized Facebook’s disclosure, to disclose the bug, according to The Wall after they saw an unusual spike in user stating that the September 28 notice Street Journal. activity. On September 25, the team lacked suffi cient details regarding the However, several observers criticized discovered that attackers exploited a attack. If Facebook is found to have the company for its decision to not series of fl aws relating to Facebook’s violated GDPR, it could be liable for immediately disclose the vulnerability. “View As” feature, which is designed up to four percent of annual revenue, In an October 8 Washington Post article, to allow users to experience how their according to CNBC. As the Bulletin Executive Director of the Center for profi le looks to another person. The fl aws went to press, the EU had not levied any Digital Democracy Jeff Chester called the allowed the attackers to steal access delay in revealing tokens — digital keys that allow access “Today’s disclosure [that millions the software bug “a to an account. Guy Rosen, Facebook’s digital cover up.” vice president of product, told Wired of Facebook users’ accounts were He added, “Google on September 28 that the attack was a compromised] is a reminder about the has demonstrated “complex interaction of multiple bugs,” dangers posed when a small number of that it cannot be adding that the attackers likely had some relied on to protect level of sophistication. companies like Facebook or the credit privacy.” In a September 28 conference call with bureau Equifax are able to accumulate Georgetown Law reporters, Facebook’s founder and CEO so much personal data about individual professor David Mark Zuckerberg said, “We were able C. Vladeck, the to fi x the vulnerability and secure the Americans without adequate security former director of accounts, but it defi nitely is an issue that measures.” the Federal Trade it happened in the fi rst place.” However, Commission’s neither Facebook nor Zuckerberg — Sen. Mark R. Warner (D-Va.) (FTC) Bureau identifi ed the attackers or where they may of Consumer have originated. Protection, told Sen. Mark R. Warner (D Va.), called the penalties against Facebook regarding the The Washington Post on October 8 that breach “deeply concerning” and requested September data breach. the incident was “obviously a problem a full investigation in a September 28 for Google.” He added, “Even if the statement. “Today’s disclosure is a Google Shuts Down Google+ problem was an unanticipated bug, reminder about the dangers posed when a Following Data Breach; Faces what is Google’s defense for concealing small number of companies like Facebook Criticism Over Non-Disclosure of that bug for six months, especially if or the credit bureau Equifax are able to Privacy Breach users could have taken steps to mitigate accumulate so much personal data about In an Oct. 8, 2018 statement, Google the . . . sharing of their data.” individual Americans without adequate announced that it had previously During an October 10 Congressional security measures,” Warner said. “This is discovered and remedied a “software hearing, Sen. Richard Blumenthal another sobering indicator that Congress bug,” which allowed third party (D Conn.) said that he would seek an needs to step up and take action to developers access to the personally investigation into the Google+ data protect the privacy and security of social identifi able information of as many as exposure. “I will be calling later today, in media users.” 500,000 Google+ users, including names, a letter to the FTC, for an investigation of Facebook will also likely face scrutiny email addresses, ages, occupations, Google in connection with this incident,” in the European Union (EU) due to the and relationship status between 2015 Blumenthal said, according to Engadget General Data Protection Regulation and March 2018. In the same statement, on the same day. He added that Ireland (GDPR), which took effect in May 2018 Google announced that the company and Germany were also looking into the after being adopted by the EU in Spring would largely discontinue its social matter. 2016 to harmonize data privacy laws network service, Google+, and introduced Conversely, Ben Smith, a Google vice across Europe and to protect EU citizen’s new tools to give users more control over president for engineering, defended data privacy rights. (For more information their data. However, observers criticized Google’s decision to not immediately on the GDPR, see “The United States, the Google for disclosing the breach seven disclose the breach. He wrote in the European Union, and the Irish High Court months after it was discovered in March. October 8 statement, “Whenever user Wrangle Data Privacy Concerns” in the The company’s statement came shortly data may have been affected, we go Fall 2017 issue of the Silha Bulletin and after an Oct. 8, 2018 report by The Wall beyond our legal requirements and apply Adopted EU General Data Protection Street Journal broke the news of the several criteria focused on our users in Regulation Establishes ‘Right to Erasure’ data exposure. The report discussed determining whether to provide notice.” in “Right to Be Forgotten Continues to an internal memo by Google’s legal and He added that in weighing whether Create Challenges for Online Entities” in policy staff warning senior executives, to disclose the incident, the company the Summer 2016 issue.) including Google’s CEO Sundar Pichai, considered “whether we could accurately After launching an investigation in that disclosing the incident would likely identify the users to inform, whether there September, the Irish Data Protection trigger “immediate regulatory interest.” was any evidence of misuse, and whether Commission, an agency charged The internal memo, as well as Google’s there were any actions a developer or with monitoring compliance with the own statement, argued that although user could take in response. None of these thresholds were met in this instance.” 6 Several privacy advocates noted that of privacy laws across various states • Maintain the quality of personal Google signed a consent decree with the and industries. An additional area of information FTC in 2011 to settle allegations that an discussion considered the appropriate • Make it practical for individuals earlier social media platform, Google enforcement agency, namely whether the to control the use of personal Buzz, mishandled user data. “I think Federal Trade Commission (FTC) should information we’re passed the point where Google be tasked with enforcing a federal law and • Give individuals the ability to should get to decide if Google has done whether its power should be expanded. access, correct, delete, and enough to address a problem. A company The executives further argued a federal download personal information deciding on its own whether or not it data privacy law should not resemble the about them thinks it should notify is never the right European Union’s (EU) new General Data • Secure personal information answer, because there's no incentive to Protection Regulation (GDPR), as many The framework also included several take the criticism and the stock hit,” Marc U.S. business owners found the GDPR areas providing scope and accountability, Rotenberg, president of the Electronic guidelines too strict to follow, according including “hold[ing] organizations Privacy Information Center, told Wired on to The Street. The GDPR, which took accountable for compliance,” “focus[ing] October 8. As a party of that settlement, effect in May 2018, was adopted by the on risk of harm to individuals and Google paid a fi ne of $22.5 million and EU in Spring 2016 to harmonize data communities,” and more. The full agreed to 20 years of privacy audits. privacy laws across Europe and to protect proposed framework is available online EU citizen’s data privacy rights. (For at: https://services.google.com/fh/fi les/ Tech Companies, Trump more information on the GDPR, see “The blogs/google_framework_responsible_ Administration, and Congress Push United States, the European Union, and data_protection_regulation.pdf. for Federal Strategies or Frameworks the Irish High Court Wrangle Data Privacy In an October 3 opinion piece for The Regarding Data Privacy and Concerns” in the Fall 2017 issue of the Washington Post , Neema Singh Guliani, Cybersecurity Silha Bulletin and Adopted EU General legislative counsel at the American In fall 2018, technology companies, Data Protection Regulation Establishes Civil Liberties Union (ACLU), argued the Trump administration, and a U.S. ‘Right to Erasure’ in “Right to Be that a federal law would likely preempt Representative each took actions Forgotten Continues to Create Challenges state laws. She therefore argued that towards a new federal law or framework for Online Entities” in the Summer 2016 the tech companies “suddenly [being] protecting internet users’ privacy and issue.) receptive to the idea of federal privacy security online. On Sept. 26, 2018, In a Sept. 14, 2018 “Deeplinks” blog legislation . . . [a]fter years of claiming executives from companies including post, the Electronic Frontier Foundation they could self regulate” was actually “an Google, Amazon, and Apple, among (EFF) expressed concern that the effort to enlist the Trump administration others, appeared before the U.S. Senate Committee had not invited any consumer and Congress in companies’ efforts to Committee on Commerce, Science and privacy groups to testify. “Since we can’t weaken state level consumer privacy Transportation to discuss and advocate be there to say this ourselves, we’ll say protections,” including in California. for a potential federal privacy law. it here: EFF will oppose any federal Previously, The Washington Post President Donald Trump’s administration legislation that weakens today’s hard reported on July 27, 2018 that several also took steps regarding a potential fought privacy protections or destroys tech companies, including Facebook, national consumer cybersecurity the states’ ability to protect their citizens’ IBM, Microsoft, and others, were working and privacy framework, including a personal information. EFF has had a long with the Trump administration to lobby framework proposed by the White and continuous battle with some of the Congress to pass a federal law. House, a proposed approach to online testifying companies, such as Google Guliani continued, “[W]iping out consumer privacy by the National and AT&T, regarding your right to data — otherwise known as preempting — Telecommunications and Information privacy, and we’re not going to give up state protections would be a bad deal Administration (NTIA), an offi ce within now,” the post read. The full blog post is for consumers.. . . [It would] likely put the U.S. Department of Commerce, and a available online at: https://www.eff.org/ existing consumer protections, many of meeting held by the U.S. Department of deeplinks/2018/09/game rigged congress which are state led, on the chopping block Justice (DOJ). Finally, in October 2018, invites no consumer privacy advocates and leave states bound by a federal law U.S. Rep. Ro Khanna (D Calif.) announced its consumer privacy. that could prevent additional consumer that he had introduced an “Internet Bill of One day prior to the hearing, ZDNet privacy protections from ever seeing the Rights,” which sought to protect internet reported that Google had published a light of day. State regulators could lose users’ data privacy and security through proposed framework for a federal data the authority to sue or fi ne companies that six key principles. protection regulation. The framework violate their laws. And consumers may According to The Street and Mashable listed several requirements of tech even be barred from taking companies to on September 26, the main line of companies and other organizations, court.” discussion in the Senate Committee including that they: Guliani further argued that hearing centered around what should • Collect and use personal “[p]articularly in the area of consumer be considered when creating or information responsibly privacy, we should be wary of preemption implementing a federal privacy law. • Mandate transparency and help that could lock in place federal standards Several news outlets reported that the individuals be informed that are soon obsolete. Today, even tech company executives generally • Place reasonable limitations refrigerators can collect sensitive data. expressed a need for a federal privacy on the manner and means of New technology will likely require law in order to provide “clarity and collecting, using, and disclosing consistency,” rather than a “patchwork” personal information Privacy, continued on page 8 7 Privacy, continued from page 7 through security, internet freedom, and • Right to disclosure amount, more. The full document is available nature, and dates of secret additional protections and experimenting online at: https://www.whitehouse.gov/ government data requests with different solutions, and states have wp content/uploads/2018/09/National • Right to be fully informed of a vital role in fashioning those solutions.” Cyber Strategy.pdf. scope of data use She concluded by stating, “This doesn’t Meanwhile, on Sept. 25, 2018, the • Right to be informed when there mean we should give up on strong federal NTIA issued a Request for Comment is change of control over data privacy legislation; we need it now more on a “proposed approach to consumer The full press release is available than ever. But any such legislation must data privacy designed to provide high online at: http://www.rokhanna.com/ put consumers in control of their own levels of protection for individuals, while issues/internet bill rights. data.” giving organizations legal clarity and the An October 4 New York Times op In an October 19 interview with fl exibility to innovate.” According to a ed provided four additional principles Legaltech News, Laura Moy, executive press release connected to the Request for articulated by Khanna, including that director of Georgetown Law’s Center Comment, the “Trump Administration’s consumers should have to give their on Privacy & Technology, agreed that proposed approach focuses on the desired permission — an “opt in” rather than “opt a federal standard that eliminates state outcomes of organizational practices, out” system — before their data can be laws surrounding cybersecurity could rather than dictating what those practices collected and shared with third parties. do more harm than good. “There are a should be,” therefore providing more In an October 15 interview with number of reasons consumers benefi t autonomy to companies. Legaltech News, Marc Rotenberg, from state cybersecurity and privacy The desired outcomes of the approach executive director and president of the laws — not only do they often contain included that organizations “should be Electronic Privacy Information Center strong substantive standards, but states transparent about how they collect, in Washington, D.C., called Khanna’s are often much more able to update their use, share, and store users’ personal principles for an Internet Bill of Rights laws in response to the changing digital information” and also “employ security “a very useful framework.” Berin Szoka, environment than Congress can do,” safeguards to protect the data that they president of the libertarian think tank Moy said. “Consumers also benefi t from collect, store, use, or share,” among other TechFreedom, agreed, contending that the excellent work of state attorneys recommendations. Users should be able “[s]ome of these things [the Internet general who not only vigorously enforce to “exercise control over the personal Bill of Rights principles] are totally state specifi c laws, but also engage in information they provide to organizations” uncontroversial and everyone would ongoing dialogue with businesses and and “reasonably access and correct agree on.” provide useful guidance materials that personal data they have provided.” The However, he also pointed out that help well meaning businesses to comply.” full press release is available online Khanna’s principles are “just principles” In fall 2018, the Trump administration at: https://www.ntia.doc.gov/press and not legislation that would provide also took additional steps towards a release/2018/ntia seeks comment new specifi cs. Szoka also contended that they national data privacy and cybersecurity approach consumer data privacy. could pose some potential problems, framework. On Sept. 20, 2018, the White Also on September 25, Reuters such as whether the principle of a data House announced the introduction of reported that then Attorney General Jeff collection entity having “reasonable the new “National Cyber Strategy of the Sessions led a DOJ “listening session” business practices and accountability to United States.” The document identifi ed with 13 state attorneys general, as well protect your privacy” would be nebulous four “pillars” of cybersecurity strategy, as the attorney general of the District and make the FTC akin to the Consumer including fi rst that it would “Protect the of Columbia, focusing on “protecting Financial Protection Bureau. “The American People, the Homeland, and the consumer privacy.” According to implications for the commission could American Way of Life.” This would be Nebraska Attorney General Doug be a very broad authority,” he said. “[It] accomplished in three ways: “Secur[ing] Peterson, much of the discussion could be problematic and the commission Federal Networks and Information,” focused on whether concerns over the could have a blank slate, and it would “Secur[ing] Critical Infrastructure,” and collection of consumers’ personal data be hard to comply. You may say, ‘I don’t “Combat[ing] Cybercrime and Improv[ing] could be addressed through antitrust law, feel sorry for Google and Facebook,’ but Incident Reporting.” an area of law preventing monopolies the smaller companies trying to become Pillar II aimed to “Promote American and promoting fair competition and Google [or] Facebook won’t be able to Prosperity” by fostering “a Vibrant and business practices. Peterson also said navigate,” which would ultimately risk Resilient Digital Economy,” protecting that the session led to “no immediate less competition from startups.” “United States Ingenuity,” and developing conclusions.” As the Bulletin went to press, the “a Superior Cybersecurity Workforce.” Finally, in early October 2018, Rep. federal government had not formally Pillar III was titled “Preserve Peace Khanna introduced an “Internet Bill of enacted or passed a federal data privacy through Strength” and included Rights,” in order to protect internet users’ law or framework. enhancing cyber stability through data privacy and security. According to a responsible government action, as press release by Khanna’s offi ce, the Bill SARAH W ILEY well as “attribut[ing] and [deterring] of Rights included six key principles: SILHA R ESEARCH A SSISTANT Unacceptable Behavior in Cyberspace.” • Right to universal web access Finally, Pillar IV aimed to “Advance CASEY C ARMODY • Right to Net Neutrality American Infl uence” through the FORMER S ILHA R ESEARCH A SSISTANT • Right to be free from warrantless promotion of an open internet, such as metadata collection
8 President Trump Continues Anti-Press Rhetoric and Actions n fall 2018, President Donald Meanwhile, on August 16, more than the Summer 2018 issue, “Reporters and Trump and his administration 400 news outlets, including The New Leakers of Classifi ed Documents Targeted continued to use and promote York Times and the Minneapolis Star by President Trump and the DOJ” in the anti press rhetoric and actions. On Tribune , posted coordinated op ed pieces Summer 2017 issue, “Media Face Several November 7, President Trump called supporting journalists and denouncing Challenges During President Trump’s ICNN reporter Jim Acosta “a rude, terrible President Trump’s political attacks on First Months in Offi ce” in the Winter/ person” during a press conference after the media. The following day, the U.S. Spring 2017 issue, and “2016 Presidential Acosta asked the president about his Senate unanimously passed a resolution Candidates Present Challenges for Free characterization “reaffi rming freedom of the press as a Expression” in the Summer 2016 issue.) FIRST of the Central priority in efforts of the Government of AMENDMENT American migrant the United States to promote democracy President Trump Calls CNN Reporter caravan as “an and good governance.” “Rude, Terrible Person,” Revokes invasion,” among As a presidential candidate and as His Press Credentials; Federal Judge other topics. Later the same day, the president, Trump has frequently referred Requires Trump Administration Trump administration revoked Acosta’s to journalists and news outlets as the Reinstate Credentials “hard” press credential, restricting his “fake news media” and “enemies of the On Nov. 7, 2018, President Donald access to the White House. On November people.” A Sept. 21, 2018 poll conducted Trump called CNN reporter Jim Acosta 13, CNN and Acosta fi led a lawsuit in by the Minneapolis Star Tribune and “a rude, terrible person” after he asked federal court against President Trump, Minnesota Public Radio (MPR) News the president about his characterization as well as several members of his found that “[j]ust 29 percent of likely of the Central American migrant administration, contending that revoking voters statewide approved of Trump’s caravan as “an invasion” during a press Acosta’s credentials violated the First and description of the news media as the conference following the 2018 midterm Fifth Amendments, among other claims. enemy of the people, while 64 percent elections. Hours later, several media On November 16, a federal judge required disapproved.” However, 68 percent of outlets reported that the White House had that the White House reinstate Acosta’s Republicans approved of President revoked Acosta’s “hard” press pass for the credentials, reasoning that Acosta Trump’s rhetoric, compared to 20 percent White House. On November 13, CNN and suffered “irreparable harm” because he of independents and four percent of Acosta fi led a lawsuit in the U.S. District was denied due process under the Fifth Democrats. Court for the District of Columbia against Amendment. The judge also indicated In a September 21 interview with the President Trump and several members of that Acosta’s First Amendment rights Minneapolis Star Tribune, Silha Center his administration, arguing that Acosta’s outweighed the White House’s right to Director and Silha Professor of Media First and Fifth Amendment rights had have orderly press conferences, and that Ethics and Law Jane Kirtley called it been violated, and that President Trump’s the First Amendment applies when an “dangerous” for President Trump to swipe administration failed to follow the administration opens the White House broadly at the news media, which she said proper protocols, therefore violating the grounds to some reporters, but denies it is “one of the most important checks on Administrative Procedure Act, 5 U.S.C. to others. The White House reinstated the government excesses and one of the most § 706. On November 16, a federal judge credentials three days later. important conduits of information for the ruled that the White House must reinstate On October 19, President Trump public.” She added, “If you’re going to say, Acosta’s credentials, fi nding that Acosta praised Rep. Greg Gianforte (R Mont.) ‘No, you don’t need information,’ or ‘It’s a suffered “irreparable harm” because his during a rally in Missoula, Mont., subversive act to provide it to you,’ that’s due process rights had been violated. On prompting criticism from media right out of the autocrat’s playbook.” November 19, the White House reached a members and observers. Previously, in (For more information on President “fi nal determination” and told CNN that it June 2017, Gianforte had pleaded guilty Trump’s relationship with the media, would restore Acosta’s press credentials, to misdemeanor assault after “body see “Journalists in the United States and so long as he abided by new rules at slamming” Guardian political reporter Abroad Face Threats of Violence and presidential press conferences. CNN Ben Jacobs during a May 2017 campaign Incarceration” on page 17 of this issue summarily dropped the lawsuit against event. of the Silha Bulletin, Five Newspaper the White House, writing in a statement Finally, on September 5, President Staff Members Killed, Two Injured in that it was “no longer necessary.” Trump called on the U.S. Department of Shooting at Local Maryland Newsroom During the November 7 press Justice (DOJ) to investigate an anonymous in “Journalists Face Physical Violence, conference, President Trump told Acosta, op ed published by The New York Times Other Dangers in the United States and “I think you should let me run the country, that purported to be written by a senior Abroad,” and Federal Prosecutors Seize you run CNN and if you did it well, your Trump administration offi cial. The same Phone and Email Records of New York ratings would be much better.” As Acosta week, President Trump reiterated his Times Reporter in Leak Investigation in continued trying to question President desire to “change libel laws” in the United “Trump Administration Targets Journalist, Trump about the migrant caravan and the States following the publication of a book Leaker of Government Information, Special Counsel investigation by Robert providing behind the scenes details about and Former Government Employees Mueller, President Trump repeated “That’s the Trump White House. Who Took Classifi ed Documents,” in Anti-Press, continued on page 10 9 Anti-Press, continued from page 9 Instead, it appeared to have come from leaders and our journalists. In fact, they Paul Joseph Watson, an editor at large for designed our system that way, knowing enough. That’s enough. That’s enough. ‘InfoWars,’ a media organization known that a free and assertive press is the best That’s enough” and told Acosta to “put for peddling conspiracy theories and defense against tyranny.” down the mic” as a White House intern hateful content.” CNN added that the White House Correspondents’ reached to grab it. President Trump video “did not accurately portray what Association (WHCA) president Oliver added, “CNN should be ashamed of itself happened — it appears to show Acosta's Knox also called for the White House to having you working for them. You are arm moving in a downward motion reinstate Acosta’s credentials. “Journalists a rude, terrible person. You shouldn’t towards the intern’s arm faster than it may use a range of approaches to carry be working for CNN.. . . You’re a very actually did.” out their jobs and the WHCA does not rude person. The way you treat [White The Washington Post added on police the tone or frequency of the House Press Secretary] Sarah Huckabee November 11 that the video was missing questions its members ask of powerful [Sanders] is horrible. And the way you Acosta saying “Pardon me, ma’am,” as he senior government offi cials, including the treat other people are horrible. You maintains a fi rm grip on the microphone. President,” he wrote in a statement. “Such shouldn’t treat people that way.” The Post also noted that the video tweeted interactions, however uncomfortable they According to The Washington Post by Sanders also contained repeated may appear to be, help defi ne the strength on November 7, NBC News reporter frames that did not exist in the original of our national institutions. We urge the Peter Alexander tried to stand up for footage. White House counselor Kellyanne White House to immediately reverse this Acosta, calling him a “diligent reporter.” Conway, in a November 11 interview on weak and misguided action.” Trump responded, “Well, I’m not a big “Fox News Sunday,” contended that the In a November 10 interview with fan of yours, either.” Later in the press video was not altered, but merely “sped WCCO News Talk 830 in Minneapolis, conference, after PBS NewsHour’s White up.” Silha Center Director and Silha Professor House correspondent Yamiche Alcindor Acosta responded to Sanders in a of Media Ethics and Law Jane Kirtley asked President Trump about calling November 7 tweet, “This is a lie.” In a argued that the video circulated by himself a “nationalist” and whether he statement, CNN criticized President Sanders was especially problematic. was supporting white nationalists, the Trump and the decision to suspend “Lifting his press pass is a big step. And president responded, “I don’t know why Acosta’s access to the White House. I think, in my own view, unjustifi ed. But you’d say that — that’s such a racist “This president's ongoing attacks on the let’s take it one step further, if that’s not question.” press have gone too far. They are not bizarre enough, . . . the other thing is Later in the day on November 7, only dangerous, they are disturbingly Sarah Sander’s circulation of the doctored Acosta tweeted “I’ve just been denied un American,” the statement read. “While videotape of the press conference. This is, entrance to the [White House]. Secret President Trump has made it clear he to me, without precedent. I cannot think Service just informed me I cannot enter does not respect a free press, he has a of anything comparable that’s happened the WH grounds for my 8pm hit.” Sanders sworn obligation to protect it. A free press in any White House and I think it’s beyond summarily posted a series of tweets is vital to democracy, and we stand behind the pale.” confi rming that the White House had Jim Acosta and his fellow journalists She continued, “I see absolutely no suspended Acosta’s “hard pass” to enter everywhere.” way, no matter how strongly you support the White House “until further notice.” Other observers and reporters also the president, how you can possibly think Sanders also tweeted the White House’s decried the move, including Chuck Ross, that it’s acceptable for the White House reasoning for doing so. “President Trump a reporter at The Daily Caller, a website to basically be distributing this thing that believes in a free press and expects and that often criticizes CNN, who stood up [President Trump] keeps saying he hates welcomes tough questions of him and his for Acosta. “Plenty to criticize Acosta so much, which is ‘fake news.’” Kirtley Administration. We will, however, never about,” Ross tweeted on November 7, “but added, “I’m not saying it was a great tolerate a reporter placing his hands he did not ‘place his hands’ on the intern. optical moment for anybody there. But on a young woman just trying to do her It’s ridiculous for anyone to suggest he the way it has been framed as he was job as a White House intern,” Sanders did.” chopping her arm, that is just not true.” tweeted, contending that Acosta had In a November 7 press release, the Richard Tofel, the general manager assaulted the intern who tried to take the Reporters Committee for Freedom of the of non profi t investigative journalism microphone away from him during the Press (RCFP) wrote that it “vehemently organization ProPublica, suggested press conference. Sanders continued, object[ed] to the revocation of a CNN in a November 13 interview with The “This conduct is absolutely unacceptable. reporter’s access credentials.” The press Washington Post that journalists band It is also completely disrespectful to the release continued, “Journalists have a together and walk out of the White House reporter’s colleagues not to allow them right to ask questions and seek answers press room. “If favorable coverage is an opportunity to ask a question.. . . As on behalf of the American people. This is the price of operating with the [White a result of today’s incident, the White clearly inappropriate and unprecedented House] gates, then we can cover it from House is suspending the hard pass of the punishment by the Trump administration outside the gates,” he said. “I think that reporter involved until further notice.” for what it perceives as unfair coverage as a matter of press freedom, the press Additionally, Sanders tweeted a video by the reporter, and White House Press corps in the room should say, ‘If you’ve depicting Acosta refusing to let go of the Secretary Sarah Sanders’ false description redefi ned the rules to hand out passes microphone. However, CNN reported the of the events leading up to it is insulting only to those whose coverage you don’t following day that the video did not “come not only to the nation’s journalists, but to object to, we’re all leaving.’ This isn’t directly from one of the many cameras its people. The founders of our country principally a legal question. It’s a question that had been at the press conference. knew there would be tension between our of editorial independence.” 10 Some media experts contended that On November 11, The Hill reported Second, the lawsuit cited New York CNN could sue the White House over that former ABC News White House Times v. Sullivan in which the U.S. banning Acosta. In a series of tweets on correspondent Sam Donaldson had Supreme Court held that the First November 7, University of Georgia media claimed on CNN’s “Reliable Sources” that Amendment demonstrates a “profound law professor Jonathan Peters explained CNN and Acosta were, in fact, suing the national commitment to the principle the “legal implications of pulling Acosta’s Trump administration, citing that he had that debate on public issues should be hard pass.” He cited Sherrill v. Knight in been asked to submit an affi davit in the uninhibited, robust, and wide open, which the U.S. Court of Appeals for the lawsuit in preparation for a court hearing. and that it may well include vehement, D.C. Circuit held that The Nation writer On November 8, literary and human caustic, and sometimes unpleasantly Robert Sherrill had a First Amendment rights group PEN American Center, Inc. sharp attacks on government and public right of access to White House news (PEN America) published a press release offi cials.” 376 U.S. 254, 270 (1964). The conferences because they were “generally in response to the withdrawal of Acosta’s lawsuit also cited Hustler Magazine, Inc. inclusive” of the press. 569 F.2d 124 credentials. The press release explained v. Falwell , in which the Court held that (1977). The court added, however, that that the group had fi led a lawsuit in government offi cials “lack the authority to “It would certainly be unreasonable October against President Trump “arguing quash ‘[t]he sort of robust political debate to suggest that because the President that his threats and use of the machinery encouraged by the First Amendment’ — allows interviews with some bona fi de of government to exact reprisals against debate that is ‘bound to produce speech journalists, he must give this opportunity journalists and media organizations that is critical of those who hold public to all.” violate the First Amendment.” The press offi ce.’” 485 U.S. 46, 51 (1988). Peters added that excluding a release continued, “We specifi cally cited Additionally, the lawsuit cited Sherrill journalist “arbitrarily or absent his threats to withdraw press credentials v. Knight , reiterating the same points good cause would implicate the from reporters based on critical questions made by Peters that the D.C. Circuit “has First Amendment.” He continued, and stories as a prime example of been clear that ‘the protection afforded “Lower courts have used that this behavior.. . . The White House’s newsgathering under the fi rst amendment approach — protecting [journalists’] withdrawal of the press credentials of guarantee of freedom of the press requires access where it’s ‘generally inclusive’ CNN White House reporter Jim Acosta that . . . access [to White House press of the press, while otherwise allowing was in clear retaliation for Acosta’s facilities] not be denied arbitrarily or for offi cials selectively to grant interviews persistent questioning of the President on less than compelling reasons.’” and give out [information] — in many topics he did not wish to address during a Third, CNN and Acosta argued that contexts: access to tax records, press press conference yesterday afternoon.” the revocation of his press credentials tables, prosecutorial records, etc.” Peters The press released added, “The violates the First Amendment, contending concluded by writing, “A critical question, rescission of Acosta’s credentials, that “[the plaintiffs’] access to the White constitutionally, is whether Acosta’s hard accompanied by a demonstrably false House, their coverage of the November pass was pulled ‘arbitrarily’ or ‘for less account by White House Press Secretary 7, 2018 press conference, and Acosta’s than compelling reasons.’” Sarah Huckabee Sanders of the actions questions to President Trump during In a November 11 interview on CNN’s that led to the withdrawal, are yet more that conference . . . were all protected “Reliable Sources,” prominent First evidence that the President and the activities under the First Amendment.” Amendment attorney Floyd Abrams also administration feel no compunction about The lawsuit further argued that the contended that CNN could sue the White exacting punishment on journalists for defendants initially claimed they revoked House, but argued that the network would hard hitting coverage.” Some observers the credentials because Acosta “placed likely exercise caution. “I think it’s a suggested that Acosta was considering his hands” on an intern, but that this really strong lawsuit,” Abrams said. “I can joining the PEN American lawsuit. (For contention was inaccurate. The complaint understand CNN being reluctant to sue more information on the PEN America also contended that President Trump’s because the president keeps saying CNN lawsuit, see “President Trump Prevails statement that Acosta’s credentials were is the enemy of me, and CNN might have in Two Federal Court First Amendment suspended because he failed to “treat the reluctance to have a lawsuit titled ‘CNN Rulings, Faces New Lawsuit in Southern White House with respect” was “hollow vs. Donald Trump.’ That said, yes, I think District of New York” on page 23 of this and hardly suffi ciently compelling to they should sue.” issue of the Silha Bulletin.) justify the indefi nite revocation.” As a Abrams further argued that it was On November 13, several media outlets result, according to the lawsuit, the “only likely the White House would ban reported that CNN and Acosta had, in reasonable inference from Defendants’ another reporter in the future. He said, fact, fi led a lawsuit in the U.S. District conduct is that they revoked Acosta’s “So whether it’s CNN suing or the next Court for the District of Columbia against credentials as a form of content and company suing, someone is going to have President Trump, as well as several viewpoint based discrimination and to bring a lawsuit.. . . And whoever does members of his administration, including in retaliation for Plaintiffs’ exercise of is going to win unless there’s some sort Sanders. The complaint fi rst detailed protected First Amendment activity.” of reason.” (Abrams delivered the 20th President Trump’s anti press criticism, Fourth, the complaint asserted that Annual Silha Lecture, titled “Confi dential which “has been directed at other news revocation of Acosta’s press credentials Sources of Journalists: Protection or organizations [beyond CNN].” The violated his Fifth Amendment right to due Prohibition?” on Oct. 24, 2005. For more complaint added that the “revocation of process because he received no direct on the lecture, see “2005 Silha Lecture Acosta’s credentials is only the beginning; notice or an “opportunity to be heard” Features First Amendment Attorney Floyd as the President explained, there ‘could before his credentials were revoked. The Abrams” in the Fall 2005 issue of the be others also’ who get their credentials Silha Bulletin.) revoked.” Anti-Press, continued on page 12 11 Anti-Press, continued from page 11 After CNN and Acosta fi led their with First Amendment Implications of complaint, the White House released a Politicians Blocking Social Media Users” complaint also stated that Acosta received statement, which read, “We have been in the Summer 2018 issue of the Silha no written explanation for the revocation. advised that CNN has fi led a complaint Bulletin.) Further, the complaint alleged that challenging the suspension of Jim On November 14, the U.S. Department Acosta “cannot serve as a White House Acosta’s hard pass. This is just more of Justice (DOJ) fi led a memorandum correspondent” because, without his grandstanding from CNN, and we will in support of the White House’s credentials, he cannot access his offi ce in vigorously defend against this lawsuit.” opposition to the plaintiffs’ motion the White House. The statement continued, “CNN, who has for a TRO, contending that the White Finally, the complaint alleged that nearly 50 additional hard pass holders, House’s “discretionary decision [to the defendants’ actions violated the and Mr. Acosta is no more or less special revoke Acosta’s] credential was “lawful” Administrative Procedure Act because than any other media outlet or reporter and “permissible.” The memorandum they “acted arbitrarily, capriciously, and with respect to the First Amendment. reasoned that President Trump and otherwise not in accordance with law.” After Mr. Acosta asked the President two the White House “possess the same The complaint noted that “[g]enerally, questions — each of which the President broad discretion to regulate access to the Secret Service may grant or deny a answered — he physically refused to the White House for journalists[.]” The request for a security clearance made surrender a White House microphone to memorandum contended that because in connection with an application for a an intern, so that other reporters might the president and his staff have “absolute White House press pass” under 31 C.F.R. § ask their questions. This was not the fi rst discretion over which journalists they 409.1. However, the complaint also stated time this reporter has inappropriately grant interviews to, as well as over which that the Secret Service’s discretion is refused to yield to other reporters.” journalists they acknowledge at press “expressly limited” and that Secret Service The statement added, “The White events,” they also have discretion over offi cials making that determination must House cannot run an orderly and fair which journalists “receive on demand “be guided solely by the principle of press conference when a reporter acts access to the White House grounds and whether the applicant presents a potential this way, which is neither appropriate nor special access during White House travel source of physical danger to the President professional. The First Amendment is not for the purposes of asking questions to and/or the family of the President so served when a single reporter, of more the President or his staff.” serious as to justify his or her exclusion than 150 present, attempts to monopolize The memorandum further argued that from White House press privileges.” the fl oor. If there is no check on this “[n]o journalist has a First Amendment The complaint requested that the type of behavior it impedes the ability right to enter the White House.” district court enter several forms of relief, of the President, the White House staff, Additionally, the DOJ contended that including “[i]mmediate restoration of and members of the media to conduct Sherrill v. Knight did not apply because, Acosta’s press credentials and hard pass business.” in that case, the D.C. Circuit addressed so that Plaintiffs may continue to report In a November 13 interview with The “solely the Secret Service’s decision to from White House briefi ngs and perform Washington Post , executive director of deny a pass on security grounds to a their jobs on White House grounds and the Knight First Amendment Institute at journalist to whom the White House had at other presidential events.” The lawsuit Columbia University (Knight Institute) otherwise decided to grant access.” The also sought a “declaration that the Jameel Jaffer drew a parallel to a case memorandum stated that in this case, “‘all revocation of Acosta’s press credentials that the organization brought against parties’ do not ‘recognize’ that Mr. Acosta was unconstitutional.” President Trump in 2017, alleging that deserves access to the White House” and Gibson, Dunn & Crutcher LLP attorney he could not block his critics on Twitter. that “Acosta’s access [was] denied at a Theodore J. Boutrous, Jr. signed the On May 23, 2018, U.S. District Court for different stage in the decisional process.” complaint, which was accompanied by a the Southern District of New York Judge The DOJ added, “The public interest motion for a temporary restraining order Naomi Reice Buchwald ruled in favor of does not require that Mr. Acosta be (TRO). Boutrous also represented CNN the Knight Institute, fi nding that President given immediate access to the White at a November 14 hearing regarding the Trump had violated the First Amendment House complex. The public can benefi t motion for the TRO. (Boutrous delivered by blocking Twitter users who were from his reporting from outside the 33rd Annual Silha Lecture, titled critical of him or his policies, fi nding that the complex . . . and is additionally “Confi dential Sources of Journalists: it constituted viewpoint discrimination. well served by the numerous other Protection or Prohibition?” on Oct. 17, Knight First Amendment Institute v. journalists who retain their hard passes.” 2018. For more on the lecture, see “33rd Trump , 302 F.Supp.3d 541 (S.D.N.Y. 2018). The full memorandum is available online Annual Silha Lecture Addresses the Jaffer, citing Buchwald’s ruling, told at: https://www.cnn.com/2018/11/14/ Free Speech Implications of the #MeToo the Post, “The government cannot exclude media/white house response cnn