Dutch Ruppersberger Proposes Replacing Bulk Metadata Collections With Targeted Pen Register Searches
from the time-for-the-NSA-to-get-out-of-the-bulk-collection-business dept
One of the ranking members of the House Intelligence Committee has just handed down a rather sensible proposal that would take the "bulk" out of "bulk collection" and allow the records to remain at telcos rather than being stored by the NSA or another third party. (Hint: it's not Mike Rogers.)
The suggestion runs as follows:
The concept, which Rep. C.A. Dutch Ruppersberger (D-Md.) said he is still refining, would require court review of numbers that the phone companies are asked to search against. But it would not call for a requirement that companies hold data longer than they do now…Ruppersberger's proposal (which he says has sprung out of "serious discussions" with Rep. Rogers) retains the RAS (Reasonable Articulable Suspicion) stipulation that currently governs the NSA's searches of the stored metadata, but it does loosen other restraints -- namely, that the searches be constrained to targets of "authorized investigations" and "agents of foreign powers."
Details would have to be worked out, but, he said, the idea would be to send suspect numbers, which a court has deemed to meet the standard, to all phone companies. They would search daily against this list and send back to the NSA any numbers that hit up against the list.
If this sounds all too familiar, there's a reason for that.
Some analysts say that what Ruppersberger appears to be proposing looks very similar to existing authority under the “pen register” provision of the Foreign Intelligence Surveillance Act. That provision enables the government to order a phone company to send back in real-time “dialing” information, such as phone numbers, if the government can show the information sought would be “relevant to an ongoing investigation to protect against international terrorism” or espionage.This pen register concept was thoroughly bastardized by FISC judge Colleen Kollar-Kotelly in 2004 to give the agency permission to use an open-ended (but targeted) surveillance technique as a way to grab every phone record from telcos in three-month chunks (granted in perpetuity by the FISA court).
But the pen register statute hasn't been written off the books. It still exists and is, in fact, still used occasionally by the NSA, which prompts the following question: why bother introducing new legislation and new guidelines? Why not just make the NSA adhere to the existing statute (albeit one not so thoroughly distended by a previous FISA court decision)?
“So the natural way to solve this problem is not by creating a new authority, but by taking the existing authority designed for exactly this purpose, and narrowing it so it can’t be again used for bulk collection,” said Julian Sanchez, a fellow at the CATO Institute and surveillance expert.The problem with new laws is that it adds to the number of exploitable tools the NSA can use. As noted above, this eliminates some of the limits governing the bulk records collection. While arguably better than the unlimited metadata harvesting the NSA has done for most of the last decade, the public would be better served by simply requiring the agency to follow existing pen register statutes, provided, of course, the FISA court restores the definition back to its original form.
It is good to see another legislator pushing the NSA back towards targeted surveillance, something it increasingly abandoned in the wake of the PATRIOT Act, especially one that has the misfortune of working closely with Rep. Mike Rogers.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: bulk data collection, dutch ruppersberger, nsa, pen register, section 215, surveillance
Reader Comments
Subscribe: RSS
View by: Time | Thread
Techdirt site becoming unusable
A script on this page may be busy, or it may have stopped responding. You can stop the script now, or you can continue to see if the script will complete.
The variations in problem js code being flagged are as follows:
Script: http://ws.sharethis.com/button/buttons.js:1
Script: http://a.postrelease.com/serve/load.js?async=true:1
I suggest that this be investigated, it may be affecting a number of us from the antipodes and nether regions of the third rock.
[ link to this | view in chronology ]
Re: Techdirt site becoming unusable
Are you using Firefox with a load of tuner extensions that may be getting in each others way? Maybe you are using Chrome with some god awful plugin waiting on a status that will never happen? i do not know therefore the folks who can fix things need that kind of info from you.
I have never had that problem using Safari and Chrome. Turn off "stuff" till the browser is factory clean and see what happens.
Trying to help :-)
[ link to this | view in chronology ]
Re: Re: Techdirt site becoming unusable
No updates to my extensions or plugins, no user scripts configured. The problem seems to be with some of the offsite scripts being run, the same two ones. It may be related to the fact of not being in the northern hemi.
Thanks for the suggestions. I have actually avoided Chrome after one awful experience with it on another machine.
One can only hope that the problem is fixed soon.
[ link to this | view in chronology ]
Re: Re: Re: Techdirt site becoming unusable
[ link to this | view in chronology ]
Re: Re: Techdirt site becoming unusable
My system should be up-to-date, since there were updates just a day or two ago.
I have noticed that once in a while, Techdirt will implement some kind of change (often a change to that pop-up thing I don't like, which is currently missing -- sometime the AdBlocker catches it, sometimes it doesn't, I think), & similar loading issues follow.
[ link to this | view in chronology ]
Re: Techdirt site becoming unusable
ShareThis and PostRelase aren't allowed to run for me (on Firefox ) :)
[ link to this | view in chronology ]
Re: Re: Techdirt site becoming unusable
[ link to this | view in chronology ]
Dutch probably emailed the district.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
Maybe you could call this a small step forward but a pen-register isn't a 'search against' (the Rep's actual words), it's a list of who called/was called by a specific number. It's a, wait for it, register (or log) of activity. Not a search against EVERYTHING.
[ link to this | view in chronology ]
Re: Re:
I'll wait for the popup coloring book version.
[ link to this | view in chronology ]
Also techdirt site has been freezing up firefox (no extensions) for me over the last 2 days as well on 2 different systems.
[ link to this | view in chronology ]
That's possible?
Congresspeople can manage sensible proposals? Who knew?
[ link to this | view in chronology ]
Re: That's possible?
[ link to this | view in chronology ]
A rather important question:
Which court is the question. If it's the FISA 'court', then they could, almost literally, have a request for 'Every single number in the US. Because national security. And terrorism.' and the only thing that would slow the FISA 'court' down would be finding the 'Approved' stamp.
[ link to this | view in chronology ]
Re: A rather important question:
[ link to this | view in chronology ]
This is still an issue. The amount of time that data must be stored has to be very carefully discussed.
[ link to this | view in chronology ]
erm...
What's next? Rijks Waterstaat?
[ link to this | view in chronology ]