Newly declassified government report confirms for the first time that U.S. intelligence and spy agencies purchase vast amounts of commercially available information on Americans, including data from connected vehicles, web browsing data, and smartphones.
By the U.S. government’s own admission, the data it purchases “clearly provides intelligence value,” but also “raises significant issues related to privacy and civil liberties.”
The Office of the Director of National Intelligence (ODNI) declassified and released the January 2022-dated report on Friday, following a request by Sen. Ron Wyden (D-OR) to disclose how the intelligence community uses commercially available data. This kind of data is generated from internet-connected devices and made available by data brokers for purchase, such as phone apps and vehicles that collect granular location data and web browsing data that tracks users as they browse the internet.
The declassified report is the U.S. government’s first public disclosure revealing the risks associated with commercially available data of Americans that can be readily purchased by anyone, including adversaries and hostile nations. The United States does not have a privacy or data protection law governing the sharing or selling of Americans’ private information.
“In a way that far fewer Americans seem to understand, and even fewer of them can avoid, [commercially available information] includes information on nearly everyone that is of a type and level of sensitivity that historically could have been obtained” by other intelligence gathering capabilities, such as search warrants, wiretaps and surveillance, the report says.
In a statement following the report’s publication, Wyden said: “This review shows the government’s existing policies have failed to provide essential safeguards for Americans’ privacy, or oversight of how agencies buy and use personal data.”
“According to this report, the ODNI does not even know which federal intelligence agencies are buying Americans’ personal data,” Wyden added.
The report corroborates a stream of media reports that found U.S. government agencies were buying huge datasets on Americans. The Internal Revenue Service bought access to a huge database storing the location data of millions of Americans’ phones to try to catch tax cheats, while similar phone location data was used by Homeland Security for immigration enforcement.
Government agencies must typically secure a court-approved warrant to obtain Americans’ private data directly from a phone or tech company, such as private messages. But the ODNI’s report states that in the cases where Americans’ information — like location data — is openly for sale to the general public, U.S. intelligence agencies can purchase it. (Though, this theory has yet to be scrutinized in federal court.)
Although this data is generally sold in bulk — often millions of data points at a time — the ODNI’s report warns that commercially available data can be easily deanonymized to identify individuals, including Americans. Location data, for example, can be used to infer where people live and work, based on where their phones and vehicles are at certain times of the day.
Commercially available information can also reveal “the detailed movements and associations of individuals and groups, revealing political, religious, travel, and speech activities,” the report says, such as being used to “identify every person who attended a protest or rally based on their smartphone location or ad-tracking records.”
“In the wrong hands, sensitive insights gained through [commercially available information] could facilitate blackmail, stalking, harassment, and public shaming,” the report said. The report noted that in 2021, commercially available location data collected from a gay dating app was used to out a Catholic priest, who later resigned. The report also referenced the collection and sale of location data from a Muslim prayer app to the U.S. military.
Wyden called for Congress to pass legislation to “put guardrails around government purchases, to rein in private companies that collect and sell this data, and keep Americans’ personal information out of the hands of our adversaries.”
US National Security Agency (NSA) director Paul Nakasone has confirmed that the agency purchases personal data from web brokers without a warrant.
In a letter to Democratic Senator Ron Wyden, the agency’s director stated that the data collected by the NSA, “may include information associated with electronic devices being used outside - and, in certain cases, inside - the United States."
Senator Wyden, who is an advocate of internet freedom and the right to privacy, stated that, "such records can identify Americans who are seeking help from a suicide hotline or a hotline for survivors of sexual assault or domestic abuse."
Academy Award®-winning director Oliver Stone, who brought Platoon, Born on the Fourth of July, Wall Street and JFK to the big screen, tackles the most important and fascinating true story of the 21st century. Snowden, the politically-charged, pulse-pounding thriller starring Joseph Gordon-Levitt and Shailene Woodley, reveals the incredible untold personal story of Edward Snowden, the polarizing figure who exposed shocking illegal surveillance activities by the NSA and became one of the most wanted men in the world. He is considered a hero by some, and a traitor by others. No matter which you believe, the epic story of why he did it, who he left behind, and how he pulled it off makes for one of the most compelling films of the year.
Calls for data regulation at the highest level
Senator Wyden argues that the use of personal information without consent and knowledge is illegal and that the NSA should submit all of its collected data on individuals to a database, so that the agency adheres to the same standards imposed by the Federal Trade Commission (FTC) on other organizations. Data that does not fall within these standards would then be purged from use.
Wyden recently stopped incoming NSA director Timothy Haugh from serving as director, prompting the NSA to confirm the purchase of personal data. Wyden had been seeking this confirmation for almost three years in his battle to ensure that the personal data of American citizens remains personal.
Wyden is a senior member of the Senate Intelligence Committee which provides oversight on the activities of US intelligence agencies. The Defense Intelligence Agency also previously confirmed its purchase and use of personal data collected from the phones of Americans in 2021.
The NSA responded to Wyden in an email explaining that the agency passes individual data through “technical filters” at all stages of the collection process, and the data they do gather is used for national and cybersecurity purposes.
Via Reuters