Jan 08 2018

DHS postpones threats of REAL-ID Act enforcement

Again postponing its threats to interfere with air travel by residents of “noncompliant” states, the Department of Homeland Security announced today that it has given the last three remaining states either certifications of “compliance” with the REAL-ID Act of 2005, or extensions of time to comply until at least October 10, 2018.

Travelers in all 50 states can continue to ignore the false signs at airports, the false claims being made by state authorities collaborating with the Feds in the national ID scheme, and the blizzard of confused  and error-filled news stories (largely based on unverified and misleading DHS and state government press releases) claiming that U.S. citizens will need to obtain, carry, or show passports or other government-issued ID in order to travel by air.

This does not mean that all or most states have actually complied with the REAL-ID Act or are planning to do so. At most 14 states are arguably compliant with the Federal law.

The plain language of the Federal law requires that, “To meet the requirements of this section, a State shall … Provide electronic access to all other States to information contained in the motor vehicle database of the State.”  Only 14 states are participating in the outsourced SPEXS national ID database set up to enable this nationwide data access:

In addition to the 14 current SPEXS particpants, the contractor managing the national ID database optimistically lists 4 other states as “actively working on implementation.” But none of these states are listed as having signed letters of intent  to join the SPEXS national ID database.

The other 32 states are not compliant with the data-sharing provision of the REAL-ID Act, and have given no indication of intent to comply.

What will happen next?

Read More

Jan 05 2018

A REAL-ID Christmas present from the California DMV

On the Friday before Christmas Monday, when state officials hoped that everyone who might object would be sleeping, the California Department of Motor Vehicles finalized its regulations for partial compliance by the state with the Federal REAL-ID Act of 2005.

The final regulations and a statement of responses to public testimony and comments were posted on the DMV website on December 22, 2017, and went into effect the same day.

The final regulations are essentially unchanged from those the DMV proposed in September 2017, and that we objected to in written comments and in-person testimony at the DMV’s one hearing on the proposal in Sacramento in October.

The DMV’s response to public testimony and comments brushes off our objections, and the objections by other commenters and witnesses, on the basis of repeated invocation of patently false and/or irrelevant and unresponsive legal and factual claims.

Read More

Dec 18 2017

Canada puts U.S. Customs and Border Protection officers above the law

A Canadian law which received final approval last week, Bill C-23, gives officers of U.S. Customs and Border Protection (CBP) staffing “preclearance” facilities within Canada police powers to detain, interrogate, and search travelers, while granting these agents of the U.S. government absolute and unconditional immunity from any civil lawsuit or liability under Canadian law, and immunity from criminal liability except in limited cases of death, injury, or property damage.

This immunity from civil lawsuits or liability in Canada extends to violations by US CBP officers at preclearance sites of fundamental rights, including the Canadian Charter of Rights and Freedoms, that are protected by law everywhere else in Canada,. Bill C-23 places CBP officers above Canadian law, as though they were diplomats enjoying immunity from local law inside extraterritorial enclaves, while giving them police-like powers to use force against ordinary people seeking to travel between the US and Canada.

Travelers passing through US preclearance facilities at Canadian airports, train stations, and ferry terminals are now required by Canadian law to: Read More

Oct 24 2017

DHS blinks (again) on REAL-ID

The Department of Homeland Security and the Transportation Security Administration have threatened to prevent citizens of many US states from being able to travel by air within the US, starting in January 2018, because their state governments won’t dump all their driver’s license and ID card information into a nationwide database. But these threats didn’t actually cause states to follow the TSA’s illegal orders. So rather than follow through on the threat, which would risk a legal challenge that would make it clear the threat is hollow, the DHS has again blinked. It just quietly deferred its deadline about when it claims it will enforce the REAL-ID Act against airline passengers.

Just over a week ago, when we testified before the California Department of Motor Vehicles about why the largest state in the union should not comply with the REAL-ID Act, and could not do so without violating its state constitution and its residents’ rights, the DHS website included California among 21 states “under review” by the DHS for possible Federal interference with their residents’ right to travel by air beginning as early as January 18, 2018.

Just days later, the DHS in its standardless discretion granted 15 of these 21 states, including California, another round of “extensions of time” to comply with the REAL-ID Act until October 20, 2018.

The states granted another round of arbitrary extensions until October 2018 included eight of the nine states singled out by signs in airports across the country as targeted for TSA harassment of their residents who travel by air beginning in January 2018:

The dates picked by the DHS are as arbitrary as the DHS choices of which states to threaten. The DHS has repeatedly amended its REAL-ID Act regulations to postpone its threatened “deadlines”, but neither January 18, 2018, nor October 20, 2018, are dates that appear anywhere in the law or the most recently revised regulations.

Read More

Oct 11 2017

Comments to the California DMV on the REAL-ID Act

As we noted a month ago, the California Department of Motor Vehicles (DMV) is currently considering whether to amend state regulations on driver’s license and state ID cards to meet some, but not all, of the statutory criteria for “compliance” with the Federal REAL-ID Act of 2005.

States are not required to comply with this Federal law, but apparently the DMV hopes that if the state of California makes a show of partial compliance, the TSA and DHS won’t carry out some of their threats to unlawfully interfere with air travel by residents of California and other noncompliant states.

Comments on these proposals can be submitted to the DMV in writing until 5 p.m. Monday, October 16th, or in person at a public hearing on Monday at 10 a.m. in Sacramento. We encourage everyone concerned about ID demands and freedom to travel to submit written comments and/or come to the hearing.

We’ll be at the hearing on Monday to testify in person, and today we submitted more detailed written comments, which we introduce with the following summary: Read More

Oct 02 2017

FAQ: U.S. government monitoring of social media

Is the U.S. government monitoring social media?

Yes. Since December 2016, all visitors to the U.S. under the “Visa Waiver Program” (VWP) have been asked to identify the social media IDs they use to the Department of State on the online ESTA form. In several recent notices in the Federal Register, and in official statements in response to questions about those notices, the Department of Homeland Security has confirmed that it already searches for and reviews information about individuals from social media.

Why is the U.S. singling out immigrants and visitors for this surveillance?

The U.S. government is targeting foreigners first because they are legally more vulnerable. Under U.S. law, foreign visitors and immigrants have often been held to have fewer rights than U.S. citizens. We don’t think this is the way it ought to be, and we don’t think this is even a correct reading of the U.S. Constitution and the human rights treaties that the U.S. has ratified. But this is often the way that courts have ruled. Most acts of terrorism in the U.S., like most crimes of any sort, are committed by U.S. citizens. Most of those criminals are white, and most of them are Christian, not that this should matter either. In practice, the government knows that it is more likely to be able to get away with surveillance of foreigners — on social media or in any other realm — than with surveillance that targets U.S. citizens equally or that focuses on, say, white Christian nationalist domestic sources of terrorism.

The Federal government also appears to be motivated by a profound xenophobia. It regards foreigners, communications or association with foreigners, and foreign travel as per se suspicious and thus as justifying more intrusive search, seizure, interrogation, interference, etc. Instead, these activities should be seen as the exercise of rights recognized and protected by Federal laws, the First Amendment and other provisions of the U.S. Constitution, and international treaties. As such, they should be specially protected, not subjected to special surveillance.

Does this social media surveillance include U.S. citizens and green-card holders?

Yes. Social media is, by definition, social. It’s about connections and communication between people, not individuals in isolation. Social media networks aren’t defined by national borders. (Except in countries like China where repressive government block access to “foreign” social media to keep their citizens isolated from the thinking of the rest of the world.) Even if only non-U.S. persons are targeted, surveillance of social media will inevitably suck in information about U.S. citizens and permanent residents who are “associated” with foreigners on social media. Whoever you are, that probably includes you. Do you know which of your Facebook “friends” or Twitter followers or the people who post comments on your page are U.S. citizens or permanent U.S. residents, and which of them aren’t? We don’t, and we don’t believe the U.S. government does either. There is no way that government agents, whether human or robotic, could contain social media surveillance to foreigners even if they tried. The rights of U.S. citizens and permanent residents will be collateral damage whenever foreigners are attacked.

Is this limited to people who are suspected of immigration violations or other crimes?

No. What is being practiced already, and what is being expanded, is dragnet social media surveillance. The Department of State is already asking every applicant for admission to the U.S. under the VWP for their social media IDs. The social media surveillance authority claimed by the DHS, and the practices described in its recent notices, are not limited to specific persons of interest. The DHS and other law-enforcement agencies already have the authority to subpoena records from social media service providers if there is probable cause for suspicion that any crime has been committed, including but not limited to criminal violations of U.S. immigration laws. What’s happening now and expanding is additional surveillance of people who are not (yet) under any particularized suspicion.

The U.S. government’s interest in social media can best be understood in the context of other programs of automated suspicionless dragnet surveillance. The NSA collects metadata about the movement of our messages from telephone companies and and Internet service providers. The DHS collects metadata about the movements of our bodies from entry/exit and border crossing logs and reservation records obtained from airlines, Amtrak, and other travel companies. Why not add metadata about our associations and activities on social networks — IDs, posting histories, keywords and tags, social network maps, etc. — to that data lake?

If I’m not doing anything wrong, do I have anything to worry about?

Yes. Activities that are legal in the U.S. may be illegal in other countries, and the U.S. government claims the right to share the fruits of social media surveillance, and the blacklisting and other conclusions drawn from them, with other governments around the world. Activities that are legal today could become illegal tomorrow. People with whom you are associated, but who you may not know and may never have met, may come under suspicion in the future. Any information the government has can be used against you. Things that you say or people with whom you are “associated” on social media say could result in your being assigned a pre-crime predictive “risk score” that leads to your being placed on a government blacklist (“watchlist”) or subjected to other government sanctions, even if you are never suspected or accused of any crime. The algorithmic criteria for blacklisting, the data used as the basis for blacklisting decisions, and the lists themselves are all secret. You know you are on a blacklist only when you are unexpectedly prevented from exercising your right to travel or other rights. Read More

Sep 24 2017

Muslim Ban 3.0 blaimed on ICAO passport standards and “ID management”

Invoking memes that we’ve seen and warned about before under both Democratic and Republican administrations, President Trump has attributed the latest version 3.0 of his “Muslim ban”announced today (proclamation, FAQ, explainer) with the need to comply with ICAO and INTERPOL standards for passport issuance, “identity management”, and data sharing about travelers — as though US immigration and asylum policy should be determined by an international technical body for aviation operations, as though such a body has the authority to override US treaty obligations to freedom of movement and “open skies“, and as though predictive pre-crime profiling based on “biographic and biometric data” can be substituted for judicial fact-finding as a basis for denial of the right to travel.

We hope that seeing the “Muslim Ban 3.0” blamed on ICAO standards will lead human rights advocates to pay more attention to ICAO’s standard-setting role and opaque decision-making process in non-aviation matters such as passports, identity management, and data sharing.

Read More

Sep 19 2017

Amtrak lied to travel agents who questioned ID requirements

The encouraging disclosure in the latest installment of documents released by Amtrak in response to one of our Freedom Of Information Act (FOIA) requests is that some travel agents resisted Amtrak demands that they collaborate in surveillance, profiling, and control of train travelers by entering passport or ID numbers and details in each reservation for cross-border Amtrak travel.

According to an email message to Amtrak from a product manager at Worldspan (one of the major computerized reservation systems), “We have one subscriber [i.e. a travel agency that uses Worldspan] that has checked the Federal Register and is quoting ‘chapter and verse’ that it is not mandated … to provide the data”:

Some travel agents pushed back repeatedly, read the official notices and instructions to travel agents about the rail API program carefully (and correctly), and made a travel agency “policy decision of non-provision” of ID data about their customers:

Kudos to the unnamed travel agencies that refused to help the government spy on their customers and called Amtrak on its lies that this was required.

Read More

Sep 11 2017

California DMV proposes to “comply” with the REAL-ID Act

On September 1, 2017, the California Department of Motor Vehicles quietly published a notice of proposed regulations that would purportedly allow the California DMV to issue drivers licenses and state ID cards that would be “compliant” with the Federal REAL-ID Act of 2005:

For many years, the California DMV has appeared intent on eventual “compliance” with the REAL-ID Act, regardless of whether that compliance was authorized by the legislature. The current DMV rulemaking proposal to bring California into “compliance” with the REAL-ID Act by administrative fiat is the latest and most significant step along that path, and a disturbing effort to bypass legislative debate.

We encourage all Californians who are concerned about freedom of movement, Federal commandeering of state agencies to function as agents for enforcing Federal restrictions on individual rights, and lack of transparency, oversight and accountability for biometric and ID databases to submit comments opposing the proposed regulations and, if you can make it to Sacramento, to testify at the hearing on October 16th.

Read More