AT&T To Pay $25 Million Penalty For Data Breaches At Offshore Call Centers
Court Rules Against 2 Banks On Residential Mortgage Abuses That Led To the 2008 Recession

Federal Court Rules NSA Phone Data Collection Program Violated the Patriot Act

National Security Agency logo On Thursday, a federal appeals court ruled that the bulk collection of Americans' phone data by the National Security Agency (NSA) violated the USA Patriot Act. The Washington Post reported:

"... a unanimous three-judge panel of the U.S. Court of Appeals for the 2nd Circuit overturned a lower court and determined that the government had stretched the meaning of the statute to enable “sweeping surveillance” of Americans’ data in “staggering” volumes... The NSA’s mass collection of phone records for counterterrorism purposes — launched after the Sept. 11, 2001, terrorist attacks... Under the program, the NSA collects “metadata” — or records of times, dates and durations of all calls — but not call content."

The NSA's massive phone collection program was revealed in June 2013 by former NSA agency contractor Edward Snowden. The U.S. Government argued that the phone records data collection program, underway since at least May 2006, was necessary to identify:

"... terrorism suspects. A series of judges on the secretive Foreign Intelligence Surveillance Court have agreed."

The plaintiffs in the original lawsuit and appellants were the American Civil Liberties Union, American Civil Liberties Union Foundation, New York Civil Liberties Union, and New York Civil Liberties Union Foundation. Named in the appeal lawsuit were James R. Clapper (Director of National Intelligence), Michael S. Rogers (Director of the National Security Agency and Chief of the Central Security Service), Ashton B. Carter (Secretary of Defense), Loretta E. Lynch (Attorney General of the United States), and James B. Comey (Director of the Federal Bureau of Investigation).

The Court opinion stated in part:

"This appeal concerns the legality of the bulk telephone metadata collection program (the “telephone metadata program”), under which the National Security Agency (“NSA”) collects in bulk “on an ongoing daily basis” the metadata associated with telephone calls made by and to Americans, and aggregates those metadata into a repository or data bank that can later be queried. Appellants challenge the program on statutory and constitutional grounds. Because we find that the program exceeds the scope of what Congress has authorized, we vacate the decision below dismissing the complaint without reaching appellants’ constitutional arguments.."

Telephone metadata does not include what people said during a phone call. Metadata includes only the date, time, call duration (in minutes), caller's phone number, and recipient's phone number. With smartphones, the metadata may also include the caller's geo-location, the recipient's geo-location, and a phone identifier. The Court opinion also stated:

"The district court held that § 215 of the PATRIOT Act impliedly precludes judicial review; that plaintiffs/appellants’ statutory claims regarding the scope of § 215 would in any event fail on the merits; and that § 215 does not violate the Fourth or First Amendments to the United States Constitution. We disagree in part, and hold that § 215 and the statutory scheme to which it relates do not preclude judicial review, and that the bulk telephone metadata program is not authorized by § 215."

The Court decision summarized some important history Americans should know:

"In the early 1970s, in a climate not altogether unlike today’s, the intelligence‐gathering and surveillance activities of the NSA, the FBI, and the CIA came under public scrutiny. The Supreme Court struck down certain warrantless surveillance procedures that the government had argued were lawful as an exercise of the President’s power to protect national security, remarking on “the inherent vagueness of the domestic security concept [and] the necessarily broad and continuing nature of intelligence gathering.” United States v. U.S. Dist. Court for the E. Dist. of Mich. (Keith), 407 U.S. 297, 320 (1972). In response to that decision and to allegations that those agencies were abusing their power in order to spy on Americans, the Senate established the Select Committee to Study Governmental Operations with Respect to Intelligence Activities (the “Church Committee”) to investigate whether the intelligence agencies had engaged in unlawful behavior and whether legislation was necessary to govern their activities. The Church Committee expressed concerns that the privacy rights of U.S. citizens had been violated by activities that had been conducted under the rubric of foreign intelligence collection. The findings of the Church Committee, along with the Supreme Court’s decision in Keith and the allegations of abuse by the intelligence agencies, prompted Congress in 1978 to enact comprehensive legislation aimed at curtailing abuses and delineating the procedures to be employed in conducting surveillance in foreign intelligence investigations. That legislation, the Foreign Intelligence Surveillance Act of 1978 (“FISA”)... established a special court, the Foreign Intelligence Surveillance Court (“FISC”), to review the government’s applications for orders permitting electronic surveillance... Unlike ordinary Article III courts, the FISC conducts its usually ex parte proceedings in secret; its decisions are not, in the ordinary course, disseminated publicly..."

To balance the competing needs of citizens' privacy and intelligence gathering:

"... Congress has amended FISA, most significantly, after the terrorist attacks of September 11, 2001, in the PATRIOT Act. See USA PATRIOT ACT of 2001, Pub. L. No. 107‐56, 115 Stat. 272 (2001). The government argues that § 215 of that Act authorizes the telephone metadata program..."

The Court added:

"We are faced today with a controversy similar to that which led to the Keith decision and the enactment of FISA. We must confront the question whether a surveillance program that the government has put in place to protect national security is lawful. That program involves the bulk collection by the government of telephone metadata created by telephone companies in the normal course of their business... "

The court recognized that while law enforcement has historically used metadata, new technologies have changed things:

"We recognize that metadata exist in more traditional formats, too, and that law enforcement and others have always been able to utilize metadata for investigative purposes. For example, just as telephone metadata may reveal the charitable organizations that an individual supports, observation of the outside of an envelope sent at the end of the year through the United States Postal Service to such an organization might well permit similar inferences, without requiring an examination of the envelope’s contents. But the structured format of telephone and other technology‐related metadata, and the vast new technological capacity for large‐scale and automated review and analysis, distinguish the type of metadata at issue here from more traditional forms. The more metadata the government collects and analyzes, furthermore, the greater the capacity for such metadata to reveal ever more private and previously unascertainable information about individuals... in today’s technologically based world, it is virtually impossible for an ordinary citizen to avoid creating metadata about himself..."

The Court opinion discussed secrecy and the Administrative Procedure Act (APA):

"The government has pointed to no affirmative evidence, whether “clear and convincing” or “fairly discernible,” that suggests that Congress intended to preclude judicial review. Indeed, the government’s argument from secrecy suggests that Congress did not contemplate a situation in which targets of § 215 orders would become aware of those orders... That Congress may not have anticipated that individuals... would become aware of the orders, and thus be in a position to seek judicial review, is not evidence that Congress affirmatively decided to revoke the right to judicial review otherwise provided by the APA... The government’s argument also ignores the fact that, in certain (albeit limited) instances, the statute does indeed contemplate disclosure. If a judge finds that “there is no reason to believe that disclosure may endanger the national security of the United States, interfere with a criminal, counterterrorism, or counterintelligence investigation, interfere with diplomatic relations, or endanger the life or physical safety of any person,” he may grant a petition to modify or set aside a nondisclosure order... Such a petition could presumably only be brought by a § 215 order recipient, because only the recipient, not the target, would know of the order before such disclosure. But this provision indicates that Congress did not expect that all § 215 orders would remain secret indefinitely..."

Download the U.S. Court of Appeals decision (Docket No. 14‐42‐cv, Adobe PDF). A copy is also available here.

Comments

Feed You can follow this conversation by subscribing to the comment feed for this post.

Chanson de Roland

The U.S. Court of Appeals for the 2nd Circuit (2nd Circuit) did what courts do in interpreting federal statutes: That is, they reach the statutory questions of the scope and validity of a statute first, and only if that fails to resolve the matter and to grant the plaintiff the relief that he is entitled to will courts go on to reach and decide any constitutional questions. That is just a fundamental approach to statutory interpretation, which courts rarely depart from.

And so the 2nd Circuit in ACLU et al. v. James Clapper in his official capacity as Director of National Intelligence, et al. Docket No. 14‐42‐cv (Clapper), was able to decide Clapper and grant relief by deciding just this one question: Since §215 provides that the collection of data, meta or otherwise, must be relevant to an investigation, does any reasonable reading of the word relevance make the metadata of all Americans relevant to one or more investigations? Of course, that is an absurd proposition, because, as the court held, that would make relevant mean that Americans' metadata would collectable because it could possibly be relevant to any investigation that the government was conducting. After all, it is always possible, not matter how remote that possibility, and it is very remote, indeed, that any American's metadata could at some future time become relevant to an investigation. But that was the government's problem: Relevance means closely connected or appropriate to the matter at hand, and the standard for closeness to the matter at hand is reasonableness. That is, there must be some instant and plausible connection between the data collected and some particular investigation. The government's view was that plausibility was unnecessary and that any possibility of a connection made metadata relevant and thus subject to collection, but that transforms the very meaning of the world relevance from that which is plausibly connected to an investigation to anything that could be connected to any investigation, so that scope of §215 would cover all Americans' metadata at anytime and at any place. The 2nd Circuity rejected that absurdity.

The Obama Administration isn't backing down on its absurd position at all. The President, who Professor Lawrence Tribe described as his most gifted student of constitutional law, proposes that to cure §215's statutory flaw, it be modified so that government mayn't collect all Americans metadata, but that telecommunications firms be required to collect and indefinitely hold all of Americans' metadata for future government seizure, which will be subject to government's seizure, if and when the government is able to show that metadata is relevant to any of its investigations. In effect, §215, as the President would modify it, would make telecommunications firms the government's agents as matter of statutory mandate. But that too must fail, because it is a well settled principle of constitutional law that what the government may not do, its agent may not do, and that what is a violation of law for the government is also a violation of law for its agent. Therefore, if §215 does not permit the government to collection Americans' metadata, unless it is relevant to an investigation, then the government's agents, the telecommunications firms, may not hold irrelevant metadata for the government.

Now, the President's two-step is that telecommunications firms collect much, if not all, of the metadata in the ordinary course of business, so the government can reach that metadata anyway through a subpoena. But the flaw in that reasoning is this: Even if a firm collects data in the ordinary course of business, the government may not seize that data on the grounds of a relevance which did not exist when the metadata was collected. And if the government wants to seize metadata held by firm through its subpoena power, that subpoena must satisfy the constitutional requirements of the 4th Amendment's probably cause standard, which is a reasonable basis for believing that the subpoenaed information is evidence of a crime, and to the extent, that the subpoena does not meet that standard it can be challenged and quashed as an unconstitutional act. And both the recipient of the subpoena and/or the target of it would have standing to challenge it.

The President knows all of this, yet he seems determined to press ahead. Why? I think that the President is determined that there will be no 9/11 on his watch. But he should be mindful that the destruction of Americans' constitutional rights, which he has sworn to protect and defend, would be just as great a tragedy, if not greater, than 9/11, and would be all the more bitter and tragic coming from our own government.

George

Chanson: well said. Thanks for the thoughtful, detailed comment.

Readers: to Chanson's point, read this post:

Data Collection By N.S.A. Spy Programs Includes Mostly Ordinary People And Not Legal Targets
http://ivebeenmugged.typepad.com/my_weblog/2014/07/nsa-targets.html

George
Editor
http://ivebeenmugged.typepad.com

The comments to this entry are closed.