Jul 30 2010

Washington Post: “Secure Flight may be making your privacy less secure”

We’re quoted today in the Washington Post in a story by Christopher Elliott about how airlines are able to use personal information — collected under government duress for the TSA’s Secure Flight passenger surveillance and control scheme — for the airlines’ own marketing and other purposes.

“Could it be that the information we give airlines doesn’t belong to anyone or, worse, isn’t regulated by anyone?” Elliott asks.

A good question — and “privacy” may be the least of the problems with Secure Flight, as discussed in our testimony (quoted from, in part, in the Post story) at the TSA’s only public hearing on Secure Flight, our more detailed written comments submitted to the TSA, and our FAQ about Secure Flight.

Jul 27 2010

US but not UK gives travel “permission” for Iroquois lacrosse team

The good news: In one of the first tests of US rules purporting to forbid US citizens from crossing US borders without first obtaining US passports (issued at the government’s apparently standardless discretion), the US Department of State issued “one-time waivers” authorizing the “Iroquois Nationals” lacrosse team to leave the US (and presumably to return, although that’s not entirely clear from news reports) without carrying US passports.

The dispute arose because some Iroquois, like other Native Americans, have for many years used passports issued by their own tribes or nations.  Whether those passports were “passports” within the meaning of US law was largely irrelevant as long as passports were merely a convenience, not a requirement, for international travel.  Lacrosse was an Iroquois invention (for an introduction to the sport, see John McPhee’s essay last year in the New Yorker, “Spin Right and Shoot Left”, included in his latest anthology, “Silk Parachute”), and travel on Iroquois passports was and is especially significant for the Iroquois Nationals team, who compete on behalf of their own nation in international lacrosse tournaments.

While it was framed as a dispute over the sovereignty of the iroquois Confederations and/or the validity of Iroquois-issued passports, the US appears to have seen it purely as a question of whether native Americans who are also US citizens may leave or return to the US without US passports.

At first, the US had threatened to prevent the team from boarding flights to the UK for the international lacrosse championships. But without admitting either the “validity” of Iroquois passports (i.e. not whether they are genuine but whether they satisfy US requirement for exit or entry permits), or the invalidity of the passport requirements for US citizens, the US effectively backed down by granting the team “waivers” and, more importantly, saying that they would not interfere with their departure from the US.

This continues the pattern we have sen to date: We have yet to hear of a case in which the US government has actually prevented a US citizen from leaving or returning to the country on the basis of their not having, or declining to carry or display, a US passport. In every incident that has been brought to our attention, the US government has eventually indicated its willingness to stand aside from interference with departure from or return to the country without passports — although travel has sometimes been frustrated in other ways, such as refusal to give airlines permission to transport them. Presumably, the US government realizes that preventing its own citizens form leaving or returning to the country would be such a flagrant violation of international human rights law as to lead to diplomatic complications, even if it would be difficult to challenge on those grounds in US courts.

The bad news: After finally obtaining “permission” to leave the US without US passports, the Iroquois Nationals lacrosse team was denied visas by the UK — not on the grounds that their passports were invalid, or weren’t issued by a sovereign entity, but on the grounds that their passports don’t contain ICAO-standard “security” features required by the UK for visitors from the US.  It is, again, unclear from news reports what absent “features” were at issue, but they might have included machine-readability (OCR or RFID) or other aspects of formatting or data content.

Jul 23 2010

“The government shouldn’t decide who can fly”

In one of the first statements in the mainstream media to (a) recognize that the essential feature of the TSA’s Secure Flight program is the requirement for domestic US air travelers to receive government permisison to fly and (b) oppose that requirement, The Chicago Tribune has published an op-ed column by Steve Chapman (also appearing in Reason) arguing that, “The government shouldn’t decide who can fly”:

Get rid of the no-fly list entirely. For that matter, get rid of the requirement that passengers provide government-approved identification just to go from one place to another.

Americans have a constitutionally protected right, recognized by the U.S. Supreme Court, to travel freely. They also have the right not to be subject to unreasonable searches and other government intrusions. But in the blind pursuit of safety, we have swallowed restrictions on travel and infringements on privacy we would never tolerate elsewhere….

If the federal government began requiring every citizen to provide identification for each trip in a car or ride on a bus, there would be a mass uprising. Somehow, though, Americans have come to see commercial air travel as a privilege to be dispensed by the government.

Jul 09 2010

Australian government expanding air travel surveillance

Closely following the bad example (controversial both in the US and Australia) of the USA, the government of Australia is moving toward increasing detailed and integrated ID-based surveillance and control of air travelers.

As of the first of this month, under the so-called Enhanced Passenger Assessment and Clearance (EPAC) systems, Australian authorities have real-time access to all passenger name record (PNR) data for all passengers on all international flights to Australia.  And an additional A$24.9 million is being spent by the government over the next two years, in addition to uncounted amounts that airlines and other travel companies will have to spend, to expand the amounts of data collected by airlines and passed on to government agencies as well as the automated profiling (“risk assessment”) conducted on the basis of this data.

The changes and the heightened surveillance and control of travelers to Australia come at the same time that the European Union is simultaneously renegotiating agreements with Australia and the USA for government access to PNR data related to flights to and from the EU.

The Sydney Morning Herald quotes  the president of the Australian Council for Civil Liberties, Terry O’Gorman, as saying that the scheme “increases the risk of a person wrongly being put on a no-fly list.”

Jul 06 2010

Lawsuit seeks suspension of TSA virtual strip-searches

Last year the Identity Project was one of more than 30 organizations that filed a joint petition with the DHS requesting a formal rulemaking on use of virtual strip-search machines or “body scanners”, then being referred to by DHS and TSA as “whole body imaging” machines and since re-euphemized as “advanced imaging technology”, as though the name itself could make them inherently more “advanced”.

In May of this year, after the DHS ignored our petition and moved forward with deployment of virtual strip-search machines without a formal rulemaking, we joined most of the same groups in filing a renewed petition for a formal rulemaking (including an opportunity for public comment) and for rescinsion of the rules requring submission to a virtual strip-search as a condition of passage through TSA checkpoints and travel by air common carrier.  We also filed a series of FOIA requests and appeals, which the TSA has to date ignored, for the TSA Standard Operating Procedures, screening-related directives to airlines, and other documents embodying the secret rules that include the virtual strip-search requirements.  We’ve also speculated about what legal recourse travelers denied passage on the basis of refusal to submit to a virtual strip-search might have, particularly in jurisdictions abroad where it would be easier than it is in the USA to raise issues of international human rights law.

This past Friday, July 2nd, the Electronic Privacy Information Center (EPIC) filed a federal lawsuit seeking to have the Court of Appeals for the District of Columbia review the TSA and DHS failure to conduct a formal rulemaking before deploying virtual strip-search machines and issue an emergency stay of the TSA/DHS decision to deploy and require them as a condition of passage through checkpoints and air travel.

The Identity Project was a party to the original petitions for rulemaking, and while we aren’t a party to the EPIC lawsuit, we fully support it.

As EPIC notes in its latest filings, even after September 11th Federal courts have upheld “administrative (warrantless, suspicionless) searches in airports only to the extent that they are limited to what is “necessary” — meaning that they are actually effective and are the least restrictive available means — to detect weapons and explosives. Even beyond the specific issue of virtual strip-searches, this lawsuit is likely to be significant in helping define the bounds of TSA authority to conduct ever more intrusive searches as a condition of common-carrier travel.

The petition filed in May by EPIC, the Identity project, and others stated that, “The undersigned file this petition pursuant to 5 U.S.C. § 553(e), which requires that ‘[e]ach agency shall give an interested person the right to petition for the issuance, amendment, or repeal of a rule.'”  Notwithstanding this explicit statement, the DHS and TSA responded with the bizarre claim that, for unspecified reasons, it did not constitute such a petition.  Unfortunately, that’s characteristic of the behavior of the DHS and TSA, which have repeatedly refused to acknowledge or docket our formal complaints and then falsely claimed, including to the US public and to foreign governments  that they have received no such complaints.

Jun 30 2010

New lawsuit challenges no-fly orders

In a lawsuit filed today by the ACLU in Federal court in Oregon, Latif, et al. v. Holder, et al., ten U.S. citizens who have been refused permission to board flights to, from, or within the US, or have boarded flights to the U.S. only to have them turn back en route, are suing the Attorney General, the Director of the FBI, and the Director of the Terrorist Screening Center for denying their rights by ordering airlines not to transport them.

At least one of the plaintiffs even flew to Mexico, to avoid overflying the US, with the hope of returning to the US by land.  Instead, he was arrested by Mexican police (presumably at the behest of the U.S. government, and deported not to the country of his citizenship, the USA, but to Colombia, where he has only a temporary visa and can’t remain.  That should have prompted diplomatic protest by the US to Mexico for the improper deportation of a US citizen to a third country.  But presumably Mexico acted at the behest of the US, and there has been no sign of US objection.

So far as we know, this is only the second lawsuit to directly challenge the legality of no-fly orders, and the first on behalf of US citizens.  The previous case was brought by Rahinah Ibrahim, a Malaysian graduate student at Stanford University, after she was detained by San Francisco Airport police and prevented from flying home to her country in 2005. While her complaint remains pending against the individual police in U.S. District court for the Northern District of California, the cases against all of the Federal agencies and officials have been dismissed.

The latest case will test whether the Obama Administration still agrees with former Secretary of Homeland Security Chertoff that no-fly decisions should not be subject to judicial review.  [Update: From the latest statement by the Director of the National Counterterrorism Center, it appears that they may.] And it will be closely watched in Europe as well, where the Obama Administration has assured the European Union that adequate means of redress do exist in U.S. courts for individuals — including some of the plaintiffs in the latest case — denied permission to travel from the EU to the U.S. on the basis of passenger data transmitted to the DHS.

Jun 30 2010

Will Canadian travelers be subject to more US tracking and control?

After a series of investigative reports in the Canwest newspapers in March of this year called attention to the lack of any legal basis under Canadian law for US government access to information about flights to and from Canada that overfly the US (notably including Canada-Cuba flights), the Canadian Conservative minority government has responded by introducing a bill earlier this month that would, if approved by the Canadian Parliament, override Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) to allow the US or any foreign government to find out who is on flights to and from Canada overflying those countries, even if they don’t land in the US.

Canadian law was amended after September 11, 2001, to override PIPEDA and allow US government access to airline reservation data, but only for flights that actually carry passengers to or from the USA. BIll C-42 would extend that to overflights of any country that wants to vet (or simply log) who’s on flights through its airspace.

The sponsors of the latest proposal, Bill C-42, expect it to be controversial, and it has already been criticized by opposition MPs.  Opposition parties have united to pass other legislation supported by the minority government related to collaboration with US wars (such as a measure supporting political asylum in Canada for people resisting service in the US military in wars in Iraq and Afghanistan that violate Canadian and international law), and some observers predict that could happen with Bill C-42 as well.

We certainly hope that Canadians learn from the mistakes of the USA, stand up for their sovereignty, and say “no” to US surveillance of overflights, just as people in the USA would say “no” if the Cuban government demanded to know who is on the dozens of flights every day that fly over Cuba en route between Miami and South America.

Jun 29 2010

State Dept. brushes off critics, raises passport fees

Yesterday the Department of State published an interim final rule putting its previously proposed increases in passport and visa fees into effect as of July 13, 2010.

The State Department admitted that more than 98% of the comments received from individual members of the public were opposed to the fees, as were comments from the travel industry and from the Identity Project and other consumer and civil liberties organizations.  But the State Department brushed off those objections (failing even to acknowledge our complaint that the rulemaking violated US international treaty obligations on freedom of movement, or our complaint and those of travel companies that it violated the Administrative Procedure Act) and finalized the proposed fee increases unchanged.  No consideration was given to their economic impact on self-employed or freelance business travelers, despite the requirement for such an assessment under the Regulatory Flexibility Act.

Unless the interim final rule is challenged in court (perhaps by travel companies, on APA grounds), fees for new or renewal passports and “passport cards” will all increase for applications received by the Passport Office on or after July 13, 2010.  The most extreme increase will be for adding blank visa pages to a current passport, currently a free service for which a new fee of $82 will be imposed.  If your passport might fill up before it expires, apply for new pages now.

Jun 29 2010

TSA has a new top cop

Following hasty hearings by the Senate Commerce, Science & Transportation and Homeland Security Committees, the Senate gave unamimous consent on Friday, without a recorded vote, to the nomination of John S. Pistole, the pistol-packing deputy director of the FBI and right-hand man to Robert Mueller in the FBI’s often extra-judicial “war” on terror, to be an Assistant Secretary of Homeland Security and the Administrator of the TSA.

The hearings (see the links above for archived webcasts) were a mix of praise for Pistole’s police “toughness” and criticism of the possibility that he might allow TSA employees to form a labor union.  “Should law enforcement officers be unionized?”, several Senators asked, apparently duped by their badges, uniforms, titles, and attitudes of presumed authority into thinking that at Transportation Security “Officers” and contractors are law enforcement officers, when in fact they are civilians without police powers (except for a handful of investigators like the ones the TSA sent to serve subpoenas on journalists who published leaked descriptions of some of their procedures).

Civil liberties were scarcely mentioned during the confirmation hearings and none of our suggested questions were asked. Nor was there any mention of Mr. Pistole’s lack of civilian experience.

The last thing the TSA needs, in our opinion, is more cop-think and an even more paramilitary attitude.  We’re hoping for the best, but we suspect that this appointment will make it even more important for US citizens’ and visitors to exercise our rights rather than relying on the TSA or Congress to recognize on their own initiative.

Jun 22 2010

TSA reaches out to the Identity Project

After years of having our complaints ignored, we were pleased to be invited by the TSA to participate in the ongoing “Multi-Cultural Coalition” organized by the Office of Traveler Specialized Screening and Outreach of the TSA Office of Civil Rights and Liberties, under the direction of the TSA Office of the Special Counselor.

In response to an invitation to submit questions and concerns for the agenda of today’s TSA outreach briefing with this coalition — our first such — we submitted the following questions.  We only got notice of the conference call and submitted our questions at the last minute, and didn’t expect these issues to be addressed on such short notice, but we were pleased to be able to put them on the table for TSA consideration, should the agency chose to respond:

  1. Now that the TSA is carrying out all fly/no-fly decision-making for domestic flights through Secure Flight, what is the procedure for obtaining judicial review of no-fly decisions? Or is it the TSA’s belief that no-fly decisions are not subject to judicial review? (We are particularly concerned, of course, about the situation and the means for judicial review of these decisions against US citizens trapped overseas and unable to return to the USA, or unable to leave the USA, because the DHS will not permit them to fly. The upcoming transition to Secure Flight for international flights means, we presume, that these decisions will shortly be transferred to the TSA. We would like to work this out with the TSA before this transition, so that after the transition travelers denied passage have clear information as to the procedures for judicial review.)
  2. Does the TSA have any plans to promulgate regulations defining what orders travelers are required to comply with from TSA employees or contractors, and/or what questions travelers are required to answer, as a condition of being given TSA permission to proceed through checkpoints or board flights? (The Identity Project has received no response, after more than 6 months, to our FOIA requests for the TSA’s standard operating procedures, and of course those procedures are not binding regulations.)
  3. In particular, does the TSA assert the authority to deny passage to travelers who remain silent in response to TSA or TSA-contractor interrogatories? What language would the TSA prefer travelers use (or would you prefer that they simply remain mute?) in order to most clearly and concisely invoke their right to remain silent in response to interrogatories by TSA employees or contractors?
  4. There have recently been problems with TSA employees and contractors calling local law enforcement officers and making complaints against travelers for exercising their rights to photograph and record their own interactions with TSA employees and contractors, and/or for exercising their right to remain silent in response to TSA or contractor interrogatories. Has the TSA conducted any training or issued any guidance to screeners regarding travelers’ rights to remain silent and/or to record and photograph their interactions with TSA employees and contractors (just as the TSA, airport operators, and/or law enforcement agencies and officers record and/or photograph those interactions)? If so, will the TSA make that guidance public, so that travelers who wish to exercise these rights would be able to carry copies of this TSA guidance to show to TSA employees, contractors, and/or local law enforcement officers?
  5. Has the TSA and/or DHS designated a point of contact and procedures for complaints of violations of human rights treaties, including the International Covenant on Civil and Political Rights, in accordance with Executive Order 13107 on implementation of human rights treaties? If not, when does the TSA and/or DHS expect to do so? Will pending complaints need to be re-submitted once this designation is made? (The complaints of the Identity Project that TSA regulations and procedures violate the ICCPR have been pending without response since 2007 in the case of Secure Fight, and since 2009 in the case of the TSA’s practices of secondary screening on the basis of nationality, in addition to our similar unanswered complaints against other DHS components on closely-related issues.)
  6. The TSA changed its office locations without promulgating new Privacy Act SORN’s or FOIA notices, so that none of the addresses of record in the most recent Federal Register notices or the CFR are valid. As a consequence, none of the TSA’s current SORN’s or FOIA notices are valid, and the knowing operation of each TSA system of records, without a valid SORN with a valid current address having been published in the Federal Register, is a criminal violation of the Privacy Act. What action, if any, is the TSA taking to promulgate valid SORN’s and a valid FOIA notice, to discipline those responsible for the current violations of FOIA and the Privacy Act, and/or to alert those who have sent FOIA or Privacy Act requests into the black hole of the current addresses of record that their requests have not been received, and will need to be re-submitted? What is the proper point of contact for complaints of these violations?
  7. In general, what is the proper point of contact in the TSA and/or DHS for complaints of criminal violations of the Privacy Act, e.g. knowing operation of systems of records by TSA without having promulgated a valid SORN? (The Identity Project has never received any response to any of our complaints, filed in TSA and other DHS component regulatory dockets, of criminal violations of the Privacy Act by TSA or other DHS components.)
  8. 42 USC 2000aa prohibits search or seizure of media, journalism, or other public communications work product materials in the absence of specified conditions (probable cause, etc.). We have received several reports of, and have ourselves experienced, search and seizure of such materials by TSA and its contractors. Has the TSA given any training or produced any guidance to TSA employees and contractors regarding 42 USC 2000aa? If so, will that guidance be made public, so that it can be carried and shown at checkpoints by journalists and others carrying work product materials protected from search and seizure? What procedure would the TSA recommend to people carrying such materials, as a way to alert TSA employees and contractors that certain material is exempt from search or seizure under this statute, and to invoke its protections?

In the course of today’s conference call, the TSA asked for suggestions to improve the signs at TSA checkpoints where virtual strip-search machines (Advanced Imaging Technology (AIT), previously “Whole-Body Imaging” (WBI) in the latest TSA-speak) are being used.  We suggested that the signs should include whole-body images at the same size, scale, and resolution as the displays used by the operators of the machines, when the display is zoomed in on a portion of the body to its maximum magnification.  “That’s new information to me” that the current signs don’t do that, said TSA Special Counselor Kimberly Walton. “We’ll have to look into that. I will take that under advisement.”