Once Again, FBI Caught Breaking The Law In Gathering Phone Call Info; But Real Issue Is Why Telcos Let Them
from the surprise-surprise dept
A few years back, we found out that the FBI regularly violated the Patriot Act, issuing "National Security Letters" to access information that they had no right to access. So it should come as no surprise that during that same period, the FBI was also regularly violating the law to get phone call records without following the proper procedures, even beyond the problem with the NSLs. In fact, it appears the FBI may have violated the law in about half of all of these cases. Basically, it sounds like the FBI just went to phone companies, said the magic word ("terrorism!!") and the phone companies just handed over records -- even without using NSLs, but instead using an "exigent circumstances letter," which could be used even more easily than an NSL, but which required an NSL to follow it up eventually. The FBI is now basically admitting to screwing up and that using these "ECLs" without followup NSLs almost certainly violated the Electronic Communications Privacy Act. The FBI's excuse? They're claiming that the process was "good-hearted but not well-thought-out." Doesn't that make you feel better?The story heads into Keystone Kops territory, as some in the FBI pushed for actually following up the ECLs with real NSLs, but the FBI was pretty slow. Eventually, someone signed a "blanket NSL" supposedly to cover all of the previous ECLs that never had a followup NSL -- except the guy who signed the blanket NSL later claimed that he couldn't recall ever signing anything, and insisted that NSLs should be for specific cases only. Oops.
Of course, lost in all of the attention over the FBI's process is the rather serious unanswered question of why the telcos didn't seem to push back when handed a bogus demand to hand over records that did not match the official process and violated the law. Shouldn't the telcos have some responsibility for actually making sure that a random FBI agent yelling "terrorism" has some sort of official basis to get information out of the them?
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: ecpa, exigent circumstances letters, fbi, national security letters, phone records, privacy, surveillance, telcos
Companies: fbi
Reader Comments
Subscribe: RSS
View by: Time | Thread
in a nut shell
I think this would apply to most things that happened during the Bush administration (if your feeling generous).
[ link to this | view in chronology ]
Re: in a nut shell
[ link to this | view in chronology ]
Re: in a nut shell
[ link to this | view in chronology ]
Federal beureu of Incongruency
new laws gt made that hastle them even worse
its like the govt being a bully and using and trampling on your rights to do it.
[ link to this | view in chronology ]
If you were the manager on duty when the FBI showed up yelling "terrorism" and looking at you hard...would you have told them no? I doubt it.
Maybe it was hinted that if they said no, that they would be interfering in a terror investigation.
We have become too afraid to object for fear of getting in trouble with the ppl who are charged with keeping us safe. And those same people know it. Doesn't that make you feel safe?
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
You watch to much TV.
[ link to this | view in chronology ]
Re: Re: Re: Re:
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Love it...
[ link to this | view in chronology ]
Two words...
[ link to this | view in chronology ]
Re: Two words...
Counting FAIL!
[ link to this | view in chronology ]
Fairly obvious
Is that really an "unanswered question"? Really?
Let's role play: you're a major telco. Billions of dollars in revenue, hundreds of millions to billions in profit. Huge government-imposed barriers to entry. Huge switching costs and high prices, both of which are starting to come under government scrutiny. And practically every one of your users already hates you for poor service and high costs.
Now the government comes along. You're faced with a choice: stand up for your users, who already hate you and probably won't notice anyway, and piss off the government. Or go along with the government and make a tiny percentage of your users slightly more angry.
It's an unanswered question?
[ link to this | view in chronology ]
Re: Fairly obvious
You're right. Of course the reason they cooperated is obvious. But this just underscores why they shouldn't have been given immunity. Just because someone in a black suit comes to you and waves a shiny badge in front of your face, it doesn't mean that you should be off the hook. If you're afraid that not cooperating with the one group of the government is going to get you in trouble, then we should have a system in place where you'd be even more afraid you'd get in trouble with another group of the government, namely the judicial branch.
[ link to this | view in chronology ]
Re: Fairly obvious
Naccio complained, but only AFTER his indictment. He was a former AT&T exec who was well trained in their code of conduct. At every one of these companies, there was a human responsible for ensuring that legal processes were followed. Why wouldn't they refer these dubious letters to the legal department for an opinion. There HAS to be a paper trail here.
The best "whistleblower" protection there is, is a free (non-corporate) press, and an informed and active public.
"The price of freedom is eternal vigilance"
[ link to this | view in chronology ]
Old but true...
If there's the slightest chance it will be abused, it WILL be abused. Even if there isn't a chance it will be abused, it will most likely be abused.
This is just ONE aspect of the new powers that are being abused. The problem is, there is very little independant oversight in a timely manner.
What good does this information do us, other than showing us that there is a problem? Nothing. The damage is done.
Without timely review and oversight, this sort of power will ALWAYS be abused.
[ link to this | view in chronology ]
The missing WHY.....
Did the Telco's make a buck selling the government the information?
[ link to this | view in chronology ]
Re: The missing WHY.....
[ link to this | view in chronology ]
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re:
[ link to this | view in chronology ]
Re: Re: Re: Re:
[ link to this | view in chronology ]
Why the telcos didn't seem to push back.
[ link to this | view in chronology ]
Re: Why the telcos didn't seem to push back.
[ link to this | view in chronology ]
good reason..
[ link to this | view in chronology ]
They did follow procedure. The FBI agent had an "exigent circumstances letter," which was treated as a legal authorization equivalent to a subpoena. Whether they were called that or not, the equivalent mechanism has been in place for years. A telco security manager (pre-9/11) described its use to me as, "When a kid's been kidnapped and the FBI needs a wiretap to find him, they'll have an emergency authorization, and we always comply with those."
Sure, the telco could "push back when handed a bogus demand to hand over records that did not match the official process and violated the law." But that wasn't what they got - they got an official demand that matched the official process and was in compliance with the law. The FBI may have been misusing the process, may have ignored the follow-on part of the process, and the law may have been unconstitutional -- but telco security compliance managers aren't constitutional law professors.
[ link to this | view in chronology ]
I definitely feel safer
When a 50-story office tower is evacuated because someone spots a grain of talcum powder on an envelope, I feel safer.
When the Border Patrol operates roadblocks to stop the peace-loving peasants and workers of the United States and demand their identity papers in one of their "constitution-free zones," I feel safer.
The day someone finally decides that the Bill of Rights makes it too difficult to catch terrorists and just suspends it altogether, I will feel much safer.
Just ask the people in North Korea how safe they feel from the possibility of a terrorist attack. Those must be the safest people in the world
[ link to this | view in chronology ]