NSA METADATA COLLECTION and the FOURTH AMENDMENT Joseph D
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Open Letter on CIA MDR Regs- Final.Pdf
To: Director of National Intelligence, James Clapper Director of the Central Intelligence Agency, David Petraeus Director of the Information Security Oversight Office, John Fitzpatrick February 23, 2012 Re: CIA Regulation change to 32 CFR Part 1908 allowing the Agency to charge requesters as high as $72 per hour for Mandatory Declassification Review requests. To whom it may concern: We the undersigned would like to call to your attention an alarming regulation that the Central Intelligence Agency entered into the Federal Register on 23 September 2011. Finalized without any notice for public comment, this regulation could cut off access to the most effective tool the public can use to request declassification of the CIA’s secret documents, the Mandatory Declassification Review (MDR) program. The regulation states that declassification reviews will now cost requesters up to $72 per hour, even if no information is found or released. The public must now also agree to pay a minimum of $15 in duplication fees. Throughout the government, and previously at CIA, MDR fees are commensurate to FOIA fees. Under FOIA, Congress stipulated that public interest, educational, journalism, and other fee waivers must be granted, when applicable under the statute. Furthermore, agencies must forfeit their right to collect some FOIA processing fees when they miss their processing deadline. The effect of the CIA’s new policy will be to price the public out of submitting MDR requests, a result not at all consonant with Obama Administration transparency policy in general or its declassification policy under Executive Order 13,526 in particular. The MDR process is a popular and successful tool for researchers, historians, public interest advocates and others, in part because of the independent accountability and oversight the program provides. -
NSA's Efforts to Secure Private-Sector Telecommunications Infrastructure
Under the Radar: NSA’s Efforts to Secure Private-Sector Telecommunications Infrastructure Susan Landau* INTRODUCTION When Google discovered that intruders were accessing certain Gmail ac- counts and stealing intellectual property,1 the company turned to the National Security Agency (NSA) for help in securing its systems. For a company that had faced accusations of violating user privacy, to ask for help from the agency that had been wiretapping Americans without warrants appeared decidedly odd, and Google came under a great deal of criticism. Google had approached a number of federal agencies for help on its problem; press reports focused on the company’s approach to the NSA. Google’s was the sensible approach. Not only was NSA the sole government agency with the necessary expertise to aid the company after its systems had been exploited, it was also the right agency to be doing so. That seems especially ironic in light of the recent revelations by Edward Snowden over the extent of NSA surveillance, including, apparently, Google inter-data-center communications.2 The NSA has always had two functions: the well-known one of signals intelligence, known in the trade as SIGINT, and the lesser known one of communications security or COMSEC. The former became the subject of novels, histories of the agency, and legend. The latter has garnered much less attention. One example of the myriad one could pick is David Kahn’s seminal book on cryptography, The Codebreakers: The Comprehensive History of Secret Communication from Ancient Times to the Internet.3 It devotes fifty pages to NSA and SIGINT and only ten pages to NSA and COMSEC. -
Plaintiff's Exhibit 17
Case 1:15-cv-00662-TSE Document 168-21 Filed 12/18/18 Page 1 of 4 Wikimedia Foundation v. NSA No. 15-cv-0062-TSE (D. Md.) Plaintiff’s Exhibit 17 12/17/2018 IC ON THE RECORD • DNI Declassifies Intelligence Community Documents... Case 1:15-cv-00662-TSE Document 168-21 Filed 12/18/18 Page 2 of 4 IC ON THE RECORD Section 702 Overview CY2017 Transparency Report CY2016 SIGNALS INTEL REFORM REPORT IC TRANSPARENCY PLAN DNI Declassifies Intelligence Community Documents Regarding Collection Under Section 702 of the Foreign Intelligence Surveillance Act (FISA) Wednesday, August 21, 2013 In June, President Obama requested that Director of National Intelligence James R. Clapper declassify and make public as much information as possible about certain sensitive NSA programs while being mindful of the need to protect sensitive classified intelligence and national security. Consistent with this directive and in the interest of increased transparency, DNI Clapper has today authorized the declassification and public release of a number of documents pertaining to the Intelligence Community’s collection under Section 702 of the Foreign Intelligence Surveillance Act (FISA). DNI Clapper has determined that the release of these documents is in the public interest. These documents and other unclassified information related to foreign intelligence surveillance activities are available on a new Intelligence Community website established at the direction of the President. The new www.icontherecord.tumblr.com is designed to provide immediate, ongoing and direct access to factual information related to the lawful foreign surveillance activities carried out by the U.S. Intelligence Community. The Administration is undertaking a careful and thorough review of whether and to what extent additional information or documents pertaining to this program may be declassified, consistent with the protection of national security. -
USA V. Pen Register
Case 4:06-mj-00356 Document 13-1 Filed in TXSD on 07/19/06 Page 1 of 35 UNITED STATES DISTRICT COURT SOUTHERN DISTRICT OF TEXAS HOUSTON DIVISION IN THE MATTER OF THE APPLICATION OF THE § UNITED STATES OF AMERICA FOR AN ORDER § AUTHORIZING (1) INSTALLATION AND USE OF A § PEN REGISTER AND TRAP AND TRACE DEVICE §MAGISTRATE NO. H-06-356M OR PROCESS, (2) ACCESS TO CUSTOMER § RECORDS, AND (3) CELL PHONE TRACKING § OPINION This opinion addresses two significant issues concerning law enforcement access to certain dialing and signaling information in the hands of telephone companies under the Electronic Communications Privacy Act (“ECPA”). The first is whether the Government may obtain “post- cut-through dialed digits” containing communication contents under the authority of the Pen/Trap Statute.1 The second is whether limited cell site information may be obtained prospectively under the dual or hybrid authority of the Pen/Trap Statute and the Stored Communications Act (“SCA”).2 These questions arise from a recent governmental application for a court order authorizing installation and use of a pen register and trap/trace device, access to customer records, and cell phone tracking. The court initially granted this order in part, denying access to the dialed digits as well as the limited cell site authority. In response to the Government’s informal request, the court agreed to reconsider the dialed digits ruling and invited full briefing by the Government as well as interested parties. The Electronic Frontier Foundation and Center for Democracy and Technology have filed 1 18 U.S.C. -
Electronic Communications Privacy Act
Electronic Communications Privacy Act Law/Act: Electronic Communications Privacy Act U.S. Code Citation: 18 U.S.C. §§ 2510–2522, 2701–2712, 3121–3127 Responsible Regulator: Federal Communications Commission BYU Responsible Officer: Information Security & Privacy Committee Updated: Feb. 2019 Updated By: CJH Version 1.0 Effective Date: 1986 I. PURPOSE The purpose of the Electronic Communications Privacy Act (ECPA) is to protect the privacy of wire, oral, and electronic communications while in transmission and when stored on computers.1 II. HISTORY The ECPA was passed in 1986, and included both amendments to the previous Wiretap Act and the creation of the Stored Communications Act and the Pen Register Act.2 The ECPA was created to expand federal restrictions on wiretapping and electronic eavesdropping.3 The ECPA was heavily modified by the Communications Assistance to Law Enforcement Act (CALEA) in 1994 to allow law enforcement agencies the ability to conduct electronic surveillance.4 The ECPA was also significantly amended in 2001 and again in 2006 by the USA PATRIOT Act, which was created to increase protection against domestic terrorism in response to the 9/11 attacks.5 Significant changes were also made by the enactment of the Foreign Intelligence Surveillance Act of 1978 and Amendments (FISA) in 2008 to allow electronic surveillance for the collection of foreign intelligence information.6 III. APPLICABILITY TO BYU Because BYU provides electronic and wire communications services and stores records of such communications, it would be deemed a “communications provider,”7 and as such is subject to the provisions of the EPCA and responsible for protecting the privacy of covered communications. -
Legal Constraints Upon the Use of the Pen Register As a Law Enforcement Tool Victor S
Cornell Law Review Volume 60 Article 6 Issue 6 August 1975 Legal Constraints Upon the Use of the Pen Register as a Law Enforcement Tool Victor S. Elgort Follow this and additional works at: http://scholarship.law.cornell.edu/clr Part of the Law Commons Recommended Citation Victor S. Elgort, Legal Constraints Upon the Use of the Pen Register as a Law Enforcement Tool, 60 Cornell L. Rev. 1028 (1975) Available at: http://scholarship.law.cornell.edu/clr/vol60/iss6/6 This Note is brought to you for free and open access by the Journals at Scholarship@Cornell Law: A Digital Repository. It has been accepted for inclusion in Cornell Law Review by an authorized administrator of Scholarship@Cornell Law: A Digital Repository. For more information, please contact [email protected]. NOTES THE LEGAL CONSTRAINTS UPON THE USE OF THE PEN REGISTER AS A LAW ENFORCEMENT TOOL Imagine a suspect of a crime under investigation. The police are observing his home through binoculars, a mail cover 1 has been placed upon his incoming mail, a search warrant has been obtained for the contents of several of his letters, a pen register and a wiretap have been placed upon his telephone, and the records of his long-distance calls are periodically examined. The search war- rant for the letters is similar to the wiretap with respect to the interests and procedures involved.2 Both result in the detection of the substantive contents of a communication and need not be considered here. The pen register, which logs numbers dialed from a particular telephone without monitoring any conversations, 3 may be analogized to the nonelectronic surveillance techniques represented in this hypothetical situation by the mail cover and binocular watch. -
The Nsa's Prism Program and the New Eu Privacy Regulation: Why U.S
American University Business Law Review Volume 3 | Issue 2 Article 5 2013 The SN A'S Prism Program And The ewN EU Privacy Regulation: Why U.S. Companies With A Presence In The EU ouldC Be In Trouble Juhi Tariq American University Washington College of Law Follow this and additional works at: http://digitalcommons.wcl.american.edu/aublr Part of the International Law Commons, and the Internet Law Commons Recommended Citation Tariq, Juhi "The SAN 'S Prism Program And The eN w EU Privacy Regulation: Why U.S. Companies With A Presence In The EU ouldC Be In Trouble," American University Business Law Review, Vol. 3, No. 2 (2018) . Available at: http://digitalcommons.wcl.american.edu/aublr/vol3/iss2/5 This Note is brought to you for free and open access by the Washington College of Law Journals & Law Reviews at Digital Commons @ American University Washington College of Law. It has been accepted for inclusion in American University Business Law Review by an authorized editor of Digital Commons @ American University Washington College of Law. For more information, please contact [email protected]. NOTE THE NSA'S PRISM PROGRAM AND THE NEW EU PRIVACY REGULATION: WHY U.S. COMPANIES WITH A PRESENCE IN THE EU COULD BE IN TROUBLE JUHI TARIQ* Recent revelations about a clandestine data surveillance program operated by the NSA, Planning Tool for Resource Integration, Synchronization, and Management ("PRISM'), and a stringent proposed European Union ("EU") data protection regulation, will place U.S. companies with a businesspresence in EU member states in a problematic juxtaposition. The EU Proposed General Data Protection Regulation stipulates that a company can be fined up to two percent of its global revenue for misuse of users' data and requires the consent of data subjects prior to access. -
Ashley Deeks*
ARTICLE An International Legal Framework for Surveillance ASHLEY DEEKS* Edward Snowden’s leaks laid bare the scope and breadth of the electronic surveillance that the U.S. National Security Agency and its foreign counterparts conduct. Suddenly, foreign surveillance is understood as personal and pervasive, capturing the communications not only of foreign leaders but also of private citizens. Yet to the chagrin of many state leaders, academics, and foreign citizens, international law has had little to say about foreign surveillance. Until recently, no court, treaty body, or government had suggested that international law, including basic privacy protections in human rights treaties, applied to purely foreign intelligence collection. This is now changing: Several UN bodies, judicial tribunals, U.S. corporations, and individuals subject to foreign surveillance are pressuring states to bring that surveillance under tighter legal control. This Article tackles three key, interrelated puzzles associated with this sudden transformation. First, it explores why international law has had so little to say about how, when, and where governments may spy on other states’ nationals. Second, it draws on international relations theory to argue that the development of new international norms regarding surveillance is both likely and essential. Third, it identifies six process-driven norms that states can and should adopt to ensure meaningful privacy restrictions on international surveillance without unduly harming their legitimate national security interests. These norms, which include limits on the use of collected data, periodic reviews of surveillance authorizations, and active oversight by neutral bodies, will increase the transparency, accountability, and legitimacy of foreign surveillance. This procedural approach challenges the limited emerging scholarship on surveillance, which urges states to apply existing — but vague and contested — substantive human rights norms to complicated, clandestine practices. -
Intelligence Community Presidentially Appointed Senate Confirmed Officials (PAS) During the Administrations of Presidents George W
Intelligence Community Presidentially Appointed Senate Confirmed Officials (PAS) During the Administrations of Presidents George W. Bush, Barack H. Obama, and Donald J. Trump: In Brief May 24, 2021 Congressional Research Service https://crsreports.congress.gov R46798 Intelligence Community Presidentially Appointed Senate Confirmed Officials (PAS) Contents Introduction ..................................................................................................................................... 1 Methodology ................................................................................................................................... 2 Tables Table 1. George W. Bush Administration-era Nominees for IC PAS Positions............................... 2 Table 2. Obama Administration-era Nominees for IC PAS Positions ............................................. 5 Table 3. Trump Administration Nominees for IC PAS Positions .................................................... 7 Contacts Author Information ........................................................................................................................ 10 Congressional Research Service Intelligence Community Presidentially Appointed Senate Confirmed Officials (PAS) Introduction This report provides three tables that list the names of those who have served in presidentially appointed, Senate-confirmed (PAS) positions in the Intelligence Community (IC) during the last twenty years. It provides a comparative perspective of both those holding IC PAS positions who have -
Mass Surveillance
Mass Surveillance Mass Surveillance What are the risks for the citizens and the opportunities for the European Information Society? What are the possible mitigation strategies? Part 1 - Risks and opportunities raised by the current generation of network services and applications Study IP/G/STOA/FWC-2013-1/LOT 9/C5/SC1 January 2015 PE 527.409 STOA - Science and Technology Options Assessment The STOA project “Mass Surveillance Part 1 – Risks, Opportunities and Mitigation Strategies” was carried out by TECNALIA Research and Investigation in Spain. AUTHORS Arkaitz Gamino Garcia Concepción Cortes Velasco Eider Iturbe Zamalloa Erkuden Rios Velasco Iñaki Eguía Elejabarrieta Javier Herrera Lotero Jason Mansell (Linguistic Review) José Javier Larrañeta Ibañez Stefan Schuster (Editor) The authors acknowledge and would like to thank the following experts for their contributions to this report: Prof. Nigel Smart, University of Bristol; Matteo E. Bonfanti PhD, Research Fellow in International Law and Security, Scuola Superiore Sant’Anna Pisa; Prof. Fred Piper, University of London; Caspar Bowden, independent privacy researcher; Maria Pilar Torres Bruna, Head of Cybersecurity, Everis Aerospace, Defense and Security; Prof. Kenny Paterson, University of London; Agustín Martin and Luis Hernández Encinas, Tenured Scientists, Department of Information Processing and Cryptography (Cryptology and Information Security Group), CSIC; Alessandro Zanasi, Zanasi & Partners; Fernando Acero, Expert on Open Source Software; Luigi Coppolino,Università degli Studi di Napoli; Marcello Antonucci, EZNESS srl; Rachel Oldroyd, Managing Editor of The Bureau of Investigative Journalism; Peter Kruse, Founder of CSIS Security Group A/S; Ryan Gallagher, investigative Reporter of The Intercept; Capitán Alberto Redondo, Guardia Civil; Prof. Bart Preneel, KU Leuven; Raoul Chiesa, Security Brokers SCpA, CyberDefcon Ltd.; Prof. -
On Security and Privacy for Networked Information Society
Antti Hakkala On Security and Privacy for Networked Information Society Observations and Solutions for Security Engineering and Trust Building in Advanced Societal Processes Turku Centre for Computer Science TUCS Dissertations No 225, November 2017 ON SECURITY AND PRIVACY FOR NETWORKED INFORMATIONSOCIETY Observations and Solutions for Security Engineering and Trust Building in Advanced Societal Processes antti hakkala To be presented, with the permission of the Faculty of Mathematics and Natural Sciences of the University of Turku, for public criticism in Auditorium XXII on November 18th, 2017, at 12 noon. University of Turku Department of Future Technologies FI-20014 Turun yliopisto 2017 supervisors Adjunct professor Seppo Virtanen, D. Sc. (Tech.) Department of Future Technologies University of Turku Turku, Finland Professor Jouni Isoaho, D. Sc. (Tech.) Department of Future Technologies University of Turku Turku, Finland reviewers Professor Tuomas Aura Department of Computer Science Aalto University Espoo, Finland Professor Olaf Maennel Department of Computer Science Tallinn University of Technology Tallinn, Estonia opponent Professor Jarno Limnéll Department of Communications and Networking Aalto University Espoo, Finland The originality of this thesis has been checked in accordance with the University of Turku quality assurance system using the Turnitin OriginalityCheck service ISBN 978-952-12-3607-5 (Online) ISSN 1239-1883 To my wife Maria, I am forever grateful for everything. Thank you. ABSTRACT Our society has developed into a networked information soci- ety, in which all aspects of human life are interconnected via the Internet — the backbone through which a significant part of communications traffic is routed. This makes the Internet ar- guably the most important piece of critical infrastructure in the world. -
Foreign Corrupt Practices Act Alert Latin America Anti-Bribery Year-In-Review: 2019 Developments and Predictions for 2020
February 28, 2020 Foreign Corrupt Practices Act Alert Latin America Anti-Bribery Year-in-Review: 2019 Developments and Predictions for 2020 By Tico Almeida, Lillian Howard Potter, and John F. Walsh1 I. INTRODUCTION Foreign Corrupt Practices Act (FCPA) enforcement activity reached new heights in 2019. Corporate penalties paid to US enforcement agencies topped last year’s record levels, and individuals were charged at a pace matching last year’s near-record level.2 As discussed in detail below, Latin American citizens from Ecuador to Venezuela have recently found themselves facing criminal anti-corruption charges in federal courts in the US. These trends are critically important both to Latin American companies and to US companies doing business in Latin America. As recent enforcement trends show, foreign companies are a perennial target of US enforcement agencies. Nine of the top 10 all-time largest FCPA enforcement actions have been brought against companies based outside the US, including several Brazilian companies. Similarly, US companies with operations in Latin America have good reason to ensure that they have strong anti-corruption controls in place because, as discussed below, US enforcement agencies are investigating corruption by US companies operating across the region, from Mexico to Peru. This alert summarizes key Latin America 2019 anti-bribery enforcement developments and concludes with predictions for 2020. For a comprehensive global review of enforcement and policy developments, please refer to WilmerHale’s FCPA Alert: Global Anti-Bribery Year-in-Review for 2019. II. KEY INVESTIGATION-RELATED DEVELOPMENTS IN LATIN AMERICA A. Notable Features of 2019 Corporate Resolutions in Latin American Cases 1.