Oct 10 2018

What AAMVA doesn’t want you to know about the national REAL-ID database

Another “deadline” for enforcement of the REAL-ID Act of 2005 passed uneventfully today.

The US Department of Homeland Security had advertised that DHS extensions of time for voluntary compliance with the REAL-ID Act by many states would expire today.

The DHS threatened that starting today it would “enforce” the REAL-ID Act through harassment or denial of the right to travel of airline passengers without ID or with ID issued by states or territories that the DHS, in its standardless administrative discretion, deemed insufficiently compliant with Federal wishes.

Today’s supposed “deadline” was fixed neither by law nor by regulation. Not surprisingly, the DHS blinked in the final days before its self-imposed ultimatum, as it has done again and again.

Every US state and territory subject to the REAL-ID Act was either certified by the DHS as sufficiently compliant to satisfy the DHS (at least for now), or was given a further extension of time to comply without penalty until at least January 10, 2019.

Yesterday, the day before the “deadline”, the DHS quietly posted notices on its website that it had granted further extensions until January 2019 to the last two states, California and New Jersey.

Perhaps the DHS is still unwilling to provoke riots at airports by stopping people without ID, or with ID from disfavored states and territories, from flying. Perhaps it isn’t yet prepared to face, and likely lose, the inevitable lawsuits from would-be flyers.

Even American Samoa, which — because the second-class status of American Samoans as US subjects but not US citizens would make it harder for them to challenge DHS restrictions of their rights — had been the first trial by the DHS of enforcement of the REAL-ID Act, was given an extension until October 10, 2019.

So far as we can tell, REAL-ID Act “enforcement” meant only modestly enhanced harassment of American Samoans at airports. Our FOIA request for records of how many people tried to fly with American Samoa IDs, and what happened to them, remains pending with no response after more than five months.

American Samao isn’t the limit of REAL-ID Act expansion beyond US borders and overseas. H.R. 3398, a bill to extend eligibility for REAL-ID Act compliant drivers licenses and IDs to citizens of several nominally independent de facto US dependencies, has passed the House and is pending in the Senate.

Meanwhile, the real movement toward state compliance with the REAL-ID Act is behind the scenes  — as the DHS, its collaborators among state driver licensing agencies, and AAMVA, the operator of the outsourced and pseudo-privatized national ID database, want it to be.

Since we last reported on the status of REAL-ID Act compliance six months ago, agencies in three more states — Pennsylvania, New Mexico, and most recently Washington in September 2018 — have uploaded information about all licensed drivers and holders of state-issued IDs to the SPEXS national database. That brings to 19 the number of states whose residents’ personal information is included in the aggregated database.

But even as the database grows to include information about more and more US residents, the DHS persists in denying its existence. According to the DHS public FAQ about the REAL-ID Act:

A: Is DHS trying to build a national database with all of our information?

No…. REAL ID does not create a federal database of driver license information.

To the extent that there is any truth at all in this statement, it’s that the SPEXS national database isn’t under direct Federal or state control, but has been handed over to AAMVA and AAMVA’s contractors. (The database is apparently actually hosted by Microsoft.)

For obvious reasons, nobody is more eager than AAMVA to have you pay no attention to the national ID database behind the REAL-ID Act curtain.

In June 2018, we were honored to receive an urgent letter by Fedex from the President  & CEO of AAMVA, demanding that we immediately remove from our website the specifications for the SPEXS database, which we had obtained in 2016 from AAMVA’s own public website. After AAMVA made that whole section of its site “members-only”, we posted a copy of the SPEXS specification to help readers understand the details of the system, and as one of the key sources for our analysis of SPEXS.

SPEXS already includes personal information obtained from government records of drivers licenses and state IDs, including dates of birth and the last five digits of Social Security Numbers, for more than 50 million US residents. We think the people whose data is included in this system are entitled to know what information is being kept about them, who has access to it, and how it is used.

According to the SPEXS specifications,  development of SPEXS was funded by grants from components of the DHS and the Department of Transportation. (We’re waiting for responses to our FOIA requests for those agencies’ records about SPEXS.) If SPEXS were being operated directly by a Federal agency, the Privacy Act would require it to provide notice of the types of records in the system, how they are used, and with whom they are shared, as well as procedures for individuals to see the records about themselves and to obtain an “accounting of disclosures” to third parties of information about themselves.

But because the SPEXS database has been outsourced to a nominally private contractor, AAMVA, both Federal and state agencies can disclaim any responsibility for it. That leaves the SPEXS specifications as the best available evidence of what the system is and does.

In a later message to our Web hosting provider, a lawyer for AAMVA claimed that, “The information contained in this work is sensitive and its unauthorized publication could jeopardize the security of the governmental program to which this document relates.” This is nonsense. AAMVA waived any claim of sensitivity by making the specifications public.

When it was still struggling to sell the first states on buying into SPEXS, AAMVA posted the SPEXS specification on its website for anyone to download. More than two years after we called attention to what this document reveals, AAMVA is trying to suppress it. Not because it contains any secrets — it’s been publicly available for years — but because it conclusively disproves the DHS big lie that there is no national REAL-ID database, and shows the essential role that AAMVA itself is playing in this surveillance system.

We encourage you to pay close attention to the AAMVA man behind the REAL-ID Act curtain. And if you have questions about SPEXS or the SPEXS specifications, feel free to contact us.

Oct 09 2018

Another round in 9th Circuit fight over “No-Fly” orders

A 3-judge panel of the 9th Circuit US Court of Appeals heard arguments today in Portland, Oregon, in Kariye v. Sessions, the third and latest round of appeals to the 9th Circuit in a challenge to US government “No-Fly” orders that was filed in 2010 as Latif v. Holder.

The lawsuit has survived two previous appeals to the 9th Circuit. But most recently,  the District Court dismissed the claims of those plaintiffs who remain blacklisted from domestic or international air travel. Today’s third round of argument in the 9th Circuit was on the appeal of that latest dismissal of the complaint.

Today’s oral argument was conducted in a courtroom closed to everyone except the judges, court staff, the parties to the case, and their attorneys. Presumably, the argument was closed because one of the issues was whether the government should have been allowed to submit evidence “ex parte and in camera” for the court to consider without the plaintiffs being able to see it, or whether the District Court and/or the Court of Appeals should consider such submissions.

If you think there’s something Kafka-esque about secret arguments about whether to consider secret evidence, we agree. It’s possible that redacted excerpts from the oral argument will be made available later in the 9th Circuit’s video and audio archives.

Legal documents in the case are available from the ACLU, which is representing the plaintiffs. The best summary of the issues in the current appeal, and the best overview of what’s wrong with the government no-fly decision-making procedures at issue in the case,  is in the plaintiffs’ opening brief in the current appeal.

Read More

Oct 03 2018

3rd Circuit to reconsider impunity of TSA checkpoint staff

Good news: The 3rd Circuit Court of Appeals has decided to reconsider whether, as a panel of that court decided earlier this year, TSA checkpoint staff should have legal impunity to assault or otherwise violate the rights of travelers without consequences.

When it was issued in July 2018, we said that “The details of the opinion dismissing Ms. Pellegrino’s complaint might be described charitably as arcane, and uncharitably as twisted.” There was a well-argued dissent by one of the three members of the panel.

The majority of the panel recognized that the job of TSA checkpoint staff is to search travelers, but then somehow managed to conclude that they aren’t “officer[s] of the United States who [are] empowered by law to execute searches.” The majority of the panel also went outside the factual record to base their decision on false speculation that TSA checkpoint staff don’t conduct searches for general law enforcement purposes.

Based on these arguments and “facts”, the panel majority found that TSA staff are immune from lawsuits for travelers, even if they admit to assaulting travelers.

The decision by a majority of the judges of the 3rd Circuit to grant rehearing en banc in the case of Pellegrino v. TSA voids the original opinion by a three-judge panel. The appeal will now be re-argued de novo, after new briefing, before all of the judges of the 3rd Circuit.

Let’s hope that the full court gets it right this time, and recognizes that TSA checkpoint staff are not above the law.

Oct 01 2018

Yes, the DHS wants mug shots of all air travelers

A new report by the DHS Office of Inspector General (OIG) gives perhaps the most detailed official picture to date of the US government’s plans for ed biometric identification, tracking, and control of international air travelers through automated facial recognition.

Contrary to specious claims in DHS propaganda that the current rollout of mug-shot machines at departure gates at airports across the country is “only a test,” the DHS OIG reports that US Customs and Border Protection (CBP) plans to expand the mug shot and automated facial image recognition program from 6 million air travelers in 2018 to 60 million in 2019, 120 million in 2020, and 129 million — 100% of international airline departures from the US — by 2021.

But that’s not all. “Over time, the program plans to … incrementally deploy biometric capabilities across all modes of travel — air, sea, and land — by fiscal year 2025,” according to the OIG report.

The scope of these plans should make clear that the only thing being “tested” is whether travelers will submit to this program, not whether it is justified or what interests it serves.

The OIG report mentions that US citizens have been “allowed” to opt out of the airport mug shot “pilot program “, but doesn’t say whether they were told they had a right to do so:

CBP allowed U.S. citizens to decline participation in the pilot. In such cases, CBP officers would permit the travelers to bypass the camera and would instead check the individuals’ passports to verify U.S. citizenship. When a U.S. citizen opted to participate in the pilot but did not successfully match with a gallery photo, the CBP officer would examine the individual’s passport but did not collect fingerprints. We observed biometric screening at four airports — a total of 12 flights — during our audit and witnessed only 16 passengers who declined to participate.

[Note the absence of any apparent notice that US citizens can “opt-out”.]

In preparing their report, OIG staff “met with a number of external stakeholders, including the Airlines for America trade association, Delta Airlines, JetBlue Airlines, and British Airways.” Notably, however, OIG made no attempt to consult consumer, civil liberties, or human rights organizations or to consider their objections to mandatory mug shots.

The only objections noted in the OIG report came from airlines and airport operators. But it would be a mistake to interpret this as “resistance” from the airline industry to biometric surveillance of airline passengers through automated facial recognition.

The OIG report makes clear that the only thing being disputed by airlines and airports is who will pay for equipment and staff, not whether these systems will be deployed: Read More

Sep 25 2018

9th Circuit says government can’t moot challenge to “no-fly” order

In a blow to the US government’s evasion of judicial review of no-fly and blacklisting decisions, the 9th Circuit US Court of Appeals has reinstated a lawsuit against the government by Mr. Yonas Fikre, a US citizen who was effectively exiled from the US and consigned to imprisonment and torture abroad by being placed on a “No-Fly” list, in an attempt to pressure him to become an FBI informer, while he was overseas.

Unwiling to become an FBI informer — even when he was tortured to do so — and unable to return to the country of his citizenship, Mr. Fikre fled to Sweden, where he applied for political asylum. In a successful effort to smear Mr. Fikre and thwart his asylum claim in Sweden, the US then had him indicted on trumped-up charges related to his business (and having nothing to do with terrorism, violence, aviation, or dangerousness).

Mr. Fikre’s application for asylum in Sweden was denied, and Sweden paid to deport Mr. Fikre to the US (by private jet, because the US wouldn’t allow him on any airline flights). The bogus charges against Mr. Fikre were promptly dropped once he got back to the US. But he has been unable to resume his international business career without being able to count on being able to travel from and to the US without US government interference.

The decision by the 9th Circuit panel in Fikre v. FBI overturns the dismissal of Mr. Fikre’s complaint as “moot” by a US District Court judge in Oregon after the government defendants told the court that Mr. Fikre’s name had been removed from the no-fly list.

The 9th Circuit allowed the case to proceed, finding that there was no guarantee that the actions Fikre complained of, and the violations of his rights, wouldn’t recur:

Because there are neither procedural hurdles to reinstating Fikre on the No Fly List based solely on facts already known, nor any renouncement by the government of its prerogative and authority to do so…  Fikre’s due process claims are not moot.

Read More

Sep 24 2018

Will the government get mug shots of all air travelers?

The dispute over government-mandated biometric identification of travelers through automated facial recognition continues to sharpen.

ID document requirements for air travel have been imposed on a de facto basis by DHS administrative fiat without ever having been approved by Congress or authorized by law.

In a similar way, requirements for US citizens to submit to mug shots — either by components of the Department of Homeland Security or by airlines, airport operators, or contractors who share photos with DHS — are being imposed on a growing scale without any Congressional debate or statutory  basis.

Last week the World Privacy Forum submitted a petition for rulemaking asking the DHS to “provide formal notice and solicit public comments pursuant to the Administrative Procedure Act” before proceeding with further “trials” of biometric identification of travelers: Read More

Sep 18 2018

Globalization and policy laundering of travel control

An interview with the head of US Customs and Border Protection (CBP) published this month by the U.S. Military Academy as part of a “View From The Foxhole” series provides an unusually revealing, and disturbing, picture of the expansion and globalization of surveillance and control of travelers. It also highlights the ways that policy is being “laundered” through the rationale of “compliance with international standards” to avoid any domestic political debate in the US or other collaborating countries.

CBP Commissioner Kevin K. McAleenan begins his overview of the role of the CBP by referring to “people who are… seeking that permission to travel to the United States”.

But US citizens don’t need “permission” from CBP or any other government agency to travel to the US. McAleenan’s comment makes clear the extent to which the US government has arrogated to itself, and now takes for granted, the illegitimate authority to condition the exercise of the right to freedom of movement on government permission.

CBP Commissioner McAleenan doubles down by asserting that “we have the responsibility to interview and inspect all travelers and make decisions on whether they present a risk.”

But that’s not true either. CBP’s authority to inspect travelers is limited to determining whether there is probable cause to charge them with violations of the law. We have a system of criminal law, not a pre-crime system of “risk-based” predictive denial of rights.

Read More

Sep 04 2018

The US State Department is still denying passports to US citizens

A report in the Washington Post last week has brought renewed attention to the US State Department’s ongoing denial of passports to many US citizens.

The Washington Post story focuses on Mexican-Americans whose passports have been revoked or whose applications for new or renewal passports have been officially or effectively denied, and suggests that, “under President Trump, the passport denials and revocations appear to be surging.”

We’ve been pointing out the varied methods and manifestations of these State Department practices for years. As a result, we’ve become a common point of contact for US citizens seeking to exercise their right to travel and to obtain redress for passport denials and revocations.  We welcome additional spotlighting of these issues.

But it’s important to recognize that these practices are not new; are not limited to Mexican-Americans, Hispanic-Americans, Muslims, and/or immigrants; did not originate with the Trump Administration; and rely on administrative mechanisms first given official approval by, and on the initiative of, the Obama Administration.

Nor are these practices limited to passports and international travel. Similar restrictions on issuance and renewal of drivers’ licenses and state ID cards being imposed as a result of the REAL-ID Act of 2005 are already causing similar problems for travel within the US.

These practices and problems reflect a bipartisan and constant trend, throughout the Bush, Obama, and Trump Administrations, toward growing use of ID requirements and controls on the issuance of ID credentials to control the movement of both US citizens and foreigners, within the US as well as across international borders.

Here’s the back story to the latest reports on passport denials and revocations, with links to some of the more detailed articles about it that we’ve published over the years: Read More

Aug 31 2018

A broader legal challenge to Federal blacklists

1. The federal government has imposed a kind of second-class citizenship on the Plaintiffs. Without charges, without arrests, without even an investigation sometimes — the agency defendants act in concert to deprive thousands of innocent Americans, mostly Muslim, of their right to be free from a government that extrajudicially designates them as worthy of permanent suspicion.

2. That permanent suspicion has sweeping consequences for the Plaintiffs as well as the more than one million others who bear it. They are separated from their children, denied employment opportunities, prevented from traveling by air to attend weddings and funerals, and denied or delayed immigration benefits. The rights of Plaintiffs to purchase firearms, to wire money and keep a bank account, to receive their passports and be granted visas to foreign countries are all constrained. For one plaintiff, the Defendants’ actions have diminished his standing and ability to provide religious leadership to his community.

3. Through an interagency watchlisting system, led by Defendants’ Watchlisting Advisory Council, the Defendants have identified the Plaintiffs as worthy of permanent suspicion, imposing burdens and disabilities on them in all aspects of their lives.

4. In deciding to target the Plaintiffs, the watchlisting system behaves lawlessly, acting in the absence of and — in some ways — in opposition to what Congress requires of its agencies.

5. To identify its targets, some parts of the watchlisting system, such as the Terrorism Screening Database (“TSDB”), utilize a nonsense-on-stilts standard that is always satisfied. Other parts, such as TSA’s Quiet Skies initiative, do not use any standard and instead rely upon the inarticulate hunches of federal officials, rank profiling, and vulgar guilt-by-association practices.

6. Through their watchlisting system, the federal government makes it known — to every law enforcement agency in the country, every part of the federal government, more than 60 foreign countries, an unknown number of private companies, international bodies, and other third parties—that the Plaintiffs should be treated as dangerous threats. The Plaintiffs’ friends, family, and others with whom the Plaintiffs associate are punished for their relationship with a watchlisting system’s target.

So begins the complaint filed earlier this month in Federal court in Maryland in the broadest legal challenge to date to the US government’s sweeping program of extrajudicial blacklisting and restriction of the rights of US (and foreign) citizens.

Read More

Aug 28 2018

CBP expands partnership with airlines on facial recognition

This month US Customs and Border Protection (CBP) posted the latest in a series of Privacy Impact Assessments (PIAs) for its Traveler Verification Service (TVS) program.

The  latest PIA gives notice (although not in the form required by Federal law) that CBP and its airline and airport  partners are carrying out a second expanded phase of “demonstrations” of TVS, an identity-as-a-service scheme designed to use automated recognition of images from a shared CBP/airline/airport database of facial photos for purposes including surveillance and control (for CBP) and business process automation and price personalization (for airlines and airports).

CBP (1) describes TVS as a “biometric exit” program, (2) describes the current use of TVS as merely a “demonstration”, (3) continues to claim that airlines and airports “have no interest in keeping or retaining” facial images any longer , or using them for any other purposes, than is required by CBP for “security”, and (4) says that U.S citizens aren’t required to submit to mug shots.

These claims are intended to lull the public into not protesting: “This is only a test, using photos for limited purposes. The photos will be deleted once you get on the plane, and not used for nay commercial or other purpose.” And so forth.

All that might be somewhat reassuring, if any of it were true. But  none of it is:

Read More