Privacy News Highlights

09—15 March 2006

Contents:

EU – European Data Protection Supervisor Issues Press Release on EURODAC. 3

CA – Toronto Pearson Airport Developing Biometrics Security Program for Travellers. 3

UK – Biometric Immigration Control Now Live at Heathrow. 3

JP – Japanese Cabinet Backs Foreigner Fingerprinting Plan. 3

UK – Supermarket Trials Fingerprint Payment Technology. 3

CA – Microsoft, UofT, Bell Team up on Business Privacy Network. 3

CA – Anti-Census Website Launched. 4

CA – Edmonton Police Rapped for Improper CPIC Use. 4

CA – Federal Privacy Commissioner to Review New CIBC Fax Fiasco. 4

CA – RCMP Investigates B.C. Government Computer Breach. 4

SK – Privacy Watchdog Gets Budget Hike. 4

CA – Online Gun Registry Called “Online Shopping List for Criminals” 4

AB – Alberta Introduces Bill to Block PATRIOT ACT Disclosures. 4

CA – Analyst Urges Canadian Banks to Improve Online Authentication, Security. 4

US – E-mail Marketing Company Agrees to $1.1 Million Settlement 4

US – Children Email Registry Legislation Moves Forward. 5

UK – Watchdog Updates Data Protection Guidance. 5

UK – Government Determined to Force through ID Cards Bill 5

EU – MEPs Challenge Secret Report on EU-US Air Data Privacy. 5

EU – Article 29 Working Party: Webmail Scanning Can Be Interception. 5

CA – MasterCard Survey: Canadians Need to Guard their PII 5

WW – Citibank Uncovers Debit Card Fraud. 6

US – Sunshine Week Focuses on Public’s Right to Know. 6

US – Study: States Steadily Restricting Information. 6

EU – Malta Police Considering National DNA database. 6

NF – Newfoundland Privacy Commissioner OK’s Release of Doctor Billings. 6

WW – Porn Billing Leak Exposes 17 Million Buyers. 6

JP – Japanese Police Force Leaks Huge Amount of Data Following Virus Attack. 7

JP – Info on 2,800 Patients Uploaded to Internet by Winny Virus. 7

UK – ID Card Support Collapses. 7

UK – MPs Back Compulsory ID Cards. 7

AU – APF Says Identity Security Disaster Coming. 7

CA – Canadian Identity-Theft Scam Catches 100 People in Net 7

US – U.S. Suggests 21-Day Deadline for Google Subpoena. 8

US – Colorado Bankers Back ID Theft Plan. 8

WW – New GPS Service Allows Parents to Track Children. 8

HK – Hong Kong: Keeping Tabs on the Wiretappers. 8

NZ – New Zealand Government Departments Swaps Info on ‘Bad’ Families. 8

HK: Net Search Stumbled on Private Data Cache. 8

US – Pew Study on Online Dating. 8

US – Border ID Plan Worries Tourism Industry. 9

HK – Hong Kong Privacy Commissioner to Investigate Leak of Identities. 9

US – Report: Web Searches Can Identify CIA Employees. 9

EU – EC Launches Public Consultation on RFID. 9

WW – RFID on All Goods is 15 Years Away, Says Metro. 9

UK – Marks & Spencer to Deploy RFID Tags Women’s Underwear 9

WW – Economist Report: RFID Gains Global Momentum, Privacy Concerns Linger 10

WW – Security is Part of RFID Spread; Foes Fear Hijacking of Personal Data. 10

WW – Study Says Chips in ID Tags Are Vulnerable to Viruses. 10

WW – Study: Internet Security Threat Report Tracks Notable Rise in Cybercrime Activity. 10

CA – Canadian Chip Card Rollouts to Begin Next Year 10

US – Gonzales: NSA Program Doesn’t Need a Law. 10

US – ACLU Asks Judge to Immediately Halt Domestic Spying Program.. 11

US – FBI Cites More Than 100 Possible Eavesdropping Violations. 11

UK – Spy in the Sky Will Help Police Keep an Eye on Drivers. 11

US – House Committee Approves Phone Data Privacy Bill 11

US – Panel on Eavesdropping Is Briefed by White House. 11

US – Pentagon Admits Errors in Spying on Protesters. 11

US – FTC Retains Children’s Online Privacy Protection Rule. 11

US – GAO: Agency Public Information Centers Should Stress Accuracy. 12

US – Patriot Act Renewed, Some Civil Liberties Safeguards Added. 12

US – Data Privacy Laws Place New Obligations on Businesses. 12

US – Workers Object to City’s GPS Tracking System.. 12

 

 


EU – European Data Protection Supervisor Issues Press Release on EURODAC

The European Data Protection Supervisor (EDPS) Peter Hustinx recently completed his first inspection of the EURODAC central biometrics database. An inspection report has now been sent to Commission, Parliament and Council, and to data protection authorities in the Member States. The report covers the first stage of a comprehensive inspection, which will be followed by an in-depth security audit by mid 2006. The EDPS expresses general satisfaction with the security level, although a number of concrete recommendations are given. The EDPS press release states that: “Because of the sensitivity of some information in the report, it is not publicly available” Tony Bunyan, Statewatch editor, comments: “This sets a very bad precedent. If this principle is extended to the Visa Information System, SIS II and in time the EU PNR and fingerprint databases all we will get is a one page press release. The very minimum should be a “partially accessible” report with any “sensitive information” deleted.” [Source]

 

CA – Toronto Pearson Airport Developing Biometrics Security Program for Travellers

The company that operates Toronto’s Pearson Airport has signed an agreement aimed at developing a biometric security program for travelers. The deal was announced this week by Verified Identity Pass Canada, which is owned by Verified ID USA. The company said it will work with the GTAA to develop a program at Pearson to allow enrolled passengers to use a dedicated security lane. Once approved, travellers’ biometric data would be stored on a credit-type card, which would be used to access the security lane. Verified Canada says it and the GTAA will secure government approvals before launching the program at Pearson. Verified said in a release it doesn't track member's movements, nor does it share or sell data to third parties. Its privacy controls are audited by an independent auditor. [Source] [Source] [Source]

 

UK – Biometric Immigration Control Now Live at Heathrow

Last week Heathrow Terminal 1 launched a new biometrics-based immigration control program. The Iris Recognition Immigration System (IRIS) will enable registered passengers to enter the UK without queuing to see an immigration officer at passport control. [Source]

 

JP – Japanese Cabinet Backs Foreigner Fingerprinting Plan

Japan’s Cabinet has endorsed a proposal to fingerprint and photograph foreigners aged 16 or older entering the country as a way of cracking down on terrorism. [Source]

 

UK – Supermarket Trials Fingerprint Payment Technology

A UK supermarket chain is offering shoppers the option of authorising payment for their groceries using their fingerprints. Three Co-op stores in the Oxford area are trialling “Pay by Touch” in what’s said to be the first European use of the technology. [Source]

 

CA – Microsoft, UofT, Bell Team up on Business Privacy Network

Public and private sector organizations have banded together to create one of North America's first networks where businesses can access information on and discuss issues related to privacy law. This week Microsoft Canada Co., Bell Security Solutions and the University of Toronto's Centre for Innovation Law and Policy (CILP) launched www.theprivacynetwork.org, a place where users can search for privacy information and collaborate in online discussion forums moderated by industry experts from around the globe. The Centre for Communications and Information Technology, formerly known as CITO, which is a division of the Ontario government's Ontario Centres of Excellence, has also contributed funding to the CILP. [Source] [Source]

 

CA – Anti-Census Website Launched

A significant part of the upcoming May, 2006 Canada Census has been outsourced by Statistics Canada to a US subsidiary of the large US armaments manufacturer Lockheed Martin. [Source] [Count Me Out]

 

CA – Edmonton Police Rapped for Improper CPIC Use

The Edmonton Police Service has had its knuckles rapped for allowing an officer to run a check seeking sensitive police information on a private citizen. [Source]

 

CA – Federal Privacy Commissioner to Review New CIBC Fax Fiasco

The federal Privacy Commissioner is looking into a faxing incident involving Canadian Imperial Bank of Commerce and one of its clients. [Source] [Source]

 

CA – RCMP Investigates B.C. Government Computer Breach

The RCMP has been brought in after a breach of the B.C. government’s computer system last month. [Source] [Source]

 

SK – Privacy Watchdog Gets Budget Hike

The provincial government’s information and privacy watchdog is getting more money but will still have a large backlog of complaints to deal with as an increasing number of cases come into his office. [Source]

 

CA – Online Gun Registry Called “Online Shopping List for Criminals”

A former webmaster for the Canadian Firearms Centre says he could hack a road right through the feds’ online firearms registration service into the private files of Canadian gun owners. “During my tenure as the CFC web master I duly informed management that the web site that interfaced to the firearms registry was flawed. It took some $15-million to develop and I broke it inside of about 30 minutes”. The webmaster added: “I want to make it perfectly clear, I never broke into the system. I never crossed that line,” he said. “I just wanted the federal administrators to know how vulnerable the system was, and still is. I’m talking about getting access to a gun owner’s personal information -- number and type of guns, home address, everything.” [Source] [Source] [Source] [Source]

 

AB – Alberta Introduces Bill to Block PATRIOT ACT Disclosures

The Alberta government last week introduced Bill 20, which is designed to stop compelled disclosures of personal information under the USA Patriot Act. The bill creates fines of up to $500,000 for violating provincial laws governing disclosure of records. Bill at [Source] [Critic]

 

CA – Analyst Urges Canadian Banks to Improve Online Authentication, Security

A Forrester analyst says that Cdn banks need to convince their customers that paying bills online is safe by deploying 2-factor authentication if they want them to embrace other Web-based services. [Source]

 

US – E-mail Marketing Company Agrees to $1.1 Million Settlement 

NY AG Eliot Spitzer has agreed to a $1.1 million settlement from an interactive marketing firm that he said reused e-mail addresses and other consumer information without authorization. Spitzer described the case as being possibly "the largest breach of privacy in Internet history" with e-mail addresses and other data about some 6 million people involved. [Source]

 

US – Children Email Registry Legislation Moves Forward

BNA’S Electronic Commerce & Law Report reports that legislation that would create a registry of children’s electronic contact information, and require marketers to pay a fee to scrub their lists against it, advanced in five states during recent weeks. In addition to an Illinois proposal offered in 2005, new children e-mail registry legislation has been introduced in Connecticut, Georgia, Hawaii and Iowa in early 2006. [Source]

 

UK – Watchdog Updates Data Protection Guidance

The Information Commissioner has updated his Data Protection guidance in the wake of a House of Lords decision not to consider a landmark Court of Appeal ruling that effectively narrows the right of individuals to access “personal data”. [Source]

 

UK – Government Determined to Force through ID Cards Bill

MPs and peers face a constitutional crisis when the Government prepares a fresh attempt to drive its identity card proposals into law. Although the House of Lords is digging in against the scheme, ministers have taken the surprise decision to try to force through the ID Cards Bill at the earliest possible opportunity. They warn that further parliamentary wrangling could delay plans to issue the first ID cards in 2008-09. [Source] [Clarke Digs in for ID Card Battle with Peers] [Clarke Faces New ID Cards Battle]

 

EU – MEPs Challenge Secret Report on EU-US Air Data Privacy

A closed hearing and a confidential European commission report on handovers of air passenger data to US security agencies may be contested by MEPs. Four Liberal members of the European parliament's civil liberties committee are angry that an assessment of implementation of a controversial EU-US agreement is secret. [Source]

 

EU – Article 29 Working Party: Webmail Scanning Can Be Interception

The Article 29 Data Protection Working Party has issued an opinion stating that some email screening services may not comply with European data protection legislation. In some cases, the group said, filtering based on content may constitute an “unjustifiable interception of communications.” While EU laws allow email screening for viruses, spam or other content filtering could abridge individuals’ free speech if it blocks legitimate emails from reaching their recipients. Scanning the content of emails can also be a violation of data protection laws, unless Internet service providers or email service providers must adequately inform email software users of the blocking. [WP Opinion]     

 

CA – MasterCard Survey: Canadians Need to Guard their PII

According to new research from MasterCard Canada, more than four in five Canadians (81%) believe that losing their SIN card would put them at the greatest risk for identity theft. Yet almost six in 10 (58%) of Canadians carry their SIN card with them at all times. “MasterCard Canada is calling on Canadians to PYID: Protect Your I.D. - while consumers recognize their personal and financial information is valuable, they are not doing enough to protect it.” The survey also revealed that three quarters of Canadians believe that losing their driver’s license or their credit card would put them at risk for identity theft (78% and 77% respectively). While 73% believe losing their passport would put them at risk, just 6% of Canadians carry them on a regular basis. [Source]

 

WW – Citibank Uncovers Debit Card Fraud

Citibank has frozen the use of an undisclosed number of debit cards in three countries after detecting “several hundred” fraudulent cash withdrawals in PIN-based transactions. An undisclosed but possibly large number of Citibank customers in Canada, the UK, and Russia were recently left unable to use their ATM cards. Other banks, including Wells Fargo, Bank of America, and Washington Mutual, have reportedly taken similar steps.  [Source] [Source]

 

US – Sunshine Week Focuses on Public’s Right to Know

This is Sunshine Week, an effort by the nation’s news media to draw attention the public’s right to know and to limit government secrecy. It is a time to discuss the balance between the need to protect our security and the need to ensure open government. What information does the public have a right to know? Where is the line between government operating in secret and protecting national security? Closer to home, how many details of a crime do the public and the victim’s family need revealed in a press conference? [Source] [Source]

 

US – Study: States Steadily Restricting Information

Since Sept 11, 2001, local, state and federal government agencies are keeping more information secret from the public, making it harder for citizens to keep tabs on what elected officials and bureaucrats are doing, an investigation by the Associated Press shows. An analysis of laws in all 50 states has found that legislatures have passed more than 1,000 laws changing access to information, approving more than twice as many measures that restrict information as laws that open government books. [Source] [Source]

 

EU – Malta Police Considering National DNA database

The Malta olice are considering the setting up of a national DNA database of convicted criminals, a spokesperson for the Ministry of Justice and Home Affairs said. A internationally accredited private laboratory, Synergene Biotechnology, already possesses the technology necessary for setting up this database. But a final decision on whether Malta would have its national DNA database will be taken "when financial considerations are deemed favourable," the spokesperson said. [Source]

 

NF – Newfoundland Privacy Commissioner OK’s Release of Doctor Billings

The billings of individual physicians through Newfoundland and Labrador’s medicare plan should be made public, says the office of the Information and Privacy Commissioner. [Source]

 

WW – Porn Billing Leak Exposes 17 Million Buyers

Seventeen million customers of the online payment service iBill have had their personal information released onto the internet, where it’s been bought and sold in a black market made up of fraud artists and spammers, security experts say. The stolen data includes names, phone numbers, addresses, e-mail addresses and internet IP addresses. Other fields in the compromised databases appear to be logins and passwords, credit-card types and purchase amounts, but credit-card numbers are not included. The breach has broad privacy implications for the victims. Until it was brought low by legal and financial difficulties, iBill was a top credit-card processor for adult entertainment websites. The transactions documented in the database are dated between 1998 and 2003, spanning a period at the height of iBill’s success. [Source]

 

JP – Japanese Police Force Leaks Huge Amount of Data Following Virus Attack

A massive amount of investigation data kept by Ehime Prefectural Police has been leaked onto the Internet, apparently after the computer that kept the data was infected with a virus through the file exchange software Winny. [Source]

 

JP – Info on 2,800 Patients Uploaded to Internet by Winny Virus

Information on about 2,800 patients who had surgery at a privately-run hospital in Toyama between 1997 and December 2004 was unintentionally uploaded to the Internet. [Source]

 

UK – ID Card Support Collapses

Support for the UK's national ID card scheme has fallen dramatically over the past year with more than 80% of people now opposed to the controversial plans, according to a new survey of silicon.com readers. The results show a complete collapse in support for ID cards compared to a silicon.com poll in August 2004 where 60% of respondents were in favour of the scheme. The latest poll of almost 600 silicon.com readers over the past week shows that 82% are against the introduction of a national biometric ID card scheme in the UK. Of those against ID cards, 17% said they have shifted from pro to anti-ID cards as the full details of the scheme have emerged. The remaining 83% said they have always been against ID cards. [Source]

 

UKMPs Back Compulsory ID Cards

MPs have again voted in favour of compulsory ID cards by forcing passport applicants to register their personal and biometric details on the vast national ID database. The government this week successfully overturned an amendment to the ID card bill made by peers in the House of Lords last week that would make it optional for people applying for a passport or other "designated document" to register for an ID card. The peers' objection is that the government's election manifesto promised ID cards would be voluntary initially and that by linking them to passports - held by 85% of the population - this would effectively make it "compulsion by stealth". [Source]

 

AU – APF Says Identity Security Disaster Coming

Australia is headed for an identity security disaster if the federal Government and state governments don't perform detailed and public cost benefit analyses of a series of ID initiatives that are under way. Australian Privacy Foundation chair Anna Johnston says none of the variety of state and federal ID projects presently under way had made available sufficient detail to allow adequate public debate on the issue. Johnston says the foundation is concerned that federal Attorney-General Philip Ruddock ruled out a national ID card in July last year, saying it would only increase the risk of fraud -- but is now open to the idea. She says governments did a huge amount of investigation of the plan between 2001 and 2004, and rejected the ID card as a bad idea. [Source]

 

CA – Canadian Identity-Theft Scam Catches 100 People in Net

More than 100 people were caught in a “wide-ranging identity-theft scam” that has seen at least $500,000 in charges made on phoney credit cards in the last four years, say Ontario police. [Source]

 

US – U.S. Suggests 21-Day Deadline for Google Subpoena

The US Justice Department suggested a 21-day deadline last week for Google to hand over information about its users’ search habits. In court documents, federal prosecutors said they need a prompt response because of the compressed schedule of the case. [Source]

 

USColorado Bankers Back ID Theft Plan

The Colorado Bankers Association is the driving force behind HB 1347, which would create an identity theft task force to help Colorado police and sheriff’s departments, district attorneys and the attorney general investigate and prosecute identity theft and financial fraud cases. The task force would be funded through surcharges on business filings that banks and financial services companies typically pay. [Source]

 

WW – New GPS Service Allows Parents to Track Children

An Ancaster company is using high technology to put a serious crimp in your social lives. Global Positioning Systems is going to let parents know when their child is late, plays hooky or sneaks out of the house. The 24-hour-a day service will cost $200 a year. [Source]

 

HK – Hong Kong: Keeping Tabs on the Wiretappers

Lawmakers and the government are set to clash in a row over balancing freedom with the need to carry out surveillance. It took nine years and a slew of landmark court rulings, but the long-awaited legislative debate over wiretapping and covert surveillance is finally on the dock. Over the next few weeks, lawmakers and the administration will weigh the limits of privacy rights and executive powers in post-handover Hong Kong as they lock horns over the sticky questions of when, and to what extent, the government can monitor private citizens, open their mail and tap their phones. [Source]

 

NZ – New Zealand Government Departments Swaps Info on ‘Bad’ Families

Agencies from at least four government departments are swapping information on “bad families” and storing their details on a database. The database also gives and receives details from volunteer groups including Women’s Refuge and Parentline. A more powerful prototype, proposed last year, was shelved because it contravened privacy legislation. [Source]

 

HK: Net Search Stumbled on Private Data Cache

Last week, David Webb typed the address of a Hong Kong business he was searching for into Google and tapped the enter key. But instead of a single web address, the shareholder activist and publisher of corporate governance site www.webb-site.com stumbled on thousands of addresses – as well as their names, ages, Hong Kong identity card numbers and reference numbers. [Source]

 

US – Pew Study on Online Dating

According to a new report from the Pew Internet & American Life Project entitled, “Online Dating,” there is now broad public awareness of the online dating world. While online dating is becoming more commonplace, there are strong concerns in the wider public about the dangers of posting personal information on dating sites and about the honesty of those who pursue online dating. Some 66% of internet users agree with the statement that online dating is dangerous because it puts personal information online. And 57% of internet users agree with the statement that a lot of people who use online dating sites lie about their marital status. [Source] [Report]

 

US – Border ID Plan Worries Tourism Industry

The U.S. plan to require people traveling between the United States and Canada to have passports or similar identification is already hurting cross-border tourism, and it’s not even in effect yet, tourism officials said this week. Convention planners are hesitant to book events across the border a year or two in advance without knowing how the plan will be implemented or what new identification cards will cost, Randy Williams of the Tourism Industry Association of Canada told a panel of U.S. and Canadian government officials. Many Americans are staying away from Canada already, believing the requirement is in effect now, he said. “There is uncertainty in the marketplace and uncertainty is killing us right now,” Williams said at a conference of the Binational Tourism Alliance, a trade organization that promotes cross-border tourism. [Source] [Source]

 

HK – Hong Kong Privacy Commissioner to Investigate Leak of Identities

Roderick Woo, Hong Kong’s Office of the Privacy Commissioner (OPC), is highly concerned about the information leak of 20,000 people who complained about police over the past decade and will look into the case, described as “very sensitive” and which may breach Data Protection Principle 4, which states appropriate security measures be applied to personal data. A database stolen from the Independent Police Complaints Council (IPCC) revealed highly confidential records stretching back to 1996 about names, addresses and Hong Kong identity card numbers for each complainant on the internet. Hong Kong authorities said that they would set up a register of data-collection companies. Woo said the companies would have to provide information on what kind of data they collect and why, and who will access to it. [Source] [Source] [Source] [Human error culprit in police files Net leakage] [HK Privacy Chief demands more powers]

 

US – Report: Web Searches Can Identify CIA Employees

The identities of 2,600 CIA employees and the locations of two dozen of the agency's covert workplaces in the United States can be found easily through Internet searches, according to an investigation by the Chicago Tribune. The newspaper obtained the information from data providers who charge fees for access to public records and reported on its findings in Sunday editions. [Source] [Source]

 

EU – EC Launches Public Consultation on RFID

The European Commission has launched a debate and consultation on RFID technologies. It is seeking views on the opportunities, interoperability and compatibility issues as well as the privacy and security concerns raised by the new technology. [Source] [Source]

 

WW – RFID on All Goods is 15 Years Away, Says Metro

The day when RFID replaces bar codes for identifying products is at least 15 years away, according to an executive of German retail giant Metro, which is leading the smart-tag charge in Europe. [Source]

 

UK – Marks & Spencer to Deploy RFID Tags Women’s Underwear

Marks & Spencer, a major UK retailer, has announced that it is extending its RFID item marking trials to additional stores and to several types of multiple-sized items – including women’s underwear. [Source]

 

WW – Economist Report: RFID Gains Global Momentum, Privacy Concerns Linger

A new report from the Economist Intelligence Unit, entitled RFID Comes of Age, concludes that consumers will be willing to trade some of their privacy rights for the convenience and brand-loyalty discounts potentially on offer from RFID-tagged products. The report found that the adoption rate of RFID is accelerating despite concerns that the technology could compromise consumers’ privacy rights. [Source] [Source] [Source]

 

WW – Security is Part of RFID Spread; Foes Fear Hijacking of Personal Data

RFID tags will soon be attached to everything from cell phones to credit cards to cartons of sour cream. But if technology companies and consumer goods makers are determined to see that futuristic vision come true, then security and privacy concerns have to be addressed, according to panelists and speakers said at the recent RFID World show in Grapevine, Texas. [Source]

 

WW – Study Says Chips in ID Tags Are Vulnerable to Viruses

A group of European computer researchers have demonstrated that it is possible to insert a software virus into radio frequency identification tags, part of a microchip-based tracking technology in growing use in commercial and security applications. In a paper to be presented today at an academic computing conference in Pisa, Italy, the researchers plan to demonstrate how it is possible to infect a tiny portion of memory in the chip, which can hold as little as 128 characters of information. [Source]

 

WW – Study: Internet Security Threat Report Tracks Notable Rise in Cybercrime Activity

Symantec Corp. released its latest Internet Security Threat Report, covering the last six months of 2005. The report notes an increase in threats designed to facilitate cybercrime. While past attacks were designed to destroy data, today’s attacks are increasingly designed to silently steal data for profit without doing noticeable damage that would alert a user to its presence. In the previous Internet Security Threat Report, Symantec cautioned that malicious code for profit was on the rise, and this trend continued during the second half of 2005. Malicious code threats that could reveal confidential information rose from 74% of the top 50 malicious code samples last period to 80% this period. [Source]

 

CA – Canadian Chip Card Rollouts to Begin Next Year

The payment industry is readying itself for the rollout of chip card technology, with the first transactions to likely take place in less than two years' time. Consumers can expect to see chip-based debit and credit cards in the market by 2007, according to spokespeople from Interac Association, MasterCard Canada Inc. and Visa Canada Association. Visa currently offers a couple of chip cards in Canada including the RBC Avion Visa card and expects that 85% of transactions to be between chip-based cards and terminals by 2010. Desjardins Group also plans to be the first financial institution in Canada to take advantage of the technology by rolling it out across its organization by 2008. [Source]

 

US – Gonzales: NSA Program Doesn’t Need a Law

Attorney General Alberto Gonzales made clear last week that the White House is not seeking congressional action to inscribe the National Security Agency's monitoring into U.S. law, even as members of Congress negotiate with the Bush administration about legislation. Gonzales maintained the program is legal the way it is. [Source] [Source] [Source] [Source] [Source] [Source] [Source]

 

US – ACLU Asks Judge to Immediately Halt Domestic Spying Program

The ACLU presented a federal judge with declarations from four individuals – two criminal defense lawyers, an advocate for democratic reform in the Middle East and a journalist – who say President Bush’s domestic eavesdropping program has hindered their ability to do their jobs. The ACLU asked the U.S. District Judge to immediately halt the NSA’s warrantless surveillance. The Center for Constitutional Rights filed a similar motion last week in its lawsuit in federal court in New York. [Source] [Source]

 

US – FBI Cites More Than 100 Possible Eavesdropping Violations

The FBI reported more than 100 possible violations to an intelligence oversight board over the past two years, including cases in which agents tapped the wrong telephone, intercepted the wrong e-mails or continued to listen to conversations after a warrant had expired, according to a report issued last week. [Source] [Source] [DoJ Inspector General, Report to Congress on Implementation of Section 1001 of the USA PATRIOT Act]

 

UK – Spy in the Sky Will Help Police Keep an Eye on Drivers

High-powered cameras capable of reading number plates from several thousand feet up have been bought by five UK police forces. Cambridgeshire, Cheshire, South Yorkshire, Greater Manchester and the Met are among forces who have invested in the technology which is already used in America, Canada, Norway and Luxembourg. The cameras can calculate whether a motorist is breaking the speed limit, with the information being transmitted from a helicopter to the police control centre on the ground. Any hope the motorist might have of escaping the prying eye in the sky is slim, especially with Wescam, the Canadian manufacturers, developing a device capable of working at night. [Source]

 

US – House Committee Approves Phone Data Privacy Bill

The US House Energy and Commerce Committee has approved a bill that would make it a crime to fraudulently obtain and sell a person’s telephone records. The bill also would require telecommunications companies to get consumers’ permission before sharing information about their calling records with business partners. [Source] [Source] [Source] [Source]

 

US – Panel on Eavesdropping Is Briefed by White House

The new 7-senator intelligence subcommittee created to review the Bush administration’s domestic surveillance program had its first White House briefing yesterday and is scheduled to visit the National Security Agency’s headquarters Monday to gather additional information, according to congressional and administration officials. [Source]

 

US – Pentagon Admits Errors in Spying on Protesters

The Department of Defense admitted last week that it had wrongly added peaceful demonstrators to a database of possible domestic terrorist threats. The letter followed an NBC report focusing on the Defense Department’s Threat and Local Observation Notice, or TALON, report. A DoD official says peaceful demonstrators’ names have been erased from database. [Source]

 

US – FTC Retains Children’s Online Privacy Protection Rule

The Federal Trade Commission has decided to retain a rule implementing the Children’s Online Privacy Protection Act (COPPA), which demands that website operators obtain parental consent to their collection of children’s personal information. [Source] [Source]

 

US – GAO: Agency Public Information Centers Should Stress Accuracy

The information provided to the public by government-operated contact centers could be enhanced if agencies focused more on accuracy and had better guidance on performance measurements and oversight practices, the GAO concluded in a new report (GAO-06-270). Practices to ensure the accuracy of information provided to the public by government agencies vary widely. The report looked at contractor-run contact centers at the U.S. Postal Service, Centers for Disease Control and Prevention, General Services Administration and departments of Defense, Labor and Education. GAO considered the use of four techniques for improving accuracy: regular review of the centers' information databases, monitoring of public contacts and center responses, post-inquiry satisfaction surveys and validation of contractor-prepared reports. [Source] [Report Highlights]

 

US – Patriot Act Renewed, Some Civil Liberties Safeguards Added

After a long battle with Congress that went down to the wire President Bush signed a renewal of the USA Patriot Act, a day before 16 major provisions of the old law expire. [Source] [Source] [Source] [The USA PATRIOT Improvement and Reauthorization Act of 2005] [S. 2369, Senate Bill Further Amending the Patriot Act]

 

US – Data Privacy Laws Place New Obligations on Businesses

Ohio House Bill 104 took effect in February, obligating virtually every private and public entity in Ohio to notify individuals whose personal information may be at risk as a result of a breach of an information system. The bill, nearly identical to bills passed or pending in many states, is designed to reduce and mitigate identity theft. [Source]

 

US – Workers Object to City’s GPS Tracking System

When the New York town of Babylon installed global positioning system technology in most of its fleet of 250 vehicles in January, officials touted it as a way to improve efficiency, particularly during emergencies such as snowstorms. However, the system also is being used to monitor worker behavior – a realization that has left town employees increasingly nervous. A week after installation, three employees were disciplined as a result of unacceptable workplace conduct. [Source]