======================================================================= E P I C A l e r t=======================================================================Volume 16.21 November 9, 2009----------------------------------------------------------------------- Published by the Electronic Privacy Information Center (EPIC) Washington, D.C. http://www.epic.org/alert/epic_alert_1621.html "Defend Privacy. Support EPIC." http://epic.org/donate=======================================================================Table of Contents=======================================================================[1] EPIC Urges Court to Protect Privacy Rights in Facebook Case[2] Study Finds Privacy of Nation's School Children At Risk[3] Public Voice Hosts Madrid Civil Society Conference[4] Civil Society Groups Issue Privacy Declaration in Madrid[5] EPIC Audits First Public Election to use Scantagrity Voting System[6] News in Brief[7] EPIC Bookstore: "Privacy By Design . . . Take the Challenge"[8] Upcoming Conferences and Events- Join EPIC on Facebook http://facebook.com/epicprivacy - Privacy Policy - About EPIC - Donate to EPIC http://epic.org/donate - Subscription Information=======================================================================[1] EPIC Urges Court to Protect Privacy Rights in Facebook Case=======================================================================On November 3, EPIC filed a friend of the court brief with the FifthCircuit Court of Appeals, urging the Court to enforce federal privacyprotections for Facebook users who rented videos from Blockbuster, aFacebook business partner.Congress passed the Video Privacy Protection Act of 1988 to prevent thewrongful disclosure of video rental information by companies thatcollect detailed personal information from customers. To achieve thisgoal, Congress established a private right of action to ensure thatthere would be a meaningful remedy when companies failed to safeguardthe data they collected. A private right of action is a statutoryclause that gives individual citizens the right to sue companies whoviolate the individual's rights under the law.Accordingly, Cathryn Harris and other Facebook users filed suit underthe Act after Blockbuster made public their private video rentalinformation. Blockbuster made the information public as part of itsparticipation in Facebook's Beacon program, which revealed the privateinformation on the news feeds of other users. In response to thelawsuit, Blockbuster claimed that, under the "clickwrap" agreement thatconsumers clicked through while signing up for Blockbuster's onlineservice, consumers could not sue the company and had to submit tomandatory arbitration.EPIC wrote that "absent a private right of action, there would be noeffective enforcement, no remedy for violations, and no way to ensurethat companies complied with the intent of the Act." EPIC's brief,which includes a detailed history of the video privacy law, urges theappeals court to uphold a lower court ruling, which held that theplaintiffs are allowed to pursue their claim that a federal law wasviolated.EPIC Amicus Brief: http://epic.org/amicus/blockbuster/Blockbuster_amicus.pdfEPIC: Harris v. Blockbuster: http://epic.org/amicus/blockbuster/default.htmlEPIC: The Video Privacy Protection Act: http://epic.org/privacy/vppa/EPIC: Facebook Privacy: http://epic.org/privacy/facebook/=======================================================================[2] Study Finds Privacy of Nation's School Children At Risk=======================================================================A Fordham Law School study found that state educational databasesacross the country ignore key privacy protections for the nation'sschool children. The study, prepared by the Center on Law andInformation Policy, reports that at least 32% of states warehousechildren's social security numbers; at least 22% of states recordstudent pregnancies; and at least 46% of the states track mentalhealth, illness, and jail sentences as part of the children'seducational records. Almost all states with known programs collectfamily wealth indicators.Moreover, most states use third party vendors for at least part oftheir data collecting and reporting needs. Some states outsource thedata processing without any restrictions on use or confidentiality forchildren's information. The study therefore recommended that stateswhich outsource data processing have comprehensive agreementsexplicitly addressing the privacy obligations of the third partyvendors. Furthermore, access to the information and the disclosure ofpersonal data may occur for decades and follow children well into theiradult lives. More than 80% of states fail to have data-retentionpolicies and may retain the information indefinitely. Thus, the studyrecommended that states should limit data collection to necessaryinformation and should have specific data retention policies andprocedures.The Fordham report also recommended that data at the state level bemade anonymous, that the collection of information by the state beminimized and specifically tied to an articulated audit or evaluationpurpose, and that states should have a Chief Privacy Officer in thedepartment of education who monitors the privacy protections ofeducational record databases and who publicly reports privacy impactassessments.These findings come as Congress is considering the Student Aid andFinancial Responsibility Act, which would expand and integrate the 43existing state databases without taking into account the criticalprivacy failures in the states' electronic warehouses of children'sinformation.Study Website: http://law.fordham.edu/childrensprivacyFordham Law School, Center on Law and Information Policy: http://www.epic.org/redirect/110609fordhamstudy.htmlStudent Aid and Financial Responsibility Act: http://www.epic.org/redirect/110609studentaidact.htmlEPIC: Children's Online Privacy Protection Act: http://epic.org/privacy/kids/EPIC: DOD Recruiting Database: http://epic.org/privacy/student/doddatabase.html=======================================================================[3] Public Voice Hosts Madrid Civil Society Conference=======================================================================Almost two hundred privacy experts, advocates, and government officialsfrom around the world gathered in Madrid for the "Global PrivacyStandards" conference, organized by the Public Voice, and held inconjunction with the International Conference for Data Protection andPrivacy.The event featured five panel discussions. The "Privacy and HumanRights: The Year in Review" panel, which released the most currentedition of the Privacy and Human Rights report, focused on recentdevelopments in privacy law. "Privacy Activism: Major Campaigns"featured a discussion on privacy and data protection campaigns aroundthe world, concentrating on the role of public education. The thirdpanel, "Your Data in the Cloud: What if it Rains?" discussed theprivacy implications of cloud computing for internet users."Transborder Data Flow: Bridges, Channels or Walls?," centered on adiscussion of when data flows should be facilitated and when theyshould be blocked. Finally, in the "Toward International PrivacyStandards" discussion, Marc Rotenberg offered a presentation of theMadrid Civil Society Declaration on Global Privacy Standards, andrespondents from four different countries reacted to his statements.Leading privacy officials from Spain, the European Union, the EuropeanParliament, the OECD, and Canada all participated. Each panel featuredrepresentatives from at least three different countries. Openingremarks were made by Marc Rotenberg, President, EPIC; Mr. AlejandroPerales, President, Asociación de Usuarios de la Comunicación; and Mr.Artemi Rallo Lombarte, Director, Agencia Española de Protección deDatos. Conference attendees heard closing remarks from Mr. StavrosLambrinidis, Vice President, European Parliament; and Mr. PeterHustinx, Supervisor, European Data Protection Supervisor (Netherlands).The privacy commissioner's conference drew more than 1,000 participantsfrom over fifty countries.Global Privacy Standards Conference: http://thepublicvoice.org/events/madrid09/International Conference of Data Protection and Privacy: http://www.privacyconference2009.org/Public Voice: http://thepublicvoice.org/Conference Cybercast: http://community.thepublicvoice.org/=======================================================================[4] Civil Society Groups Issue Privacy Declaration in Madrid=======================================================================In a crisply worded declaration, over 100 civil society organizationsand privacy experts from more than 40 countries have set out anexpansive statement on the future of privacy. The Madrid PrivacyDeclaration was released at the Public Voice conference in Madrid onGlobal Privacy Standards.The Madrid Declaration affirms that privacy is a fundamental humanright. The declaration reminds the European Union member countries andOrganization for Economic Co-operation and Development member countriesof their obligations to protect the civil rights of their citizensunder national constitutions and laws. Noting the increase in secretsurveillance and lack of independent oversight in corporations' datacollection practices, the Madrid Declaration sets forth warnings andurges action on the part of the European Union countries.The Madrid Declaration warns that "privacy law and privacy institutionshave failed to take full account of new surveillance practices." Suchfailures to protect the privacy interests of citizens "jeopardize[]associated freedoms . . . and ultimately the stability ofconstitutional democracies."The Madrid Privacy Declaration urges countries who have not done so toratify the Council of Europe Convention 108, establish a comprehensiveframework for privacy protection, develop means of properlyimplementing and enforcing such legal frameworks, and ensure thatindividuals are notified after a data breach has occurred. Furthermore,the Declaration encourages research into the effectiveness of dataanonymization techniques, in an effort to determine whether suchpractices properly safeguard personal information.The civil society groups and experts recommend a "moratorium on thedevelopment or implementation of new systems of mass surveillance."Finally, the Declaration calls for the "establishment of a newinternational framework for privacy protection, with the fullparticipation of civil society, that is based on the rule of law,respect for fundamental human rights, and support for democraticinstitutions."Madrid Declaration: http://thepublicvoice.org/madrid-declaration/ GlobalPrivacy Standards Conference: http://thepublicvoice.org/events/madrid09/Translations of Madrid Declaration: http://thepublicvoice.org/events/madrid09/ Council of Europe Convention 108: http://conventions.coe.int/treaty/EN/Treaties/Html/108.htmEPIC Reidentification: http://epic.org/privacy/reidentification/=======================================================================[5] EPIC Audits First Public Election to use Scantagrity Voting System=======================================================================The city of Takoma Park Maryland’s Clerk of Elections sought EPIC'sassistance in conducting a manual audit of their November 3, 2009election. The city chose the Scantagrity voting system for its biannualelection for mayor and city council. Scantagrity is an original conceptdeveloped by David Chaum and has been refined for use in electionsthrough the collaboration of Ron Rivest, MIT and Poorvi Vora, ComputingScience Department at George Washington University.Scantagrity’s implementation for the Takoma Park election allowedvoters the option of performing a post-voting verification of thecapture of their ballots for the tabulation phase of the election.Takoma Park voters also had the option of second chance voting, whichallowed the selection of primary and secondary choice for the publicoffices on Tuesday’s ballot.This marked the first time in the U.S. that voters had the option tocheck that their private votes are correctly recorded and included inthe election results. Selections on each ballot used unique codes foreach possible selection on the ballot. The codes correspond to theballot number. It is important to note, however, that ballots are notassociated with a specific voter. Poll book registration logging ofvoters participating in the election was separate from the issuance ofballots to voters.Voters were given ballots in a privacy sleeve. They then voted usingoptical scan ballots behind privacy screens, which allowed voters theoption of noting the codes and ballot numbers on a form they could takewith them. Voters then deposited completed ballots into one of twoscanners. Later, voters could verify that their ballot was included inthe final results by going to the City Election Office’s web site andentering the ballot number. The process was not as accessible forunassisted voting for persons vision related disabilities, whencompared with touch screen voting systems. However, the ability ofvoters with a wide range of disability challenges were able to voteindependently, or with little assistance with their privacy sleeveenclosed ballot’s insertion in the scanner.EPIC was asked to randomly select ballots from the choice of ballotsprovided to voters from each of the 6 wards. Over 1600 Takoma Parkvoters participated in the election. The audit ballots were selectedat varying times throughout the Election Day, under the supervision ofelection officials. Takoma Park elections officials voided each auditballot and marked ballots stubs to indicate that they were part of themanual audit. Then EPIC processed each manual audit ballot by revealingall possible selections for each ballot, then a copy of the originalmanual audit ballot was made. The original ballots were placed in aspoiled manual audit ballot envelope held by another election officialstationed in the polling location. Each ballot copy was then endorsedby the Chief Election Judge, which will aid in authentication of thecopies when they are submitted to the City Clerk’s office. The manualaudit ballots and their selections will be verified and the resultsreported to the Takoma Park Clerk’s office.Scantagrity: http://www.scantegrity.org/Links: Takoma Park Election’s Office: http://www.takomaparkmd.gov/clerk/election/2009/index.htmlTakoma Ballot verification Web page: http://scantegrity.org/takoma/checkcodesEPIC’s Voting Privacy Page: http://epic.org/privacy/voting/=======================================================================[6] News in Brief=======================================================================European Commission Takes Action Against United KingdomThe European Commission announced that the United Kingdom governmenthas failed to comply with Europe's ePrivacy Directive and DataProtection Directive. European laws state that European Union countriesmust ensure the confidentiality of electronic communications byprohibiting unlawful interception and surveillance. The Commission'sstatement specifically cited unlawful interception under the UnitedKingdom Regulation of Information Powers Act. This marks the secondphase of an infringement proceeding that was filed earlier this yearagainst the United Kingdom. The case follows complaints about the useof Phorm's Deep Packet Inspection technology.European Commission Statement: http://www.epic.org/redirect/110609commstmt.htmlPress Release on theInfringement Proceeding: http://www.epic.org/redirect/110609prelease.htmlePrivacy Directive: http://www.epic.org/redirect/110609eprivacy.htmlEurope's Data Protection Directive: http://www.epic.org/redirect/110609dataprotdir.htmlEPIC: Deep Packet Inspection: http://epic.org/privacy/dpi/default.htmlEPIC: Privacy and Human Rights Report: http://epic.org/phr06/Privacy Groups Urge Government to Ensure OpenInternetEPIC has signed on to a letter from Public Knowledge to the FederalCommunications Commission supporting the Commission's decision to beginpublic proceedings on preserving an open internet. EPIC joins manyother public interest groups who have also expressed support for theFCC's initiative. The Commission's proceedings will focus on proposedrulemaking policies that would preserve open internet. EPIC favors thegeneral principles of "network neutrality" and has called on theCommission to preserve privacy safeguards against measures thatInternet Service Providers may use to limit access to the internet. Formore information, see also EPIC Deep Packet Inspection.FCC Letter: http://www.publicknowledge.org/node/2711Public Knowledge: http://www.publicknowledge.org/FCC Proceedings: http://hraunfoss.fcc.gov/edocs_public/attachmatch/DOC-293997A1.pdfEPIC Deep Packet Inspection: http://epic.org/privacy/dpi/HHS Changes Breach Notification RulesThe Department of Health and Human Services issued new breachnotification regulations that require health care providers, healthplans, and business associates of covered entities, to notifyindividuals when their health information is breached. As an effort tostrengthen the Health Insurance Portability and Accountability Act, thenew rules subject business associates of covered entities to federallaw in this area for the first time. The Department also included aprovision that states a breach only occurs when access, use, ordisclosure of the data poses a significant risk of financial or otherharm to an individual, as determined by covered entities. These rulesimplement provisions of the Health Information Technology for Economicand Clinical Health Act, which was passed as part of the AmericanRecovery and Reinvestment Act.Department of Health and Human Services: http://hhs.gov/HITECH Breach Notification Interim Final Rule: http://edocket.access.gpo.gov/2009/pdf/E9-20169.pdfHHS Breach Notification Rule Page: http://www.epic.org/redirect/110609brnotif.htmlHIPAA: http://www.hhs.gov/ocr/privacy/hipaa/administrative/index.htmlHITECH Act: http://www.hitech-act.com/uploads/HITECH_Act_from_PL_111-005.pdfEPIC Medical Record Privacy: http://epic.org/privacy/medical/EPIC Submits Letter Requesting Participation in Privacy RoundtableThe Federal Trade Commission announced a series of roundtables onconsumer privacy, beginning December 7, 2009. These discussions willexplore many issues, including consumer information collection,information management practices, new business practices, and theadequacy of existing privacy laws. EPIC submitted a letter to theCommission requesting to participate in the first privacy roundtablediscussion. In its letter, EPIC made several recommendations to theCommission as it explores new internet consumer protection strategies.The recommendations include treating fair information practices as afundamental requirement for companies collecting personal data,focusing more attention on the major Internet firms that are shapingbusiness practices in the online environment, and investigating theextent to which security breaches contribute to identity theft.EPIC: Letter to the FTC: http://epic.org/privacy/ftc/Participation_Request.pdfFederal Trade Commission: http://www.ftc.govFTC Press Release: http://www.ftc.gov/opa/2009/09/privacyrt.shtmFTC Privacy Roundtable: https://public.commentworks.com/ftc/privacyroundtable1/EPIC FTC: http://epic.org/privacy/internet/ftc/FB Updates Privacy Policy in Response to Canadian InvestigationIn response to a September ruling by the Canadian Privacy Commissionerthat Facebook's business practices violated Canadian law, Facebookannounced a new privacy policy this week. In order to comply withCanada's Personal Information Protection and Electronic Documents Act,the new Facebook policy provides a more concise description of theprivacy practices of the developers of third-party applications. Italso explains more clearly what data Facebook retains and whatabilities users do and do not have to control their data stored onFacebook. The new policy was open to comments for one week and willpresumably be implemented sitewide soon.Facebook: New Privacy Policy: http://www.facebook.com/note.php?note_id=322194465300Facebook: Current Privacy Policy: http://www.facebook.com/policy.phpFacebook: New Third-Party Developer Policies: http://developers.facebook.com/policyEPIC: Facebook Privacy: http://epic.org/privacy/facebook/Office of the Privacy Commissioner of Canada: Facebook Findings: http://www.priv.gc.ca/cf-dc/2009/2009_008_0716_e.cfmReporter Confidentiality Law Moves Forward in SenateA revised version of the proposed federal media shield law movedforward in the Senate this week. The Free Flow of Information Act of2009 will make it more difficult for the government to compeljournalists to disclose information, including the identities of theirsources. The White House, which had previously endorsed a much weakerversion, has come out in favor of stronger statutory text whichrequires the government or other party requesting disclosure todemonstrate that the information sought is "essential" to a case andall reasonable alternatives have been exhausted. A judge would thenbalance the case for disclosure against the public interest ineffective journalism. A version of the bill was passed by the Houseearlier this year, and with the Obama administration's support, theSenate Judiciary Committee passed the revised bill this week, sendingit to the full Senate for a vote.Senate: S. 448 - Free Flow of Information Act of 2009: http://thomas.loc.gov/cgi-bin/query/z?c111:S.+448:H.R. 985 - Free Flow of Information Act of 2009: http://thomas.loc.gov/cgi-bin/query/z?c111:H.R.+985:Amendment 9794 to S. 448 (White House-supported revised version): http://judiciary.senate.gov/upload/SubHEN09794.pdfAmendment 9860 to S. 448: http://judiciary.senate.gov/upload/HEN09860MediaShield.pdf=======================================================================[7] EPIC Bookstore: "Privacy By Design . . . Take the Challenge"======================================================================="Privacy By Design . . . Take the Challenge" by Ann Cavoukian, Ph.D.Available at: http://www.ipc.on.ca/english/Home-Page/Ann Cavoukian is a rare breed—a government official working withprivacy and technology who genuinely seems to understand both. InPrivacy By Design, the current Information and Privacy Commissioner ofOntario Canada proves it. Dr. Cavoukian's recent work compiles a numberof reports, guidelines, speeches, and essays published by her and heroffice in recent years. These various pieces combine to show acomprehensive approach to privacy in a modern world.Dr. Cavoukian's work over the last twenty years has been a steadyevolution of ideas. In 1995, she promoted Privacy-EnhancingTechnologies (PETs) with the Netherlands Data Protection Authority.This term has been instrumental in guaranteeing the continued presenceof privacy protections by building them into technology. Later in thedecade, she argued for the concept of "privacy by design," a philosophyin which privacy is embedded into the technology itself duringdevelopment, such that privacy and data protection become part ofdesigners' original goals. While this view has become more prominent,Dr. Cavoukian was instrumental in its adoption.In her current work, Dr. Cavoukian expands her idea of PETs into a newconcept, which she calls "PETs Plus." This concept is the idea thatprivacy needs not be part of a zero-sum model, in which increasingprivacy comes at a cost to efficacy. Instead, Cavoukian argues for apositive-sum model, in which privacy can be increased alongsidesecurity, or alongside business practices, so that focusing on dataprotection has only net benefits for designers and implementers oftechnology.Many of the essays in Privacy by Design include examples of these PETsPlus, and many of them are quite impressive. In her discussion of CCTV,Dr. Cavoukian describes a new development in which people's images inthe video stream are encrypted. This allows a person to monitor thevideo live for suspicious behavior without ever seeing anyone'sidentity. If the video contains evidence of a crime, proper lawenforcement officials can decrypt that section, with a suitable audittrail ensuring that only the necessary information is decrypted.Another excellent PET Plus is a design from IBM for radio frequencyidentification (RFID) tags that can be disabled or even reprogrammed bythe consumer, which would allow the tags to be useful in inventory andsales management, while giving individuals the ability to decideexactly how they will be used at home. Dr. Cavoukian also discusses anadvanced method for securing and encrypting biometric authenticationsystems, and privacy-maximizing best practices for a number of securityprocesses, including CCTV, RFID in healthcare, and airportsearches. Privacy By Design is a must-read for anyone in the securityor privacy fields looking for the best approach to new technology.--Jared Kaprove================================EPIC Publications:"Litigation Under the Federal Open Government Laws 2008," edited byHarry A. Hammitt, Marc Rotenberg, John A. Verdi, and Mark S. Zaid(EPIC 2008). Price: $60.http://epic.org/bookstore/foia2008/ Litigation Under the Federal Open Government Laws is the mostcomprehensive, authoritative discussion of the federal open accesslaws. This updated version includes new material regarding thesubstantial FOIA amendments enacted on December 31, 2007. Many of therecent amendments are effective as of December 31, 2008. The standardreference work includes in-depth analysis of litigation under Freedomof Information Act, Privacy Act, Federal Advisory Committee Act,Government in the Sunshine Act. The fully updated 2008 volume is the24th edition of the manual that lawyers, journalists and researchershave relied on for more than 25 years.================================"Information Privacy Law: Cases and Materials, Second Edition" DanielJ. Solove, Marc Rotenberg, and Paul Schwartz. (Aspen 2005). Price: $98.http://www.epic.org/redirect/aspen_ipl_casebook.htmlThis clear, comprehensive introduction to the field of informationprivacy law allows instructors to enliven their teaching of fundamentalconcepts by addressing both enduring and emerging controversies. TheSecond Edition addresses numerous rapidly developing areas of privacylaw, including: identity theft, government data mining and electronicsurveillance law, the Foreign Intelligence Surveillance Act,intelligence sharing, RFID tags, GPS, spyware, web bugs, and more.Information Privacy Law, Second Edition, builds a cohesive foundationfor an exciting course in this rapidly evolving area of law.================================"Privacy & Human Rights 2006: An International Survey of Privacy Lawsand Developments" (EPIC 2007). Price: $75.http://www.epic.org/phr06/This annual report by EPIC and Privacy International provides anoverview of key privacy topics and reviews the state of privacy in over75 countries around the world. The report outlines legal protections,new challenges, and important issues and events relating to privacy.Privacy & Human Rights 2006 is the most comprehensive report on privacyand data protection ever published.================================"The Public Voice WSIS Sourcebook: Perspectives on the World Summit onthe Information Society" (EPIC 2004). Price: $40.http://www.epic.org/bookstore/pvsourcebookThis resource promotes a dialogue on the issues, the outcomes, and theprocess of the World Summit on the Information Society (WSIS). Thisreference guide provides the official UN documents, regional andissue-oriented perspectives, and recommendations and proposals forfuture action, as well as a useful list of resources and contacts forindividuals and organizations that wish to become more involved in theWSIS process.================================"The Privacy Law Sourcebook 2004: United States Law, International Law,and Recent Developments," Marc Rotenberg, editor (EPIC 2005). Price:$40.http://www.epic.org/bookstore/pls2004/The Privacy Law Sourcebook, which has been called the "Physician's DeskReference" of the privacy world, is the leading resource for students,attorneys, researchers, and journalists interested in pursuing privacylaw in the United States and around the world. It includes the fulltexts of major privacy laws and directives such as the Fair CreditReporting Act, the Privacy Act, and the OECD Privacy Guidelines, aswell as an up-to-date section on recent developments. New materialsinclude the APEC Privacy Framework, the Video Voyeurism Prevention Act,and the CAN-SPAM Act.================================"Filters and Freedom 2.0: Free Speech Perspectives on Internet ContentControls" (EPIC 2001). Price: $20.http://www.epic.org/bookstore/filters2.0A collection of essays, studies, and critiques of Internet contentfiltering. These papers are instrumental in explaining why filteringthreatens free expression.================================EPIC publications and other books on privacy, open government, freeexpression, crypto and governance can be ordered at:EPIC Bookstorehttp://www.epic.org/bookstore================================EPIC also publishes EPIC FOIA Notes, which provides brief summaries ofinteresting documents obtained from government agencies under theFreedom of Information Act.Subscribe to EPIC FOIA Notes at:https:/mailman.epic.org/mailman/listinfo/foia_notes=======================================================================[8] Upcoming Conferences and Events=======================================================================Biometrics and the Law, Georgetown Law Center, Washington, DC, November10, 2009.For more information:http://www.law.georgetown.edu/Faculty/events/Louis Brandeis and the Development of the Right to Privacy, AmericanConstitution Society, Center for American Progress, Washington, DC,November 10, 2009.For more information:http://www.acslaw.org/node/14480Free Society Conference and Nordic Summit, Gothenburg, Sweden, November13-15, 2009.For more information:http://www.fscons.orgUN Internet Governance Forum, Sharm El Sheikh, Egypt, November 15-18,2009.For more information:http://www.intgovforum.org/Privacy 2010, Stanford, March 23 - 25, 2010.For more information:http://codex.stanford.edu/privacy2010=======================================================================Join EPIC on Facebook=======================================================================Join the Electronic Privacy Information Center on Facebookhttp//facebook.com/epicprivacyhttp://epic.org/facebookStart a discussion on privacy. Let us know your thoughts.Stay up to date with EPIC's events.Support EPIC.=======================================================================Privacy Policy=======================================================================The EPIC Alert mailing list is used only to mail the EPIC Alert and tosend notices about EPIC activities. We do not sell, rent or share ourmailing list. We also intend to challenge any subpoena or other legalprocess seeking access to our mailing list. We do not enhance (link toother databases) our mailing list or require your actual name.In the event you wish to subscribe or unsubscribe your e-mail addressfrom this list, please follow the above instructions under "subscriptioninformation."=======================================================================About EPIC=======================================================================The Electronic Privacy Information Center is a public interest researchcenter in Washington, DC. It was established in 1994 to focus publicattention on emerging privacy issues such as the Clipper Chip, theDigital Telephony proposal, national ID cards, medical record privacy,and the collection and sale of personal information. EPIC publishes theEPIC Alert, pursues Freedom of Information Act litigation, and conductspolicy research. For more information, see http://www.epic.org or writeEPIC, 1718 Connecticut Ave., NW, Suite 200, Washington, DC 20009. +1 202483 1140 (tel), +1 202 483 1248 (fax).=======================================================================Donate to EPIC=======================================================================If you'd like to support the work of the Electronic Privacy InformationCenter, contributions are welcome and fully tax-deductible. Checksshould be made out to "EPIC" and sent to 1718 Connecticut Ave., NW,Suite 200, Washington, DC 20009. Or you can contribute online at:http://www.epic.org/donateYour contributions will help support Freedom of Information Act andFirst Amendment litigation, strong and effective advocacy for the rightof privacy and efforts to oppose government regulation of encryption andexpanding wiretapping powers.Thank you for your support.=======================================================================Subscription Information=======================================================================Subscribe/unsubscribe via web interface:http://mailman.epic.org/mailman/listinfo/epic_newsBack issues are available at:http://www.epic.org/alertThe EPIC Alert displays best in a fixed-width font, such as Courier.------------------------- END EPIC Alert 16.21 ------------------------.