--------------------------------------------------------------- EPIC DIGEST AT PRIVACY.ORG EPIC-DIGEST is a weekly update of news, information, and action items posted on privacy.org. September 5-26, 2001 TOC------------------------------------------------------------ NEWS Official Secrets Act Update Police Monitor Web for Gang Activity Government Not Acting on Privacy Bush to Announce Stand on Privacy Man Uses Spyware to Monitor Former Spouse EU: Echelon Exists Monster.com: Privacy Risk CFP 2002: Submit Proposals, Papers EPIC Urges Judiciary to End Workplace Monitoring TILJ on GLBA, Cybercrime, HIPAA, and More Poll: Canadians Want Opt-In Privacy Attorney Challenges Copy Protection System Hollings to Introduce Copy Protection Requirements Bill Agre: Outlaw Facial Recognition in Public Places Crime Spending Enormous, Unexamined Ctibank Sued for Privacy Violations X10 Cameras Used for Voyeurism Group Warns of Privacy Implications of the Drug War Federal Police Monitoring Web After Attack Activists Defend Civil Liberties in Wake of Attack Police Have Broad Powers to Fight Terrorism ISPs Monitoring Postings MS Passport Opened to Competitors Judicial Conference Releases Policies on Monitoring, ECF Congress Considers Anti-Terrorism Bill Coalition Defends Freedom in Time of Crisis Goodlatte: More Encryption Needed Facial Recognition Considered for Airports FTC To Hold Financial Privacy Workshop ACTION Defend Your Freedoms NEWS----------------------------------------------------------- Official Secrets Act Update The Official Secrets Act (OSA), statutory language that proscribes the leaking of classified information, will not be included in a intelligence authorization bill. The Bush administration indicated that it would not support the provision. Bid to Crack Down On Leaks Is Put Off, Washington Post, September 5, 2001. http://www.washingtonpost.com/wp-dyn/articles/A42544-2001Sep4.html --------------------------------------------------------------- Police Monitor Web for Gang Activity Police have been monitoring gang communications on the web as more gang members are creating web sites complete with membership applications and threats to rival gangs. Authorities Watching Gang Web Sites, Los Angeles Times (AP), September 4, 2001. http://www.latimes.com/technology/wire/sns-ap-gang-web-sites0905sep04.story --------------------------------------------------------------- Government Not Acting on Privacy An article in the New York Times reports that although the public shows strong support for privacy, government has been unwilling to pass legislation to protect privacy. Government Is Wary of Tackling Online Privacy, New York Times, September 6, 2001. http://www.nytimes.com/2001/09/06/technology/06COOK.html As Big PC Brother Watches, Users Encounter Frustration, New York Times, September 5, 2001. http://www.nytimes.com/2001/09/05/technology/05COOK.html --------------------------------------------------------------- Bush to Announce Stand on Privacy The Bush administration is preparing a position on privacy policy and spam and will announce it shortly. In addition, the National Telecommunications and Information Administration (NTIA) has been directed to propose a system to address spam. Bush addresses spam and online privacy, ZDNET (Reuters), September 5, 2001. http://www.zdnet.com/zdnn/stories/news/0,4586,5096616,00.html --------------------------------------------------------------- Man Uses Spyware to Monitor Former Spouse Michigan Attorney General Jennifer Granholm has brought a case against a man who allegedly used spyware to monitor his former spouse. The spyware automatically e-mailed the former spouse¹s keystokes and Internet communications on regular intervals. Man Accused of Installing Spy Software, Los Angeles Times (AP), September 6, 2001. http://www.latimes.com/technology/wire/sns-ap-hackers-charged0906sep06.story --------------------------------------------------------------- EU: Echelon Exists The European Union (EU) voted to accept a report alleging that the Echelon surveillance network exists. The EU has recommended that European countries develop encryption systems to counter Echelon. Echelon Spying Network Exists, EU Committee Says, Newsbytes, September 5, 2001. http://www.newsbytes.com/news/01/169770.html European Parliament OKs Spy Plan, Yahoo News, September 5, 2001. http://dailynews.yahoo.com/htx/ap/20010905/wl/eu_echelon_1.html Report, (PDF) EU Report http://www2.europarl.eu.int/omk/OM-Europarl?PROG=REPORT&L=EN&PUBREF=- //EP//TEXT+REPORT+A5-2001-0264+0+NOT+SGML+V0//EN&LEVEL=2WORD European Parliament resolution on the existence of a global system for the interception of private and commercial communications (ECHELON interception system). http://www3.europarl.eu.int/omk/omnsapir.so/pv2?PRG=DOCPV&APP=PV2&LANGUE= EN&SDOCTA=21&TXTLST=1&POS=1&Type_Doc=RESOL&TPV=PROV&DATE=050901&PrgPrev= TYPEF@A5|PRG@QUERY|APP@PV2|FILE@BIBLIO01|NUMERO@264|YEAR@01|PLAGE@1&TYPEF= A5&NUMB=1&DATEF=010905] European Parliament adopts Echelon report, CNN, September 7, 2001. http://www.cnn.com/2001/TECH/internet/09/07/echelon.report.idg/index.html --------------------------------------------------------------- Monster.com: Privacy Risk A newly-release report by the Privacy Foundation has found that Monster.com, the online employment web site, presents serious privacy risks to users. Monster.com has considered selling personal information from resumes to marketers. Click, You¹re HiredŠOr tracked, Privacy Foundation report. http://www.privacyfoundation.org/privacywatch/monster.asp Systemic' Privacy Abuses At Monster.com Report, Newsbytes, September 5, 2001. http://www.newsbytes.com/news/01/169779.html --------------------------------------------------------------- CFP 2002: Submit Proposals, Papers The Twelfth Conference on Computers, Freedom, and Privacy is to be held in San Francisco in April 2002. The conference organizers are requesting proposals for panel topics. Any member of the public can suggest a topic on issues including global activitism; technology and monopoly; voting technology and democracy; technology and weapons; ICANN and Internet governance; borders and censorship; digital divide; biometric systems; consumer privacy; wireless privacy and security; hacktivism; intellectual property and intellectual freedom; digital rights management and privacy; public records and private lives. CFP organizers are also soliciting papers on Digital Rights Management (DRM) technologies and the Fair Use doctrine. CFP 2002 Web Site. http://www.cfp2002.org/ CFP Call for Proposals. http://www.cfp2002.org/participation/ --------------------------------------------------------------- EPIC Urges Judiciary to End Workplace Monitoring EPIC Executive Director Marc Rotenberg urged the Judicial Conference of the United States to end workplace monitoring of judges and their staff. Rotenberg argued that such monitoring could violate the Electronic Communications Privacy Act of 1986 (ECPA) EPIC Letter to the Judicial Conference. http://www.epic.org/privacy/workplace/judicialmonitoring.html Congressmen Urge Rehnquist To Oppose E-Mail Monitoring, Wall Street Journal (AP), September 7, 2001 (subscription required). http://interactive.wsj.com/articles/SB999896222319834926.htm Judicial Leaders Mull Web Monitoring, Yahoo News (AP), September 10, 2001. http://dailynews.yahoo.com/h/ap/20010910/tc/judges_privacy_1.html --------------------------------------------------------------- TILJ on GLBA, Cybercrime, HIPAA, and More The September issue of the Internet Law Journal (TILJ) includes writings on Gramm-Leach-Bliley Act (GLBA) compliance, Cybercrime, the HIPAA Privacy Rule, and online profiling. Practical Compliance Tips for Use of Electronic Disclosures, TILJ, September 2001. http://www.tilj.com/content/ecomarticle09040102.htm Federal CyberCrime Fighting Programs: An Overview, TILJ, September 2001. http://www.tilj.com/content/litigationheadline09040101.htm GLB Information Security Requirements, TILJ, September 2001. http://www.tilj.com/content/ecomarticle09040103.htm HIPAA Privacy Rule Guidelines, TILJ, September 2001. http://www.tilj.com/content/healtharticle09040101.htm Online Data Profiling and Internet Privacy Regulation, TILJ, September 2001. http://www.tilj.com/content/ecomheadline09040101.htm --------------------------------------------------------------- Poll: Canadians Want Opt-In Over 80% of respondents in a Canada-wide survey reported that they favored an opt-in system for use and sharing of personal information. 61% reported that they wanted an end to all telemarketing calls, even if such a prohibition resulted in loss of opportunity. Canadians want Opt-In approach to data use for marketing (PDF), PIAC Study. http://www.piac.ca/Directmarketing%20survey%20E.pdf --------------------------------------------------------------- Privacy Attorney Challenges Copy Protection System Ira Rothken, a California attorney who has brought suit against online profiler DoubleClick, is now challenging a privacy-invasive copy protection system. Rothken is suing Fahrenheit Entertainment and Sunncomm for violating the privacy of music purchasers by employing copy protection systems that eliminate the possibility of anonymous music listening. The copy protection system gives no warning to consumers that they cannot listen to compact disks on a computer anonymously. In addition, it is bundled with a program that tracks user identity, listening habits, and downloading habits. Rothken alleges that these practices violate privacy law and California consumer protection law. Complaint in DeLise v. Fahrenheit Entertainment (PDF). http://www.techfirm.com/mccomp.pdf Lawsuit targets copy-protected CDs, CNET, September 7, 2001. http://two.digital.cnet.com/cgi-bin2/flo?y=eB8r0Gasa0U0eMG0AH --------------------------------------------------------------- Hollings to Introduce Copy Protection Requirements Bill Senator Hollings (D-SC), Chair of the Senate Commerce Committee, is planning to introduce legislation that would compel electronics manufacturers to embed copy protection controls in their products. The Security Systems Standards and Certification Act (SSSCA) will have significant effects on privacy, free speech, and the rights of content owners. New Copyright Bill Heading to DC, Wired, September 7, 2001. http://www.wired.com/news/politics/0,1283,46655,00.html --------------------------------------------------------------- Agre: Outlaw Facial Recognition in Public Places Professor Philip Agre has published an essay in opposition to the use of facial recognition in public places. Agre argues that use of the technology should be outlawed, as it could be used for tracking humans¹ movements, the data from the systems could be combined with other biometric identifiers, the systems are employed without effective notice or consent, and it can be used by governments to oppress citizens. Your Face Is Not a Bar Code: Arguments Against Automatic Face Recognition in Public Places, Agre Web Site. http://dlis.gseis.ucla.edu/people/pagre/bar-code.html --------------------------------------------------------------- Crime Spending Enormous, Unexamined Congress has authorized $30 billion in anti-crime spending over the past six years despite the fact that crime has decreased consistently since 1994. Crime spending is largely arbitrary, based on current fads in the criminal justice profession, and is rarely examined for effectiveness in stemming criminal behavior. A Look At . . . Congress's Anti-Crime Spree, Washington Post, September 9, 2001. http://www.washingtonpost.com/wp-dyn/articles/A63146-2001Sep8.html --------------------------------------------------------------- Citibank Sued for Privacy Violations A suit has been brought against Citibank for the disclosure of private information about accountholders to telemarketers. The suit alleges that Citibank provided information that would allow telemarketers to charge customers¹ credit cards without authorization. Citibank Subject Of Privacy Lawsuit, Information Week, Sep 06, 2001. http://www.informationweek.com/news/IWK20010906S0017 --------------------------------------------------------------- X10 Cameras Used for Voyeurism X10 cameras, tiny surveillance devices that can be monitored remotely, increasingly are being used by voyeurs to spy on people. The company employs irresponsible advertising that suggests that the cameras can be used to spy on women. One ad pictures the bare back of a woman and reads, "Quit spying on people! (we never told you to do that)." The cameras have been found in college shower rooms, attorneys¹ offices, and corporate offices. Proliferation of tiny wireless cameras worries privacy advocates, Boston Globe, September 10, 2001. http://www.siliconvalley.com/docs/news/svfront/027254.htm --------------------------------------------------------------- Group Warns of Privacy Implications of the Drug War A coalition of civil liberties groups sent a letter to the Senate Judiciary Committee warning that new technologies applied in the war on drugs may diminish privacy and other rights. The coalition urged the Committee to consider privacy when evaluating John Walters, the current nominee for the Director of National Drug Control Policy. Free Congress Letter to Senate Judiciary. http://www.freecongress.org/centers/technology/ccl/lett010910.htm --------------------------------------------------------------- Federal Police Monitoring Web After Attack Wired news reports that federal police have stepped-up surveillance of the Internet after devastating terrorist attacks on the World Trade Center and the Pentagon. FBI agents approached a major network service provider with the Carnivore system and requested to install the monitoring device. Also, the Hotmail web-based e-mail service is providing information about specific accounts under suspicion. Anti-Attack Feds Push Carnivore, Wired, September 12, 2001. http://www.wired.com/news/politics/0,1283,46747,00.html --------------------------------------------------------------- Activists Defend Civil Liberties in Wake of Attack Congress is approving new legislation that would greatly expand wiretapping powers of police as a result of the attack on the World Trade Center and the Pentagon. In response, a number of civil liberties activists have opposed new restrictions on freedoms. Departments of Commerce, Justice, and State, the Judiciary, and Related Agencies Appropriations Act, 2002, THOMAS Database. http://thomas.loc.gov/cgi-bin/bdquery/z?d107:h.r.2500: Civil Rights the Next Casualty?, Wired, September 13, 2001. http://www.wired.com/news/politics/0,1283,46784,00.html FBI looking to Internet for terrorism clues, Siliconvalley (AP), September 12, 2001. http://www.siliconvalley.com/docs/news/tech/018876.htm Privacy Trade-Offs Reassessed, Washington Post, September 12, 2001. http://www.washingtonpost.com/wp-dyn/articles/A21207-2001Sep12.html ISPs aid FBI in terrorist search, CNET, September 13, 2001. http://news.cnet.com/news/0-1005-200-7141812.html Senate OKs Expanding Wiretap Law, Newsday (AP), September 13, 2001. http://www.newsday.com/news/nationworld/wire/sns-ap-attacks-wiretapping 0913sep13.story?coll=sns%2Dap%2Dnationworld%2Dheadlines Intelligence: Spying on Terrorists and Thwarting Them, New York Times, September 14, 2001 (registration required). http://www.nytimes.com/2001/09/14/national/14INTE.html Terrorism Bills Revive Civil Liberties Debate, Washington Post, September 14, 2001. http://www.washingtonpost.com/wp-dyn/articles/A28636-2001Sep14.html Activist Groups on Lookout for Erosion of Civil Liberties Law, Los Angeles Times, September 14, 2001. http://www.latimes.com/news/nationworld/nation/la-091401legal.story --------------------------------------------------------------- Police Have Broad Powers to Fight Terrorism Law enforcement agents possess broad authority to detain persons when investigating acts of terrorism. Federal law allows police to detain a person as a material witness where there is probable cause showing that the suspect has information important to an investigation. Senate Expands Surveillance Powers Following Attacks, Newsbytes, September 16, 2001. http://www.washtech.com/news/regulation/12505-1.html Investigators Explore Boundaries of Everything the Law Allows, New York Times, September 17, 2001 (registration required). http://www.nytimes.com/2001/09/17/national/17CIVI.html? Pen Registers and Trap and Trace Devices , Tech Law Journal Daily Report, September 17, 2001. http://www.techlawjournal.com/alert/2001/09/17.asp --------------------------------------------------------------- ISPs Monitoring Postings Internet Service Providers have increased monitoring of web posts to prevent publication of pro-terrorist speech and anti-Islamic messages. I.S.P.'s Curb Terrorist Postings and an Anti-Islamic Backlash, New York Times, September 17, 2001 (registration required). http://www.nytimes.com/2001/09/17/technology/17WEB.html? Scouring the Internet in Search of the Tracks of Terrorists, New York Times, September 17, 2001 (registration required). http://www.nytimes.com/2001/09/17/technology/17CRYP.html? --------------------------------------------------------------- MS Passport Opened to Competitors Microsoft has announced that the company will open the Passport system so that it will be compatible with rival identification systems. This will allow users to authenticate their identity using the Passport system without a data transfer to Microsoft. Microsoft's Passport Sign-On System Will Work on Rival Sites, New York Times, September 20, 2001 (registration required). http://www.nytimes.com/2001/09/20/technology/20SOFT.html/ Microsoft Plans to Open Its Passport Service to Rivals, Wall Street Journal, September 20, 2001 (subscription required). http://public.wsj.com/sn/y/SB1000946647768316160.html --------------------------------------------------------------- Judicial Conference Releases Policies on Monitoring, ECF The Judicial Conference of the United States, the main policymaking body for the federal courts, has released policies on employee Internet monitoring and the administration of electronic case files (ECF). The Judicial Conference withdrew a policy for further consideration in committee that eliminated all expectation of privacy in the workplace. Electronic case file policy mandates that the courts restrict personal identifiers on files in order to increase privacy protection. Judicial Conference Approves Recommendations on Electronic Case File Availability and Internet Use, (PDF) Administrative Offices of the U.S. Courts, September 19, 2001. http://www.uscourts.gov/Press_Releases/jc901a.pdf --------------------------------------------------------------- Congress Considers Anti-Terrorism Bill The Bush Administration will introduce a major anti-terrorism package in Congress today. The package, titled the "Mobilization Against Terrorism Act," will have serious privacy and civil liberties implications. EPIC Analysis of the Anti-Terrorism Act of 2001, EPIC Web Site. http://www.epic.org/privacy/terrorism/ata_analysis.html Mobilization Against Terrorism Act, Cryptome. http://www.cryptome.org/mata.htm Concern Over Proposed Changes in Internet Surveillance, New York Times, September 21, 2001 (registration required). http://www.nytimes.com/2001/09/21/technology/21CYBERLAW.html CDT Page on the Legislative Response, CDT Web Site. http://www.cdt.org/security/010911response.shtml The Home Front: Security and Liberty, New York Times, September 23, 2001 (registration required). http://www.nytimes.com/2001/09/23/opinion/23SUN1.html Oxley Seeking Wiretapping Add, Multichannel News, September 23, 2001. http://article.multichannel.com/UM/T.ASP?A6.9.740.6.1310563326 --------------------------------------------------------------- Coalition Defends Freedom in Time of Crisis A broad coalition of civil liberties, religious, consumer, and other advocacy groups has organized to defend American freedoms in the wake of terrorist attacks against the country. The coalition has released a ten-point statement that urges legislators to consider new proposals calmly and deliberately and to protect the civil liberties that define the American way of life. In Defense of Freedom. http://www.indefenseoffreedom.org/ Anti-Terror Push Stirs Fears for Liberties, Rights Groups Unite To Seek Safeguards, Washington Post, September 17, 2001. http://www.washingtonpost.com/wp-dyn/articles/A46828-2001Sep17.html --------------------------------------------------------------- Goodlatte: More Encryption Needed Representative Bob Goodlatte (R-VA) is advocating more use of encryption among citizens and government to increase security on the Internet. Goodlatte¹s exhortation comes after proposals to mandate the use of "key-escrow" encryption, a system where the government would hold the key to open all encrypted communications. Lawmaker: More encryption needed, ZDNet (Reuters), September 24, 2001. http://www.zdnet.com/zdnn/stories/news/0,4586,5097301,00.html --------------------------------------------------------------- Facial Recognition Considered for Airports In light of the terrorist attacks on the World Trade Center and on the Pentagon, facial recognition systems may be employed at airports. EPIC Face Recognition Web Page. http://www.epic.org/privacy/facerecognition/ Facial Recognition System Considered For U.S. Airports, Washington Post, September 23, 2001. http://www.washingtonpost.com/wp-dyn/articles/A14273-2001Sep23.html Visionics Corporation Announces Framework For Protecting Civilization From The Faces Of Terror, Yahoo News, September 24, 2001. http://biz.yahoo.com/bw/010924/240631_1.html Protecting Civilization from the Faces of Terror: A Primer on the Role Facial Recognition Technology Can Play in Improving Airport Security, (PDF) Visionics White Paper. http://www.visionics.com/newsroom/downloads/whitepapers/counterterrorism.pdf --------------------------------------------------------------- FTC To Hold Financial Privacy Workshop The Federal Trade Commission (FTC) will hold a workshop in December 2001 intended to assist companies with writing privacy policies that comply with Gramm-Leach-Bliley. In July 2001, financial, insurance, and brokerage institutions were required by federal law to send customers a privacy policy and the opportunity to opt-out from information sharing. Many of the policies sent were written in confusing legalese. Workshop Planned To Discuss Strategies for Providing Effective Financial Privacy Notices, FTC Press Release, September 24, 2001. http://www.ftc.gov/opa/2001/09/glbwkshop.htm Workshop To Help Banks Offer Plain-English Privacy Policies, Newsbytes, September 24, 2001. http://www.newsbytes.com/news/01/170440.html ACTION--------------------------------------------------------- Defend Your Freedoms Endorse the ten-point statement that has been joined by over 150 advocacy organizations. In Defense of Freedom Statement http://www.indefenseoffreedom.org/ Endorse the Statement http://www.indefenseoffreedom.org/endorse.html --------------------------------------------------------------- Privacy.org is a joint project of the Electronic Privacy Information Center (http://www.epic.org) and Privacy International (http://www.privacyinternational.org). For more information, e-mail Chris Hoofnagle at digest-editor@privacy.org. --------------------------------------------------------------- How to unsubscribe from EPIC-DIGEST: You can leave the EPIC-DIGEST by entering the subscription e-mail address at http://www.privacy.org/digest.php and selecting "unsubscribe." Or, you can send a blank e-mail message to EPIC-DIGEST@lists.epic.org from the subscribed address with the following text in the subject line: unsubscribe If you experience difficulty with subscription issues, send a message to digest-editor@privacy.org. --------------------------------------------------------------- EPIC-DIGEST Privacy Policy: http://www.privacy.org/privacy.php --------------------------------------------------------------- END EPIC-DIGEST