{"id":53490,"date":"2016-09-30T11:27:00","date_gmt":"2016-09-30T16:27:00","guid":{"rendered":"https:\/\/content.findlaw-admin.com\/ability-legal\/supreme\/legal-commentary\/the-fbis-misuse-of-national-security-letters-reveals-the-often-false-dichotomy-between-security-and-privacy.html"},"modified":"2016-09-30T11:27:00","modified_gmt":"2016-09-30T16:27:00","slug":"the-fbis-misuse-of-national-security-letters-reveals-the-often-false-dichotomy-between-security-and-privacy","status":"publish","type":"supreme","link":"https:\/\/supreme.findlaw.com\/legal-commentary\/the-fbis-misuse-of-national-security-letters-reveals-the-often-false-dichotomy-between-security-and-privacy.html","title":{"rendered":"The FBI&#8217;s Misuse of National Security Letters Reveals the Often-False Dichotomy Between Security and Privacy"},"content":{"rendered":"\n<div class=\"wp-container-core-columns-is-layout-8f761849  fl-block-columns fl-sectionWithSidebar fl-container fl-flex fl-flex-wrap fl-gap30\">\n    \n    <div class=\"fl-page-articles   fl-block-column fl-section-main fl-section-main-full-width\">\n        <div class=\"yui-g\" id=\"leftcol-module\">\n\n      <!-- Right Line of Links Section -->\n\n      <!-- BEGIN PICTURE INSERTION -->\n\n\n      <!-- BEGIN TITLE AND AUTHOR INSERTION -->\n\n      <table>\n\n        <tr>\n\n\n\n          <td width=\"100\" rowspan=\"3\" class=\"wiauthor\"><a href=\"\/legal-commentary\/michael-dorf-archive\"><img decoding=\"async\" src=\"https://supreme.findlaw.com/static/f/images\/writ\/michael.dorf.jpg\" border=\"0\"><\/a><\/td>\n\n          <td class=\"wititle\"><h1>The FBI&#8217;s Misuse of National Security Letters Reveals the Often-False Dichotomy Between Security and Privacy<\/h1><\/td>\n        <\/tr>\n        <tr>\n          <td class=\"wiauthor\"><a href=\"\/legal-commentary\/michael-dorf-archive\" class=\"graybold\"><h2>By MICHAEL C. DORF<\/h2><\/a><\/td>\n        <\/tr>\n        <tr>\n          <td class=\"widate\">Wednesday, Mar. 14, 2007<\/td>\n\n        <\/tr>\n      <\/table>\n      <span class=\"smalltext\">\n\n\n<p><b> <\/b>The Patriot Act greatly increased the FBI&#8217;s authority to issue so-called &#8220;national security letters&#8221; (NSLs)&#8211;warrantless demands for private information from third parties such as phone companies, Internet service providers and banks. When Congress reauthorized the Patriot Act in early 2006, it did so on the condition that it receive detailed information about the use, misuse, and efficacy of NSLs. Last week, Justice Department Inspector General Glenn A. Fine issued his <a href=\"http:\/\/www.usdoj.gov\/oig\/special\/s0703b\/final.pdf\" class=\"left-link\" target=\"_blank\" rel=\"noopener\">first report on NSLs<\/a>. <\/p>  <p>The results are not pretty. Among the problems identified by the report are: sloppy and inconsistent recordkeeping by the FBI, which resulted in substantial under-reporting of errors within the FBI; NSLs that were signed by personnel without proper authorization to do so; confusion among recipients of NSLs that resulted in disclosure of private information to which the FBI was not entitled; and most disturbingly, a pattern of short-circuiting the already-streamlined NSL process by improperly labeling requests as exigent in the absence of any exigency.<\/p>  <div id=\"writthreetwenty\">\n<script language=\"Javascript\">dart_call(\"300x250\", \"ptile=2\", 0); <\/script><\/div>\n<p>There is, however, some good news in the report, and in the reaction to it. In general, the failures to follow the law and internal Justice Department policies were the result of overwork and insufficient training of junior staff, rather than of any deliberate effort to obtain protected data or any improper political motive. The report notes that the FBI has been under enormous pressure in the last five-and-a-half years, as it shifts its priorities from domestic law enforcement to counter-terrorism.<\/p>  <p>Further, the Administration&#8217;s official reaction to the report has been refreshingly responsible. FBI Director Robert Mueller, Attorney General Alberto Gonzales, and President Bush have all agreed that the problems the report identifies are serious, and have committed to implementing Inspector General Fine&#8217;s recommended reforms.<\/p>  <p>Should the FBI quickly move to correct its procedures for issuing NSLs, that will be a victory for civil liberties. It will also be a victory for law enforcement. As I explain below, the use and misuse of NSLs belies the old saw that protection of liberty or privacy necessarily comes at the cost of security. Some of the problems identified by the Inspector General&#8217;s report resulted in the sacrifice of both privacy <u>and<\/u> security.<\/p>  <p><b>The Patriot Act&#8217;s Expansion of National Security Letter Authority<\/b><\/p>  <p>For roughly two decades, the FBI has had the authority to demand information about foreign threats to national security by issuing an NSL to a third party, such as a telephone company or bank, without any judicial oversight. The 2001 Patriot Act expanded that authority, principally by lowering the threshold for the issuance of an NSL.<\/p>  <p>Before the Patriot Act, an NSL could only issue for information relating to a foreign power or its agent. Now, the Patriot Act permits the use of an NSL that is relevant to or sought for an investigation to protect against international terrorism or clandestine intelligence activities, provided the investigation is not based solely on the First Amendment-protected activities of U.S. citizens, permanent residents, or domestic corporations or associations. The FBI can issue NSLs without judicial oversight by the Foreign Intelligence Surveillance Act (FISA) court, or any other court.<\/p>  <p>The Patriot Act also expanded the list of people who could authorize NSLs. Formerly, all such requests had to come from FBI headquarters, but since the passage of the Patriot Act, they can also be signed by the Special Agent in Charge in any FBI field office. This expansion was designed to make it easier for the FBI to issue NSLs, and so it did. According to its own records, the FBI issued approximately 8,500 NSL requests in 2000. From 2003 through 2005, the FBI says it issued almost 150,000 NSL requests for phone call and email records, bank and credit card records, and other normally private information. That&#8217;s a more than five-fold increase in annual requests.<\/p>  <!-- MIDDLE AD PLACEHOLDER -->\n<p><b>The Worst Abuse Identified by the Inspector General&#8217;s Report: False Exigencies<\/b><\/p>  <p>Of the problems identified by the Inspector General&#8217;s report, the only one that can reasonably be characterized as an abuse is the pattern of false claims of exigency. In violation of its own internal guidelines and express statements contained in contracts into which the FBI entered with three telephone companies, the FBI obtained telephone billing information without issuing NSLs or obtaining subpoenas.<\/p>  <p>Although the ostensible ground for obtaining information in this manner was the need to track suspected terrorists in real time, according to the report, &#8220;many exigent letters were not sent in exigent circumstances.&#8221; As a consequence, the FBI received private phone data on hundreds of people without any internal or external check on the genuineness of the need for that information.<\/p>  <p><b>Mostly Sloppiness, Not Overreaching<\/b><\/p>  <p>By contrast with the pattern of abuse with respect to &#8220;exigent letters,&#8221; the other violations of law and policy detailed in the Inspector General&#8217;s report were the result of overwork and inadequate training, not a policy of circumvention. The Inspector General found, for example, that poor communications between the FBI and the recipients of NSLs sometimes resulted in the transmission of the contents of emails, rather than just of the identities of persons with whom emails were exchanged, which was all that was properly requested.<\/p>  <p>By auditing individual case files, the Inspector General also determined that the FBI was systematically undercounting both the number of NSLs issued and the number of errors and legal violations that occurred in handling NSL requests. For instance, the FBI&#8217;s internal recordkeeping mechanism reported only 26 violations in a three-year period, but the Inspector General&#8217;s audit found nearly that many unreported violations in a relatively small sample of case files.<\/p>  <p><b>The Virtues of Bureaucracy<\/b><\/p>  <p>Well, so what? These were not deliberate abuses. Indeed, shouldn&#8217;t we be thankful to the FBI case agents that they were more focused on tracking down suspected terrorists than on filling out paperwork? Anybody who has ever worked for a large organization has experienced various reporting requirements as a nuisance that interferes with his or her ability to do the actual job.<\/p>  <p>If one takes that view, then the lesson of the Inspector General&#8217;s report may well be that the law and procedures should be reformed, so as to relax recordkeeping and reporting requirements. Let the FBI focus on threats, rather than spending time dotting i&#8217;s and crossing t&#8217;s to detect abuses that do not exist anyway.<\/p>  <p>Yet even if one cared not at all about privacy and exclusively about counterterrorism, that would be the wrong lesson to draw. As the Inspector General documented, the sloppy recordkeeping extended to operational details, such as typographical errors in NSLs. A phone company that provides the calling records for the wrong telephone number provides the FBI with useless information, while the information that could track down a suspected terrorist goes unreported.<\/p>  <p>More broadly, sloppy recordkeeping often suggests operational failure. The world&#8217;s best-run private firms have long understood this point. Japanese manufacturing companies practice &#8220;kaizen,&#8221; often translated as &#8220;continual improvement.&#8221; By carefully measuring inputs and outputs, they aim to detect inefficiencies that can then be eliminated. These processes have been widely adopted throughout the world.<\/p>  <p>Nor is this process restricted to the private sector. Standards-based school reform&#8211;the core of President Bush&#8217;s signature domestic policy program, No Child Left Behind&#8211;works on the assumption that to improve schools&#8217; performance, one must, at a minimum, be able to measure that performance over time. Likewise, an FBI that does not even know how many NSL requests it issues cannot have any great confidence in their efficacy.<\/p>  <p><b>Integrating Privacy Recordkeeping with Operational Recordkeeping<\/b><\/p>  <p>The Inspector General&#8217;s report devotes approximately twenty pages to evaluating the effectiveness of NSLs as an investigative tool. The report&#8217;s conclusion is phrased, tellingly, in the following terms: &#8220;FBI Headquarters and field personnel told us that they believe national security letters are indispensable investigative tools that serve as building blocks in many counterterrorism and counterintelligence investigations.&#8221;<\/p>  <p>Note that the report does not say that NSLs <u>are<\/u> indispensable tools, only that FBI personnel so <u>told<\/u> the auditors. Although the report does confirm that NSLs are frequently used in support of FISA applications, and cites three counterterrorism cases and one counterintelligence case in which NSL-derived information had been useful, the truth is that no one really knows how effective NSLs are, because the FBI&#8217;s sloppy and unsystematic records provide no adequate basis for drawing such conclusions.<\/p>  <p>What we do know is that implementing the reforms proposed by the Inspector General would serve both security and privacy. To be sure, some protections for privacy sacrifice security, at least in the short run. In expanding the authority of the FBI to use NSLs, the Patriot Act gave the government access to much information that formerly would have remained private. However, given the law currently on the books, careful tracking of how NSLs are used will enable the FBI both to improve its performance and to provide credible assurances that it follows procedures that protect privacy.<\/p> \n\n\n<\/span>\n\n\n\n<hr size=\"1\">\n<p class=\"authorfoot\">\n\n<!-- BEGIN AUTHORS FOOTNOTE -->\n<a name=\"bio\"><\/a>\nMichael C. Dorf is the Isidor &amp; Seville Sulzbacher Professor of Law at Columbia University. He is the author of <i>No Litmus Test: Law and Politics in the Twenty-First Century<\/i> and he blogs at <a href=\"http:\/\/www.michaeldorf.org\/\" target=\"_blank\" class=\"author-link\" rel=\"noopener\">www.michaeldorf.org<\/a>.\n<br><br>\n\n<\/p>\n\n\n\n    <\/div><div class=\"was-this-helpful\">\n    <div\n            class=\"was-this-helpful__question-container\"\n            aria-labelledby=\"was-this-helpful__question\"\n            role=\"group\"\n    >\n        <span\n                id=\"was-this-helpful__question\"\n                class=\"was-this-helpful__question fl-text-lg-bold\"\n        >Was this helpful?<\/span>\n        <button\n                class=\"was-this-helpful__button fl-text-sm\"\n                aria-label=\"Yes\"\n                value=\"yes\"\n        >\n            <span class=\"was-this-helpful__button-text fl-text-bold\">Yes<\/span>\n            <i class=\"was-this-helpful__button-icon\">\n                <svg width=\"22\" height=\"22\" viewBox=\"0 0 22 22\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n                    <g id=\"thumbs-up\" clip-path=\"url(#clip0_604_3418)\">\n                        <path id=\"Vector\"\n                              d=\"M6 21H3C2.46957 21 1.96086 20.7893 1.58579 20.4142C1.21071 20.0391 1 19.5304 1 19V12C1 11.4696 1.21071 10.9609 1.58579 10.5858C1.96086 10.2107 2.46957 10 3 10H6M13 8V4C13 3.20435 12.6839 2.44129 12.1213 1.87868C11.5587 1.31607 10.7956 1 10 1L6 10V21H17.28C17.7623 21.0055 18.2304 20.8364 18.5979 20.524C18.9654 20.2116 19.2077 19.7769 19.28 19.3L20.66 10.3C20.7035 10.0134 20.6842 9.72068 20.6033 9.44225C20.5225 9.16382 20.3821 8.90629 20.1919 8.68751C20.0016 8.46873 19.7661 8.29393 19.5016 8.17522C19.2371 8.0565 18.9499 7.99672 18.66 8H13Z\"\n                              stroke=\"#666666\" stroke-width=\"2\" stroke-linecap=\"round\"\n                              stroke-linejoin=\"round\"><\/path>\n                    <\/g>\n                    <defs>\n                        <clipPath id=\"clip0_604_3418\">\n                            <rect width=\"22\" height=\"22\" fill=\"white\"><\/rect>\n                        <\/clipPath>\n                    <\/defs>\n                <\/svg>\n            <\/i>\n        <\/button>\n        <button\n                class=\"was-this-helpful__button fl-text-sm\"\n                aria-label=\"No\"\n                value=\"no\"\n        >\n            <span class=\"was-this-helpful__button-text fl-text-bold\">No<\/span>\n            <i class=\"was-this-helpful__button-icon\">\n                <svg width=\"22\" height=\"22\" viewBox=\"0 0 22 22\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n                    <g id=\"thumbs-down\" clip-path=\"url(#clip0_604_3423)\">\n                        <path id=\"Vector\"\n                              d=\"M16 0.999995H18.67C19.236 0.989986 19.7859 1.18813 20.2154 1.55681C20.645 1.9255 20.9242 2.43905 21 3V10C20.9242 10.5609 20.645 11.0745 20.2154 11.4432C19.7859 11.8119 19.236 12.01 18.67 12H16M9.00003 14V18C9.00003 18.7956 9.3161 19.5587 9.87871 20.1213C10.4413 20.6839 11.2044 21 12 21L16 12V0.999995H4.72003C4.2377 0.994543 3.76965 1.16359 3.40212 1.47599C3.0346 1.78839 2.79235 2.22309 2.72003 2.7L1.34003 11.7C1.29652 11.9866 1.31586 12.2793 1.39669 12.5577C1.47753 12.8362 1.61793 13.0937 1.80817 13.3125C1.99842 13.5313 2.23395 13.7061 2.49846 13.8248C2.76297 13.9435 3.05012 14.0033 3.34003 14H9.00003Z\"\n                              stroke=\"#666666\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\n                    <\/g>\n                    <defs>\n                        <clipPath id=\"clip0_604_3423\">\n                            <rect width=\"22\" height=\"22\" fill=\"white\"\/>\n                        <\/clipPath>\n                    <\/defs>\n                <\/svg>\n            <\/i>\n        <\/button>\n    <\/div>\n    <span class=\"was-this-helpful__taken-action fl-text-sm-bold\"><\/span>\n    <div class=\"was-this-helpful__feedback-container\">\n        <div class=\"was-this-helpful__choose-option-message\" role=\"status\">\n            <p class=\"was-this-helpful__choose-option-message-text\"><\/p>\n        <\/div>\n        <form class=\"was-this-helpful__feedback-form\">\n            <div class=\"was-this-helpful__feedback was-this-helpful__feedback--positive\">\n                <fieldset>\n                    <legend class=\"was-this-helpful__feedback-form-title\" tabindex=\"0\">Why was this helpful?<\/legend>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--understandable\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"positive-feedback\"\n                                value=\"Easy to understand\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--understandable\"\n                        >Easy to understand<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--solved-problem\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"positive-feedback\"\n                                value=\"Solved my problem\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--solved-problem\"\n                        >Solved my problem<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--other\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"positive-feedback\"\n                                value=\"Other\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--other\"\n                        >Other<\/label>\n                    <\/div>\n                <\/fieldset>\n            <\/div>\n            <div class=\"was-this-helpful__feedback was-this-helpful__feedback--negative\">\n                <fieldset>\n                    <legend class=\"was-this-helpful__feedback-form-title\" tabindex=\"0\">Why was this not helpful?<\/legend>\n                    <div class=\"was-this-helpful__choose-option-message\" role=\"status\">\n                        <p class=\"was-this-helpful__choose-option-message-text\"><\/p>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--missing-info\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"negative-feedback\"\n                                value=\"Missing Information\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--missing-info\"\n                        >Missing the information I need<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--complicated\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"negative-feedback\"\n                                value=\"Too complicated\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--complicated\"\n                        >Too complicated \/ too many steps<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--dated\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"negative-feedback\"\n                                value=\"Out of date\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--dated\"\n                        >Out of date<\/label>\n                    <\/div>\n                    <div class=\"fl-radio-button-field fl-flex was-this-helpful__feedback-form-title\">\n                        <input\n                                id=\"was-this-helpful__radio-button--negative-other\"\n                                class=\"fl-radio-button-field-input\"\n                                type=\"radio\"\n                                name=\"negative-feedback\"\n                                value=\"Other\"\n                        >\n                        <label\n                                class=\"fl-radio-button-field-label fl-text-sm was-this-helpful__radio-label\"\n                                for=\"was-this-helpful__radio-button--negative-other\"\n                        >Other<\/label>\n                    <\/div>\n                <\/fieldset>\n            <\/div>\n            <div class=\"was-this-helpful__form-buttons-container\">\n                <button\n                    class=\"was-this-helpful__feedback-button was-this-helpful__feedback-button--positive at-feedback-submit fl-button secondary\"\n                    type=\"submit\"\n                >\n                    <span class=\"fl-button-content\">Submit<\/span>\n                    <i\n                        class=\"fa fa-angle-right medium\"\n                        aria-hidden=\"true\"\n                    ><\/i>\n                <\/button>\n                <button\n                    class=\"was-this-helpful__feedback-button was-this-helpful__feedback-button--cancel fl-button primary disabled\"\n                    type=\"reset\"\n                >\n                    <span class=\"fl-button-content\">Cancel<\/span>\n                    <i\n                        class=\"fa fa-times-circle medium\"\n                        aria-hidden=\"true\"\n                    ><\/i>\n                <\/button>\n            <\/div>\n        <\/form>\n    <\/div>\n    <div class=\"was-this-helpful__thank-you-message\" role=\"status\">\n        <i class=\"was-this-helpful__thank-you-message-icon fa fa-check\"><\/i>\n        <p class=\"was-this-helpful__thank-you-message-text\" aria-live=\"polite\"><\/p>\n    <\/div>\n<\/div>\n\n\n    <\/div>\n    \n    <div class=\"fl-block-column fl-section-sidebar\">\n        \n    <\/div>\n<\/div>","protected":false},"parent":49876,"menu_order":0,"template":"app\/Http\/Controllers\/Templates\/ArticlePageController.php","meta":{"_acf_changed":false,"_stopmodifiedupdate":false,"_modified_date":"","_cloudinary_featured_overwrite":false},"class_list":["post-53490","supreme","type-supreme","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/supreme\/53490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/supreme"}],"about":[{"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/types\/supreme"}],"up":[{"embeddable":true,"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/supreme\/49876"}],"wp:attachment":[{"href":"https:\/\/supreme.findlaw.com\/legal-api\/wp-json\/wp\/v2\/media?parent=53490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}