Wednesday, August 5, 2009

Travel Screening and The PASS Act

  • In the other chamber of Congress, the PASS ID Act (S. 1261) introduced in the Senate on June 15th contains a provision in Section 242 (a) (1) (B) that “no person shall be denied boarding a commercial aircraft solely on the basis of failure to present a driver’s license or identification card issued pursuant to this subtitle.”  This is part of a terrible bill, which we strongly oppose. We agree completely with Jim Harper’s take that this is merely a “lite” version of a national ID law, and that there is no good reason to “replace” the REAL ID Act rather than simply repeal it.  The PASS ID Act would still leave loopholes for the TSA to deny “permisison” to travel on other grounds, such as failure to “cooperate with screening”. But we welcome the initiative — again, the first such in the Senate since the creation of the TSA — to anticipate and preclude a TSA assertion of new authority. (The PASS ID Act would also make it a “unlawful for any person, knowingly and without lawful authority– (1) to scan the information contained in the machine readable component of a driver’s license or identification card; or (2)(A) to resell, share or trade that information with any other third parties; (B) track the use of a driver’s license or identification card; or (C) store the information collected.”  This provision is apparently intended to include a prohibition on reading of the data on RFID chips in Enhanced Drivers Licenses.)


In the absence of any explicit rules or any judicial, legislative, or executive oversight, the TSA has felt no need to seek authority for its ever-expanding assertions of authority through legislation or rulemaking. Nor has the TSA recognized any duty of self-restraint or self-policing to ensure its actions conform to the law. Instead, the TSA has simply wielded its power to do whatever it wished, on the disgraceful assumption that, “If we’re doing something wrong, the courts will tell us — if and when someone can afford to sue us, and they win a court judgement against us.” In the meantime, the TSA will do, and claim the right to do, anything that hasn’t already specifically been ruled illegal. Kind of like the thief who assumes that they can steal whatever they want, and that if something turns out not be theirs, they’ll give it back if and when someone sues and wins a court judgement ordering its return.

Time and again we’ve pointed out this failure to subject the TSA to the rule of law. See, for example, our most recent prior post on this topic, our agenda on the right to travel submitted to the Obama Administration and Congress after the 2008 elections, and our comments earlier this month at the Computers, Freedom, and Privacy conference session with Obama Administration representatives and others at 1:45:53 of this video. Until recently, however, neither the Courts, the Congress, nor the Executive branch have wanted to confront the question of what rules govern the TSA.

We’re please to report that this is finally beginning to change, in small ways but on numerous fronts. ::: MORE HERE:::

EFF Releases Interim Report on the Automated Targeting System

Cindy Cohn for EFF

EFF today released an Interim Report on the Automated Targeting System (ATS) through which the Department of Homeland Security monitors and assigns risk assessment scores to Americans and others who cross into or out of the United States. The data reviewed under the ATS system includes seven large government databases, plus the Passenger Name Record data from the airlines (which includes data like whether you've ordered a Muslim or Hindu or Jewish special meal). Effectively, if you travel internationally, ATS creates an instant, personal and detailed dossier on you that CBP officers use to decide whether you get to enter the country, or will be subject to an enhanced (and potentially invasive) search. EFF's report details what we've learned about the ATS program from the over 2,000 pages released by the government so far. We note that because of government's very heavy redacting and refusal to release key information Americans remain in dark about how this powerful system is used on travelers. EFF's Interim report was written by Shana Dines.

DHS has continued to release documents to EFF so we'll update the report as additional useful information comes out.

FOIA Litigation for Accountable GovernmentTravel Screening

FEEDBACK LOOP: Tell DHS what you REALLY think...


This in from The Clue Meter

The Department of Homeland Security's Quadrennial Homeland Security Review is coming up, and you can give your input here.
  • Think TSA should only screen people wearing keffiyas and burkas? Or maybe they should be strip-searching everyone?
  • Or maybe you think hardening the cockpit doors was sufficient and we can forget about all that other so-called security stuff as "Security theater."
  • Believe we should open the gates wide and let in anyone who wants to come?
  • Or maybe you think ICE should shoot all illegal aliens on sight?
  • Should Alcohol, Tobacco, and Firearms be the name of a convenience store, or the government agency that is going to save us all from The Evil Guns?
  • FEMA: Federal disaster response/relief coordinating agency, or manager of secret concentration camps?
  • REAL ID: Reasonable effort at standardization, or Mark of Cain?
  • Veterans: Heroic patriots, or right-wing extremist wing nuts?
Obviously, if you do participate in their "dialogue", that you actually have more or less constructive things to say, as opposed to, you know, snarky comments as above... 

[BTC- This would be a challenging input for us.  We prefer to watch the "game" at the local political bar and throw food at the TV while heckling the talking heads, but what-everrrrh. ]

I think what should come up in this meeting is the lack of public awareness about the integration of local police enforcement agencies as federal & immigration law enforcement officers, training excercises and when such a major advance takes place in State governments.

Mercenaries training US local police a new trend


There are many police and law enforcement officials who are concerned with the growing trend of using military-experienced mercenaries to train and work with local police officers in the United States, but there are many who believe the events of September 11, 2001 dictate the need for this new paradigm.

For example, Kentucky’s Lexington Police Department contracted Blackwater Security International to provide what’s described as homeland security training. Meanwhile that city’s Mayor Jim Newberry and its chief of police Anthony Beatty refused free training provided by the US Immigration and Customs Enforcement federal program that prepares police officers to enforce immigration and border security as part of their duties.

Lexington is on the nation’s list of so-called Sanctuary Cities in which police officers are prohibited from working with ICE or Border Patrol agents in the United States. Critics are angry over the use of local tax dollars to hire Blackwater personnel to train the police.

But Lexington isn’t the only city using hired guns to help local police officers. In New Orleans, heavily armed operatives from the Blackwater private security firm, infamous for their work in Iraq, are openly patrolling the streets of that beleaguered city.

Some of the mercenaries were reportedly “deputized” by the Louisiana governor and were issued gold Louisiana State law enforcement badges to wear on their chests and Blackwater photo identification cards to be worn on their arms.

While they are working in Louisiana, Blackwater officials say they are on contract with the Department of Homeland Security and have been given the authority to use lethal force if necessary. Some of the mercenaries assigned to patrol the streets of New Orleans recently returned from Iraq, where they provided personal security details for the former head of the US occupation, L. Paul Bremer, and the former US ambassador to Iraq, John Negroponte.

Blackwater, which is based in North Carolina, is one of the leading private security companies providing security personnel in Iraq and Afghanistan. Along with other companies such as Wackenhut Security, Inc., it has several lucrative US government contracts and provides security services — including bodyguard work — for many senior US diplomats, foreign dignitaries and corporations.

The company received international exposure when several of its security officers were captured, tortured and killed in Fallujah; two of their charred bodies were hung from a bridge in March 2004.

Although many politicos are saying Blackwater is not performing police functions, their own statement seems to imply that they will provide whatever services a government — federal, state and local — desires.

“Man-made and natural disasters require an immediate robust response. Blackwater Worldwide’s extensive training facility and staff of former military and law enforcement professionals can provide the needed training and operational expertise to prepare security teams to effectively support state and federal emergency response units,” according to Blackwater’s mission statement.

“I’m troubled by the use of military personnel — whether they be US soldiers or private mercenaries — performing a police or law enforcement function. While they may be experts in fighting wars, they are not constrained by the US Constitution as to how they operate as cops,” said former NYPD detective and owner of FLT Security Services, Sid Frances.

“Soldiers are soldiers and cops are cops. What’s next? Using smart bombs to crash into drug dens?” he asked.

Since its inception in 2003, the US Department of Homeland Security has faced significant challenges related to recruiting, retaining, and managing its workforce of over 170,000 employees.

Recently, the US Congress requested the Government Accountability Office to analyze DHS’s attrition, efforts to recruit and retain staff, use of external employees such as officers from private companies, and compliance with certain provisions of the Vacancies Reform Act, which requires agencies to report to Congress and the Comptroller General vacancies in certain presidentially-appointed positions requiring Senate confirmation.

While DHS’s overall attrition rate for permanent employees (excluding those in the Senior Executive Service and presidential appointments) declined from 8.4 percent in 2005 to 7.1 percent in 2006.

These rates, which were still above the roughly 4 percent average rate for all cabinet-level agencies, were affected by high levels of attrition (about 14-17 percent) among transportation security officers at DHS’s Transportation Security Administration. With the security officers excluded, DHS’s attrition rate was 3.3 percent.

DHS implemented agreements under the Intergovernmental Personnel Act, allowing nonfederal employees — private contractors — to be temporarily assigned to a federal agency to meet mission needs.

Tuesday, August 4, 2009

Global Update on Compulsory Identity Technologies

The run on global identity continues

"The Western Hemisphere Travel Initiative was just about proving you were a citizen, not that you had to do it by any specific kind of technology. We are close to the point now that if you don't want RFID in any of your documents that you can't leave the country or get back into it." -Michigan State Representative Paul Opsommer 

From Global Research of Canada

Enhanced driver's licenses have built-in radio chips providing an identifying number or information that can be accessed by a remote reading unit while the license is inside a wallet or purse. The technology already had been implemented in Washington State, where it is promoted as an alternative to a passport for traveling to Canada . So far, the program is optional. But there are other agreements already approved with Michigan, Vermont, New York and Arizona, and plans are under way in other states, including Texas [who passed state transportation code for both RFID & biometrics in 2007].

Many countries besides the Security and Prosperity Partnership [United States, Mexico, Canada] members have jumped on the RFID bandwagon, which has become a multibillion dollar global enterprise.

[On June 1st, 2009, the first day of the Western Hemisphere Travel Initiative (WHTI) full implementation, Border Trade Alliance (BTA), is asking U.S. and Canadian citizens to use Twitter to post their cross-border travel experiences with WHTI to collect feedback on the program at land ports throughout North America.]

On July 15, 2009, the Indian government announced that India is going to issue biometric ID cards to its 1.2 billion citizens. The Government in Delhi recently created the Unique Identification Authority, a new state department charged with the task of assigning every living Indian an exclusive number. It will also be responsible for gathering and electronically storing their personal details, at a predicted cost of at least £3 billion.

On July 28, 2009, President Felipe Calderon proclaimed that Mexico will start issuing nationwide identity cards for its citizens starting this year and by 2012 everyone will have one.

Compulsory national identity cards are used in about 100 countries including Germany, France, Belgium, Greece, Luxembourg, Portugal and Spain.

German police can detain people who are not carrying their ID card for up to 24 hours.

South Korean, Brazilian, Italian and Malaysian ID cards contain fingerprints. Cards in some countries contain information on any distinguishing marks of the holder. In the European Union some cards can be used instead of a passport for European travel. ID cards are not used yet in the US , Canada , New Zealand , Australia , the Irish Republic , and the Nordic countries. :::MORE HERE:::

Mexico to issue citizens national identity card

AP Latin America/CBS News

President Felipe Calderon says Mexico will start issuing nationwide identity cards for its citizens starting this year, and by 2012 everyone will have one.

The cards will carry the bearer's photograph. It will also include information on fingerprints and biometric data, including facial and iris scans, on a magnetic strip.

Most Mexicans currently use their voter ID cards for identification. They contain a photo, signature and one fingerprint. They will continue to be issued.

Interior Secretary Fernando Gomez Mont said Tuesday the new cards will help in the fight against organized crime, and ensure transparency in government aid programs.

Drug traffickers frequently use false identification documents to evade law enforcement.

Concerns Surface About Some PASS ID Amendments

BTC-  The PASS Act is a new legislation.  In every new potential law there are dynamics for unintended consequences and nuance that need to be explored.   

Even for watchdogs like us, we are still discovering problems for both privacy and civil liberty. Initially we thought the PASS Act's pilot program was a "good idea".   That was until we learned it was supplemental development for States to play into a centralized hub. Poorer states like Mississippi can't afford to build their own versions of fusion centers.  So the federal government would give them money for the build, with all the strings attached.  

Anti-national ID Governor's, like Mark Sanford,  found fault with the potential run on personal information in the pilot program's hub development.   In this Privacy Digest article, more reservations are bubbling to the surface over exactly how much integrity the privacy considerations had in the PASS Act.  We managed to gather that it wasn't that big of a change from Real ID.

Concerns Surface About Some PASS ID Amendments

c/o Privacy Digest -MacRonin

Last Wednesday, the Senate Homeland Security and Governmental Affairs Committee agreed on several amendments to the PASS ID bill [S. 1261] andsent the legislation on to the Senate.

Let’s take a look at some of the changes:

• Exceptions to the anti-skimming provision:

A key privacy protection we support in PASS ID restricts the collection and use of information scanned from the machine-readable zone on your driver’s license or ID card. However, in response to the concerns of retailers and other third party users of driver’s license information, the committee introduced an amendment that directs the Federal Trade Commission (FTC) to issue regulations establishing exceptions to this anti-skimming provision.

While CDT recognizes that there are legitimate uses for data scanned from licenses, we are concerned by how broadly some of the proposed exceptions are described. The FTC can and should protect the privacy and security of cardholders even under these acceptable uses; otherwise, we risk gutting the anti-skimming provision entirely. As a general matter, the privacy protections the FTC could build in to protect this information will only be more effective if Congress provides specific statutory guidance now for addressing the types of secondary uses of specific information we are most concerned about.

In particular, allowing third parties to store information to “prevent consumer fraud” without building in limits on how long information can be stored and how it could be further shared, aggregated, and used would create a massive loophole in this otherwise much needed protection. We have seen how bars and sellers of tobacco products have collected information from licenses and ID cards ostensibly to verify age, but then go on to use and share that information for marketing and other purposes—often with no notice to the cardholder.

Just as worrisome is the very real possibility that states will begin to store much more information in the machine-readable portion of driver’s licenses than what is already visible on the face of the card, including data elements like race or ethnicity. Given the potential for abuse and misuse of such sensitive information if stored and aggregated, CDT strongly urges further limiting any exemptions to only information that is also visible on the face of the card.

• Boarding a plane without a PASS ID-compliant driver’s license or ID card:

The committee struck language from the bill that would have prevented individuals from being turned away at the airport solely on the basis of failure to present a PASS ID-compliant driver’s license or ID card. While the stated justification behind this change is to preserve the status quo—that is, maintaining the Transportation Security Administration’s (TSA’s) discretion to deny access to airplanes for good reason—the status quo isn’t so great from a civil liberties standpoint to begin with. There is scant transparency around how TSA officials exercise this discretion, leading to potential abuse or discrimination in its application while offering no redress for those whose rights may be violated. Keeping such policies secret also doesn’t inspire much confidence in the flying public that we are any safer for them since there is little ability to assess their effectiveness or relevance.

• Funding the digitization of “breeder documents” and birth record verification:

The amended bill also now requires birth records to be verified with the issuing agency no later than six years after the final regulations are issued, so long as the electronic system enabling such verification (i.e., the Electronic Verification of Vital Events (EVVE)) is up and running by that deadline. The bill also provides funds to states to digitize remaining birth records and connect state records to the electronic verification system.

This change takes us one step back towards REAL ID, which required birth certificate verification through the EVVE system. While the bill gives the DHS Secretary room to make sure any such system includes adequate privacy protections, EVVE still centralizes highly valuable personal information and would become a magnet for internal fraud and identity thieves.

• Abbreviated rulemaking timeline:

Finally, the amended bill authorizes DHS to issue an interim final rule to implement PASS ID, bypassing the full Notice of Proposed Rulemaking (NPRM) process. While there is considerable pressure from many corners to not delay implementation of PASS ID, this change is curious considering the contentiousness of the REAL ID debate of the past four years. Taking into account the concerns of affected stakeholders from the outset of the program seems imperative to help avoid the same kind of impasse that REAL ID has engendered.

CDT is concerned about these changes and will work with members to address them as this issue moves to the floor. Stay tuned for more updates as the bill moves forward.


Monday, August 3, 2009

PODCAST: The ACLU on a Real ID Repeal

BTC Exclusive

AUDIO:::> The ACLU on a Real ID Repeal 

The ACLU's Chris Calabrese, veteran legal counsel assigned to the anti-Real ID effort in Washington updates listeners on a newly filed legislation. The new bill filed by Rep. Cohen in the House of Representatives, would repeal Real ID entirely and replace it with language allowing for a negotiated rulemaking process. The rule making process, part of a 9-11 Commissions reform bill, was itself repealed by the Real ID Act of 2005. We observe the modern marvel of when the ACLU can finally agree with the Secretary of DHS on something - that Real ID is dead. More is also included on the PASS Act.