Nov 18 2016

What does Donald Trump’s election mean for our work?

We endorsed neither Hillary Clinton, Donald Trump, nor any other candidate for elected office. So what does the presumptive election of Donald Trump as President of the U.S. — when the electors cast their ballots on December 19, 2016, and the votes are counted on January 6, 2017 — mean for the work of the Identity Project?

First and foremost, it means that our work, and the need for it, will continue — as it has under previous administrations, both Democratic and Republican.

Human and Constitutional rights are, by definition, no more dependent on the party affiliation of the President, if any, than on our own. Freedom is universal. Our defense of the right of the people to move freely in and out of the U.S. and within the country, and to go about our business, without having our movements tracked and our activities logged or having to show our papers or explain ourselves to government agents, has been and will remain entirely nonpartisan.

We will continue to criticize those who restrict our freedoms and infringe our rights, regardless of their party, just as we have criticized the actions of both the Obama and Bush administrations and of members of Congress and other officials of both parties, many of whom remain in power despite the changes at the top.

Attacks on our liberty have been, and remain, just as bipartisan as our resistance to them. This is especially true of the imperial power which the Presidency has been allowed to accrue, and which is exercised through Presidential proclamations, executive orders, and the secret law (or, to be more accurate, lawlessness) of Federal agency “discretion”. Those who acquiesced in the expansion of Presidential power and executive privilege because they thought that it would be used to their benefit by a President of their own party have only themselves to blame if that power is later used against them by a new President of a different party, or without allegiance to a traditional party hierarchy.

Many of the most imminent ID-related threats are those that arise from existing laws or extrajudicial administrative practices, the limits of which — in the absence of legislative or judicial oversight and checks and balances — are set solely by executive order. Where President Trump can make changes to ratchet up repression, to register and track both U.S. and foreign citizens, and to monitor and control our movements within the country and across borders, with the stroke of a pen, we don’t expect that he will hesitate to wield the power he has inherited to govern by issuing public decrees or by giving secret orders to his minions.

In some of these cases, Federal officials and the homeland-security industrial complex of contractors, confident that the incoming occupant of the White House will bless their efforts to anticipate has desires, may take action even before they are ordered to do so. This seems especially likely, in our area of concern, with respect to (1) the DHS implementation schedule and requirements for the REAL-ID Act,  (2) the TSA’s longstanding desire to enforce and eliminate exceptions to a de facto ID requirement for air travel that lacks any basis in statute and contravenes the U.S. Constitution and international law, and (3) expanded use of ID and surveillance-based pre-crime profiling (President-to-be Trump calls it “extreme vetting”) as the basis for control of movement, especially across borders.

We will be watching closely and reporting on signs of activity on all these fronts, some of which are already visible.

Now more than ever, we need your support — not just helping us to defend your rights, but asserting your rights and taking direct action to defend them yourselves. “The limits of tyrants are prescribed by the endurance of those whom they oppress.”

We invite you to join us in our continued resistance to all lawless attacks from any and all sides on our Constitution, our freedom, and our human rights.

Oct 25 2016

Profiling travelers to find the “good guys” — and recruit them as informers

targeting [Some of the multiple sources and types of targeting rules in the TECS algorithms used to profile international travelers, from a CBP/FBI flowchart published by The Intercept. Click on image for larger version. “PAU” = CBP Passenger Analysis Unit at a specific international airport in the USA or abroad.]

Most (although certainly not all) of the people who contact the Identity Project for assistance in finding out what information the government has about their travels, or interpreting responses to their requests for travel records, are Muslims. Many of them, Muslim or not, can’t figure out why they were “targeted” for special treatment at US borders and/or airports despite having done nothing wrong. “What do they suspect me of, and why?” they want to know.

A recent report by The Intercept based on documents from an anonymous whistleblower source confirms what we, and many of the people who have sought our help, already suspected: The FBI is systematically “looking for ‘good guys’ not ‘bad guys'” among international travelers, to recruit them as informers (“confidential human sources”).  US Customs and Border Protection is using profiles and identities provided by the FBI to mine the information airlines are required to collect and provide CBP about passengers on upcoming flights to anticipate when potential informer recruits will be passing through US airports.

Once these potential informers are targeted, CBP arranges special joint CBP/FBI “welcome parties” to interrogate and search them and assess their ability, willingness, and suitability to serve as CHSs.  CBP uses its “border search” authority to conduct the searches and questioning, but FBI agents supply the questions and targeting lists and rules, sit in on the interrogations, and follow up with those who are determined to be potential recruits or who come under suspicion as a result of their response to the attempt to recruit them as informers.

The story in the The Intercept and the leaked documents published along with it don’t reveal much that we and others hadn’t already suspected. But they do fill out the some of the details.  And for anyone who was still in doubt, they show clearly how the government is already using its systematic access to airline reservations for surveillance of non-suspects, and for other general police purposes, contrary to the hollow assurances it has provided to the public and to foreign governments that this data will only be used for prevention of specific categories of crimes.

Oct 24 2016

Is it suspicious to avoid the police when they might want to ask for ID?

In a case resting on the same Nevada law that was at issue in the Supreme Court’s 2004 decision in Hiibel v. Nevada, the 9th Circuit Court of Appeals has held that someone who runs away from approaching police can be found guilty of “obstructing” the police by denying them the opportunity to question him about his identity.

The 9th Circuit overturned findings by the U.S. District Court for the District of Nevada that the police lacked reasonable suspicion to detain the person in the first place and, even if they had a basis to detain him, lacked probable cause to arrest him. The decision signficantly undermines, in the 9th Circuit, the positive aspects and the limitations in the Supreme Court’s decision on police demands for ID in Hiibel v. Nevada, as well as the right to remain silent and the right to be free from unreasonable searches.

Read More

Oct 20 2016

DHS continues to threaten states that resist the REAL-ID Act

[Status of REAL-ID compliance as of October 17, 2016 (Source: AAMVA.org)]

Last week the Department of Homeland Security denied requests by five states for “extensions” of time to comply with the REAL-ID Act of 2005. The DHS denials of requests for extensions were accompanied by renewed threats of  restrictions on residents of those states: “Starting January 30, 2017, federal agencies and nuclear power plants may not accept for official purposes driver’s licenses and state IDs from a noncompliant state/territory without an extension,” said DHS spokesman Aaron Rodriguez in a statement.

Does this mean that a deadline is approaching? That every state except these five has “complied” with the REAL-ID Act? That these “holdouts” have no choice but to comply? That the sky will fall on these states, or their residents, if they don’t?

No, no, no, and no.

As we told the Washington Times:

Not everyone thinks states will, or should, be swayed by the federal government’s determination.

“These are not states that stand out because they are less compliant,” said Edward Hasbrouck, a spokesman for the privacy advocacy group The Identity Project.

He says Homeland Security is arbitrarily enforcing aspects of the Real ID Act by deeming states compliant even when they have not met every requirement, noting specifically few “compliant” states have met the requirement that they provide access to information contained in their motor vehicle database via electronic access to all other states.

“It’s a game of chicken, it’s a game of intimidation, and very little of it has to do with actual requirements or actual deadlines,” Mr. Hasbrouck said.

If Homeland Security, which repeatedly has pushed back compliance deadlines for Real ID, does go through with the commercial airline restrictions in 2018, Mr. Hasbrouck said he expects grounded passengers would eventually bring litigation challenging the law.

Let’s look at some of the questions skeptical citizens and state legislators ought to be asking about these DHS scare tactics:

    • How many states have complied with the REAL-ID Act? Noncompliant states are neither alone nor isolated. According to the Washington Times, “Homeland Security reports that 23 states and Washington, D.C., have met enough of the Real ID standards to be deemed in compliance with the law.” In fact, as we’ve reported previously and as we noted in the comments above, the most significant component of compliance with the REAL-ID Act is participation in the national ID database (the one the DHS keeps claiming doesn’t exist). That database, called SPEXS, is operated by a subcontractor to the American Association of Motor Vehicle Administrators (AAMVA) as a component of its S2S system. When last we checked, in February of this year, only 4 of 55 US jurisdictions (states, the District of Columbia, and US territories) had connected their state drivers license and ID databases to S2S. With the addition of the latest two states this month, the total of states participating in S2S is up to nine, as shown on the AAMVA map at the top of this article. We don’t know whether all nine of those states have implemented all the other requirements of the REAL-ID Act. But we do know that no state not participating in S2S is in compliance. So at most nine states are in compliance with the REAL-ID Act. The vast majority of jurisdictions are noncompliant. And at this rate, it will take many years, if it ever happens at all, for the DHS to whip the rest of them into line.

 

    • When is the deadline for states to comply with the REAL-ID Act? There is no deadline for compliance in the law itself. The DHS could set deadlines by promulgating regulations, but it could also change them in the same way, at any time, for any reason. In practice, the current DHS threats aren’t event based on DHS regulations, but on dates specified solely in DHS press releases and changeable at DHS whim.

 

    • What is required for DHS certification of material compliance or progress toward compliance by individual states? There are no criteria in the law. The law leaves this up to the “discretion” of the DHS, which in practice means that it can be standardless, secret, and arbitrary. DHS choices of which states to threaten are political and tactical choices about which states the DHS thinks it can intimidate, and in which order. They aren’t based, or required to be based,  on any actual measurement, checklist, or relative degree of compliance.

 

  • What will happen, and when will it happen, to residents of states that don’t comply sufficiently or quickly enough? Probably nothing. What the DHS will try to do, and when, is once again totally up to its discretion. There are no deadlines in the law. But as our analysis and the responses to our FOIA requests have shown, the threat to deny access to Federal facilities is a red herring.  Most workers at these facilities, for example, already have Federally-issued employee IDs, and don’t rely on state-issued IDs for entry. Members of the public generally enter these facilities to exercise various of their rights, which the DHS recognizes they have a right to do without any ID. If the DHS changes its tune, and tries to interfere with those rights, what the DHS can get away with will be determined by Federal judges in the inevitable lawsuits brought by residents of disfavored states (hopefully with the support of state governments) whose rights are interfered with on the basis of the REAL-ID Act.
Oct 14 2016

CDC proposes martial law in the guise of “medical quarantine”

In the guise of a proposal for “medical quarantine“, the U.S. Centers for Disease Control and Prevention (CDC) have proposed regulations that would give CDC employees sweeping martial-law powers of warrantless search, interrogation, tracking of movements, arrest, and extrajudicial mass detention (at the detainees’ own expense!) of individuals or entire groups of unlimited numbers of people for unlimited periods of time.

The proposal revives a dormant decade-old rulemaking initiated after the 2001 and 2005 anthrax scares in Washington, DC. But rather than finalizing the rules proposed (and widely criticized) in 2005, or responding to the comments submitted back then in response to the original proposal, the CDC has published a new and different but perhaps even more objectionable replacement proposal.  It’s unclear why this is happening now, but it seems likely that the CDC feels a political necessity to be seen as “doing something” to prepare for the possibility of another outbreak of Ebola virus disease.

As we say in comments we filed today with the CDC:

The NPRM [Notice of Proposed Rulemaking] describes the proposed rules as a medical quarantine program. But they go far beyond what is medically indicated, authorized by statute, or permitted by the Constitution.

The CDC’s proposal completely ignores existing medical and legal procedures for involuntary commitment of individuals determined to constitute a danger to themselves or others. Instead, the proposed rules include:

  1.  indefinite extrajudicial mass detention without due process,
  2. compelled responses by travelers to extrajudicial interrogation concerning their exercise of First Amendment rights including rights of movement and assembly, regardless of whether there is any current outbreak of any communicable disease, much less whether there is any basis for belief that any specific traveler subjected to this interrogation is infected with such a disease; and
  3. charging innocent detainees for the costs of their detention.

These misguided, unauthorized, and unconstitutional proposals should be withdrawn.

[Details: Complete comments of the Identity Project, all 13,000+ public comments on the CDC proposal.]

Oct 07 2016

“Following the money” in travel surveillance

The growth of a homeland-security industrial complex funded by single-source contracts and shielded by knee-jerk invocation of “security” as an excuse for secrecy has created huge opportunities for cronyism and collusion between lobbyists, contractors, and government officials.

The poster child for this revolving door and its invidious effects on government policies and spending is former Secretary of Homeland Security Michael Chertoff and his work as a lobbyist for Rapiscan, the supplier of the TSA’s virtual strip-search machines.

Unsurprisingly, the US isn’t alone in allowing the commercial interests of spy-tech companies to drive government decisions to spy on travelers.

In the latest issue of the EDRi-gram newsletter, our friends  at the European Digital Rights Initiative explore “The curious tale of the French prime minister, PNR and peculiar patterns.”  It seems that the French military technology contractor Safran, whose “Morpho” division is one of the leading vendors of turnkey PNR-based traveler surveillance and profiling systems, is one of the largest employers in the home town of French Prime Minister Manuel Valls.

According to Estelle Massé and Joe McNamee of EDRi:

France has been particularly insistent on the unsubstantiated benefit of profiling all travellers — indiscriminately and in the absence of suspicion. French Interior Minister Bernard Cazeneuve pushed for swift adoption of the EU PNR directive before the EU Council, going so far as to accuse the European Parliament of being “irresponsible for delaying the vote” — implying that democratic debate over a privacy-invasive measure is simply wasting time. French Prime Minister Manuel Valls also pushed for the directive, allegedly arguing for adoption as a strong symbolic gesture in the fight against terrorism…

Safran has a major base in Evry, the small town south of Paris where Valls was mayor from 2001-2012. The company employs more than 3300 people and, earlier this year, Valls visited the site and discussed Safran’s role in ensuring long-term employment in the region. The French government said in a statement following the visit, “We have one aim: that the French industry stays ahead.”

The company now appears to be in fine fettle. It won major contracts to put in place expensive PNR systems in France and Estonia. Now that the PNR directive will make such systems mandatory across the EU, it is also seeking contracts in several other EU countries.

That’s not the end of the story. The pattern of links between Valls and Safran run even deeper. According to the French news outlet Marianne, in 2012, when a Safran contract was not renewed, Valls, who was then interior minister, allegedly intervened to help the company. He appears to have done so despite the fact that the proposed change to the contract could have saved 30 million euro of public funds.

Bertrand Marechaux, the police chief who questioned the contract, kept fighting to modify it and initiating legal proceedings against Morpho, a subsidiary of Safran. He was ultimately removed from his position. Valls’ office didn’t respond to Marianne’s request for comment at the time.

Oct 03 2016

How the DEA uses travel company spies to confiscate travelers’ cash

A report by the Office of the Inspector General (OIJ) of the U.S. Department of Justice (DOJ) sheds more light on how the Drug Enforcement Agency (DEA) pays workers for airlines, Amtrak, bus companies, and package delivery services to spy on their customers, troll through reservation and shipping records, and finger travelers and senders and recipients of packages to the DEA in exchange for a share of the cash which can be seized and “forfeited” to the government even if no drugs are found and no criminal charges are brought.

This practice was first reported in August 2016 by Brad Heath in USA  Today, based on case-by-case review of court filings describing the basis for DEA searches that led to “civil forfeiture” proceedings. And the DOJ OIG had released brief interim summaries of its investigations into DEA relationships with one Amtrak employee and one TSA employee who were paid to inform on travelers.

The new OIG report released last week provides much more detail about the scope of the DEA’s use of travel and transportation staff as paid “confidential sources” to target travelers and parcels for cash seizures on the basis of travel reservations and shipping records. The OIG found that the DEA is paying employees of Amtrak, airlines, bus companies, and other transportation companies millions of dollars for individual tips and copies of entire passenger manifests:

[DEA] Special Agents have various ways of receiving these “tips,” but generally receive the information on a daily basis via email or text message, some of which are sent to government accounts and others to non-government private accounts that are established and controlled by the Special Agents. Additionally, we found that although some Special Agents estimated receiving up to 20 “tips,” or passenger itineraries, per day from their… commercial airline confidential sources, the DEA does not maintain a record of receipt of the totality of the confidential source “tips.”….

[S]ome Agents requested that sources provide them with suspicious travel itineraries that met criteria defined by the Agents, and in some cases requested entire passenger manifests almost daily….

Read More

Sep 27 2016

Proposed laws would expand travel controls from airlines to passenger railroads

Legislation has been introduced in both the USA and Belgium to subject rail travelers to the same sorts of travel surveillance schemes that are already being used to monitor and control air travelers.

If these proposals are enacted into law, passenger railroads would be required to collect and enter additional information such as passport or ID numbers and dates of birth (not currently required or routinely included in US or European train reservations) in Passenger Name Records (PNRs), and transmit rail travel itineraries and identifying information about passengers to the government, in advance.

As is already the case for all airline travel in the USA, including domestic travel, railroads would be forbidden to allow any passenger to board unless and until the railroad receives an explicit, affirmative, individualized, per-passenger, per-flight permission-to-board message (“Boarding Pass Printing Result”) from the government.

In both the USA and Belgium, the proposed legislation would create legal conflicts with civil liberties and human rights, and practical conflicts with railroad business processes and IT capabilities.

Read More

Sep 19 2016

Voter ID lawsuits have little effect on ID requirements

A federal judge is hearing arguments today on whether the state of Texas has complied with the District Court’s earlier rulings and a decision of the 5th Circuit Court of Appeals that portions of the Texas state law requiring specific government-issued ID credentials as a prerequisite to voting are unconstitutional.

Today’s US District Court hearing in Corpus Christi is only the latest skirmish in a nationwide legal war between advocates for ID requirements and advocates for voting rights.

Even judges who (wrongly) question whether travel is a legally protected right must recognize that voting is a fundamental right protected by law. So we might expect that voter ID laws and litigation would squarely and unavoidably pose the question of whether the exercise of rights can be conditioned on possession of ID.

Unfortunately, many of the court cases challenging voter ID laws have not reached that question. And to the extent that Circuit and District court judges have reached that question, they have been bound by bad Supreme Court precedent suggesting that even substantial restrictions on the rights of people who neither have nor are able to obtain ID are generally Constitutional. That these laws deliberately and unarguably discriminate against people without ID is not enough to make them unconstitutional, the Supreme Court majority has indicated, unless they can be shown to have been enacted with some other discriminatory intent (such as to discriminate on the basis of race, political party affiliation, or some other protected attribute). Voter ID litigation has thus been forced to focus on discrimination in the application of ID requirements, rather than their inherent illegitimacy as a precondition for the exercise of rights.

In the run-up to this year’s Presidential elections, Courts of Appeals have found such unconstitutionally racist and/or partisan discriminatory intent behind voter ID laws in North Carolina (4th Circuit), Texas (5th Circuit, en banc), and Wisconsin (7th Circuit).  The election law project at the Ohio State University law school and the Brennan Center for Justice at NYU (which has been a friend of the court in some of these cases) have useful compendia of case documents and commentaries on these and other voter ID lawsuits.

These and other lawsuits challenging ID requirements to vote are continuing, but none of them are likely to be resolved by the Supreme Court until its current vacancy is filled. Any decisions by the Circuit Courts — even contradictory ones — are likely to be upheld by 4-4 vote of an equally divided Supreme Court, even if four Justices vote to review those lower court decisions. And in the meantime, any of those decisions not stayed by the lower courts themselves will presumably remain in force for the coming elections. Any application to the Supreme Court for a stay will probably also be denied by an equally divided court, as happened late last month with an application for a stay of the North Carolina ruling by the 4th Circuit.

So far, there don’t appear to be major conflicts between the Circuit Courts. Many state voter ID laws have been overturned.  But the Supreme Court deadlock makes it impossible for the key Supreme Court precedent in Crawford v. Marion County Election Board (2008) to be reversed, no matter how many lower court judges write opinions urging it be reconsidered, like this one by US District Judge James D. Peterson in July of this year:

Wisconsin’s voter ID law has been challenged as unconstitutional before, in both federal and state court. In the federal case, Frank v. Walker, the Seventh Circuit held that Wisconsin’s voter ID law is similar, in all the ways that matter, to Indiana’s voter ID law, which the United States Supreme Court upheld in Crawford v. Marion County Election Board. The important takeaways from Frank and Crawford are: (1) voter ID laws protect the integrity of elections and thereby engender confidence in the electoral process; (2) the vast majority of citizens have qualifying photo IDs, or could get one with reasonable effort; and (3) even if some people would have trouble getting an ID, and even if those people tend to be minorities, voter ID laws are not facially unconstitutional. I am bound to follow Frank and Crawford, so plaintiffs’ effort to get me to toss out the whole voter ID law fails. If it were within my purview, I would reevaluate Frank and Crawford

The Indiana law upheld by the Supreme Court in its Crawford decision required any voter who wasn’t able to show acceptable ID credentials at a polling place on election day to appear in person at the county courthouse, within 10 days after the election, to execute a declaration regarding their inability to obtain ID.

By definition, none of these people have driver’s licenses. In many cases, lack of ID and lack of mobility form a vicious circle: People can’t drive or fly without ID, but they can’t get ID without traveling to the state or city where they were born to obtain a birth certificate or other prerequisite documents.  Many counties in Indiana and throughout the US have no public transit at all, while others have transit systems that serve only limited areas and routes. It’s hard to see how any court could characterize a requirement for non-drivers, especially those who reside in rural areas with no public transit, to get to the county seat during business hours (when friends or family who might be available to drive them are most likely to be working) within 10 days as only a “minimal” burden or restriction on the right to vote.

Not yet mentioned in any of these lawsuits, so far as we can tell, is the REAL-ID Act, which will make it even harder to obtain state-issued ID credentials and multiply the numbers of people disenfranchised by ID requirements for voting.

Voter ID case law, especially Crawford, doesn’t bode well for the right to travel without ID. If courts are willing to countenance such substantial restrictions on the acknowledged and clearly fundamental right to vote, they are likely to uphold even more onerous ID conditions on the exercise of rights that are less widely recognized, such as the right to travel.

 

Aug 29 2016

Restriction of movement is a punishment like banishment

A Federal Court of Appeals has found that the latest version  of Michigan’s “Sex Offender Registration Act” (SORA), including restrictions on where registrants can live, work, or “loiter”, constitutes a form of punishment intended to inflict pain or unpleasant consequences. “More specifically, SORA resembles, in some respects at least, the ancient punishment of banishment,” according to the 6th Circuit Court of Appeals.

Both Federal and state governments have enacted a variety of misleadingly misnamed “sex offender registration” laws.

Despite being labeled as applying to “offenders”, these laws typically apply also to ex-offenders who have completed their entire sentence of incarceration, parole, and /or probation. These ex-offenders are subject to few legal restrictions except those of the “sex offender registration” laws and the no-gun list.

And while they are described as “registration” laws, these laws almost invariably require more than mere registration.  This parallels the government’s typical euphemistic use of the term “watchlists” for what are, in fact, blacklists or blocklists.

“Registration” laws typically restrict and regulate the exercise of First Amendment rights and rights recognized by international human rights law, including the rights to freedom of speech and freedom of movement, of people who are required to register.  In several states, these laws restrict free speech by prohibiting use of unregistered Internet access accounts or “identifiers” (whatever that means) by ex-offenders who are subject to these laws.  In a growing number of states, these laws restrict freedom of movement and residence by prohibiting registrants from living or working within a specified distance of any school — a distance which, in a populated area with neighborhood schools, can prohibit registrants from legally living anywhere in a municipality or community, or force them to live in wilderness or wasteland encampments without water, sewer, or electric service in order to stay far enough away from any school.

As we have reported, a Federal District Court judge has issued a preliminary injunction prohibiting California from enforcing its requirement for registration of Internet service accounts and identifiers, and that injunction has been upheld by the 9th Circuit Court of Appeals. The lawsuit challenging the California law drags on, however, while the court keeps giving the state more time for its legislature to try to “fix” the law to make it Constitutional.

But in contrast to this judicial rejection of some “registration” laws that restrict ex-offenders’ free speech on the Internet, courts have upheld restrictions on registrants’ residency, employment, and movement against a variety of challenges. So we were especially pleased that last week’s opinion by the 6th Circuit  in Does v. Snyder recognizes that both the restrictions on movement and those on Internet speech in the Michigan SORA amount to “punishment”:

SORA resembles, in some respects at least, the ancient punishment of banishment. True, it does not prohibit the registrant from setting foot in the school zones…  But its geographical restrictions are nevertheless very burdensome, especially in densely populated areas. Consider, for example, this map of Grand Rapids, Michigan, prepared by one of Plaintiff’s expert witnesses:

GRR

Sex Offenders are forced to tailor much of their lives around these school zones, and, as the record demonstrates, they often have great difficulty in finding a place where they may legally live or work. Some jobs that require traveling from jobsite to jobsite are rendered basically unavailable since work will surely take place within a school zone at some point.

The John and Mary Doe plaintiffs in the Michigan lawsuit were convicted before the SORA law was enacted. The court found that, because the law imposed imposed retroactive “punishment” on the plaintiff, it was an unconstitutional ex post facto law as applied to the plaintiffs:

We conclude that Michigan’s SORA imposes punishment. And while many (certainly not all) sex offenses involve abominable, almost unspeakable, conduct that deserves severe legal penalties, punishment may never be retroactively imposed or increased…. As the founders rightly perceived, as dangerous as it may be not to punish someone, it is far more dangerous to permit the government under guise of civil regulation to punish people without prior notice. Such lawmaking has “been, in all ages, [a] favorite and most formidable instrument[] of tyranny.” The Federalist No. 84, supra at 444 (Alexander Hamilton)…. The retroactive application of SORA’s 2006 and 2011 amendments to Plaintiffs is unconstitutional, and it must therefore cease.

The court didn’t reach the question of whether the law would be Constitutional as applied to people convicted after its enactment, but did express strong doubts about how it would rule in such a case:

As we have explained, this case involves far more than an Ex Post Facto challenge. And as the district court’s detailed opinions make evident, Plaintiffs’ arguments on these other issues are far from frivolous and involve matters of great public importance. These questions, however, will have to wait for another day because none of the contested provisions may now be applied to the plaintiffs in this lawsuit, and anything we would say on those other matters would be dicta. We therefore reverse the district court’s decision that SORA is not an Ex Post Facto law and remand for entry of judgment consistent with this opinion.