Government // Cybersecurity
Commentary
12/5/2013
08:06 AM
Joe Rubin
Joe Rubin
Commentary
Connect Directly
LinkedIn
RSS
E-Mail
50%
50%

Electronic Privacy Laws Need An Overhaul

Laws governing electronic privacy, written before companies like Google and Facebook existed, are in desperate need of Congressional revision.

Last month's release of Google's Transparency Report detailing government and court requests for user data highlights a growing challenge to service providers like Google and other technology companies: How to meet the skyrocketing number of requests from government authorities for data while working under murky and unclear guidelines. 

The report reveals that demands by US law enforcement agencies for user account data from Google rose 30% in the last six months. A significant percentage of these demands come from civil regulatory agencies who want access to users' email and other stored documents from online providers -- using subpoenas they issue themselves, with no judicial or other third-party review.

Requests to Google for user data from U.S. authorities. Source: Google Transparency Report
Requests to Google for user data from U.S. authorities. Source: Google Transparency Report

However, service providers have resisted these requests, insisting that the law enforcement agencies obtain a warrant for the production of these materials.

TechAmerica, like the rest of the technology community, consumer groups, privacy advocates, and others, are supporting legislation that would ensure that government agencies should be able to access these files only with a warrant issued by a judge.

[Is it time for Congress to reconsider privacy protection laws? Its own watchdog group thinks so. Read Consumer Privacy Protections Need Review, GAO Tells Congress.]

Specifically, we are urging Congress to pass an update to the nearly 30-year-old Electronic Communications Privacy Act (ECPA). This statute, written before companies like Google and Facebook even existed, is in desperate need of Congressional revision.

The changes proposed by this legislation will bring the law up to speed with the way Americans communicate today, ensuring that law enforcement is required to obtain a warrant to access all stored content, regardless of age.

This common-sense change is vitally important to the technology community and to any American who uses email. Currently, email or other stored content older than 180 days does not require a warrant for access, which we consider woefully inadequate. The bill ensures that there is one standard for all content, and it provides the necessary clarity for US technology companies.

So what's the holdup? Why won't Congress deal with a law that has not kept up with technology?

Civil law enforcement agencies apparently want to continue the status quo and don't want to need permission from a judge to access sensitive data from consumers and businesses through service providers.

However, Congress must act now to establish a clear, across-the-board standard that requires a warrant before obtaining information from service providers about the content of users' communications.

The Constitution protects us from unreasonable search and seizure, including requiring the government to obtain a warrant to access information. It's time Congress provided the same protection to electronic records that paper records receive.

Joe Rubin is the Acting Head of Federal Government Affairs for the technology trade association TechAmerica.

Consumerization 1.0 was "we don't need IT." Today, we need IT to bridge the gap between consumer and business tech. Also in the Consumerization 2.0 issue of InformationWeek: Stop worrying about the role of the CIO. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
WKash
50%
50%
WKash,
User Rank: Author
12/5/2013 | 11:22:48 PM
Re: Seems you're ignoring the real privacy issue
There is a laundry list of laws and statutes still on the books that were written long before the age of cloud phones, smartphones, and Google and Facebook.  It's time to at least update the laws to reflect this new electronic world even if we can't resolve all the privacy issues those technologies have created.
MrCellophan1952@gmail.com
50%
50%
MrCellophan1952@gmail.com,
User Rank: Apprentice
12/5/2013 | 1:03:38 PM
Seems you're ignoring the real privacy issue
The number of govenrment incursions appears to be minute when compared to the power in private/business "Big Brother" hands e.g. Google Analytics. Your service and practically all others have a privacy policy that basicly forces you to accept an invasion of personal information or you can not have access to the service; coercion at its finest!

I do agree that the privacy laws must be updated to remove the information from private sectors' grasp. In a simplified concept, if Google et all did not collect the information, there would be no problem of government access. I am far more worried about business people/individuals having access to my personal information than the government. Think about Enron, Bernie Madoff, the Hunt Brothers, Charles Keating and the Lincoln Savings and Loan Association as a few examples dishnest business ventures.

Personal information and the expectation of privacy should receive the same level of protection and restriction in all venues, criminal, civil, business etc.
Cyber Security Standards for Major Infrastructure
Cyber Security Standards for Major Infrastructure
The Presidential Executive Order from February established a framework and clear set of security standards to be applied across critical infrastructure. Now the real work begins.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek - September 2, 2014
Avoiding audits and vendor fines isn't enough. Take control of licensing to exact deeper software discounts and match purchasing to actual employee needs.
Flash Poll
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
Howard Marks talks about steps to take in choosing the right cloud storage solutions for your IT problems
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.