Innovation Policy Post

Reforming the Electronic Communications Privacy Act (ECPA), designed to protect your online information from unwarranted intrusion by the government, took another step toward reality last Thursday. The Senate Judiciary Committee adopted an amendment to another pending law that would include a portion of ECPA reform. The Committee did not yet pass the amended bill out to the full Senate, instead allowing Senators time to address a few concerns that have been expressed by government.

Last week a federal appeals court ruled on a subject dodged by the Supreme Court last year in US v. Jones: Whether the government can use your phone as a tracking device without getting a warrant first. Unfortunately the Sixth Circuit decided in a 2-1 opinion that you have no reasonable expectation of privacy in your location because your cell phone is transmitting a signal at all times that can be used to track its location.

Last week the Senate Judiciary Committee’s Subcommittee on Privacy, Technology, and the Law held the first of what will probably be many hearings on the privacy implications of facial recognition software. Much of the conversation somewhat predictably focused on how companies are making use of this new technology, and we agree that care should be taken to be sure that this sort of data collection and use is not abused by actors or used in ways that may harm users, or where they don’t know of the use.

The New York Times ran an article detailing the large numbers of information requests that wireless phone carriers in the United States get from the various law enforcement bodies seeking our private information regarding our cell phones. In most cases, as the article points out, these requests are not warrants -- which must be approved by an independent judge -- but instead are simply subpoenas issued by the law enforcement officer without oversight. The current state of the law permits this sort of access to data, but it should not. Congress should waste no time in taking up comprehensive reform of the Electronic Communications Privacy Act in response to these revelations, and give full warrant protections to user’s content online and in the mobile space, as well as to information about their whereabouts. 

Privacy as a competition issue was a focus at the Senate Commerce Committee’s hearing on online privacy Thursday.

Federal Trade Commission Chairman Jon Leibowitz said having privacy rules could help provide a level playing field between companies that have privacy policies and those who don’t.

Last week, after much anticipation and delay, the bipartisan Senate cybersecurity legislation, S. 2105 – Cybersecurity Act of 2012, was unveiled.

Though it is laudable that Congress has begun in earnest to attend to the critical cybersecurity threats that face America, there has been little debate about the how information sharing and defense of critical infrastructure will occur in practical terms when, and if, cybersecurity legislation is finally adopted.

Today marked the end of around ten days of events surrounding the 25th anniversary of the Electronic Communications Protect Action, though by no means is it the end of our reform efforts. It was a week full of press conferences, panels, and even a party, all of which served to highlight the problems in the law and the need for reform. 

Today’s panel continued that trend, bringing together a group of people that many may have thought opposed to the proposals to reform ECPA, but who clearly see the need for reform. As if to emphasize that need, Google this week released its latest set of data on the requests for information that it receives from governments around the world. The sharp increase in requests during this period is just one example of the importance of reform.