May 30 2025

US State Dept. says silence or anonymity on social media is suspicious

A cable yesterday from Secretary of State Marco Rubio, first reported by  Nahal Toosi and Eric Bazail-Eimil of Politico, directs US embassies and consulates to “conduct a complete screening of the online presence of any nonimmigrant visa applicant seeking to travel to Harvard University for any purpose.”

The cable implies that the main although not the exclusive focus of this special scrutiny of each Harvard-associated visa applicant’s “online presence” will be the content of their social media accounts.

In the cable, Rubio told US consular officers who decide whether to grant or deny visa applications that “the lack of any online presence, or having social media accounts restricted to ‘private’ or with limited visibility, may be reflective of evasiveness and call into question the applicant’s credibility.” In such cases, consular officers are instructed to:

Inform the applicant that his case is subject to review of his online presence, request that the applicant set all of his social media accounts to “public,” and remind him that limited access to or visibility of social media activity could be construed as an effort to evade or hide certain activity. Consular officers must then refer the cases to the Fraud Prevention Unit (FPU).

Neither silence on social media, nor choosing to speak and associate anonymously, pseudonymously, or privately on social media, can Constitutionally or consistent with international human rights treaties be considered “suspicious” or “evasive”.

This directive was issued by Secretary of State Rubio without completing the ongoing process  to obtain approval for the collection of social media account information on visa application forms, as required by the Paperwork Reduction Act. That multi-step approval process was initiated  in early March of this year with a Federal Register notice announcing a 60-day public comment period that closed in early May.

The Identity Project, joined by Privacy Times and Government Information Watch, was among more than a thousand organizations and individuals who submitted comments, almost all of which opposed the proposed collection of social media identifiers.

The government has not yet completed its review of these comments, or taken the next step of submitting its request for approval of the collection of social media identifiers to the Office of Management and Budget (OMB).

In our comments, we noted some of the reasons visa applicants might reasonably fear that revealing acts of speech and association on social media that are legally protected in the US might place them in grave jeopardy in the countries in which they reside:

We cannot overstate the significance of anonymity or pseudonymity as a potentially life-or-death matter for social media users, most especially for dissidents, victims of discrimination, and those living under the jurisdiction of repressive regimes or otherwise in fear of persecution. Anonymous or pseudonymous speech, publication, and assembly are the only forms of dissident speech, publication, or assembly that are possible under some repressive regimes.

Activities which are protected by the First Amendment, including some which advance U.S. interests in freedom and democracy, are subject to legal sanctions in many other countries.

Capital crimes in Saudi Arabia, for example, include blasphemy against the state religion, disparagement of members of the royal family or the institution of hereditary absolute monarchy, trafficking in prohibited mind-altering substances including alcoholic beverages, and private sexual activity between consenting adults of the same gender in their home.

Saudi Arabia is a U.S. ally with which… U.S. agencies might be expected to share information obtained through this collection of information – including information that could identity Saudi Arabian citizens or residents who have perpetrated these “crimes”. As a result, this collection of information could subject these individuals, including pro-democracy activists, to sanctions in Saudi Arabia ranging from public whipping to beheading.

Even if this compelled disclosure of information were lawful – which we believe it isn’t – it would be bad public policy. The possibility of anonymous and pseudonymous discourse is an essential element of an open marketplace of ideas, and plays a particularly important role in the places where identifiable speakers and speech are subject to the greatest repression.

Anonymous and pseudonymous speech and publication have a long and honorable tradition in the U.S., going back to the anonymous authors and publishers of anti-monarchist handbills in the British colonies of North America and the pseudonymous authors of the Federalist Papers. Today, these works would probably be published on social media, and “Publius” – the pseudonym used by the authors of the Federalist – would probably be a social media identifier rather than a name printed on the title pages of a series of pamphlets.

Anonymity and pseudonymity are especially critical for social media users, whose speech can be, and sometimes is, held not only against themselves but against any or all of their social media “friends”, friends-of-friends, associates, contacts, and/or commenters.

The “special vetting” of visa applicants identified as intending to visit Harvard — students, faculty, staff, guest speakers, patients coming to the US for treatment at Harvard hospitals, attendees at Harvard conferences and symposia, etc. — is described as “a pilot for expanded screening and vetting of visa applicants. This pilot will be expanded over time.”

Rather than being expanded, this directive should be rescinded and the “pilot” ended.

May 28 2025

200,000 people a day fly without REAL-ID

The real story of REAL-ID is that more people than ever are flying in the US without REAL-ID, with ID the TSA considers “unacceptable”, or with no ID at all.

In a show of massive passive resistance to baseless threats by the Transportation Security Administration (TSA) to prevent people without REAL-ID from traveling by air, more than 200,000 flyers without REAL-ID passed through TSA checkpoints and boarded scheduled airline flights in the US last Friday, setting a new record for people flying with no ID or with ID the TSA deems “unacceptable” because it isn’t considered compliant with the REAL-ID Act of 2005.

Despite twenty years of false claims that airline passengers without REAL-ID would be  turned away at TSA checkpoints after the REAL-ID deadline, we’ve been unable to confirm any report of a traveler blocked by the TSA for lack of REAL-ID in the three weeks since the TSA claimed that it would start enforcing the REAL-ID Act at airports.

The continued flow of millions of air travelers without REAL-ID through TSA checkpoints since the TSA’s self-imposed enforcement deadline confirms what we’ve said all along: no law requires airline passengers on domestic flights in the US to have or show any ID, and the REAL-ID Act hasn’t changed that. You can still fly without ID, and you shouldn’t be worried that you won’t be able to fly without REAL-ID.

The TSA says that since the REAL-ID enforcement deadline on May 7, 2025, 93% of travelers arriving at TSA checkpoints have shown REAL-IDs. That leaves 7% who have not. Last Friday, the busiest air travel day of the Memorial Day weekend at the start of the summer vacation season, the TSA screened more than three million air travelers. That means more than 200,000 flyers passed through TSA checkpoints without REAL-ID on Friday.

Despite the record number of travelers passing through TSA checkpoints over the holiday weekend, there were few if any delays, and none attributable to REAL-ID noncompliance. Travelers without REAL-ID reported little or no additional questioning, search, or delay.

So far as we can tell, none of the TSA’s procedures for travelers without ID or with “unacceptable” ID, including calls to the TSA’s ID Verification Call Center or demands for travelers to fill out and sign the illegal TSA Form 415 (“Certification of Identity”), have been applied to  those with “noncompliant” driver’s licenses or state IDs.

The bottom line, at least for now, is that TSA hasn’t tried to enforce a nonexistent requirement for ID to fly. We’re pleased that so many travelers have seen through the TSA’s lies and ignored its false threats.

These threats continue, and many people continue to struggle to obtain the compliant ID they’ve been told they will “need” to fly or for other purposes. See for example, this poignant story of the travails  of elders in Alaska who need to fly to get to medical care. Women who’ve changed their name through marriage or divorce, and trans or non-binary people who’ve changed the gender marker on some or all of their documents, are also among those having particular trouble assembling the documentation needed for REAL-ID. Congress still needs to repeal the REAL-ID Act. That’s most likely if the public continues to resist or simply to ignore both the REAL-ID Act and the TSA’s empty threats.

We’ll continue to monitor the situation. We welcome your firsthand reports. Have you flown since May 7th without REAL-ID, or with no ID? How did it go?

May 08 2025

ARC sells airline ticket records to ICE and others

Contracts by Federal agencies with the Airlines Reporting Corporation for access to reports of airline tickets issued by US travel agencies, from USAspending.gov.

A company you’ve probably never heard of is selling copies of every airline ticket issued by a travel agency in the US to the US Department of Homeland Security (DHS) and a plethora of other Federal law enforcement and immigration agencies — and who knows who else.

Records of all airline tickets issued by travel agencies in the US are being sold to US Immigration and Customs Enforcement (ICE) and other Federal law enforcement agencies, according to an ICE procurement document posted yesterday on a US government contract website and uncovered in a major scoop today by Katya Schwenk of Lever News.

According to the document found by Ms. Schwenk on SAM.gov, ICE is entering into a no-bid contract with the Airlines Reporting Corporation (ARC) “to procure, on a sole source basis, licenses for Travel Intelligence Program (TIP)… The vendor listed is the only company that can provide the required software licenses.”

ARC is the financial clearinghouse through which travel agencies in the US (from mom-and-pop agencies to online mega-agencies like Expedia) pay airlines (including both US and foreign airlines) for the tickets those agencies have sold. Its role is similar to that of VISA and MasterCard for credit card merchant  transactions, except that VISA and MasterCard compete with each other, while ARC has no competitor in  the US. A few travel agencies have special arrangements to pay certain airlines directly, bypassing ARC for tickets those agencies issue on those airlines only, but that’s the exception.

Ticket sales by travel agencies in the US are reported daily to ARC through links to computerized reservation systems. Every week, each travel agency in the US submits a report to ARC with a copy of every ticket it has issued, the amount paid, the fare calculation and tax breakdown, and the form of payment. ARC takes the total for the week’s sales on all airlines out of the agency’s bank account, and pays each airline a weekly total for its tickets issued by all agencies accredited through ARC. (The amount transferred to or from the agency is the net total, taking into account ticket sales, refunds, any commissions to the agency from airlines, “debit memos” when an airline disputes the fare originally collected by the agency, and whether credit card charges have been processed by the agency or the airline as the merchant.) Copies of tickets are included with agencies’ reports to ARC so that airlines can audit that agents have charged the correct fare. ARC is a joint venture owned by just a few airlines, but provides settlement services to more than 200 other airlines.

(ARC only handles payments from travel agencies in the US. Payments and credits to airlines from travel agencies in countries other than the US are settled through other regional financial clearinghouses under IATA’s Billing and Settlement Plan, BSP.)

The amounts paid to ARC by Federal agencies aren’t large enough to make selling data to the Feds a significant line of business for ARC.  But the amounts are large enough to indicate that Federal law enforcement and immigration agencies are using information about airline tickets obtained from ARC in a significant and growing number of cases, for unknown purposes and on an unknown legal basis.

We’ve never heard of the “Travel Intelligence Portal” through which ARC offers access to ticket records before now. TIP isn’t mentioned anywhere on ARC’s website, in ARC’s privacy policy, or in the privacy policy of any airline or travel agency we’ve reviewed.  Travelers and ticket purchasers who don’t know that ARC exists aren’t likely to ask what it has done with their data. We don’t know whether TIP is a service offered by ARC exclusively to Federal agencies, or if it has other government or commercial users in the US and/or abroad.

The previously unnoticed ARC contracts with ICE and other US government agencies also raise substantial doubt as to whether travel agencies or airlines — including foreign airlines that process payments for their ticket sales in the US through ARC, and travel agencies that act as their agents in the US — are complying with foreign laws including PIPEDA in Canada and the GDPR in Europe.

If ARC is selling ticket data to the US government without reporting those disclosures to the travel agencies and airlines involved, those agencies and airlines  will be unable to provide data subjects with an accurate or complete accounting of the disclosures of their personal data, as required by PIPEDA and the GDPR.

On the other hand, if travel agencies and/or airlines have authorized ARC to make this data available to the US government, or have continued to transmit data to ARC after learning that ARC was making it available to the US government, those travel agencies and/or airlines have likely violated their duty not to transmit personal data to entities that can’t not assure adequate protection of that data against onward disclosure.

Read More

May 05 2025

What can you do if you aren’t allowed to fly without REAL-ID?

On Wednesday, May 7, 2025, the Transportation Security Administration (TSA) plans to start treating driver’s licenses and state IDs that don’t comply with the REAL-ID Act as “unacceptable” ID at TSA checkpoints. That doesn’t mean that travelers without REAL-ID won’t be allowed to fly. What the TSA has said is that it will subject travelers without REAL-ID on or after May 7th to its current procedures for airline passengers with no ID or unacceptable ID.

In a sample of incident logs and reports released in response to one of our Freedom Of Information Act requests, 98% of the airline passengers who showed up at TSA checkpoints with no ID or unacceptable ID were allowed to fly after additional “security theater”.

But given the numbers of people without REAL-ID, even 2% of those who try to fly without REAL-ID could be a significant number. And if you’re the one being told, “You can’t fly today”, any number of unlawful and denials of your right to travel is significant.

Some people without REAL-ID will be turned away illegally at TSA checkpoints. Others will be delayed for so long that they miss their flights. Of that latter group, some will be denied refunds by airlines, or told they have to pay change fees to fly on later flights.

What are your rights at the airport? What can you do if you are turned away by the TSA because you don’t have REAL-ID, delayed and miss your flight, or denied a refund or charged a fee to change a flight you missed because of TSA delays and ID checks?

This isn’t advice from lawyers, but it’s practical advice about what to do to protect your rights and maximize your chances if you later take the TSA or an airline to court.

Read More

May 02 2025

Objections to blanket approval for USCIS surveillance of social media

Today the Identity Project, Privacy Times, and Government Information Watch filed comments objecting to a proposal by US Citizenship and Immigration Services (USCIS) for blanket advance approval for USCIS to demand that all foreigners submitting any sort of application to USCIS provide a statement under penalty of perjury a list of all  social media “platforms” and “identifiers” they have used in the last five years. The forms on which this information would be required would include applications for permanent residency, adjustment of status, and naturalization.

The proposal builds on earlier proposals, to which we and many other organizations objected, to require applicants for visas or visa-free entry to the US to provide lists of social media platforms and identifiers they have used. The current proposal by USCIS would extend mandatory social media usage reporting to those foreigners who have already demonstrated the strongest ties to the US, including permanent US residents applying for naturalization as US citizens. The current proposal would also give blanket pre-approval to USCIS to demand this information on other forms in the future.

According to our comments:

The proposed collection of information does not comply with the Paperwork Reduction Act (PRA), the First and Fourth Amendments to the U.S. Constitution, or the International Covenant on Civil and Political Rights (ICCPR). This vague and overbroad collection of information from permanent residents, applicants for naturalization, and other non-U.S. citizens is inappropriate as a matter of policy and contrary to U.S. national and international interests in democracy and human rights. In many cases, it would be impossible for individuals to provide the requested information or to attest under penalty of perjury to its completeness. The proposed request for information, in its proposed form, would thus function as a pretext for denial of residency or naturalization as a citizen or other adverse decisions.

The proposal for this collection of information by U.S. Citizenship and Immigration Services (USCIS) should be withdrawn. If this proposal is submitted to the Office of Management and Budget (OMB) for approval, it should be rejected as failing to meet the statutory standard of necessity for an agency purpose and as a violation of the Constitutional and human rights of individuals about whom information would be collected, including U.S. citizens who engage in protected acts of assembly and speech with non-U.S citizens.

Social media platforms and identifiers are undefined in the proposal or in any other law or regulation, leaving the proposed requirement unconstitutionally vague.

The proposal targets social media, and only social media, in order to identify with whom we associate, including associations between US and foreign citizens. It appears to be based on the assumption that freedom of speech and freedom of association are rights of citizenship, not human rights, that can be denied not just to non-citizens but to US citizens who associate with foreigners. But this assumption has no basis in the US Constitution or in the human rights treaties the US has ratified.

What, if any, social media platforms or identifiers a person has used is not, and cannot Constitutionally be, a basis for USCIS decisions. Rather than having any lawful use, this information would be useful only for a a variety of unlawful purposes, including:

  • Robotic predictive pre-crime profiling;
  • Suspicion generation and guilt by association; and
  • Pretextual denial of applications for permanent residency or naturalization.

You can submit your own comments on the USCIS proposal by clicking on the “Comment” button here until the end of the day on Monday, May 5, 2025.

We have urged USCIS to withdraw its proposal for this collection of social media usage information. If the proposal is not withdrawn, there will be a second comment period when it is submitted to the Office of Management and Budget (OMB) for final approval