Advocacy Group Says Canadian ISPs Should Be Required To Hand Over Subscriber Data Without A Warrant
from the unintended-consequences,-anyone? dept
Rob Hyndman points us to the news that a Canadian "victims advocacy group" called Victims of Crime has put out a report on how the government should deal with "internet-facilitated child sexual abuse." You should recognize that the recommendations are ridiculous by the way they describe the problem: "internet-facilitated child sexual abuse." Notice that they're including the internet as a part of the problem, rather than just a tool that's being used. The report starts off by making a bad assumption: that the internet is responsible for an increase in child sexual abuse by stating: "internet-facilitated child sexual abuse is growing at an alarming rate. Between 1998 and 2003, the number of charges for production or distribution of child pornography increased by 900 percent...." Now, that could mean that there has been an increase... or it could mean that more resources have been put towards lawsuits or (perhaps) that the internet has enabled law enforcement to collect more evidence to bring charges. In other words, you could easily interpret that evidence to mean that the internet has been an amazing help in bringing justice to those involved in such evil acts.But where the report gets really troubling is the suggestions on what the government should do:
- introducing legislation to make it mandatory for Internet service providers to give law enforcement basic customer name and address information upon request;
- requiring internet service providers to keep data and internet surfing records for longer periods to ensure that evidence is not destroyed; and
- making it a criminal offence to refuse to give law enforcement a password or encryption information during an investigation.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: canada, isps, law enforcement, privacy, warrants
Reader Comments
Subscribe: RSS
View by: Time | Thread
...Facilitated...
They should put a GPS in every vehicle, and have the reports immediately available to the police, plus, they should have every video ever recorded with a camera backed up in the camera for police use later. And don't get me started about "vision-facilitated child sexual abuse" because they'd need to start poking out eyes (for the children, of course), too!!
/sarcasm
[ link to this | view in thread ]
[ link to this | view in thread ]
[ link to this | view in thread ]
So now, let's rip apart your concerns.
"introducing legislation to make it mandatory for Internet service providers to give law enforcement basic customer name and address information upon request; "
Is there any reason an ISP shouldn't do this? The phone company will do it on normal basis. Heck, I worked for a car rental agency, and we would gladly provide the police information on who the renter was on a given date. In fact, it was disclosed in the T&C of the rental contract that this could happen. Why should this be any different?
"requiring internet service providers to keep data and internet surfing records for longer periods to ensure that evidence is not destroyed; and"
This one is probably what has you the most concerned. ISPs only tend to monitor your logon and logoff times (for purposes of billing, etc), bandwidth usage, and such. I think that all this is attempting to do is to make sure that they retain these records long enough so that evidence isn't lost (after all, if you want to know who was on a given IP address last week, it is sort of hard if the records weren't retained)
"making it a criminal offence to refuse to give law enforcement a password or encryption information during an investigation. "
See the first point - why wouldn't you do this? Obviously the refusal to provide a password or encryption code would be enough to raise probably cause, they are just asking to make this ALSO an offence, not just an obstruction.
You also didn't quote the good stuff:
" * increase the capacity of the RCMP's National Child Exploitation Coordination Centre to identify and rescue the child victims in the images;
* support research into the impact of internet-facilitated child sexual abuse on children; and
* more effectively help victimized children through special child-friendly multi-disciplinary child advocacy centres. "
But hey, knock yourself out. I guess only if the internet is entirely absolutely and utterly without records can your "free" universe truly work out.
[ link to this | view in thread ]
[ link to this | view in thread ]
I suspect that number isn't far off, but it's only meaningful when compared with legal pornography. The internet has been a boon to pornography in general.
And even then, you still have to account for the increased availability of evidence to prosecutors as well.
[ link to this | view in thread ]
[ link to this | view in thread ]
Re:
Well, for one, warrants are pretty standard and not difficult to obtain. This would make it so that ISPs must hand over information *without* a warrant. Seriously, it's *not* hard to go get a judge to sign up a warrant for something, and doing so ensures that there's at least a modicum of sensibility and transparency in the request.
For two, your internet records can be considerably more damning than the fact that you rented a car (and presumably mileage information, etc.). Even if you're completely innocent of a crime, your personal, private browsing can be used against you in dishonest ways. It's astonishingly easy to make even mundane activities sound threatening if you don't have a conscience.
Indeed. It's attempting to force ISPs to keep large quantities of data in storage for extended periods of time. This can be a considerable expense, and carries with it a *gigantic* risk of data breaches exposing confidential information to non-law enforcement.
In addition, time and time again we've seen that (1) increasing the *amount* of data doesn't always increase the *usefulness* of the data (too much, and it actually hampers legitimate investigation), and (2) given large databases of personal information, abuse almost inevitably occurs. Mike gives examples of what can happen, and all of these are well-attested in actual events.
There is this thing. It is called the Fifth Amendment. Obviously that has no effect in Canada, but as we Americans obviously value it, we should decry laws in other countries that would violate it, were it in effect there.
Making the refusal to provide a password a crime means that exercising one's American Constitutional rights is a crime. It also plays into the whole "just get a damned warrant" issue. If *any* demand by law enforcement for passwords must be obeyed under threat of punishment, then these demands *will* be abused. It is a fact of life.
Also, seriously dude, quit hiding behind anonymity. I display a false name, but my actual personal details can be readily divined with a few minutes on a search engine. More importantly, though, I have a consistent identity across this site that one can learn about. As it stands, you're indistinguishable from every other AC. To use the rhetoric that people who make the arguments you do use, if you're not doing anything wrong, then what have you got to hide?
[ link to this | view in thread ]
Re: Re:
[ link to this | view in thread ]
Re: Re:
"Well, for one, warrants are pretty standard and not difficult to obtain. This would make it so that ISPs must hand over information *without* a warrant."
No, it means that ISPs would be required to hand over this information to law enforcement, in the same manner that the phone company will tell police who is at a phone number (unlisted or not) without a warrant.
"It's attempting to force ISPs to keep large quantities of data in storage for extended periods of time. This can be a considerable expense, and carries with it a *gigantic* risk of data breaches exposing confidential information to non-law enforcement."
Umm, for purposes of billing and such, the ISPs have to keep data long enough to prove a customer's bill. This isn't recording your every keystroke and every page visited. Technically speaking, the ISP should have to retain this information at least 6 years to match record retention (it is backup to customer billing).
"There is this thing. It is called the Fifth Amendment."
You guys also have thing called a second amendment that allows any yahoo with half a brain and an inchy trigger finger to buy an arsenal of weapons. Your constitution isn't really that impressive at times.
"Making the refusal to provide a password a crime means that exercising one's American Constitutional rights is a crime. It also plays into the whole "just get a damned warrant" issue"
For your consideration. In the US, you are driving your car. You are stopped by a police officer for running a red light. When he comes to get your license and reg to check things out, he asks you in passing if it is okay that he searches your car. You get huffy and tell him to get a warrant. By being hinkey about it, you may have just created the probable cause.
You need to consider to that if an officer is looking at an encoded file on your PC, I would have to say that they likely already got a warrant to look at your system.
Put that in your 5th Amendment and smoke it.
As for my name, who cares? Discuss ideas, not people.
[ link to this | view in thread ]
Funny.
We give the our right of privacy to the courts to determine probable cause.
Exclusionary rule
One way courts enforce the Fourth Amendment is with the exclusionary rule. The rule provides that evidence obtained through a violation of the Fourth Amendment is generally not admissible by the prosecution during the defendant's criminal trial.
Though this seems like a expansion of government into your lives since:
The Leon case applies only to search warrants. It remains unclear whether the "good faith" exception applies to warrantless seizures in other contexts. However, the Supreme Court held in Arizona v. Evans, 514 U.S. 1 (1995) and Herring v. United States (2009), that the exclusionary rule does not apply to evidence found due to negligence regarding a government database, as long as the arresting police officer relied on that database in "good faith".
The Leon case applies only to search warrants. It remains unclear whether the "good faith" exception applies to warrantless seizures in other contexts. However, the Supreme Court held in Arizona v. Evans, 514 U.S. 1 (1995) and Herring v. United States (2009), that the exclusionary rule does not apply to evidence found due to negligence regarding a government database, as long as the arresting police officer relied on that database in "good faith".
Though all this is determined by a jury of your peers apparently. And if your privacy is not important to you go find a socialist state.
The landmark case Katz v. United States 389 U.S. 347 (1967) nonetheless established a two-part test for what constitutes a search within the meaning of the Fourth Amendment. The relevant criteria are "first that a person have exhibited an actual (subjective) expectation of privacy and, second, that the expectation be one that society is prepared to recognize as reasonable." Under this “new” analysis of the Fourth Amendment, privacy expectations deemed unreasonable by society cannot be validated by any steps taken by the defendant to shield the area from view.
Though my ISP is defiantly not my employer if you wanted to use United States v. Ziegler argument.
Your looking to piss people off that your "nothing to hide" mentality.
Personal story: When DCFS or CPS comes knocking on your door every other month, takes pictures of your house then talk to me about feeling violated.
Question for since our gov is looking for complete transparency between your ISP & Gov Database where do we draw the line on socialism?
[ link to this | view in thread ]
Re: Funny.
otherwise, learn Canadian law and try again!
[ link to this | view in thread ]
As for AC's "Discuss ideas, not people" comment, it's a bit disingenuous to tell us we shouldn't worry about a loss of privacy while hiding behind the AC moniker. Even tho you're huff'n & puff'n about the US Constitution, you belong down here. There's a big constituency here that you'd fit right into that would love to dump any privacy rights that admendments, legislation & court rulings have provided over time. You sound like a real Scalia man. It won't be socialism (even the mild Canadian kind) that that kills privacy; conservatives over the past 30 years have been working real hard on doing it all by themselves.
[ link to this | view in thread ]
[ link to this | view in thread ]
[ link to this | view in thread ]
[ link to this | view in thread ]
Re:
As noted in the Geist article you linked, most of the major ISPs in Canada already have disclosure notices in their user agreements. It is also true that few Canadians have much sympathy for child molesters trying to hide behind privacy blinds. We aren't quite so comfortable with people getting off on technicalities.
As for the rest, well, whatever. The ideas are important, the names mean nothing. It isn't a question of "hiding", I just don't give a crap if you know who I am or not, it adds nothing to the discussion. If that is the best argument you have against my ideas, then I have to say that you must pretty much agree with me otherwise.
[ link to this | view in thread ]
RE:
[ link to this | view in thread ]
Re: Re: Re:
[ link to this | view in thread ]
Imagine it like a car designed by Ralph Nader. Ugly!
[ link to this | view in thread ]
Re: Searches
> give law enforcement a password or encryption
> information during an investigation. "
> Why wouldn't you do this?
Oh, I don't know... maybe because I'm innocent until proven guilty and don't necessarily want strangers poking around in my private life?
When the cops come knocking at my door, I don't have to let them search my house just because they ask. Why should I have to give them the keys to my laptop merely because they ask?
And as a practical matter, they can't put you in prison for forgetting your password...
[ link to this | view in thread ]
Re: Re: Re:
> over this information to law enforcement, in
> the same manner that the phone company will
> tell police who is at a phone number
> (unlisted or not) without a warrant.
Well, I don't know how it works in Canada, but I'm a law enforcement officer in the USA and if I want subscription information from a phone company, I *do* have to get at least a subpoena, if not a warrant.
> Your constitution isn't really that impressive at times.
More impressive than a country which tells its citizens they have to rely on the government for protection when they're in fear for their lives.
> You get huffy and tell him to get a warrant. By
> being hinkey about it, you may have just
> created the probable cause.
That's absolutely false. Merely asserting your 4th Amendment rights has *never* been held to give rise to probable cause sufficient to sustain a warrant. The Supreme Court decided that long ago and has only strengthened that protection over the years. The warrant requirement is meaningless if refusing a search gives rise to probable cause to get a warrant.
Likewise, refusal to provide a computer password would never pass constitutional muster as the basis for a probable cause warrant. Any cop who tried to make that case would be laughed out of court and if, by some random chance, the cop convinced the judge to issue a warrant on such patent false reasoning, the warrant and any fruits of the subsequent search based on the warrant would be thrown out on appeal.
> Put that in your 5th Amendment and smoke it.
Search and seizure is actually covered by the 4th Amendment. Your condescending attitude might be a little more effective if you bothered to get stuff like that right.
As for passwords, the federal courts in America have held that a person can't be compelled to provide them to law enforcement, even with a warrant, because doing so violates a person's right to be free from self-incrimination.
So put that up your maple leaf and smoke it.
[ link to this | view in thread ]
Re: Funny.
Question for since our gov is looking for complete transparency between your ISP & Gov Database where do we draw the line on socialism?
What does socialism have to do with privacy rights?
[ link to this | view in thread ]
Re: Re:
Right. I don't know Canadian law, so I can't speak on its merit, but I've never actually heard anyone refer to the US Constitution as a poorly writtern document. It's malleability and the ease with which it remains relevant as we move forward has been revered by even detractors of our country. In other words, you're an absolute retard.
"It is also true that few Canadians have much sympathy for child molesters trying to hide behind privacy blinds. We aren't quite so comfortable with people getting off on technicalities."
First, it sounds like you think we have sympathy for child molestors, which would be more idiocy. And BTW, we aren't comfortably with people getting off on technicalities either, we simply would rather let a few guilty go free rather than fall under the thumb of a rampant government that's out of control. If you know anything about the formation of America you already know where that distrust of government comes from.
[ link to this | view in thread ]
An excuse for police state
Welcome to 1984.
[ link to this | view in thread ]