City Of Tacoma To Pay $50,000 To Privacy Activist For Over-Redacting FBI's Stingray Non-Disclosure Agreement

from the fines-set-to-'MAX' dept

In the fall of 2015, privacy activist Phil Mocek and the Center for Open Policing sued the city of Tacoma for its response to a request for Stingray documents. The documents Mocek obtained were heavily-redacted, despite there being several mostly-unredacted versions of the FBI's Stingray non-disclosure agreement already in public circulation.

(This would be the standard NDA the FBI appends to every Stingray purchase by local law enforcement agencies -- one that says all public records requests should be forwarded to the feds and encourages locals to toss cases rather than expose Stingray use. It's also the same contract the FBI was shocked to hear agencies were complying with after signing on the dotted line to take ownership of their new cell tower spoofers.)

The lawsuit was filed under the state's open records law, with Mocek challenging the Tacoma PD's use of the "investigative records" exemption to withhold significant amounts of a mostly bog-standard nondisclosure agreement. As was noted back then, the continued withholding of this information could become costly (for taxpayers): the state's public records law allows for fines of $500/day for violations.

The court has spoken and the Tacoma PD's excessive secrecy is indeed going to cost residents a chunk of change.

The city of Tacoma will pay a $50,000 fine as well as legal fees for violating the Public Records Act by withholding most of a nondisclosure agreement it signed to obtain cellphone surveillance equipment commonly known as a Stingray.

[...]

In an order signed Friday, Pierce County Superior Court Judge Frank Cuthbertson said the city’s redactions violated state law.

He ordered Tacoma to pay $100 a day for every day the city “wrongfully withheld the unredacted NDA from June 21, 2014, until November 3, 2015, when the city provided this record to plaintiffs,” a penalty period of 500 days. The penalty is the maximum allowable under state law.

The judge determined the exemption cited was improper and withholding large amounts of contractual language served no conceivable law enforcement purpose. The city blamed the FBI for its lavish deployment of black toner. Presumably, the FBI will push back, stating it expects no one to uphold the terms of an agreement it forces them to sign before they can acquire the devices.

This unjustified secrecy is going to hurt the city (and its taxpaying residents) a few more times. The Tacoma New Times points out there are several pending lawsuits dealing with the same Stingray documents, including one filed by the ACLU. The city says it won't seek reimbursement from the federal government for fines and fees, but maybe it should, especially if it's going to blame the FBI for the Tacoma PD's secrecy. This actually sounds like a "good faith" attempt to respect the terms of its agreement with the FBI. The FBI got the secrecy it wanted -- at least temporarily. The least it can do is offer to cover the damages of the NDA it says everyone must sign, but apparently doesn't expect anyone to follow.

Filed Under: fbi, imsi catcher, non-disclosure, phil mocek, privacy, stingray, tacoma

Court Says Location Of FBI's Utility Pole-Piggybacking Surveillance Cameras Can Remain Secret

from the OPERATION-REMORA dept

Last June, the FBI engaged in a public records lawsuit on its own behalf, seeking to prevent the city of Seattle from disclosing the locations of cameras the agency had mounted on city-owned utility poles. At the center of the case (for a short while) was privacy activist Phil Mocek, whose public records request for this information had spurred the FBI into action.

In its arguments against the city's disclosure of this information, the government posited the novel theory that revealing the cameras' locations would violate the privacy of those the FBI was actively surveilling.

Because of their close proximity to the subjects of surveillance, unauthorized disclosure of the locations of current or previously installed pole cameras can reasonably be expected to constitute an unwarranted invasion of privacy for those persons under investigation who have not yet been charged.

It made several related arguments in hopes of keeping this info from being revealed, including a modified "mosaic" theory and that, while all surveillance cameras are nominally created equal, the FBI's were more equal than others.

The FBI’s use of surveillance cameras must be distinguished from that of any other state or federal law enforcement agency on two principal grounds. First, in light of the FBI’s unique law enforcement and national security missions, there are particular sensitivities attached to the FBI’s use of surveillance equipment and the tradecraft associated with that use. Second, unlike the use of surveillance cameras by other entities, such as state and local governments or private businesses, which may operate video surveillance cameras in public locations to deter crime or promote public safety generally, the FBI utilizes surveillance cameras only in furtherance of an authorized investigation of a particular subject(s).

The FBI presumably doesn't use its cameras to troll for criminal activity, at least according to its courtroom assertions. The City of Seattle, however, didn't feel particularly compelled to protect the location info of the FBI's parasitic contributions to its utility poles. Phil Mocek was removed from the FBI's suit, leaving the city to defend its proposed disclosure against the FBI's claims of a future full of unsurveilled criminal activity.

The FBI's lawsuit has now wrapped up with the agency coming out on top. In a short order, federal judge Richard Jones finds the location of the FBI's publicly-mounted cameras to be deserving of ongoing secrecy. From the court's order [PDF]:

The United States contends, and the Court is persuaded, that the requested information is (1) protected by the federal law enforcement privilege; (2) federal property, subject to the FBI’s right to control and prohibit the disclosure of the information by the City, absent the express authorization of the FBI; and (3) expressly protected from disclosure by the PRA. The Court is further persuaded that the disclosure of the requested information by the City will cause irreparable harm to important federal interests, namely, the ability to carry out effective investigations of criminal violations and national security threats.

The order includes an injunction that prevents the city from releasing this information for the rest of forever, no matter the underlying circumstances.

The City of Seattle, including any officers, agents and employees thereof, are hereby permanently enjoined from disclosing, in response to any request under the Washington PRA, or otherwise, the… information that it has received from the FBI, absent the express authorization to do so by the FBI…

This includes information that seemingly would have no further law enforcement use, like those used in closed or fruitless investigations. Unless some of these cameras are located in sparsely-populated areas of the city, it's highly unlikely anyone could work their way backward from the camera's location to determine the identity of the surveillance targets. But the court sees it the way the FBI sees it: that anything it declares to be protected by "law enforcement privilege" should remain that way indefinitely.

Filed Under: fbi, phil mocek, public records, seattle, secrecy, surveillance, utility poles

Court Says MuckRock Must Take Down Smart Grid Company's Documents Because Judge Has 'No Time' To Review Case Properly

from the ain't-nobody-got-time-to-consider-free-speech-implications dept

Last week, we covered a multinational corporation's attempt to force MuckRock to take down documents supplied by the city of Seattle to Phil Mocek. Landis+Gyr, which was awarded the contract to supply the city with "smart meters" in conjunction with the publicly-owned utility, claimed the documents released -- along with documents the city was planning to release -- would be a boon to competitors and terrorists, although it didn't specify which of these it was more worried about.

The company also demanded MuckRock turn over information on site users who may have seen or downloaded the documents. It also (hilariously) demanded MuckRock assist it in the "retrieval" of disseminated documents.

The company's request for an injunction against MuckRock and the city of Seattle went before a judge on Thursday. It has been (partially) granted. Ansel Herz of The Stranger says, after speaking to Landis+Gyr reps, that the judge granted its request -- not on its merits but because there just aren't enough hours in the day.

At a King County court hearing yesterday, Commissioner Carlos Velategui granted the companies' request for a temporary restraining order, lawyers for the companies told me. "There's no way that I can spend the time to look at all this," Velategui said. Neither Mocek nor the city showed up to defend themselves.

The request was filed on the 23rd and granted on the 26th. That's an impressive turn radius for government machinery. This compressed timeframe likely explains the court's harried decision, as well as the lack of defendants in the courtroom.

MuckRock will be fighting the order, but it will now have help. The EFF has stepped in to represent MuckRock and Mocek against Landis+Gyr (Update: Mocek notes in our comments that EFF has only offered to help MuckRock so far). The documents MuckRock is currently unable to provide to the public can be found here: L+G Managed Services Report and L+G Security Overview (in case you want a copy).

Landis+Gyr may have achieved the first step in its plan to herd its PDF cats back into the bag, but its complaint should have been limited to the government organization that released the documents it claims are sensitive, rather than the FOIA requester and clearinghouse that received them. And, trade secrets or not, the company is working in conjunction with a city government to install devices with possible privacy implications on every home -- so more transparency, not less, is exactly what's needed.

Filed Under: carlos velategui, foia, injunction, phil mocek, prior restraint, seattle, smart grid, smart meters
Companies: landis+gyr, muckrock

'Smart Grid' Company Demands MuckRock Turn Over Info On Anyone Who Might Have Seen Public Records Docs Involving It

from the because-trade-secrets-and-terrorism dept

Earlier this year, FOIA enthusiast/privacy activist Phil Mocek requested documents from Seattle City Light, the city's public-owned utility. Mocek was seeking info on the utility's proposed "smart meter" system, which carried with it some obvious privacy implications.

Pursuant to RCW Ch. 42.56 (Public Records Act), I hereby request the following records:

Plans for, schedules of, policies dictating the performance of, requests for proposals to, contracts for, discussion of, and results of all security audits performed of "smart meter" devices (remotely-addressable electrical meters sometimes referred to as "advanced metering infrastructure"), along with metadata. These devices are designed to replace traditional electric meters. They contain sensors that monitor activities inside subscribers' premises and automatically communicate information collected by those sensors to machines in remote locations.

The replacement of regular meters with potentially-invasive "smart meters" is due to begin in 2017, despite concerns about health and privacy. As the EFF points out, the power company's ability to record pinpoint data on customers' power use may seem innocuous, but it's not nearly as benign if that information is shared, either purposefully or inadvertently.

It’s not just utilities who will have access to your data.   It’s potentially a series of third party corporations including (but not limited to) the utility’s contractors and government agencies. Law enforcement agencies in particular are very keen to be able to see this information. There have already been a lot of cases where utility records have been provided to police who use them to bust marijuana growing operations, and this is simply using the raw energy use data.

[...]

Insurance companies and employers might also be interested in your personal energy usage information. Smart meters crack open this door into your private life, making available a huge amount of very personal data.

And that's not even factoring in the unauthorized uses that smart meters may inadvertently lead to if not secured properly.

Multiple documents were provided to Mocek by Seattle City Light, including documents related to the company awarded the smart meter contract: Landis+Gyr. Landis+Gyr isn't happy the city of Seattle has made these documents public, so it's logically responded by suing MuckRock. Yes, it's also suing the city and the utility, but for some reason has decided MuckRock (and Phil Mocek) should be included in the litigation, despite them only being the recipients of documents Landis+Gyr wants to keep out of the public's hands.

It's seeking to have future planned responses from the city involving its "trade secrets" blocked. (Seattle plans to release another batch of documents to Mocek on May 26.) But it's also making requests pertaining to MuckRock that are both chilling and completely ridiculous. Not only does Landis+Gyr want the documents taken down, but it also wants info on every MuckRock reader who may have viewed them.

[A]fter receiving certain unredacted documents through inadvertent, accidental, or improper release by the City in circumstances demonstrating that Defendants knew or should have known the documents contain sensitive network security information and trade secret information, Mocek nonetheless allowed the information to be posted publicly and in unredacted form on the internet site of Defendant MuckRock.com. Plaintiff Landis+Gyr notified Mocek, MuckRock.com, and Defendant Michael Morisy of the apparent error and requested that Landis+Gyr’s sensitive and proprietary information be removed from the MuckRock.com website and that MuckRock.com provide reasonable assistance to allow Landis+Gyr to identify entities that may have obtained access to is sensitive information.

Michael Morisy refused Landis+Gyr's first request. Now, it's upped the ante by petitioning the court to force MuckRock to assist it in the ultimate fool's errand: the removal of information from the internet.

Immediate relief is needed to require Plaintiffs’ protected information to be immediately taken down from the MuckRocks website, to require MuckRock.com to provide assistance to Plaintiffs to identify and retrieve protected information that may have been downloaded from the MuckRocks website…

If that wasn't enough, the multinational corporation would like the government to engage in a little prior restraint on its behalf.

[...] enjoin Mocek and MuckRock.com from posting Plaintiffs’ protected and sensitive information in the future.

Landis+Gyr seems to be most concerned about the pending release of documents containing pricing info and details about its "smart grid" technology. But, it's also demanding the removal of the two documents already released, both of which are fairly innocuous (and can be viewed below!) As MuckRock's Michael Morisy points out, it should be under no obligation to remove the documents as it's received no notice from the city of Seattle that the documents it has in its possession weren't supposed to be released.

Morisy and MuckRock don't plan to back down.

We believe that these legal threats are a chilling attack on free speech and we will not be complying with their demands.

We also believe people have a broad right to understand the security implications of technology purchased by their governments, particularly if, as is the case with the smart electrical meter systems provided by Landis+Gyr, that technology monitors the activities of people in their homes.

At this point, the injunction doesn't appear to have been granted, which means MuckRock can still (for the time being) host the docs it has already obtained as well as anything else Landis+Gyr-related Seattle sends to Mocek while its request is being reviewed.

Filed Under: foia, phil mocek, seattle, smart grid, smart meters, threats
Companies: landis+gyr, muckrock

Man Acquitted In Lawsuit Over Filming The TSA And Not Showing ID

from the good-for-him dept

A few folks have sent in variations on this story, involving how a guy named Phil Mocek has been acquitted of charges filed by the TSA after he refused to show TSA officials his ID back in 2009. Mocek had no ID on him and noted (correctly) that you do not, in fact, need ID to fly. He filmed the entire incident and then was charged with four misdemeanors: disorderly conduct, concealing his identity, refusing to obey a police officer, and criminal trespass. You can see the video here: It turns out that Mocek was completely correct in that he did not need to have ID and he was well within his rights to film the encounter. At no point did he raise his voice or act in a "disorderly" manner, and it appears that the jury recognized that -- and also recognized that the TSA and the police appeared to simply be annoyed at the guy for doing what was completely within the law.

Filed Under: airports, filming, id, phil mocek, rights, tsa