Coalition pressures Congress on surveillance reform as UN establishes Special Rapporteur on privacy
Pointing to “global norms of free expression and privacy,” a coalition of major internet companies this week launched a campaign to pressure the U.S. Congress to reform practices and laws regulating government surveillance of individuals and access to their personal information.
The Global Government Surveillance Reform coalition, which consists of AOL, Apple, Google, Microsoft, Yahoo, Twitter, Facebook and other companies, trade associations and civil society groups, issued the following letter to the House and Senate leadership on March 25:
We the undersigned represent a wide range of privacy and human rights advocates, technology companies, and trade associations that hold an equally wide range of positions on the issue of surveillance reform. Many of us have differing views on exactly what reforms must be included in any bill reauthorizing USA PATRIOT Act Section 215, which currently serves as the legal basis for the National Security Agency’s bulk collection of telephone metadata and is set to expire on June 1, 2015. That said, our broad, diverse, and bipartisan coalition believes that the status quo is untenable and that it is urgent that Congress move forward with reform.
Together, we agree that the following elements are essential to any legislative or Administration effort to reform our nation’s surveillance laws:
There must be a clear, strong, and effective end to bulk collection practices under the USA PATRIOT Act, including under the Section 215 records authority and the Section 214 authority regarding pen registers and trap & trace devices. Any collection that does occur under those authorities should have appropriate safeguards in place to protect privacy and users’ rights.
The bill must contain transparency and accountability mechanisms for both government and company reporting, as well as an appropriate declassification regime for Foreign Intelligence Surveillance Court decisions.
We believe addressing the above must be a part of any reform package, though there are other reforms that our groups and companies would welcome, and in some cases, believe are essential to any legislation. We also urge Congress to avoid adding new mandates that are controversial and could derail reform efforts.
It has been nearly two years since the first news stories revealed the scope of the United States’ surveillance and bulk collection activities. Now is the time to take on meaningful legislative reforms to the nation’s surveillance programs that maintain national security while preserving privacy, transparency, and accountability. We strongly encourage both the White House and Members of Congress to support the above reforms and oppose any efforts to enact any legislation that does not address them.
The original signatories to the letter consisted of 47 internet firms and civil society groups, but the list of signers is growing by the day. (You can add your name here.)
The Global Government Surveillance Reform coalition also issued five principles to guide reform of government surveillance, “consistent with established global norms of free expression and privacy and with the goals of ensuring that government law enforcement and intelligence efforts are rule-bound, narrowly tailored, transparent, and subject to oversight.”
These principles are the following:
1. Limiting Governments’ Authority to Collect Users’ Information
Governments should codify sensible limitations on their ability to compel service providers to disclose user data that balance their need for the data in limited circumstances, users’ reasonable privacy interests, and the impact on trust in the Internet. In addition, governments should limit surveillance to specific, known users for lawful purposes, and should not undertake bulk data collection of Internet communications.
2. Oversight and Accountability
Intelligence agencies seeking to collect or compel the production of information should do so under a clear legal framework in which executive powers are subject to strong checks and balances. Reviewing courts should be independent and include an adversarial process, and governments should allow important rulings of law to be made public in a timely manner so that the courts are accountable to an informed citizenry.
3. Transparency About Government Demands
Transparency is essential to a debate over governments’ surveillance powers and the scope of programs that are administered under those powers. Governments should allow companies to publish the number and nature of government demands for user information. In addition, governments should also promptly disclose this data publicly.
4. Respecting the Free Flow of Information
The ability of data to flow or be accessed across borders is essential to a robust 21st century global economy. Governments should permit the transfer of data and should not inhibit access by companies or individuals to lawfully available information that is stored outside of the country. Governments should not require service providers to locate infrastructure within a country’s borders or operate locally.
5. Avoiding Conflicts Among Governments
In order to avoid conflicting laws, there should be a robust, principled, and transparent framework to govern lawful requests for data across jurisdictions, such as improved mutual legal assistance treaty — or “MLAT” — processes. Where the laws of one jurisdiction conflict with the laws of another, it is incumbent upon governments to work together to resolve the conflict.
Implementing these principles would not only bring U.S. surveillance practices in line with the U.S. Constitution, but would also go a long way in ensuring that U.S. policy is complying with international norms.
A year ago, following the U.S.’s periodic review for its compliance with the International Covenant on Civil and Political Rights, the United Nations issued a scathing report detailing a host of U.S. violations, including on privacy rights. The UN Human Rights Committee highlighted the ongoing U.S. lack of compliance with privacy requirements set forth in Article 17 of the ICCPR, particularly to respect the right to privacy regardless of the nationality or location of individuals being monitored.
To address these violations, the UN issued the following recommendations to the U.S. government:
(a) Take all necessary measures to ensure that its surveillance activities, both within and outside the United States, conform to its obligations under the Covenant, including article 17; in particular, measures should be taken to ensure that any interference with the right to privacy complies with the principles of legality, proportionality and necessity, regardless of the nationality or location of the individuals whose communications are under direct surveillance;
(b) Ensure that any interference with the right to privacy, family, home or correspondence is authorized by laws that: (i) are publicly accessible; (ii) contain provisions that ensure that collection of, access to and use of communications data are tailored to specific legitimate aims; (iii) are sufficiently precise and specify in detail the precise circumstances in which any such interference may be permitted, the procedures for authorization, the categories of persons who may be placed under surveillance, the limit on the duration of surveillance; procedures for the use and storage of data collected; and (iv) provide for effective safeguards against abuse;
(c) Reform the current oversight system of surveillance activities to ensure its effectiveness, including by providing for judicial involvement in the authorization or monitoring of surveillance measures, and considering the establishment of strong and independent oversight mandates with a view to preventing abuses;
(d) Refrain from imposing mandatory retention of data by third parties;
(e) Ensure that affected persons have access to effective remedies in cases of abuse.
The Electronic Frontier Foundation’s Katitza Rodriguez urged the United States to conform to the UN’s recommendations. “It’s imperative the United States comply with its human rights treaty obligations, specifically Article 17 of the ICCPR, which protect the right of privacy for everyone in the same manner, within or outside US borders, regardless of nationality or place of residence,” Rodriguez said.
In an effort to ensure better compliance from the United States and other serial violators of individual privacy rights, the United Nations Human Rights Council decided this week to establish a new position of Special Rapporteur on the right to privacy, whose tasks will include gathering relevant information, including on international and national frameworks, national practices and experiences.
As Privacy International explains,
The Special Rapporteur will be the authoritative voice and intellectual leader at the global level on the right to privacy around the world. The resolution gives the individual a broad mandate to promote the respect and protection of the right to privacy in all circumstances, wherever or however it is exercised. Amongst other things, the mandate holder will monitor states’ and companies’ compliance with the right to privacy, investigating alleged violations, and making recommendations to ensure that this fundamental right is respected and protected.
Tomaso Falchetta, Legal Officer for Privacy International, said,
The Council today has confirmed what we have said for some time: The right to privacy is an invaluable human right, essential to human autonomy and dignity, and deserves explicit attention to ensure that it is respected and protected around the world. Now, perhaps more than ever, we need a dedicated individual to hold those accountable who wish to violate privacy, whether it is through surveillance, indiscriminate data collection, or other techniques that infringe on this important right. As Privacy International celebrates 25 years of advocating for the right to privacy, we can confidently say that today’s resolution is one of the most important events to protect privacy.
The individual chosen to take up the role of Special Rapporteur is expected to be appointed in June 2015.