Focusing public attention on emerging privacy and civil liberties issues

EPIC v. DOJ - Pen Register Reports

Top News

  • Documents Obtained by EPIC Lawsuit Show NSA’s Internet Metadata Program Was Sharply Criticized By FISA Judges While Congressional Oversight Lagged for Years: In a FOIA lawsuit against the Department of Justice, EPIC has obtained many documents about the NSA's Internet Metadata program. These include the Government's original FISA application seeking authorization to collect data from millions of e-mails, as well as declarations from NSA officials describing the program. The documents show that FISA Court Judge John Bates chastised the agency for "long-standing and pervasive violations of the prior [court] orders in this matter.'' The FISA Court first authorized the program in 2004, but the documents obtained by EPIC show that the legal justification was not provided to Congress until 2009. The documents also reveal that the DOJ withheld information about the program in testimony for the Senate Intelligence hearing prior to the reauthorization of the legal authority. The program was shut down in 2011 after a detailed review. For more information, see EPIC v. DOJ (FISA Pen Register) and EPIC: Foreign Intelligence Surveillance Court. (Aug. 12, 2014)
  • Senator Leahy Introduces Bill to End NSA Bulk Record Collection: Today Senator Patrick Leahy (D-VT), joined by Democratic and Republican Senators, introduced legislation to end the NSA's practice of collecting telephone records of Americans. Leahy described the bill as "the most significant reform of government surveillance authorities since Congress passed the USA PATRIOT Act 13 years ago." The USA Freedom Act would require require the government to specify specific "search terms" to obtain telephone record information. The government would have to demonstrate that it has a "reasonable, articulable suspicion" that the search term is associated with a foreign terrorist organization. The bill also requires a comprehensive transparency report for the use of FISA surveillance authorities. However, the bill exempts the FBI from certain reporting requirements. Civil liberties organizations support the bill. EPIC previously filed a Petition for Mandamus with the U.S. Supreme Court, seeking to end the bulk collection of American's phone records. EPIC's petition was supported by legal scholars, technical experts, and former members of the Church Committee. For more information, see In re EPIC and EPIC: FISA Reform. (Jul. 29, 2014)
  • Federal and State Wiretaps Up 5% in 2013 According to Annual Report, But Stats Don't Support FBI Claims of "Going Dark": The Administrative Office of the U.S. Courts has issued the 2013 Wiretap Report, detailing the use of surveillance authorities by law enforcement agencies. This annual report, one of the most comprehensive issued by any agency, provides an insight into the debate over surveillance authorities and the use of privacy-enhancing technologies. In 2013, wiretap applications increased 5%, from 3,576 to 3,395. Authorities encountered encryption during 41 investigations, but encryption prevented the government from deciphering messages in only 9 cases. This statistic contradicts claims that law enforcement agencies are "going dark" as new technologies emerge. Of the 3,074 individuals arrested based on wiretaps in 2013, only 709 individuals were convicted based on wiretap evidence. EPIC has repeatedly called on greater transparency of FISA surveillance, citing the Wiretap Report as a model for other agencies. EPIC also maintains a comprehensive index of the annual wiretap reports and FISA reports. For more information, see EPIC: Title III Wiretap Orders, EPIC: Wiretapping, and EPIC: Foreign Intelligence Surveillance Act. (Jul. 29, 2014)
  • House Adopts Weakened NSA Reform Bill, Senators Now Look to Improve Privacy and Transparency Protections: The U.S. House of Representatives has voted to adopt a modified USA "FREEDOM" Act. The bill no longer prohibits bulk collection of communications records. Other key provisions were also removed. Senator Leahy said that the bill is "an important step towards reforming" surveillance authorities, but expressed disappointment that the current version "does not include some of the meaningful reforms contained in the original" bill. In 2013 EPIC filed a Petition to the Supreme Court seeking to end bulk collection of telephone call records. EPIC also testified before the House in 2012 that the FISA should not be renewed without adoption of new reporting requirements. For more information, see EPIC: FISA and EPIC: FISA Reform. (May. 23, 2014)
  • House Judiciary Committee to Consider Bill to End Bulk Surveillance, Improve NSA Oversight: The House Judiciary Committee has scheduled a markup of the USA Freedom Act. The proposed "Manager's Amendment", sponsored by James Sensenbrenner (R-WI), would prevent bulk collection of phone records and other business records, and would limit the scope of phone record searches. The bill would also (1) limit the collection of US persons communications by the NSA's PRISM program, (2) require public reports on the use of FISA surveillance, (3) require declassification of significant FISA Court opinions, and (4) create a public advocate at the FISA Court. In 2012, EPIC testified before the House Judiciary Committee on the need for public reports and the declassification of significant FISC opinions. In 2013, EPIC filed a petition with the Supreme Court, alleging that the bulk collection of telephone record was unlawful. For more information, see EPIC: FISA Reform and In re EPIC. (May. 5, 2014)
  • Annual FISA Report Shows Decrease in Surveillance Orders, Questions About Scope Remain: The Department of Justice has published the 2013 FISA Report. The brief report provides summary information about the government's use of the Foreign Intelligence Surveillance Act. In 2012 the Foreign Intelligence Surveillance Court granted 1,789 FISA orders and 212 "Section 215" orders. In 2013, there were 1,588 requests to conduct FISA surveillance, with 34 modifications. The FISC also granted 178 business record orders under Section 215, with 141 modified by the court. The significant number of modified orders indicates that the government's initial applications are too broad. For example, the controversial NSA Metadata program, was authorized by the surveillance court under a modified order. It is possible that in 2013 the court authorized other bulk collection programs. For more information, see EPIC: FISC Orders 1979-2014 and EPIC: FISA Graphs. (May. 1, 2014)
  • EPIC Obtains Secret Attorney General Reports on Electronic Surveillance: As a result of an FOIA lawsuit, EPIC has obtained copies of the Attorney General Reports on the government's electronic surveillance activities. These reports have been submitted to Congress every six months since 2001 but have never before been disclosed to the public. These reports include new details about government collection of telephone and Internet records. The reports include the number of US persons targeted for "Pen Register" surveillance under the Foreign Intelligence Surveillance Act. The reports also contain noncompliance incidents and significant foreign intelligence court opinions, but those details have been withheld by the Justice Department. The documents obtained by EPIC also show that the Justice Department told Congress that the collection of telephone subscriber information would decrease, even after the section 215 bulk collection program began. The case is EPIC v. Dept. of Justice, No. 13-961. For more information, see EPIC v. DOJ - FISA Pen Registers and EPIC: FISA Stats. (Mar. 19, 2014)
  • In FOIA Lawsuit, EPIC Obtains Secret Reports on Data Collection: In a Freedom of Information Act lawsuit, EPIC has obtained reports that detail the number of times the Surveillance Court authorized the use of techniques that gather the telephone numbers and metadata of phone customers and Internet users. The previously secret reports obtained by EPIC cover the period between 2000 and 2013. The reports reveal a dramatic increase in the use of these techniques in 2004 and then a significant reduction in 2008, likely the consequence of a shift to other investigative techniques. The documents show that nearly all applications to the Surveillance Court were approved without modifications. In 2013, EPIC petitioned the Supreme Court to end the bulk telephone record collection program. Former members of the Church Committee and dozens of legal scholars supported the EPIC petition. For more information see: EPIC v. Department of Justice - Pen Register Reports, EPIC: Foreign Intelligence Surveillance Court Orders 1979-2012, and In re EPIC. (Mar. 3, 2014)
  • Federal Communications Commission Seeks Public Comment to Protect Phone Record Privacy: The Federal Communications Commission has invited public comments on a petition requesting the FCC to rule that the sale of consumer phone records to the government is a violation of the federal Communications Act. EPIC joined the petition, which was organized by Public Knowledge. In 2013, EPIC urged the FCC to determine whether AT&T violated the Communications Act when it sold private consumer call detail information to the Drug Enforcement Administration and Central Intelligence Agency. In 2013 EPIC also wrote to the FCC to explain that Verizon had likely violated the Communications Act when it disclosed telephone records to the NSA. Public comments on the petition are due January 17, 2014 and reply comments are due February 3, 2014. For more information, see EPIC: CPNI (Customer Proprietary Network Information), and EPIC: Foreign Intelligence Surveillance Act. (Jan. 7, 2014)
  • Senate Confirms Judge Wald for Privacy Oversight Board: The Senate confirmed the reappointment of Judge Patricia M. Wald to the Privacy and Civil Liberties Oversight Board. Judge Wald's current term was set to expire next month, but President Obama re-nominated her on March 21, 2013. Last year, EPIC recommended that the Oversight Board, consistent with its mandate, pursue a broad agenda, including (1) suspension of the Fusion Center Program ; (2) limiting closed-circuit television surveillance; (3) eliminating the use of body scanners; (4) establishing privacy regulations for drones; (5) improving Information Sharing Environment (ISE) and Suspicious Activity Reporting (SARS) Standards; and (6) Privacy Act adherence. More recently, EPIC addressed the Board at a workshop on NSA Surveillance. And in response to a public rulemaking, EPIC also provided extensive comments on a proposed rule governing the Board's Freedom of Information Act practices. The Board adopted nearly all of EPIC's recommendations on transparency. For more information, See EPIC: Foreign Intelligence Surveillance Act and EPIC: Open Government. (Dec. 13, 2013)

Background

Pen registers and trap and trace ("PR/TT") devices collect metadata from calls coming in to and going out of specific phone lines, respectively. There are two federal statutes governing the application for and the execution of such recording devices, the Electronic Communications Privacy Act ("ECPA") and the Foreign Intelligence Surveillance Act ("FISA"). Under the FISA, pen registers and trap and trace devices can be used "for any investigation to obtain foreign intelligence information not concerning a United States person or to protect against international terrorism or clandestine intelligence activities."

On June 27, 2013, the Guardian reported that the NSA had received authorization to collect bulk email and Internet metadata using the Pen Register and Trap and Trace provisions of the FISA on July 14, 2004. According to the Guardian, the surveillance program was authorized by Judge Kollar-Kotelly of the Foreign Intelligence Surveillance Court ("FISC"). On November 18, 2013, less than five months after the Guardian's report, the Office of the Director of National Intelligence ("ODNI") released an undated and previously unpublished FISC opinion signed by Judge Kollar-Kotelly. Judge Kollar-Kotelly found that the Pen Register/Trap and Trace povisions allowed the National Security Agency ("NSA") to collect certain redacted categories of bulk Internet and e-mail metadata. Judge Kollar Kotelly found that the government's proposal "satisfie[d] each of the elements of the applicable statutory definition of a 'pen register' or a 'trap and trace.'"

The program allegedly continued until 2011, when it was discontinued for "operational and resource reasons." Senators Ron Wyden and Mark Udall explained:

We are quite familiar with the bulk email records collection program that operated under the USA Patriot Act and has now been confirmed by senior intelligence officials. We were very concerned about this program's impact on Americans' civil liberties and privacy rights, and we spent a significant portion of 2011 pressing intelligence officials to provide evidence of its effectiveness. They were unable to do so, and the program was shut down that year.

There is no evidence that the program has been re-instituted since its cessation in 2011.

The Attorney General is required to make a semiannual report to the Permanent Select Committee on Intelligence of the House of Representatives and the Select Committee on Intelligence of the Senate, and the Committee on the Judiciary of the House of Representatives and the Committee on the Judiciary of the Senate that would include a summary of all uses of pen registers and trap and trace devices obtained under the FISA. The report should include the number of applications granted and the number of applications modified under the FISA, as well as the total number of installations approved and denied under emergency circumstances. These reports have never been made available to the public

EPIC's Freedom of Information Act Request and Subsequent Lawsuit

On October 3, 2013, EPIC submitted a FOIA request to the National Security Division of the Department of Justice asking for:

  • All reports made to the Permanent Select Committee on Intelligence in the House of Representatives and the Select Committee on Intelligence in the Senate, detailing the total number of orders for pen registers or trap and trace devices granted or denied, and detailing the total number of pen registers or trap and trace devices installed pursuant to 50 U.S.C. § 1843;
  • All information provided to the aforementioned committees concerning all uses of pen registers and trap and trace devices;
  • All records used in preparation of the above materials, including statistical data.

DOJ granted EPIC's request for expedited processing but had not processed EPIC's FOIA Request within more than 40 days after it had been received by the Agency. DOJ failed to provide any documents, and EPIC filed a complaint and a motion for a preliminary injunction on December 6, 2013.

Freedom of Information Act Documents

Attorney General Semiannual FISA Pen Register Reports

Semiannual Reports of the Attorney General to Congress Regarding Electronic Surveillance

Foreign Intelligence Surveillance Court Documents

EPIC's Request

Legal Documents

EPIC v. Department of Justice, Case No. 13-01961 (D.D.C. filed December 9, 2013)

News Items