ICE Loses Access To Sensitive Utility Customer Records Following Pressure By Senator Ron Wyden

from the and-now-we'll-wait-for-the-law-enforcement-pushback dept

Another one of ICE's (Immigration and Customs Enforcement) data spigots has been shut off. Don't cry too many tears for poor old ICE. It still has plenty of options. It's still hoovering up location data from app developers who either don't know or don't care that this data is buyable through data brokers. It also still has plenty of privileges, thanks to laws and judicial decisions that say most constitutional rights are null and void within 100 miles of our nation's ports of entry (borders, coasts, and -- making this far more concerning -- any domestic airport offering international flights).

Plenty of data can still be had (and plenty of brokers willing to sell it), but ICE has just lost access to one source of data it uses to track down immigrants: utility bill information gathered, packaged, and sold to government agencies by third parties like Equifax and Reuters.

Equifax gathers this information ostensibly to assess the creditworthiness of United States residents. (It also leaks this information on occasion.) Thomson Reuters uses the same information (called "utility header data") in its CLEAR database, which contains "billions of data points" and "leverages cutting-edge public records technology." Its potent combination of bulk data and profit-seeking is sold to whoever wants access, which includes US law enforcement agencies.

ICE no longer has access to this data through CLEAR. At least the "utility header data" part of it. So have the nation's law enforcement agencies. Following pressure from Senator Ron Wyden, utility companies will no longer allow this data to be resold by Equifax to private entities like Reuters. (Possible paywall ahead. Alternate link.)

A nationwide group of utility companies that provided sensitive data from millions of Americans’ cable, phone and power bills to U.S. Immigration and Customs Enforcement and other government agencies has agreed to end the practice in response to concerns the information was being misused to track the general public.

Wyden's pressure on the National Consumer Telecom & Utilities Exchange (NCTUE) prompted change. The NCTUE told Equifax to stop selling this data. This means the data no longer flows to Reuters' CLEAR database, which means agencies like ICE no longer have access to it.

But Reuters isn't the only player in the data market. There are plenty of third parties purchasing data and selling it to government agencies and other third parties. That's why Wyden is now demanding the Consumer Finance Protection Board start doing its job and start regulating the sale of Americans' data.

Wyden, a longtime critic of government surveillance, called on the CFPB to further rein in a data-broker industry that he said had spun “out of control” due in part to “vague and undefined regulations.” He urged the agency to aggressively investigate how data gathered for commercial purposes was ending up in the hands of law enforcement without court approval or oversight.

“Selling personal information that people provide to sign up for power, water and other necessities of life, and giving them no choice in the matter, is an egregious abuse of consumers’ privacy,” Wyden wrote. “The personal privacy of hundreds of millions of people should not depend upon the goodwill of corporations worried about negative headlines.”

Currently, it's third parties on top of third parties, buying data from wherever it can be purchased and repackaging it for sale to others. This has led to consumers being misled about everything, from the data being collected to how the data is being used. Boilerplate about sales or licensing to third parties doesn't make it clear information collected to open and maintain necessities of life (like utility services) will ultimately be part of "billions of data points" accessible without a warrant by law enforcement.

As of right now, the data Wyden is concerned about is bought and sold in a gray market -- one not directly affected by regulation. That's what Wyden hopes to change.

The sale of credit payment histories and related data is closely regulated under federal law. But government agencies can access credit header data because the regulations do not clearly outline how the revealing information can be used. Wyden urged CFPB to clarify the law and investigate how the data is sold.

Government agencies and data brokers have long preyed on the disconnect between public perception and the far uglier reality of data harvesting. Customers and consumers understand utility companies need to collect information to provide service and collect payment. They may also make the small logical leap that payment histories will be forwarded to companies that assess credit ratings. What they almost never assume is that all this data -- which includes names, addresses, social security numbers, and plenty of contact info -- can be accessed at will by US law enforcement agencies.

Many data fire hoses are still in operation. But this move slows one form of data to a drip -- one that travels to Equifax but goes no further. It's a start, but as Sen. Wyden clearly realizes, there's a long way to go before Americans can trust the entities that collect data from us.

Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: clear, data, data brokers, ice, nctue, privacy, ron wyden, utility bills
Companies: reuters


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • icon
    Samuel Abram (profile), 13 Dec 2021 @ 4:25am

    Re: Ron Wyden

    It’s shit like this that made me write in his name for President 9 years ago.

    link to this | view in chronology ]

    • identicon
      Anonymous Coward, 13 Dec 2021 @ 10:52am

      Re: Re: Ron Wyden

      Damn, Sam, that's mean. What'd Ron ever do to you?

      link to this | view in chronology ]

  • identicon
    Anonymous Coward, 13 Dec 2021 @ 5:54am

    That sound you hear is out_of_the_blue angrily grinding his teeth in furious self-righteous outrage.

    link to this | view in chronology ]

  • identicon
    me, 13 Dec 2021 @ 6:07am

    Based on their week long detention of a US Citizen in Tacoma....

    Who had his passport card on him the entire time: Again. A US Citizen taken by ICE to a for profit Immigration jail, and only released after his freedom had been exploited, again, for profit, for a week.....

    ICE is a gaggle of Human traffickers, nothing more, and your tax dollars pay for them.

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 13 Dec 2021 @ 6:09am

    Do "Data Anonimization" next

    Can we get a proper definition of the only data considered anonymized must be at least an aggregated function with a sine with at least ten entries mixed together instead of entries which may be cross-correlated?

    link to this | view in chronology ]

  • icon
    That One Guy (profile), 13 Dec 2021 @ 6:20am

    What a pleasant way to start the week

    Oh noes, a horrible agency staffed by terrible people has one less source of information on people they shouldn't have had to begin with, truly what a tragedy...

    link to this | view in chronology ]

    • identicon
      Anonymous Coward, 13 Dec 2021 @ 7:58am

      Re: Horrible agency staffed by Terrible people

      ... But this horrible ICE agency is merely an 'Agent' of Congress & Presidents -- who eternally support its horrible activities.

      Therefore, our Congressmen & Presidents must also be Terrible People.

      Everything ICE does is ultimately controlled by Congress & Presidents -- they are the root problem.
      Top Federal officials are not your agents as a voting citizen in a nominal democracy -- those officials always have their own agenda.

      link to this | view in chronology ]

  • identicon
    Anonymous Coward, 13 Dec 2021 @ 6:27am

    At least one person in Congress cares about the Fourth Amendment

    We need more people like Ron Wyden (but maybe younger) in Congress. The US won't pass a proper privacy law until there are.

    link to this | view in chronology ]

    • identicon
      Anonymous Coward, 13 Dec 2021 @ 8:26am

      Re: one person in Congress cares about 4th Amendment

      yup, we need congressmen who pick and choose which BillofRights amendments they support or ignore, although their solemn oath of office permits no such thing.
      for example, Wyden's long voting record strongly opposes the 2nd Amendment.

      link to this | view in chronology ]

      • icon
        Upstream (profile), 13 Dec 2021 @ 10:05am

        Re: Re: one person in Congress cares about 4th Amendment

        Name one congresscritter who supports all the Amendments, or even just the idea of individual civil liberties over authoritarian government supremacy in general.

        And I mean actually supports, not just pays lip service to.

        . . . I thought not.

        link to this | view in chronology ]

      • icon
        PaulT (profile), 14 Dec 2021 @ 5:41am

        Re: Re: one person in Congress cares about 4th Amendment

        "Wyden's long voting record strongly opposes the 2nd Amendment"

        Does it? Or, does it merely suggest that maybe the restrictions it already has on it be adjusted to fit the world that exists around it? You already can't buy guns if you're a felon, and you're already not allowed to buy nuclear or chemical weapons. Reconsidering the existing limits is not opposing the entire amendment.

        link to this | view in chronology ]

      • icon
        Scary Devil Monastery (profile), 15 Dec 2021 @ 6:44am

        Re: Re: one person in Congress cares about 4th Amendment

        "...we need congressmen who pick and choose which BillofRights amendments they support or ignore, although their solemn oath of office permits no such thing."

        You do realize that the constitution expressly allows congress to craft and adjust of amendments? That this is, in fact, the job of congress?

        If Wyden feels an amendment is no longer acceptable in its current form then a suggestion to reword it, striking it, or adjusting it is in fact well within his job description.

        How come every american who claims the authority of the constitution somehow turns out never to have actually read the damn thing? C'mon, people, it really isn't that hard.

        link to this | view in chronology ]

    • identicon
      Anonymous Coward, 13 Dec 2021 @ 9:21am

      Re: At least one person in Congress cares about the Fourth Amend

      Indeed, we need more people like him pushing back Big Brother.

      link to this | view in chronology ]

  • identicon
    Anonymous Coward, 13 Dec 2021 @ 6:35am

    But this move slows one form of data to a drip -- one that travels to Equifax but goes no further.

    This doesn't mean that ICE can't get those records. It just means that they have to go through the courts to get them directly from the utilities.

    If I understand the post correctly, the win is less "ICE doesn't get it" than "the entire world no longer gets it".

    link to this | view in chronology ]

    • identicon
      Anonymous Coward, 13 Dec 2021 @ 7:24am

      Re:

      This doesn't mean that ICE can't get those records. It just means that they have to go through the courts to get them directly from the utilities.

      Which also means that ICE is far less likely to ever get them. Going through the courts is more hassle, and generates a paper trail. While magistrates and judges have proven rather feckless is signing off on warrants, and this is likely to continue, the mere existence of the warrant means that ICE has to actually put pen to paper and write something about it.

      Any small victory we can get should be celebrated, though I still hold a torch for that department's dishonorable discharge.

      link to this | view in chronology ]

    • identicon
      Anonymous Coward, 13 Dec 2021 @ 7:33am

      Re:

      It just means that they have to go through the courts to get them directly from the utilities.

      No, because they can get it from Equifax—now with a court order instead of a wad of cash. Public utilities should never be sharing data with credit bureaus without legtimate consent—i.e., something better than "let us share your data, or live without water and electricity". Really, private companies should be held to this standard too.

      Nobody ever asked these credit bureaus to track them to assess their creditworthiness. The bureaus just started doing it and managed to convince people "but how else would the world work?"—odd, because utilities, landlords, banks, etc. were profitable before Equifax and them existed. Sometimes that meant pre-paying (possibly a deposit) for certain services, which isn't a big deal because most people who get good Equifax ratings can afford that, and those who don't are screwed either way.

      link to this | view in chronology ]

  • icon
    Upstream (profile), 13 Dec 2021 @ 8:02am

    Key phrase:

    Many data fire hoses are still in operation. But this move slows one form of data to a drip . . .

    Good for Ron Wyden! We should all be glad for any movement we get in the right (privacy) direction. But we must not lose sight of just how small a step this is, and how long and how steep uphill the road ahead is, too.

    link to this | view in chronology ]

    • icon
      Thad (profile), 13 Dec 2021 @ 8:44am

      Re: Key phrase:

      Anything short of abolishing ICE is not enough. But limiting ICE in any way we can is a move in the right direction.

      link to this | view in chronology ]

  • icon
    Flakbait (profile), 13 Dec 2021 @ 9:10am

    Trademark infringement

    "It's still hoovering up location data from app developers who either don't know or don't care that this data is buyable through data brokers."

    Don't be surprised if lawyers from Techtronic Industries (the parent company of The Hoover Company) with too much time on their hands would like to have a word with you about your use of their trademarked name.

    link to this | view in chronology ]

    • identicon
      Bobvious, 13 Dec 2021 @ 1:12pm

      Re: Trademark infringement

      hoovering up location data

      You mean it's being stored in a big dam in Nevada and Arizona?

      link to this | view in chronology ]

      • identicon
        Anonymous Coward, 14 Dec 2021 @ 9:51am

        Re: Re: Trademark infringement

        That'd be a dam big reservoir of information if true...

        link to this | view in chronology ]

  • icon
    Ninja (profile), 13 Dec 2021 @ 9:34am

    This is one of those times I'd like to be able to vote in Oregon. Wyden is one of these good politicians you wish all the others were.

    link to this | view in chronology ]

  • icon
    ECA (profile), 13 Dec 2021 @ 10:23am

    then you wonder Why

    There isnt much protection On this data? NOPE.
    It would be pretty easy to give a group a password, and let them into the system to Download it all.
    And even explains how Terabytes of DATA can be stolen, and no one knows HOW, when, Anything.

    Any corp could setup a server that required only certain verified Machines to connect.
    And separating the Data into sections so that they cant get the Whole thing, in 1 Clump.
    Then there came this idea that everyone NEEDS a credit card. Where if you run out of money you can always use the card at 14-20% interest, esp on over priced goods and food.
    My credit card corp changed something. INSTED of being based on the Fed. They decided to use the top 4 banks in the USA. So insted of +10 to the Fed, which was 0%, those 4 banks were 6% and up.

    link to this | view in chronology ]

  • identicon
    Anonymous Coward, 14 Dec 2021 @ 5:11am

    Fun Fact: ICE considers the entire USA to be within 100 miles of the border. Because space begins 100miles up.

    seriously.

    link to this | view in chronology ]


Follow Techdirt
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Discord

The latest chatter on the Techdirt Insider Discord channel...

Loading...
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.