The Leahy-Sensenbrenner Language on Back Door Searches Improves But Doesn’t Eliminate the Back Door

As the top Intelligence Community lawyers have made clear, the IC maintains it can search US person data incidentally collected under Section 702 without any suspicion, as well as for the purposes of making algorithms, cracking encryption, and to protect property.

The Leahy-Sensenbrenner bill tries to rein in this problem. And its fix is far better than what we’ve got now. But it almost certainly won’t fix the underlying problem.

Here’s what the law would do to the “Limitations” section of Section 702. The underlined language is new.

(b) Limitations

(1) IN GENERAL.—An acquisition

(A) may not intentionally target any person known at the time of acquisition to be located in the United States;

(B) may not intentionally target a person reasonably believed to be located outside the United States if a significant purpose of such acquisition is to target a particular, known person reasonably believed to be in the United States;

(C) may not intentionally target a United States person reasonably believed to be located outside the United States;

(D) may not intentionally acquire any communication as to which the sender and all intended recipients are known at the time of the acquisition to be located in the United States; and

(E) shall be conducted in a manner consistent with the fourth amendment to the Constitution of the United States.

(2) CLARIFICATION ON PROHIBITION ON SEARCHING OF COLLECTIONS OF COMMUNICATIONS OF UNITED STATES PERSONS.—

(A) IN GENERAL.—Except as provided in subparagraph (B), no officer or employee of the United States may conduct a search of a collection of communications acquired under this section in an effort to find communications of a particular United States person (other than a corporation).

(B) CONCURRENT AUTHORIZATION AND EXCEPTION FOR EMERGENCY SITUATIONS.—

Subparagraph (A) shall not apply to a search for communications related to a particular United States person if—

(i) such United States person is the subject of an order or emergency authorization authorizing electronic surveillance or physical search under section 105, 304,

15 703, 704, or 705, or title 18, United States Code, for the effective period of that order;

(ii) the entity carrying out the search has a reasonable belief that the life or safety of such United States person is threatened and the information is sought for the purpose of assisting that person; or

(iii) such United States person has consented to the search.’  [all emphasis my own]

Basically, this section adds a restriction on searching for US person communications, except in an emergency or with the consent of that person (this language might make it easier to require the government to search on this collection for discovery).

I’m particularly interested in the bolded language, which replaced “the purpose” with “a significant purpose.” It suggests Pat Leahy and Jim Sensenbrenner either suspect or know the government is getting around the clear restriction on reverse targeting by claiming that if targeting the US person isn’t the only reason they are collecting the data, they can go ahead and do it, even if targeting the US person is part of why they are targeting the foreign person. I especially like the fix because the government vastly expanded the use of FISA information — even to the point of using it to look for crimes like rape they could use to coerce people to turn informant for the government — by using changing the limits on FISA to “a significant purpose.”

Back atcha spooks!

So until the Executive finds some new loophole it can use to get around the clear intent of the law, this new language should limit searches on US person data collected under Section 702 to real emergencies (or at least emergencies the government is willing to document as such).

However, that’s only true of data collected under Section 702.

As Raj De made clear on Monday, the Executive also conducts back door searches on data collected under EO 12333.

MR. DEMPSEY: Okay. Am I right, the same situation basically applies to information collected outside of FISA? So FISA collection inside the United States, 12333 collection outside the United States, but those communications collected outside the United States might include collections to or from U.S. citizens, U.S. persons, and again, those can then be searched without even a RAS type determination, is that right?

MR. DE: I think, yeah, I don’t know if we’ve declassified sort of minimization procedures outside of the FISA context, but there are different rules that apply. [my emphasis]

If the IC collects data “legally,” it maintains, they can search it, even without suspicion of wrongdoing, and their use of it is only limited by minimization procedures (which, in the case of EO 12333, only need to pass muster with the Attorney General, not a Judge).

And, as Russ Feingold summarized the views of the Executive Branch 5 years ago — including those of Keith Alexander — if Congress limits dragnet collection in ways the Executive doesn’t like, they’ll just do what they want under Article II.

SEN. FEINGOLD: Well, here’s the problem. If we’re going to pass this statute, whether it’s a good idea or a bad idea, it sounds like it won’t be the only basis on which the administration thinks it can operate. So in other words, if they don’t like what we come up with, they can just go back to Article II. That obviously troubles me.

Way back during the initial debate over bring Bush’s illegal dragnet under the purview of FISC and Congress, the Executive Branch made clear they refused to be bound by that.

And therefore, we can be certain — especially given the increasing globalization that has happened since 2007, when they said this — that if this language passed, the IC would just collect even more data under EO 12333 so they could go on reverse targeting Americans.

It seems several more things would need to happen to protect against back door searches. First, Google and Yahoo and other multinational providers would need to find some way to prevent NSA from stealing their data. And, Congress would need to start drafting laws that recognize “foreign” is no more distinct than “domestic” was in 2007 when Congress started changing the law to account for technological changes here. Alternately, Courts need to start treating this suspicionless searches through petabytes of global communications as a Fourth Amendment violation.

Right now, Americans have very little protection for their communications that can, in any way, be deemed foreign. And while Leahy-Sensenbrenner is an improvement, it will not fix the problem.

image_print
8 replies
  1. Snoopdido says:

    I have a hard time believing that any prospective bill either for or against these collection authorities will pass both houses of Congress at this time which means that whatever the IC is doing now with our communications is what they’ll continue to be doing.

  2. Snoopdido says:

    @Snoopdido: From the Financial Times – Intelligence rebuff poses political dilemma for White House – http://www.ft.com/cms/s/0/a8e72db4-4892-11e3-a3ef-00144feabdc0.html

    “The administration has conducted a review and they have looked at different ways of conducting these programmes,” said Darren Dick, staff director of the House intelligence committee, who has been briefed on the review. “They concluded they could not find a workable solution that gives them the same counter-terrorism efficacy other than the one they have right now.”

    Since the FT article is behind their paywall, search for “Intelligence rebuff poses political dilemma for White House” on Google News and you’ll be able to get to read the article.

  3. kris says:

    This bill does nothing to prevent the government from reading through the 702 incidentally collected communications as long as the focus of the “search” is not a US person. In other words, they could troll through at will seeking out potential crimes (or intent to commit “crimes”) – they could search using descriptors related to property or cyber crimes, intellectual property rights, you name it. And any info they happen to come across can be shared with other government units and used against you. I don’t see how this is really an improvement. Am I missing something?

  4. SoapboxOrator says:

    I found this reading of the bill particularly helpful, in light of the most recent DOJ filing in US v Daoud. There, as long as foreign intel was one “significant purpose” for collecting intel through FISA and FAA (but not necessarily the only purpose), the government is free to use the info as surveillance evidence domestically against US citizens with no warrant required.

    Very neat to see this twist on the “significant purpose” idea. Instead of saying an operation must have at least one foreign intel purpose, as FISA/FAA currently requires, now the Leahy/Sensenbrenner language is saying a 702 search may not have domestic intel as one of its significant purposes.

    I wonder how capable the courts are of rigorously figuring out if back targeting happened but where the DOJ basically gussies up their paperwork to make it look like it was for foreign intel purposes only. I wonder if there is any objective way to look at data collected and make an accurate determination ex post facto.

    https://twitter.com/SoapboxOrator

  5. @SoapboxOrator says:

    @bmaz:
    Not to mention the “good faith” exception, which DOJ also just used as its backup argument to justify avoiding suppression in Daoud.

    Also, since we don’t have access to each court’s in camera, ex parte determinations to see how the government presents the legality of its search protocol, we are making a strong assumption that individual judges have knowledge of NSA procedures and are in a position to conduct oversight of their search protocols to ensure they are not actually back targeting and then falsely claiming it was for foreign intel purposes only.

    Also, DOJ is basically scaring judges and saying that if the judge rules against them, it will be the “first-ever court to order the production and disclosure of highly sensitive and classified FISA materials…” (Daoud). Will courts hold DOJ’s feet to the fire and challenge the claim that the search had no domestic intel purpose, absent gross and obvious evidence to the contrary?

    In the PCLOB transcript, Litt is careful to resist the requirement for a warrant before searching someone located in the US. So as long as they get past the hurdle of having legally searched the information (by not specifically having a domestic intel purpose at the time the search was conducted), they can still use the evidence. My guess is they will continue to test the limits of the revised section 702 to see what they can get away with.

  6. GKJames says:

    Reform with a sieve, i.e., no reform at all. Only a comprehensive approach that addresses at the same time ALL legal rationales used by the Executive will be effective in reining in Clapper et al. That assumes, of course, that a majority of Americans cares enough to insist on reform.

Comments are closed.