============================================================== @@@@ @@@@ @@@ @@@@ @ @ @@@@ @@@@ @@@@@ @ @ @ @ @ @ @ @ @ @ @ @ @@@@ @@@ @ @ @@@@@ @ @@@ @@@ @ @ @ @ @ @ @ @ @ @ @ @ @@@@ @ @@@ @@@@ @ @ @@@@ @@@@ @ @ @ ============================================================== Volume 9.21 October 31, 2002 -------------------------------------------------------------- Published by the Electronic Privacy Information Center (EPIC) Washington, D.C. http://www.epic.org/alert/EPIC_Alert_9.20.html ======================================================================= Special EPIC Alert: Support EPIC -- Buy a book! (or 3) ======================================================================= [1] Privacy Law Sourcebook 2002 [2] Privacy & Human Rights 2002 [3] Litigation Under the Federal Open Government Laws (FOIA) 2002 [4] Package Deal: All 3 books for $100, including shipping! [5] EPIC Bookstore ======================================================================= [1] Privacy Law Sourcebook 2002 ======================================================================= Privacy Law Sourcebook 2002: United States Law, International Law, and Recent Developments. ISBN: 1893044157. Price: $40. The Privacy Law Sourcebook is the leading resource for students, attorneys, researchers, and journalists interested in privacy law in the United States and around the world. It includes the full text of major privacy laws and directives such as the FCRA, Privacy Act, FOIA, Family Educational Rights and Privacy Act, Right to Financial Privacy Act, Privacy Protection Act, Cable Communications Policy Act, ECPA, Video Privacy Protection Act, OECD Privacy Guidelines, OECD Cryptography Guidelines, and European Union Data Directive for Data Protection and Commerce. The Privacy Law Sourcebook is updated and expanded for 2002 with information about the USA PATRIOT Act, the full text of the Foreign Intelligence Surveillance Act, recent reports of the Article 29 Working Group, and updated summaries of key statutes for the non-specialist. Also included is an extensive section on privacy resources with useful websites and contact information for privacy agencies, organizations, and publications. "The 'Physicians Desk Reference' of the privacy world." - Evan Hendricks, Privacy Times "This is a handy compilation of privacy law instruments and a 'must' for anyone seeking guidance about the location and content of the key statutes, treaties, and recent developments." -American Society of International Law "The Privacy Law Sourcebook belongs front and center on the desk of every Information Age lawyer. It provides an indispensable map to the maze that is modern privacy law." -Prof. Paul M. Schwartz, Brooklyn Law School Table of Contents: UNITED STATES LAW 1 FAIR CREDIT REPORTING ACT (1970) 1 PRIVACY ACT (1974) 43 FREEDOM OF INFORMATION ACT (1974) 64 FAMILY EDUCATIONAL RIGHTS AND PRIVACY ACT (1974) 77 FOREIGN INTELLIGENCE SURVEILLANCE ACT (1978) 88 RIGHT TO FINANCIAL PRIVACY ACT (1978) 129 PRIVACY PROTECTION ACT (1980) 152 CABLE COMMUNICATIONS POLICY ACT (1984) 158 ELECTRONIC COMMUNICATIONS PRIVACY ACT (1986) 162 VIDEO PRIVACY PROTECTION ACT (1988) 220 EMPLOYEE POLYGRAPH PROTECTION ACT (1988) 223 TELEPHONE CONSUMER PROTECTION ACT (1991) 233 DRIVER'S PRIVACY PROTECTION ACT (1994) 243 TELECOMMUNICATIONS ACT (1996) [EXCERPT] 248 CHILDREN'S ONLINE PRIVACY PROTECTION ACT (1998) 252 FINANCIAL MODERNIZATION SERVICES ACT (1999) [EXCERPTS] 261 FEDERAL TRADE COMMISSION ACT (US) 277 INTERNATIONAL PRIVACY LAW 312 UNIVERSAL DECLARATION OF HUMAN RIGHTS (1948) 312 COUNCIL OF EUROPE CONVENTION ON HUMAN RIGHTS (1950) 318 OECD PRIVACY GUIDELINES (1980) 324 COUNCIL OF EUROPE CONVENTION ON PRIVACY (1981) 353 UN GUIDELINES FOR PERSONAL FILES (1990) 363 EU DATA PROTECTION DIRECTIVE (1995) 367 OECD CRYPTOGRAPHY GUIDELINES (1997) 395 GENERAL AGREEMENT ON TRADE IN SERVICES (1994) [EXCERPT] 406 PROTECTION OF WORKERS' PERSONAL DATA (1996) 408 EU PRIVACY AND ELECTRONIC COMMUNICATIONS DIRECTIVE (2002) 415 RECENT DEVELOPMENTS 434 WORKING DOCUMENT ON WORKPLACE SURVEILLANCE 434 WORKING DOCUMENT DATA PROCESSING BY NON-EU SITES 463 OPINION 1/2002 PRIVACY STANDARDISATION IN EUROPE 479 OPINION 2/2002 ON UNIQUE IDENTIFIERS IN TELECOMMUNICATION EQUIPMENT (IPV6) 481 ARTICLE 29 WORKING GROUP - ONLINE AUTHENTICATION SERVICES 488 WORKING DOCUMENT ON THE SAFE HARBOR AGREEMENT 490 ARTICLE 29 WORKING GROUP - FIFTH ANNUAL REPORT 493 PROPOSED CONSENT DECREE BETWEEN MICROSOFT AND THE FTC 560 SELECTED BIBLIOGRAPHY 567 PRIVACY RESOURCES 570 PRIVACY YEAR IN REVIEW 2001-2002 570 AGENCIES 578 NATIONAL LEGISLATION 582 ORGANIZATIONS 587 PUBLICATIONS 595 WEB SITES 597 INDEX OF PRIVACY RESOURCES 605 How to Order: Visit EPIC's secure online order form: https://bookstore.epic.org/ ======================================================================= [2] Privacy & Human Rights 2002 ======================================================================= Privacy & Human Rights 2002: An International Survey of Privacy Laws and Developments. ISBN: 1893044165. Price: $25. This annual report by EPIC and Privacy International reviews the state of privacy in over fifty countries around the world. It outlines legal protections for privacy, new challenges, and summarizes important issues and events relating to privacy and surveillance. The 2002 edition of Privacy and Human Rights examines the impact of government proposals after September 11, 2001 on privacy and civil liberties. The report documents many new anti-terrorism and security measures and identifies key trends including increased communications surveillance, weakening of data protection regimes, and increased profiling and identification of individuals. The 2002 Privacy and Human Rights report finds that laws to protect privacy in the workplace are gaining more support and that efforts to pass new data protection laws are continuing in Eastern Europe, Asia and Latin America. Important debates are also taking place around the world concerning the future of new technologies for identification and surveillance. Table of Contents: Overview...........................................................1 Defining Privacy...................................................1 Models of Privacy Protection.......................................3 The Right to Privacy...............................................5 The Evolution of Data Protection...................................8 Oversight and Privacy and Data Protection Commissioners...........13 Transborder Data Flows and Data Havens............................14 Threats to Privacy................................................20 The Response to September 11, 2001................................20 Identity Systems..................................................27 Surveillance of Communications....................................30 Audio Bugging.....................................................53 Video Surveillance................................................53 Satellite Surveillance............................................57 Electronic Commerce...............................................58 Public Records and Privacy, Public-Private Ventures...............66 Digital Rights Management.........................................68 Authentication and Identity Disclosure............................69 Spy TV: Interactive Television & "T-Commerce".....................74 Genetic Privacy...................................................76 Workplace Privacy.................................................86 Country Reports...................................................97 Country reports include the following countries: Argentine Republic, Commonwealth of Australia, Republic of Austria, Kingdom of Belgium, Federative Republic of Brazil, Republic of Bulgaria, Canada, Republic of Chile, People's Republic of China, Czech Republic, Kingdom of Denmark, Republic of Estonia, Republic of Finland, French Republic, Federal Republic of Germany, Hellenic Republic (Greece), Special Administrative Region of Hong Kong, Republic of Hungary, Republic of Iceland, Republic of India, Republic of Ireland, State of Israel, Italian Republic, Japan, Jordan, Republic of (South) Korea, Republic of Latvia, Republic of Lithuania, Grand Duchy of Luxembourg, Malaysia, United Mexican States, Kingdom of the Netherlands, New Zealand, Kingdom of Norway, Republic of Peru, Republic of the Philippenes, Republic of Poland, Republic of Portugal, Russian Federation, Republic of San Marino, Republic of Singapore, Slovak Republic, Republic of Slovenia, Republic of South Africa, Kingdom of Spain, Kingdom of Sweden, Swiss Confederation (Switzerland), Republic of China (Taiwan), Kingdom of Thailand, Republic of Turkey, Republic of Ukraine, United Kingdom of Great Britain and Northern Ireland, and the United States of America. How to Order: Visit EPIC's secure online order form: https://bookstore.epic.org/ ======================================================================= [3] Litigation Under the Federal Open Government Laws (FOIA) 2002 ======================================================================= Litigation Under the Federal Open Government Laws (FOIA) 2002. ISBN: 1893044173. Price: $40. Litigation Under the Federal Open Government Laws, published by EPIC and the James Madison Project, is the standard reference work covering all aspects of the Freedom of Information Act, the Privacy Act, the Government in the Sunshine Act, and the Federal Advisory Committee Act. Now in its 21st edition, the book is edited by Harry Hammitt of Access Reports and it draws upon the expertise of practicing attorneys who are recognized experts in the field. Appendixes include the text of the relevant acts, and sample pleadings for litigators. A comprehensive guide, essential for anyone interested in open access laws. "Deserves a place in the library of everyone who is involved in, or thinking about, litigation under the Freedom of Information Act." - Steve Aftergood, Federation of American Scientists Table of Contents: United States of America.........................................382 Chapter 1. Overview of the Freedom of Information Act..............1 Chapter 2. Administrative Process.................................19 Chapter 3. Exemption 1 -- National Security Information...........35 Chapter 4. Exemption 2 -- Internal Agency Rules...................55 Chapter 5. Exemption 3 -- Information Exempted by Other Statutes..67 Chapter 6. Exemption 4 -- Business Information....................85 Chapter 7. Reverse FOIA Litigation................................99 Chapter 8. Exemption 5 -- Inter- and Intra-Agency Memoranda......105 Chapter 9. Exemption 6 -- Personal Privacy.......................125 Chapter 10. Exemption 7 -- Law Enforcement Records...............163 Chapter 11. Exemption 8 -- Records of Financial Institutions.....193 Chapter 12. Exemption 9 -- Oil Well Data.........................197 Chapter 13. Agency...............................................199 Chapter 14. Agency Records.......................................205 Chapter 15. Segregable Portions..................................219 Chapter 16. Fees and Fee Waivers.................................223 Chapter 17. Attorney Fees and Litigation Costs...................239 Chapter 18. Records Exclusions...................................253 Chapter 19. The Electronic Freedom of Information Act (EFOIA) Amendments of 1996.............................................257 Chapter 20. Using the FOIA as an Alternative or Adjunct to Civil or Criminal Discovery..........................................267 Chapter 21. Litigation Strategy in FOIA Cases....................273 Chapter 22. The Privacy Act......................................303 Chapter 23. Government in the Sunshine Act.......................345 Chapter 24. Federal Advisory Committee Act.......................361 Appendix A. The Freedom of Information Act.......................379 Appendix B. The Privacy Act......................................417 Appendix C. The Government in the Sunshine Act...................439 Appendix D. The Federal Advisory Committee Act...................447 Appendix E. Executive Orders and Regulations.....................457 Appendix F. Sample Legal Documents...............................485 Table of Cases...................................................511 How to Order: Visit EPIC's secure online order form: https://bookstore.epic.org/ Or you can order from the EPIC Bookshelf at Powell's Books: http://www.powells.com/features/epic/epic.html ======================================================================= [4] Package Deal: All 3 books for $100, including shipping! ======================================================================= Get Privacy Law Sourcebook 2002, Privacy & Human Rights 2002, and Litigation Under the Federal Open Government Laws (FOIA) 2002 all together for $100 including shipping.* That's a savings of $14 off the regular price! Just go to our secure online order form at https://bookstore.epic.org/ and select the "Package Deal" option. You can use your credit card and pay securely online, or select payment by check or money order and fax or send us the order. *Deal is for domestic shipping only. If you require international shipping, charges will apply. ======================================================================= [5] EPIC Bookstore ======================================================================= EPIC publications and other books on privacy, open government, free expression, crypto and governance can be ordered at: EPIC Bookstore http://www.epic.org/bookstore/ "EPIC Bookshelf" at Powell's Books http://www.powells.com/features/epic/epic.html ================================ "The Privacy Law Sourcebook 2002: United States Law, International Law, and Recent Developments," Marc Rotenberg, editor (EPIC 2002). Price: $40. http://www.epic.org/bookstore/pls2002/ The "Physicians Desk Reference of the privacy world." An invaluable resource for students, attorneys, researchers and journalists who need an up-to-date collection of U.S. and International privacy law, as well as a comprehensive listing of privacy resources. ================================ "Privacy & Human Rights 2002: An International Survey of Privacy Laws and Developments" (EPIC 2002). Price: $25. http://www.epic.org/bookstore/phr2002/ This survey, by EPIC and Privacy International, reviews the state of privacy in over fifty countries around the world. The survey examines a wide range of privacy issues including data protection, telephone tapping, genetic databases, video surveillance, location tracking, ID systems and freedom of information laws. ================================ "FOIA 2002: Litigation Under the Federal Open Government Laws," Harry Hammitt, David Sobel and Mark Zaid, editors (EPIC 2002). Price: $40. http://www.epic.org/bookstore/foia2002/ This is the standard reference work covering all aspects of the Freedom of Information Act, the Privacy Act, the Government in the Sunshine Act, and the Federal Advisory Committee Act. The 21st edition fully updates the manual that lawyers, journalists and researchers have relied on for more than 25 years. For those who litigate open government cases (or need to learn how to litigate them), this is an essential reference manual. ================================ "Filters and Freedom 2.0: Free Speech Perspectives on Internet Content Controls" (EPIC 2001). Price: $20. http://www.epic.org/bookstore/filters2.0/ A collection of essays, studies, and critiques of Internet content filtering. These papers are instrumental in explaining why filtering threatens free expression. ================================ "The Consumer Law Sourcebook 2000: Electronic Commerce and the Global Economy," Sarah Andrews, editor (EPIC 2000). Price: $40. http://www.epic.org/cls/ The Consumer Law Sourcebook provides a basic set of materials for consumers, policy makers, practitioners and researchers who are interested in the emerging field of electronic commerce. The focus is on framework legislation that articulates basic rights for consumers and the basic responsibilities for businesses in the online economy. ================================ "Cryptography and Liberty 2000: An International Survey of Encryption Policy," Wayne Madsen and David Banisar, authors (EPIC 2000). Price: $20. http://www.epic.org/crypto&/ EPIC's third survey of encryption policies around the world. The results indicate that the efforts to reduce export controls on strong encryption products have largely succeeded, although several governments are gaining new powers to combat the perceived threats of encryption to law enforcement. ======================================================================= Subscription Information ======================================================================= Subscribe/unsubscribe via Web interface: http://mailman.epic.org/cgi-bin/mailman/listinfo/epic_news Subscribe/unsubscribe via email: To: epic_news-request@mailman.epic.org Subject line: "subscribe" or "unsubscribe" (no quotes) Help with subscribing/unsubscribing: To: epic_news-request@mailman.epic.org Subject: "help" (no quotes) Back issues are available at: http://www.epic.org/alert/ The EPIC Alert displays best in a fixed-width font, such as Courier. ======================================================================= Privacy Policy ======================================================================= The EPIC Alert mailing list is used only to mail the EPIC Alert and to send notices about EPIC activities. We do not sell, rent or share our mailing list. We also intend to challenge any subpoena or other legal process seeking access to our mailing list. We do not enhance (link to other databases) our mailing list or require your actual name. In the event you wish to subscribe or unsubscribe your email address from this list, please follow the above instructions under "subscription information". Please contact info@epic.org if you would like to change your subscription email address, if you are experiencing subscription/unsubscription problems, or if you have any other questions. ======================================================================= About EPIC ======================================================================= The Electronic Privacy Information Center is a public interest research center in Washington, DC. It was established in 1994 to focus public attention on emerging privacy issues such as the Clipper Chip, the Digital Telephony proposal, national ID cards, medical record privacy, and the collection and sale of personal information. EPIC publishes the EPIC Alert, pursues Freedom of Information Act litigation, and conducts policy research. For more information, e-mail info@epic.org, http://www.epic.org or write EPIC, 1718 Connecticut Ave., NW, Suite 200, Washington, DC 20009. +1 202 483 1140 (tel), +1 202 483 1248 (fax). If you'd like to support the work of the Electronic Privacy Information Center, contributions are welcome and fully tax-deductible. Checks should be made out to "EPIC" and sent to 1718 Connecticut Ave., NW, Suite 200, Washington, DC 20009. Or you can contribute online at: http://www.epic.org/donate/ ======================================================================= Drink coffee, support civil liberties, get a tax deduction, and learn Latin at the same time! Receive a free epic.org "sed quis custodiet ipsos custodes?" coffee mug with donation of $75 or more. ======================================================================= Your contributions will help support Freedom of Information Act and First Amendment litigation, strong and effective advocacy for the right of privacy and efforts to oppose government regulation of encryption and expanding wiretapping powers. Thank you for your support. ---------------------- END EPIC Alert 9.21 ----------------------- .