EPIC Urges FTC To Step Up Privacy Shield Enforcement
In detailed comments, EPIC advised the FTC to strengthen a proposed settlement with ReadyTech concerning Privacy Shield, a framework that permits the flow of data on Europeans to the U.S. The FTC settlement prohibited the company from making future misrepresentations regarding compliance with Privacy Shield, but provided no relief for Europeans whose data was unlawfully collected. EPIC urged the FTC to require ReadyTech to undergo and release independent privacy assessments, disgorge all data collected from E.U. citizens, and implement Fair Information Practices. EPIC told the FTC that enforcement of Privacy Shield comes at a critical moment, as the European Parliament recently called for suspension by September 1st if the U.S. does not fully comply. EPIC stressed the urgency of the FTC’s Facebook-Cambridge Analytica investigation, which the European Parliament highlighted as a particular concern. EPIC previously told the FTC that the Cambridge Analytic breach could have been prevented had the FTC enforced the 2011 Consent Order against Facebook, which EPIC and other organizations helped obtain.
Continue reading "EPIC Urges FTC To Step Up Privacy Shield Enforcement" »
EPIC Advises NTIA on International Internet Policy
EPIC submitted comments in response to the the National Telecommunications and Information Administration's request for recommendations on its international internet policy priorities. NTIA is the Executive Branch agency that is principally responsible by law for advising the President on telecommunications and information policy issues. EPIC recommended that the administration (1) enact comprehensive privacy law, based on the OECD Privacy Guidelines); (2) encourage US firms to comply with GDPR; and (3) ratify the Council of Europe Privacy Convention. EPIC has urged Congress to update U.S. privacy laws and recently wrote in the Financial Times that “Instead of criticizing the EU effort, the Commerce Department should help develop a comprehensive strategy to update US data protection laws.” EPIC comments to the NTIA also addressed Algorithmic Transparency, security standards for the Internet of Things, and data minimization.
Continue reading "EPIC Advises NTIA on International Internet Policy" »
August 2, 2018
EPIC FOIAs Kavanaugh’s White House Records on Warrantless Wiretapping, Mass Surveillance Programs
EPIC has submitted two urgent Freedom of Information Act requests to the George W. Bush Library for records about Supreme Court nominee Brett M. Kavanaugh and various proposals for surveillance of the American public. Judge Kavanaugh served as Staff Secretary for President Bush between 2003 and 2006. During that time, many of the post-September 11 mass surveillance systems were implemented such as the warrantless wiretapping of Americans, which were later deemed unconstitutional, as well as Total Information Awareness, airport body scanners, and Real ID. The first EPIC FOIA request concerns staff files during his tenure at the White House and the second EPIC FOIA request concerns his e-mails. Judge Kavanaugh has stated that his time serving as Staff Secretary was “the most interesting, and in many ways, among the most instructive” to his work as a judge. Judge Kavanaugh also wrote an opinion on the D.C. Circuit Court of Appeals, defending mass surveillance, that surprised even conservative legal scholars.
EPIC Sues Justices Dept. for Reports on Cell Phone Tracking
EPIC has filed a Freedom of Information Act lawsuit against the Department of Justice for the release of reports on the collection and use of cell site location information. Modern cell phones generate precise location records, known as “cell site location information,” that was often accessible to law enforcement agencies. However, the Department of Justice has never produced any comprehensive reports concerning the use of cell site data. In Carpenter v. United States, the Supreme Court held that the Fourth Amendment protects location records generated and that the “police must get a warrant when collecting” cell site location information. In the complaint, EPIC stated that it “seeks to determine the use, effectiveness, cost, and necessity in the collection and use of cell site location information so that the public, lawmakers, and the courts may have a better understanding of the use of this investigative technique.” The case is EPIC v. DOJ, No. 18-1814 (D.D.C. filed August 1, 2018).
EPIC Urges FCC To End The Data Retention Mandate
EPIC has sent a letter to the Federal Communications Commission urging the FCC to act immediately on a Petition submitted by EPIC and a coalition of civil rights organizations, technical experts and legal scholars exactly three years ago. The Petition called for an end to the FCC rule requiring the mass retention of phone records, known as the “data retention mandate.” EPIC explained in the Petition that the rule was “unduly burdensome and ineffectual and posed an ongoing threat to the privacy and security of American consumers. The U.S. Supreme Court recently declared that cell phone location records are protected under the Fourth Amendment in Carpenter v. United States. EPIC wrote in the letter that “as we anticipated in the original Petition, the retention of cell phone data implicates constitutional interests.” All of the comments received by the FCC on this topic favored an end to the mandate.
August 8, 2018
EPIC Opposes Citizenship Question on 2020 Census
In comments to the U.S. Census Bureau, EPIC opposed the agency's decision to add a citizenship question to the 2020 census. The administration's stated purpose for the question is to assist the DOJ, but EPIC argued that census data should never be used for enforcement purposes because collecting data to enforce laws will interfere with the census's constitutional purpose and will undermine the integrity of the census. The Bureau earlier conducted a Privacy Impact Assessment for the census, but it did not acknowledge the privacy risks raised by the recently added citizenship question. EPIC said the assessment does not meet the Commerce Department's standards and that it is required to conduct a revised assessment, analyzing the privacy risks created by the citizenship question. Through a Freedom of Information Act request, EPIC obtained documents (part 1, part 2, part 3, part 4) concerning Commerce Secretary Wilbur Ross and the citizenship question. The census raises significant privacy risks and was used to target Japanese-Americans for internment in World War II. EPIC previously obtained documents which revealed that the Census Bureau transferred the personal data of Muslim Americans to DHS after 9-11. As a consequence of EPIC's lawsuit, the Census Bureau revised its policy on disclosing statistical information about "sensitive populations" to law enforcement and intelligence agencies.
Open Government Groups Call for Full Access to Kavanaugh Records
A coalition of nonpartisan open government groups has called for the disclosure of Supreme Court nominee Brett Kavanaugh's White House records. In a letter to the Senate Judiciary Committee, the coalition asserted that "curtailed document requests will hinder the Senate's ability to fully assess Judge Kavanaugh's background and qualifications..." To uphold the constitution, the coalition emphasized that "senators from both parties must have equal access to all documents relevant to a nominee, in as timely and complete a manner as possible." EPIC recently submitted two urgent Freedom of Information Act requests for Judge Kavanaugh's White House records during the time when many of the post-September 11 mass surveillance systems were implemented.
Senator Feinstein Rebuts National Archives' Decision to Withhold Kavanaugh Records
Senator Feinstein has sent an urgent letter to Archivist David S. Ferriero demanding reconsideration of the National Archives' decision to withhold documents related to Supreme Court nominee Brett Kavanaugh. In the letter, Senator Feinstein stated that the "records are crucially important to the Senate's understanding of Mr. Kavanaugh's full record, and withholding them prevents the minority from satisfying its constitutional obligation to provide advice and consent on his nomination." Under the National Archives' unprecedented interpretation of the Presidential Records Act, Feinstein explained that "minority members of the Senate Judiciary Committee now have no greater right to Mr. Kavanaugh's records than members of the press and the public." EPIC recently submitted two urgent Freedom of Information Act requests for Judge Kavanaugh's records during the time he served in the White House when many of the post-September 11 mass surveillance systems were implemented.
August 11, 2018
Kavanaugh White House Counsel: PATRIOT Act, "measured, careful, responsible, and constitutional approach"
On Thursday, the Senate Judiciary Committee released the first production of records for Supreme Court nominee Brett M. Kavanaugh from his time as associate counsel for George W. Bush. Roughly 5,700 pages of documents were made available to the public. The documents show that Kavanaugh assisted in the effort to pass the Patriot Act and drafted a statement that President Bush incorporated in the bill signing. Kavanaugh wrote that the PATRIOT Act will “update laws authorizing government surveillance,” which he claimed, and President Bush then restated, were from an era of “rotary phones.” In fact, the PATRIOT Act weakened numerous U.S. privacy laws, including the subscriber privacy provisions in the Cable Act and the email safeguards in the Electronic Communications Privacy Act. Both laws were enacted after the era of rotary phones. Congress amended the Foreign Intelligence Surveillance Act after it was revealed that the White House had authorized warrantless wiretapping of Americans beginning in 2002. In an email exchange, Kavanaugh wrote that the PATRIOT Act was a "measured, careful, responsible, and constitutional approach . . . .” EPIC recently submitted two urgent Freedom of Information Act requests for Judge Kavanaugh’s records during his time serving as Staff Secretary for President Bush.
August 13, 2018
Two More Nominees for Intelligence Oversight Board
The White House announced the nomination of two board members to the Privacy and Civil Liberties Oversight Board (PCLOB). Travis LeBlanc is a partner at Boies Schiller, and former Federal Communications Commission Enforcement Bureau Chief. Aditya Bamzai is a law professor at the University of Virginia and former Department of Justice attorney. The intelligence oversight body has been unable to act due to long-term vacancies. The European Parliament has called for suspension of the Privacy Shield if the U.S. does not to improve data protection and restore the PCLOB. Three other members have been nominated but have yet to be confirmed. EPIC opposed the nomination of Adam Klein to serve as Chairman of the Board. EPIC previously testified before PCLOB, made recommendations for PCLOB's handling of FOIA requests, and set out a broad agenda for the work of the independent agency. EPIC previously sought public release of the PCLOB report on Executive order 12333.
August 14, 2018
International Privacy Experts Adopt Recommendations for Cross-Border Law Enforcement Requests for Data
The International Working Group on Data Protection in Telecommunications has adopted new recommendations to protect individual rights during criminal cross-border law enforcement. The Berlin-based Working Group includes Data Protection Authorities and experts who assess emerging privacy challenges. The Working Group on Data Protection calls on governments and international organisations to ensure law enforcement requests accord with international human rights norms. The Working Group recommends specific safeguards for data protection and privacy, including accountability, procedural fairness, notice and an opportunity to challenge. EPIC addressed similar issues in an amicus brief for the US Supreme Court in the Microsoft case. EPIC and a coalition of civil society organizations recently urged the Council of Europe to protect human rights in the proposed revision to the Convention on Cybercrime. In April 2017, EPIC hosted the 61st meeting of the IWG in Washington, D.C. at the Goethe-Institut, Germany's cultural institute.
Following EPIC Comments, FTC Strengthens Safeguards for Kids' Data in Gaming Industry
The FTC has unanimously voted to approve EPIC’s recommendations to strengthen safeguards for children's data in the gaming industry. In a 5-0 vote, the FTC adopted EPIC's proposals to revise the Entertainment Software Rating Board's industry rules to (1) extend children's privacy protections in COPPA to all users worldwide; and (2) to implement privacy safeguards for the collection of data "rendered anonymous." The FTC wrote, "the Commission agrees with EPIC's comment. As COPPA's protections are not limited only to U.S. residents, the definition of 'child' in the ESRB program has been revised to remove the limitation." The Commission also strengthened protections for de-identified children's data: "companies must provide notice and obtain verifiable parental consent if personal information is collected, even if it is later anonymized." EPIC has testified several times before Congress on protecting children's data and supported the 2013 updates to COPPA.
EPIC Comments on Second Annual Privacy Shield Review
EPIC provided comments to the European Commission to inform the second annual review of the EU-U.S. Privacy Shield, a framework that permits the processing of the personal data of Europeans in the United States. EPIC detailed the latest privacy developments in the U.S., including the extension of Fourth Amendment protection to cell phone location data in Carpenter v. United States, passage of the CLOUD Act, the FTC's failure to enforce its legal judgment against Facebook, the vacancies at the PCLOB, the absence of a Privacy Shield Ombudsman at the Commerce Department, and the nomination of Judge Brett Kavanaugh to the Supreme Court. The Commission approved Privacy Shield last year, but sought additional steps by the United States. The European Parliament has called for suspension of the pact if the U.S. does not fully comply by September 1st. The European Commission will make a final determination this fall.
D.C. Circuit Announces Panel in EPIC v. IRS, FOIA Case for Trump's Tax Returns
The D.C. Circuit has announced the three-judge panel that will decide EPIC v. IRS, EPIC's Freedom of Information Act case to obtain public release of President Trump's tax returns. Arguments will be held in the case on Thursday, September 13, 2018 before Judge Karen LeCraft Henderson, Judge Patricia A. Millett, and Judge Harry T. Edwards. EPIC has argued that the IRS has the authority to disclose the President's returns to correct numerous misstatements of fact concerning his financial ties to Russia. For example, President Trump tweeted that "Russia has never tried to use leverage over me. I HAVE NOTHING TO DO WITH RUSSIA - NO DEALS, NO LOANS, NO NOTHING"—a claim "plainly contradicted by his own attorneys, family members, and business partners." As EPIC told the Court, "there has never been a more compelling FOIA request presented to the IRS." A broad majority of the American public favor the release of the President's tax returns. EPIC v. IRS is one of several FOIA cases EPIC has pursued concerning Russian interference in the 2016 Presidential election, including EPIC v. FBI (response to Russian cyber attack) and EPIC v. DHS (election cybersecurity).
August 15, 2018
EPIC Urges Senate Committee to Press FCC on Privacy
EPIC has sent a statement to the Senate Commerce Committee for a hearing on the Federal Communications Commission. EPIC urged the Committee to push the FCC to protect online privacy. EPIC also asked the Committee to press the FCC to repeal a regulation that requires the retention of telephone customer records for 18 months. EPIC filed the petition urging the repeal of this mandate more than two years ago. Every comment received by the FCC favored the EPIC petition. EPIC has submitted multiple comments to the FCC to strengthen online privacy and has recommended an industry neutral and comprehensive privacy framework.
EPIC FOIA: EPIC Obtains DOD Inspector General Audits of Hotline Allegations
Through a Freedom of Information Act request, EPIC has obtained the Department of Defense's Inspector General report on audit of hotline allegations involving improper use of agency funds for foreign counterintelligence billets. The report found that the Defense Intelligence Agency followed proper appropriation authorities but did not ensure proper function and management for the program. The Inspector General found that "employees were performing duties not aligned with their position descriptions and funding." In a 2012 FOIA case, EPIC v. CIA, EPIC uncovered an Inspector General's report which revealed that the CIA, in collaboration with the NYPD, conducted domestic surveillance of mosques, Muslim student groups, and Muslim stores and businesses. EPIC continues to pursue the release of government documents to improve oversight and accountability through litigation and EPIC's Open Government Project.
EPIC, Consumer Groups Urge FTC to conclude Facebook Investigation
EPIC and a coalition of consumer groups have asked the FTC to conclude the Facebook-Cambridge Analytica investigation by September 1, 2018. The groups said, "It is critical that the FTC conclude the Facebook matter, issue a significant fine, and ensure that the company upholds its privacy commitments to users.” Congress and the European Parliament have both conducted extensive hearings on the Cambridge Analytica matter. The U.K. Information Commissioner’s Office conducted an extensive investigation, published a substantial report, and issued a significant fine in July. The FTC announced in March that it would reopen the Facebook investigation.
August 16, 2018
Court Blocks EPIC's Efforts to Obtain "Predictive Analytics Report"
A federal court in the District of Columbia has blocked EPIC's efforts to obtain a secret "Predictive Analytics Report" in a FOIA case against the Department of Justice. The court sided with the agency which had withheld the report and asserted the "Presidential communications privilege." Neither the Supreme Court nor the D.C. Circuit has ever permitted a federal agency to invoke that privilege in a FOIA case. EPIC sued the agency in 2017 to obtain records about "risk assessment" tools in the criminal justice system. These techniques are used to set bail, determine criminal sentences, and even contribute to determinations about guilt or innocence. Many criminal justice experts oppose their use. EPIC has pursued several FOIA cases concerning "algorithmic transparency," passenger risk assessment, "future crime" prediction, and proprietary forensic analysis. The case is EPIC v. DOJ (Aug. 14, 2018 D.D.C.). EPIC is considering an appeal.
August 17, 2018
EPIC to FTC: Google's Location Tracking Violates Consent Order
Following a report that Google tracks user location even when users opt-out, EPIC wrote to the FTC that Google violated the 2011 consent order. EPIC said "Google's subsequent changes to its policy, after it has already obtained location data on Internet users, fails to comply with the 2011 order." EPIC also told the FTC that "The Commission's inactions have made the Internet less safe and less secure for users and consumers." The 2011 settlement with Google followed a detailed complaint brought by EPIC and a coalition of consumer organizations. The groups charged that Google had engaged in unfair and deceptive trade practices when it changed the privacy settings of Gmail users and opted them into Google Buzz. The FTC agreed with the consumer groups, Google entered into a settlement and Buzz was shuttered. FTC chairman John Liebowitz said at the time, "When companies make privacy pledges, they need to honor them. This is a tough settlement that ensures that Google will honor its commitments to consumers and build strong privacy protections into all of its operations."
August 20, 2018
VICTORY - EPIC v Commission: Presidential Election Commission Destroys State Voter Data Wrongfully Obtained
The White House confirmed Monday that it has destroyed the state voter data unlawfully collected by the Presidential Election Commission. Responding to a court order in EPIC v. Commission the White House stated that the voter data is now "entirely deleted and unrecoverable." The deletion of the voter data is the outcome EPIC sought in its case, which challenged the Commission's failure to conduct a required Privacy Impact Assessment before collecting personal data. As a result of EPIC's lawsuit in July 2017, the Commission suspended data collection, discontinued the use of an unsafe computer server, and deleted state voter data that was illegally obtained. The Commission was disbanded in January 2018.
EPIC, Consumer Groups Advise FTC on Competition and Privacy
EPIC, the Center for Digital Democracy, the Consumer Federation of America, and US PIRG submitted comments to the FTC in advance of hearings on "Competition and Consumer Protection in the 21st Century." The consumer groups said that privacy protection is critical for competition and innovation. The groups told the FTC that it should: 1) unwind the Facebook-WhatsApp deal; 2) require Facebook and Google to spin off their advertising units into independent companies; 3) block all future acquisitions by Facebook and Google that would enable the companies to increase their monopoly over consumer data; 4) impose privacy safeguards for all future mergers that implicate data privacy concerns; and 5) perform audits of algorithmic tools to promote accountability and to limit anticompetitive conduct. This will be the first time the FTC has reexamined its approach to consumer protection and competition since the FTC's 1995 hearings on "Global Competition and Innovation." EPIC participated in the 1995 hearings which led to the FTC's work on consumer privacy.
August 21, 2018
EPIC to FTC: Algorithmic Decision-Making Requires Transparency
EPIC has advised the FTC on algorithmic decision tools, artificial intelligence, and predictive analytics for the hearings on "Competition and Consumer Protection in the 21st Century." In the comments, EPIC urged the FTC to (1) prohibit unfair and deceptive algorithms, (2) seek legislative authority for "algorithmic transparency" to establish consumer protection in automated decision-making, (3) provide guidance on the ethical design and implementation of algorithms, and (4) make public the "Universal Tennis Rating" algorithm that secretly scores young athletes. Calling on the Commission to act on EPIC's repeated complaints on the proprietary algorithm that poses risks to children's privacy, EPIC said: "secret algorithms are unfair and deceptive," conceal bias, and deprive consumers of opportunities in the marketplace. EPIC champions "Algorithmic Transparency", and has advised Congress that algorithmic transparency is necessary for fairness and accountability.
EPIC To Congress: Public Participation Required for US Policy on Artificial Intelligence
In advance of a hearing concerning the Office of Science and Technology Policy, EPIC said that OSTP should ensure public participation in the development of AI policy. EPIC told the Senate Commerce Committee that Congress must also implement oversight mechanisms for the use of AI. EPIC said that Congress should require algorithmic transparency, particularly for government systems that involve the processing of personal data. In a recent petition to OSTP, EPIC, leading scientific organizations, including AAAS, ACM and IEEE, and nearly 100 experts urged the White House to solicit public comments on artificial intelligence policy. EPIC has pursued several criminal justice FOIA cases, and FTC consumer complaints to promote transparency and accountability. In 2015, EPIC launched an international campaign for Algorithmic Transparency.
August 22, 2018
Following EPIC Complaint, FTC Acknowledges Review of Google Consent Order
The FTC confirmed this week that it is investigating Google's compliance with the 2011 consent order. EPIC sent a letter to the FTC last week urging the Commission to determine whether Google violated the consent order following a report that Google tracked user location even when users opt-out. EPIC explained that modifying the "privacy policy" after obtaining the location data from users would not comply with the FTC's consent order. In the response to EPIC, the agency said that FTC attorneys monitor compliance with the agency's consumer protection orders and "the Google order is undergoing just such a review." The 2011 settlement with Google followed a detailed complaint brought by EPIC and a coalition of consumer organizations. The groups charged that Google had engaged in unfair and deceptive trade practices when it changed the privacy settings of Gmail users and opted them into Google Buzz. The FTC agreed with the consumer groups, Google entered into a settlement, and Buzz was shuttered. FTC chairman John Liebowitz said at the time, "When companies make privacy pledges, they need to honor them. This is a tough settlement that ensures that Google will honor its commitments to consumers and build strong privacy protections into all of its operations."
EPIC FOIA: EPIC Obtains Emails About White House AI Committee
Through a Freedom of Information Act request to the National Science Foundation, EPIC has obtained communications between the Office of Science and Technology Policy and the NSF about the White House's Select Committee on Artificial Intelligence. The Committee was announced earlier this year at the White House Artificial Intelligence Summit. In an e-mail Michael Kratsios, Deputy Assistant to the President for Technology Policy, stated that the summit was "well received by industry and academia" but makes no mention of the absence of public participation. The Committee's inaugural meeting in May was held in secret, and the OSTP has still not announced a plan for public participation. EPIC and leading scientific organizations, including AAAS, ACM, and IEEE, and technology experts petitioned the OSTP to solicit public comments on artificial intelligence policy. EPIC again argued for public participation in US AI policy in a recent statement to the Senate Commerce Committee.
August 23, 2018
Appeals Court Finds Smart Meters Trigger Constitutional Scrutiny, But Data Logging is Reasonable
A federal appeals court has ruled that smart meters perform a "search" under the Fourth Amendment but found that their collection of household energy data is "reasonable." Smart meters periodically transmit information to public utilities about home energy consumption, which can reveal personal behavior patterns and enable real-time surveillance. "The ever-accelerating pace of technological development carries serious privacy implications," the Seventh Circuit wrote. "Smart meters are no exception." The Court held that the searches performed by smart meters are justified by cost reductions and service improvements, but the Court warned that "our conclusion could change" if the meters sent data more frequently or if law enforcement were given easier access to the data. EPIC has long warned about the privacy implications of the smart grid and filed an amicus brief in United States v. Carpenter, a recent Supreme Court case that recognized Fourth Amendment protections for cell phone location data.
August 27, 2018
Congressional Research Service: Kavanaugh has a "more restrictive view" of the Fourth Amendment
The Congressional Research Service, has published a report regarding Supreme Court nominee Judge Kavanaugh's jurisprudence. The nonpartisan CRS provides policy and legal analysis to committees and Members of both the House and Senate, regardless of party affiliation. The CRS report discusses Judge Kavanaugh's potential impact on the Supreme Court if confirmed. According to the report, Judge Kavanaugh has a "more restrictive view" on the constitutional right to be free of unreasonable searches and seizures than other judges on the D.C. Circuit Court of Appeals. Notably in Klayman v. Obama, Judge Kavanaugh stated that the National Security Agency's suspicionless surveillance of the American public was "entirely consistent with the Fourth Amendment." The report also includes an Appendix with tables that summarizes his rate of concurring and dissenting opinions relative to other judges on the D.C. Circuit and how his opinions have fared when reviewed by the Supreme Court.
EPIC and Open Government Groups Urge Senate to Delay Hearing on Kavanaugh
EPIC along with a nonpartisan coalition of open government groups sent a letter to the Chair and Ranking Member of the Senate Judiciary Committee urging the Senate to delay hearings on Supreme Court nominee Brett M. Kavanaugh until all relevant records are released. In the letter, the groups stated, "Secrecy and selective availability of information continue to plague public confidence in the Senate's ability to conduct a fair and impartial review of Judge Kavanaugh's background and qualification." The groups urged the senators to work across party lines to ensure maximum transparency and protect the public's right to know. Judge Kavanaugh's confirmation hearing is currently scheduled for September 4, yet most of the records from his White House years have been withheld. Traditionally, the records of Supreme Court nominees who served in the White House are routinely made available prior to committee hearings. Earlier this month, EPIC submitted two urgent Freedom of Information Act requests for the records. At issue are concerns about Judge Kavanaugh's role in the warrantless wiretapping program and the secret expansion of the Patriot Act.
EPIC and Open Government Groups Urge Senate to Delay Hearing on Kavanaugh
EPIC along with a nonpartisan coalition of open government groups sent a letter to the Chair and Ranking Member of the Senate Judiciary Committee urging the Senate to delay hearings on Supreme Court nominee Brett M. Kavanaugh until all relevant records are released. In the letter, the groups stated, "Secrecy and selective availability of information continue to plague public confidence in the Senate's ability to conduct a fair and impartial review of Judge Kavanaugh's background and qualification." The groups urged the senators to work across party lines to ensure maximum transparency and protect the public's right to know. Judge Kavanaugh's confirmation hearing is currently scheduled for September 4, yet most of the records from his White House years have been withheld. Traditionally, the records of Supreme Court nominees who served in the White House are routinely made available prior to committee hearings. Earlier this month, EPIC submitted two urgent Freedom of Information Act requests for the records. At issue are concerns about Judge Kavanaugh's role in the warrantless wiretapping program and the secret expansion of the Patriot Act.
August 29, 2018
EPIC and Coalition Urge Senate to Confirm PCLOB Nominees
EPIC and 30 other organizations sent a letter to the Senate Judiciary Committee to urge action on the final two nominees to the Privacy and Civil Liberties Oversight Board. The Senate Judiciary has held hearings on only three of the five nominees. The independent agency reviews federal surveillance programs to ensure that they provide adequate safeguards for privacy and civil liberties, but the PCLOB has lacked a quorum for over 19 months and not held hearings, issued reports, or performed other critical functions. The letter stated that the absence of a quorum is a "lost opportunity to better inform the public and facilitate Congressional action." EPIC previously testified before PCLOB, made recommendations for PCLOB's handling of FOIA requests, and set out a broad agenda for the work of the independent agency.
EPIC Settles Suit Against DHS regarding Communications with Election Commission
EPIC has settled a Freedom of Information Act lawsuit against the Department of Homeland Security that sought communications between the agency and the Presidential Election Commission. Through the lawsuit, EPIC obtained records showing that DHS communicated frequently with the Presidential Election Commission after EPIC sued to block the Commission's efforts to obtain state voter data. The records also revealed that Kirstjen Nielsen, now the DHS Secretary, worried that the Commission’s voter data grab would "disrupt critical efforts DHS is leading to work with state and local officials" on election cybersecurity. EPIC's separate lawsuit against the Presidential Election Commission led to the suspension of state voter data collection and ultimately to the complete destruction of the wrongfully collected data.
August 31, 2018
EPIC Pursues Voter Data Privacy Case at Supreme Court
Following then end of the Presidential Election Commission and the deletion of the voter data it unlawfully obtained, EPIC has asked the Supreme Court to review a lower court decision that wrongly denied EPIC access to a privacy impact assessment the Commission was required to publish. EPIC told the Supreme Court that the D.C. Circuit “misconstrued” the privacy impact assessment requirement “in a way that will seriously undermine the provision.” EPIC also warned that the lower court decision could adversely impact the privacy of personal data held by federal agencies. EPIC’s suit against the Commission led to the suspension of data collection, the discontinued use of an unsafe computer server, and the deletion of state voter data wrongly acquired. EPIC’s case in the Supreme Court is EPIC v. Commission, No. 17A1406.
EPIC Urges DHS To Abandon Privacy Act Exemptions for New Biometric Database
In comments to the Department of Homeland Security, EPIC urged the agency to withdraw proposed Privacy Act exemptions that would reduce privacy safeguards in the federal government. The Immigration Biometric and Background Check database will contain personal data on U.S. and non-U.S. citizens. DHS has proposed to exempt the database from several Privacy Act protections, including ensuring that records are accurate, timely, and complete. DHS also claims numerous “routine uses” that allow the agency to disseminate the data to law enforcement and intelligence agencies. EPIC has urged strict compliance with Privacy Act obligations and warned that inaccurate, insecure, and overbroad government databases threaten both privacy and national security.