State Surveillance and Implications for Children

Total Page:16

File Type:pdf, Size:1020Kb

State Surveillance and Implications for Children Issue brief no. 1 | August 2020 Good Governance of Children’s Data project Office of Global Insight and Policy State surveillance and implications for children Steven Feldstein, Senior Fellow at Carnegie Endowment for International Peace About this paper Surveillance tools are a core part of states’ governing strategies.1 In the digital era, governments rely on digital surveillance technology to support a range of interests — from national security and public order, to public health and municipal service delivery. Surveillance is generally understood to include technologies or systems that enable care or control of people “through the identification, tracking, monitoring, or analysis of individual data, or systems.”2 A key definitional point is that, while the purpose of surveillance can be to control or discipline individuals, surveillance can also be used to protect and care for citizens. Surveillance capabilities provide governments with important advantages; they are widely used across different models of governments. While there is significant literature that considers whether governments may legitimately employ surveillance strategies and when their use violates core human rights principles, there is comparatively less discussion about state surveillance standards for children.3 This paper focuses on the following questions: 1. To what extent are governments distinguishing between children and adults when employing surveillance measures, including for political activity? What pressing issues of concern emerge in relation to state surveillance of minors? 2. When it comes to state surveillance, what protections are in place for children beyond generalized consent frameworks? 3. How does state surveillance differentially affect children from vulnerable, historically marginalized, or underrepresented groups? 4. Should the international community establish more defined norms or principles to protect children from state surveillance? What role can or should the private sector play in this regard? Context of state surveillance Targeted surveillance techniques are intrusion op- erations which exploit software, data, computer sys- The use of surveillance by governments for political tems, or networks to gain unauthorized access to purposes is not a new phenomenon. Physical trail- user information and devices. In contrast to passive ing, phone-tapping and house searches are trusted surveillance, which targets a broader range of indi- methods of operation that security services have viduals or groups for mass collection, targeted strat- relied on for decades in all types of government re- egies rely on deployments of malware or spyware gimes. The emergence of new ICT surveillance tools to collect information for specific individuals. These linked to the proliferation of digital data has led to tactics are frequently carried out by commercial ven- rapid changes in how surveillance works, when it dors like NSO Group, FinFisher, and Hacking Team.7 applies, and how to balance individual protections with legitimate state interests. There are more com- Surveillance laws and directives are designed to munications data available for scrutiny than ever enable governments to access user content. Often, before. The internet has drastically increased the these laws mandate that cloud servers or social me- amount of transactional data available for individ- dia platforms store data locally (thus expediting law uals everywhere.4 Unsurprisingly, surveillance has enforcement requests), or they may authorize secu- become increasingly prevalent, such as tracking rity agencies to access personal data or communica- public sentiment through social media monitoring, tions under specific circumstances — often linked to surveilling protests and dissenting speech, monitor- national security.8 ing individual persons of interest (e.g. journalists, political opposition, government critics), and track- These surveillance strat- ing voter behaviour. egies have distinct im- The plications for children.9 In my own research, I identify four broad surveillance In line with the trends proliferation strategies commonly used by governments: artificial described above, gov- intelligence (AI) and big data approaches, passive ernments and private of digital surveillance strategies, targeted surveillance tools, companies are collecting and surveillance laws and directives. more data than ever re- surveillance lated to children through AI and big data surveillance tools are automated a range of ways and sys- presents techniques powered by advanced algorithms de- tems. Primarily, the inter- signed to identify broader behavioral patterns (mass net has become a ubiqui- troubling surveillance), as well as of specific individuals. They tous presence in many include biometric identification systems such as households and children risks facial recognition technology and genetic surveil- are accessing multiple lance (which are generally less accurate in relation digital instruments. On- for children to children), smart cities or safe cities (city networks line data derived from comprised of thousands of sensors transmitting real social media accounts, -time data to municipal authorities), smart policing smart phones, internet browsing, and gaming il- techniques (data-driven methods used to enhance lustrate the many ways in which children’s data are law enforcement response, inquiries and investi- being shared. The peer effect associated with these gations, and to undertake predictive analysis), and technologies presents particular challenges. As chil- social media monitoring (machine-driven programs dren reach adolescence, there is strong pressure to that monitor millions of online communications in maintain an active social media presence on apps order to detect specific keywords or identify more like Instagram, Facebook, TikTok, and Snapchat, leav- generalized sentiments or patterns). This represents ing many children prone to bullying, social anxiety, a nascent but growing category of surveillance.5 and data exploitation.10 Passive surveillance strategies encompass hun- Second, even when children are not directly logging dreds of communications surveillance instruments on to specific apps, they often access and provide that collect, monitor, and intercept data that has data linked to home technology from devices con- been “communicated, relayed or generated over nected to the Internet of Things (IoT), such as smart communications networks to a group of recipients speakers and connected toys. And third, outside the by a third party.”6 Representative technologies in- home, children’s data are commonly shared in a vari- clude internet monitoring, certain parental control ety of places, from location trackers in mobile phones apps, mobile phone tapping, location monitoring, and data from classrooms in schools, to video cam- and network interception. eras in public areas, and even medical records. 2 The availability of this data can bring significant of surveillance, there remains significant ambiguity. consequences when children become adults (not to When it comes to protecting children from unwar- mention that children’s data are often mixed in with ranted state surveillance, there are few protections adult data). that exist in law, either internationally or in specific countries. In fact, there are growing concerns about The proliferation of digital surveillance presents trou- the extent to which education, health, refugee, or aid bling risks for children. When it comes to biometric agency data may feed into state surveillance. There is technology, for example, its capacity to accurately also a widening recognition about the differential im- recognize or identify children’s faces is plagued by pact such technology may have on marginalized and problems. As the UNICEF report “Faces, Fingerprints persecuted groups and its disproportionate effect on and Feet” notes, this issue “may be due to the difficul- children within these groups. ty in capturing the biometric trait (such as an iris scan with very young children); the relatively poor perfor- mance of the trait among certain age groups (facial recognition); or the low levels of user acceptance International norms and standards (DNA).”11 Another challenge is correlating political and related to surveillance ethical risks associated with using this technology on children. In voluntary situations, children have a de- The accepted international standard for whether a creased ability to comprehend and make informed surveillance action is legitimate or not rests on con- decisions about participating in certain programmes cepts of necessity, proportionality, and legitimacy.13 It that involve surveillance. Their parents may also lack is specifically based on the following considerations: appropriate understanding to make informed deci- sions about the processing of their children’s data. • Is the surveillance strictly and demonstrably nec- Involuntary data collection completely cuts out chil- essary to achieve a legitimate aim? dren’s agency in determining how their data are col- lected, retained and used, with implications that may • Does surveillance represent a proportionate re- extend for decades. This leads to a third problem: as sponse to that aim? digital technology becomes increasingly central to in- dividuals’ lives, and as the declining cost of technolo- • Does domestic law authorize circumstances in gy and data storage enable further exploitation of this which surveillance is appropriate, and are these data, “more data
Recommended publications
  • Identity Theft Literature Review
    The author(s) shown below used Federal funds provided by the U.S. Department of Justice and prepared the following final report: Document Title: Identity Theft Literature Review Author(s): Graeme R. Newman, Megan M. McNally Document No.: 210459 Date Received: July 2005 Award Number: 2005-TO-008 This report has not been published by the U.S. Department of Justice. To provide better customer service, NCJRS has made this Federally- funded grant final report available electronically in addition to traditional paper copies. Opinions or points of view expressed are those of the author(s) and do not necessarily reflect the official position or policies of the U.S. Department of Justice. This document is a research report submitted to the U.S. Department of Justice. This report has not been published by the Department. Opinions or points of view expressed are those of the author(s) and do not necessarily reflect the official position or policies of the U.S. Department of Justice. IDENTITY THEFT LITERATURE REVIEW Prepared for presentation and discussion at the National Institute of Justice Focus Group Meeting to develop a research agenda to identify the most effective avenues of research that will impact on prevention, harm reduction and enforcement January 27-28, 2005 Graeme R. Newman School of Criminal Justice, University at Albany Megan M. McNally School of Criminal Justice, Rutgers University, Newark This project was supported by Contract #2005-TO-008 awarded by the National Institute of Justice, Office of Justice Programs, U.S. Department of Justice. Points of view in this document are those of the author and do not necessarily represent the official position or policies of the U.S.
    [Show full text]
  • Anonymity and Encryption in Digital Communications, February 2015
    Submission to the UN Special Rapporteur on freedom of expression – anonymity and encryption in digital communications, February 201 1! Introduction Privacy International submits this information for the Special Rapporteur's report on the use of encryption and anonymity in digital communications. Anonymity and the use of encryption in digital communications engage both the right to freedom of expression and right to privacy very closely: anonymity and encryption protects privacy, and ithout effective protection of the right to privacy, the right of individuals to communicate anonymously and ithout fear of their communications being unla fully detected cannot be guaranteed. As noted by the previous mandate holder, !rank #aRue, $the right to privacy is essential for individuals to express themselves freely. Indeed, throughout history, people%s illingness to engage in debate on controversial sub&ects in the public sphere has al ays been linked to possibilities for doing so anonymously.'( Individuals' right to privacy extends to their digital communications.) As much as they offer ne opportunities to freely communicate, the proliferation of digital communications have signi*cantly increased the capacity of states, companies and other non+state actors to interfere ith individual's privacy and free expression. Such interference ranges from mass surveillance of communications by state intelligence agencies, to systematic collection and storage of private information by internet and telecommunication companies, to cybercrime. Anonymity and encryption are essential tools available to individuals to mitigate or avert interferences ith their rights to privacy and free expression. In this ay, they are means of individuals exercising to the fullest degree their rights hen engaging in digital communications.
    [Show full text]
  • Anonymity in a Time of Surveillance
    LESSONS LEARNED TOO WELL: ANONYMITY IN A TIME OF SURVEILLANCE A. Michael Froomkin* It is no longer reasonable to assume that electronic communications can be kept private from governments or private-sector actors. In theory, encryption can protect the content of such communications, and anonymity can protect the communicator’s identity. But online anonymity—one of the two most important tools that protect online communicative freedom—is under practical and legal attack all over the world. Choke-point regulation, online identification requirements, and data-retention regulations combine to make anonymity very difficult as a practical matter and, in many countries, illegal. Moreover, key internet intermediaries further stifle anonymity by requiring users to disclose their real names. This Article traces the global development of technologies and regulations hostile to online anonymity, beginning with the early days of the Internet. Offering normative and pragmatic arguments for why communicative anonymity is important, this Article argues that anonymity is the bedrock of online freedom, and it must be preserved. U.S. anti-anonymity policies not only enable repressive policies abroad but also place at risk the safety of anonymous communications that Americans may someday need. This Article, in addition to providing suggestions on how to save electronic anonymity, calls for proponents of anti- anonymity policies to provide stronger justifications for such policies and to consider alternatives less likely to destroy individual liberties. In
    [Show full text]
  • Personality Rights in Australia1
    SWIMMERS, SURFERS, AND SUE SMITH PERSONALITY RIGHTS IN AUSTRALIA1 Therese Catanzariti2 It is somewhat of a misnomer to talk about personality rights in Australia. First, personality rights are not “rights” in the sense of positive rights, a right to do something, or in the sense of proprietary rights, property that can be assigned or mortgaged. Second, personality rights are largely a US law concept, derived from US state law relating to the “right of publicity”. However, it is common commercial practice that Australian performers, actors and sportstars enter endorsement or sponsorship agreements.3 In addition, the Australian Media and Entertainment Arts Alliance, the Australian actors union, insists that the film and television industrial agreements and awards don’t cover merchandising and insist film and television producers enter individual agreements if they want to use an actor’s image in merchandising.4 This paper considers Australian law5 relating to defamation, passing off, and section 52 of the Trade Practices Act,6 draws parallels with US law relating to the right of publicity, and considers whether there is a developing Australian jurisprudence of “personality rights”. Protecting Personality Acknowledging and protecting personality rights protects privacy. But protecting privacy is not the focus and is an unintended incidental. Protecting personality rights protects investment, and has more in common with unfair competition than privacy. Acknowledging and protecting personality rights protects investment in creating and maintaining a carefully manicured public image, an investment of time labour, skill and cash. This includes spin doctors and personal trainers and make-up artists and plastic surgeons and making sure some stories never get into the press.
    [Show full text]
  • E Dawn of Robot Surveillance AI, Video Analytics, and Privacy
    e Dawn of Robot Surveillance AI, Video Analytics, and Privacy June 2019 e Dawn of Robot Surveillance AI, Video Analytics, and Privacy By Jay Stanley © 2019 AMERICAN CIVIL LIBERTIES UNION Cover: Sources images, shutterstock.com “The robots are here. The robots control your warnings. They analyze and notify, following instructions you have set.” — Promotional web site for “Video Surveillance as a Service”1 “The overwhelming majority of images are now made by machines for other machines” 2 — Trevor Paglen 1 http://www.vsaas.com/. 2 https://thenewinquiry.com/invisible-images-your-pictures-are-looking-at-you/. 1 Table of Contents I. INTRODUCTION ...................................................................................................... 3 II. WHAT IS AI VIDEO ANALYTICS .......................................................................... 5 The rise of deep learning ........................................................................................... 6 Overcoming challenges with new sources of data .................................................. 8 III. CURRENT DEPLOYMENTS ................................................................................ 9 Government deployments ......................................................................................... 9 Commercial deployments ........................................................................................ 10 Analytics in the cloud .............................................................................................. 11 IV. HOW COMPUTERS WILL
    [Show full text]
  • SARS-Cov-2 Vaccine Breakthrough Surveillance and Case Information Resource Washington State Department of Health September 22, 2021
    SARS-CoV-2 Vaccine Breakthrough Surveillance and Case Information Resource Washington State Department of Health September 22, 2021 1 Page Break To request this document in another format, call 1-800-525-0127. Deaf or hard of hearing customers, please call 711 (Washington Relay) or email [email protected]. Publication Number 420-339 For more information or additional copies of this report: Disease Control and Health Statistics Public Health Outbreak Coordination, Information, and Surveillance 1610 NE 150th Street, MS: K17-9 Shoreline, WA 98155 Phone: 206-418-5700 (24-hour contact for local health jurisdictions only) Email: [email protected] 2 Page break SARS-CoV-2 Vaccine Breakthrough Surveillance and Case Information Resource Washington State Department of Health September 22, 2021 COVID-19 vaccines are effective and critical tools to aid in the control of this pandemic. Large- scale clinical studies found that COVID-19 vaccines prevented most people from getting COVID- 19 illness, but like most other vaccines, they are not 100 percent effective. This means some fully vaccinated people will still get infected with SARS-CoV-2. These individuals may or may not develop COVID-19 symptoms. Vaccine breakthrough occurs when someone gets infected with an organism they are fully vaccinated against. For the COVID-19 vaccine, this means someone tests positive for SARS-CoV- 2 two weeks or more after receiving the full series of an authorized COVID-19 vaccine. Since millions of people in the United States are getting vaccinated, we expect to see some breakthrough disease. Fortunately, there is evidence from research studies that the COVID-19 vaccine reduces the risk of people getting really sick and needing to go to the hospital or dying from COVID-19.
    [Show full text]
  • Privacy and Publicity: the Two Facets of Personality Rights
    Privacy and publicity Privacy and publicity: the two facets of personality rights hyperbole. In this context, personality In this age of endorsements and rights encompass the “right of privacy”, tabloid gossip, famous people which prohibits undue interference in need to protect their rights and a person’s private life. In addition to coverage in the media, reputations. With a growing number images of celebrities adorn anything from of reported personality rights cases, t-shirts, watches and bags to coffee mugs. India must move to develop its This is because once a person becomes legal framework governing the famous, the goods and services that he or commercial exploitation of celebrity she chooses to endorse are perceived to reflect his or her own personal values. By Bisman Kaur and Gunjan Chauhan, A loyal fan base is a captive market for Remfry & Sagar such goods, thereby allowing celebrities to cash in on their efforts in building up Introduction a popular persona. Intellectual property in India is no longer Unfortunately, a large fan base is a niche field of law. Stories detailing also seen by unscrupulous people as an trademark infringement and discussing opportunity to bring out products or the grant of geographical indications services that imply endorsement by an routinely make their way into the daily individual, when in fact there is no such news headlines. From conventional association. In such cases the individual’s categories of protection such as patents, “right of publicity” is called into play. trademarks, designs and copyright, IP laws The right of publicity extends to every have been developed, often by judicial individual, not just those who are famous, innovation, to encompass new roles and but as a practical matter its application areas of protection.
    [Show full text]
  • Identity Theft Harms Millions of Americans Every Year. Breaches of Personally Identifiable Information (PII) Across the Governme
    Safeguarding & Handling PI1 Each DOE employee and contractor needs to be aware of their responsibility to- b Encrypt personal information sent via email b protect personal information, b Label Privacy Act protected records "OFFICIAL USE ONLY - PRIVACY ACT b avoid unauthorized disclosures, DATA" b ensure that no records are maintained without Identity theft harms millions of Americans every b Do not collect personal information without proper public notice in the Federal Register, and year. Breaches of personally identifiable information proper authority, and only the minimum (PII) across the government have been well b report immediately, whether confirmed or necessary for carrying out the mission of DOE publicized and costly for individuals and Federal suspected, any breach or misuse of PII. agencies. These breaches have prompted the b Do not place Privacy Act protected data on Administration and Congress to take action to unrestricted shared drives, intranets, or the improve the protection of personal information. Internet For more information on Privacy and protecting PII, refer to DOE Order 206. I, Department of Energy b Report any loss or unauthorized disclosure of As Department of Energy employees and Privacy Program, located on the DOE Directives personal data immediately to your supervisor, contractors, you have a responsibility to protect all website: http://directives.doe.gov/ PII. DOE Order 206. I, Department of Energy Privacy program manager, Information System Security Program, defines PI1 as "any information collected or Manager, or Privacy Act Officer Questions should be referred to your supervisor, your local Privacy Act Officer, or the Privacy Office maintained by the Department about an individual, b Lock your computer whenever you leave your including but not limited to, education, financial at (202) 586-5955.
    [Show full text]
  • TCAS II) by Personnel Involved in the Implementation and Operation of TCAS II
    Preface This booklet provides the background for a better understanding of the Traffic Alert and Collision Avoidance System (TCAS II) by personnel involved in the implementation and operation of TCAS II. This booklet is an update of the TCAS II Version 7.0 manual published in 2000 by the Federal Aviation Administration (FAA). It describes changes to the CAS logic introduced by Version 7.1 and updates the information on requirements for use of TCAS II and operational experience. Version 7.1 logic changes will improve TCAS Resolution Advisory (RA) sense reversal logic in vertical chase situations. In addition all “Adjust Vertical Speed, Adjust” RAs are converted to “Level-Off, Level-Off” RAs to make it more clear that a reduction in vertical rate is required. The Minimum Operational Performance Standards (MOPS) for TCAS II Version 7.1 were approved in June 2008 and Version 7.1 units are expected to be operating by 2010-2011. Version 6.04a and 7.0 units are also expected to continue operating for the foreseeable future where authorized. 2 Preface................................................................................................................................. 2 The TCAS Solution............................................................................................................. 5 Early Collision Avoidance Systems................................................................................ 5 TCAS II Development .................................................................................................... 6 Initial
    [Show full text]
  • Defending Against Insider Use of Digital Steganography
    2007 Annual ADFSL Conference on Digital Forensics, Security and Law Proceedings Defending Against Insider Use of Digital Steganography James E. Wingate CISSP-ISSEP, CISM, IAM, Backbone Security, [email protected] Glenn D. Watt CISSP, CISM, IAM, IEM, Backbone Security, [email protected] Marc Kurtz CISSP, Backbone Security, [email protected] Chad W. Davis CCE, Backbone Security, [email protected] Robert Lipscomb Backbone Security, [email protected] Follow this and additional works at: https://commons.erau.edu/adfsl Part of the Computer Engineering Commons, Computer Law Commons, Electrical and Computer Engineering Commons, Forensic Science and Technology Commons, and the Information Security Commons Scholarly Commons Citation Wingate, James E.; Watt, Glenn D.; Kurtz, Marc; Davis, Chad W.; and Lipscomb, Robert, "Defending Against Insider Use of Digital Steganography" (2007). Annual ADFSL Conference on Digital Forensics, Security and Law. 1. https://commons.erau.edu/adfsl/2007/session-11/1 This Peer Reviewed Paper is brought to you for free and open access by the Conferences at Scholarly Commons. It has been accepted for inclusion in Annual ADFSL Conference on Digital Forensics, Security and Law by an (c)ADFSL authorized administrator of Scholarly Commons. For more information, please contact [email protected]. Conference on Digital Forensics, Security and Law, 2007 Defending Against Insider Use of Digital Steganography James E. Wingate, CISSP-ISSEP, Glenn D. Watt, CISSP,
    [Show full text]
  • Mass Surveillance
    Thematic factsheet1 Update: July 2018 MASS SURVEILLANCE The highly complex forms of terrorism require States to take effective measures to defend themselves, including mass monitoring of communications. Unlike “targeted” surveillance (covert collection of conversations, telecommunications and metadata by technical means – “bugging”), “strategic” surveillance (or mass surveillance) does not necessarily start with a suspicion against a particular person or persons. It has a proactive element, aimed at identifying a danger rather than investigating a known threat. Herein lay both the value it can have for security operations, and the risks it can pose for individual rights. Nevertheless, Member States do not have unlimited powers in this area. Mass surveillance of citizens is tolerable under the Convention only if it is strictly necessary for safeguarding democratic institutions. Taking into account considerable potential to infringe fundamental rights to privacy and to freedom of expression enshrined by the Convention, Member States must ensure that the development of surveillance methods resulting in mass data collection is accompanied by the simultaneous development of legal safeguards securing respect for citizens’ human rights. According to the case-law of the European Court of Human Rights, it would be counter to governments’ efforts to keep terrorism at bay if the terrorist threat were substituted with a perceived threat of unfettered executive power intruding into citizens’ private lives. It is of the utmost importance that the domestic legislation authorizing far-reaching surveillance techniques and prerogatives provides for adequate and sufficient safeguards in order to minimize the risks for the freedom of expression and the right to privacy which the “indiscriminate capturing of vast amounts of communications” enables.
    [Show full text]
  • No. 16-3588 in the UNITED STATES COURT of APPEALS for THE
    Case: 16-3588 Document: 003112605572 Page: 1 Date Filed: 04/26/2017 No. 16-3588 IN THE UNITED STATES COURT OF APPEALS FOR THE THIRD CIRCUIT ______________________ UNITED STATES OF AMERICA, Appellee v. GABRIEL WERDENE, Appellant ______________________ On Appeal from the United States District Court for the Eastern District of Pennsylvania ______________________ BRIEF OF AMICUS CURIAE PRIVACY INTERNATIONAL IN SUPPORT OF APPELLANT AND IN SUPPORT OF REVERSAL OF THE DECISION BELOW ______________________ Of counsel: Caroline Wilson Palow* Lisa A. Mathewson Scarlet Kim* The Law Offices of PRIVACY INTERNATIONAL Lisa A. Mathewson, LLC 62 Britton Street 123 South Broad Street, Suite 810 London EC1M 5UY Philadelphia, PA 19109 Phone: +44 (0) 20 3422 4321 Phone: (215) 399-9592 [email protected] [email protected] Counsel for Amicus Curiae, *Counsel not admitted to Third Circuit Bar Privacy International Case: 16-3588 Document: 003112605572 Page: 2 Date Filed: 04/26/2017 CORPORATE DISCLOSURE STATEMENT Pursuant to Federal Rule of Appellate Procedure 26.1 and Local Appellate Rule 26.1.1, amicus curiae Privacy International certifies that it does not have a parent corporation and that no publicly held corporation owns 10% or more of its stock. i Case: 16-3588 Document: 003112605572 Page: 3 Date Filed: 04/26/2017 TABLE OF CONTENTS TABLE OF AUTHORITIES ................................................................................... iii STATEMENT OF INTEREST .................................................................................
    [Show full text]