Aug 11 2016

Yes, we still want the State Department to answer our 5-year-old FOIA requests

In the latest episode of the FOIA follies, we recently received a bizarre letter letter from the U.S. State Department asking us whether we are “still interested” in receiving a response to one of several of our requests for State Department records that have each gone unanswered for more than five years.

The Department of Homeland Security is the leader in improper denial of FOIA requests and wrongful withholding and redaction of records, and has the largest backlog of unanswered requests. The State Department typically practices a different strategy of denial by delay, and has most of the oldest unanswered requests of any Federal department. A five-year wait for an answer from the State Department to a simple FOIA request is routine, although clearly illegal.

The latest letter we got from the State Department threatens to “close” one of our cases and take no further action on our request — in flagrant violation of the FOIA statute — unless we respond by fax (who still has a fax machine these days?) or snail-mail to confirm our continued interest in having the State Department fulfill its legal obligation to provide us with the records we’ve requested, including those about what happened to our complaints of human rights violations and the supplemental “long form” some passport applicants are asked to fill out, among other issues.

We’ve written back to the State Department (by snail-mail, since their letter included no phone number or email address) to tell them that yes, we really do want them to release the records we asked for five years ago — as they should know, since we already formally appealed their failure to answer our request within the time limit set by the law. (In response, they said they wouldn’t accept any administrative appeal until they answered our original request, making it impossible to challenge an illegal delay without filing a Federal lawsuit.) We’ve been making formal written requests at least annually since then for updates on the status of our requests and when the State Department estimates it will answer. (Each year, they set their estimated response dates back another year.) In the meantime, we made additional FOIA requests to the State Department on other subjects  in 2014 and 2015. We have yet to actually get an answer from the State Department to any of our FOIA requests, regardless of how long ago we made them.

The Freedom Of Information Act does not require periodic expressions of continued interest in receiving late responses. But even though it isn’t required, we have provided repeated, explicit written expressions of continued interest in each of our requests.  It would make no sense to allow a government agency to use the fact that it hasn’t responded to a request for government records within the legal deadline as an excuse never to respond at all.

In response to complaints from numerous advocates for government transparency, both the Department of Justice (OIP) and the FOIA ombudsman’s office (OGIS) of the National Archives and Records Administration have recently issued guidelines for the use of “still interested?” letters, if they are used at all.  In May 2016, OGIS wrote to the State Department urge it to  implement the OGIS recommendations regarding “still interested?” letters to FOIA requesters.

The State Department’s Chief FOIA Officer has claimed, both in her most recent annual report in March 2016 and in her response to OGIS in May 2016, that “we can assure you that DOJ guidance and OGIS recommendations are being thoroughly followed”.  As we discuss in our reply to the State Department , which we have also sent to OGIS, the “still interested?” letter we received makes clear that this isn’t true.

“Freedom of information” means nothing if government agencies can, with impunity, ignore the law. A government agency’s own delay in complying with the law shouldn’t be an excuse never to comply at all.

Jul 06 2016

Watchlist Soup

nofly-nogun

Congress  is again debating the proposals we wrote about last year to deny firearms licenses or permits to anyone “suspected of supporting” terrorism.

We stand by our earlier analysis and our condemnation of this proposal as (1) another step from sanctions against criminal conduct to pre-crime predictive policing, and (2) an expansion of the collateral consequences of secret, unconstitutional, extra-judicial, administrative blacklisting decisions.

But there seems to be a lot of confusion about what is really being proposed. This diagram shows what is already happening with the “No-Fly” and “No-Gun” lists, and what it would mean to merge them.

The proposed “No-Fly, No Buy” law currently under debate in Congress would add the TSDB as a third source (yellow arrow at center right of flow chart) of entries in “No-Gun” list in NCIC, in addition to Federal and state felony convictions and certain misdemeanor crimes of domestic violence. Everything else on this diagram except the one yellow line already exists and would remain the same.

Click the image above for a larger version, or click here for a full-page PDF of the flow chart with a key to all the acronyms.

Jun 09 2016

How does the TSA decide if you are who you say you are?

An ongoing trickle of still-incomplete responses by the TSA to a Freedom Of Information Act (FOIA) request we made in June 2013 continues to shed more light on the TSA’s procedures for air travelers who don’t have ID credentials the TSA deems satisfactory.

It’s difficult to compile statistics from files in the image format in which the TSA has released them, but we can make some anecdotal observations about what happens to people who try to fly without “acceptable” ID. Read More

Apr 05 2016

Class action challenges Federal blacklists (“watchlists”)

The broadest and most fundamental legal challenge to the waging of the US “War on Terror” through standardless, secret, extra-judicial government blacklists was filed today in the Federal court for the district in Virginia where the National Counterterrorism Center (NCTC), Terrorist Screening Center (TSC), and Transportation Security Administration (TSA) are headquartered. (Video backgrounder and interviews with plaintiffs and attorneys; more video interviews; PACER links)

Both an individual complaint (Elhady et al. v. Piehota at al.) and a class action complaint (Baby Doe et al. v. Piehota et al.) were filed. Presumably, that is so that  that the individual complaint for injunctive and declaratory relief could go forward even if class action certification  is denied, while the class action lawsuit could go forward even if the named plaintiffs are delisted. (An earlier, similar lawsuit was dismissed as moot after the plaintiffs were told they were no longer on blacklists.) Almost all of the individual complaint is repeated in the class action complaint, so if you are going to read just one, read the class action complaint which includes additional plaintiffs and their stories.

The case takes its name from the first of the listed representatives of the class of people on US government blacklists (“watchlists”):

Plaintiff Baby Doe is a four year old toddler.

He was seven months old when his boarding pass was first stamped with the “SSSS” designation, indicating that he had been designated at a “known or suspected terrorist.”

While passing through airport security, he was subjected to extensive searches,  pat downs and chemical testing.

Every item in his mother’s baby bag was searched, including every one of his diapers.

Let’s get one thing straight from the start: as we’ve noted before, calling the “Terrorist Screening Database” (TSDB) and similar lists “watchlists” is at best misleading euphemism, and at worst Orwellian doublespeak.

The government uses the term “watchlist” to avoid the stigma deservedly associated with the label “blacklist”, with its connotations of McCarthyism and J. Edgar Hooverism. A “watchlist” suggests a list of people who are being watched, a component of a system of surveillance or investigation. “Watchlisting” might, one presumes, lead to eventual intervention such as the criminal prosecution or an application to a court for a restraining order or injunction. But inclusion on the TSDB occurs after, not before, a decision to intervene is (secretly) made, and the consequences of listing in the TSDB are not limited to mere passive surveillance or watching. Each listing on the TSDB includes a “handling code” which determines what happens to the people who are deemed (typically by automated pattern-matching algorithms) to match the listing.

As the litany of horror stories in the complaint in Baby Doe v. Piehota makes clear, and as we’ve seen in previous incidents, being “watchlisted” can trigger  consequences ranging from denial of transportation by common carriers to freezing of bank accounts, inability to rent an apartment, or inability to get or keep a job, even with a private non-governmental employer.  As when a jury must decide which of a progression of more and less serious offenses to convict a defendant of, without knowing what sentences are mandated for any of those offenses, it’s not clear whether the Federal administrative staff in the secret rooms reviewing the secret dossiers of derogatory information and deciding which secret lists to put people on, or which secret “action codes” to assign them, even know what the full panoply of collateral consequences of their decisions will be.

The US government doesn’t have to issue binding orders to convert “watchlisting” into de facto blacklisting. As the complaint filed today points out, “Defendants disseminated the the records pertaining to Plaintiffs from its terrorist watch list to foreign governments with the purpose and hope that those foreign governments will constrain the movement of the Plaintiffs in some manner.” We saw one of the ways that can work during the trial of Dr. Rahinah Ibrahim’s challenge to her placement on the no-fly list.  The US government successfully used a “POSSIBLE NO BOARD REQUEST” message to induce a foreign airline to refuse to transport Dr. Ibrahim’s daughter, a US citizen, even though the US claimed that she was merely on a “watchlist” and not on the no-fly list.

It’s time to to reject the government’s “watchlist” doublespeak, and start calling the TSDB what it is: a government blacklist.

The first of the named defendants, Christopher Piehota, is the Director of the Terrorist Screening Center (TSC), an inter-agency entity responsible for the TSDB and nominally under the control of the FBI.

Most of the previous attempts to challenge actions taken against individuals as a result of their being listed in the TSDB have foundered on an elaborate shell game of buck-passing between businesses and government agencies. Airlines that refuse to transport blacklisted people (or those with similar names) say that they are only following (secret) orders from the government. Normal judicial review of actions by the TSA and CBP, the components of the DHS that issue no-fly orders (or refuse to issue permission for boarding pass issuance — the default is now “No,” not “Yes”) is precluded by a special law, 49 U.S.C. § 46110. No trials are allowed, and appellate courts are allowed to review these decisions only on the basis of the “administrative record” created by the DHS itself, which will show only that the DHS action was based on “watchlist” status as determined by the TSC, and not the basis (if any) for the FBI’s “watchlisting” decision.

The only previous cases in which District Courts have been able to consider no-fly decisions, and the only trial in a no-fly lawsuit, have been when the FBI, and not just the DHS or DHS components, has been named as a defendant. Today’s cases follow in that line, challenging the blacklisting decisions by the FBI.

To head off lawsuits of exactly this sort, the government has recently shifted nominal final authority over no-fly decisions from the FBI to the TSA. In theory, the government claims, the TSA could now decline to issue a no-fly order, even after the FBI has put someone on the no-fly list. It’s unclear, however, whether this has ever happened, or in what circumstances or on what basis it might happen. The possibility seems remote: Even the FBI, in practice, acts as a rubber-stamp for the decisions of FBI and DHS agents who make effectively final blacklisting decisions when they “nominate” people for listing in the TSDB. According to today’s complaint, 98.96% of the 468,749 people “nominated” for Federal “watchlists” in 2013 were added to those lists by the TSC.

The plaintiffs in the lawsuits filed today are represented by Gadeir Abbas, Lena Masri, and co-counsel from the Council on American-Islamic Relations, who have been leading the legal campaign against US government blacklisting, harassment, and interference with the rights and freedoms of Muslim and other Americans.

Feb 25 2016

Why the Judicial Redress Act is worthless

Yesterday President Obama signed the Judicial Redress Act into law.  European Union Commissioner for Justice Věra Jourová described the new law as, “a historic achievement [that] will ensure that all EU citizens have the right to enforce data protection rights in U.S. courts…. The entry into force of the Judicial Redress Act will pave the way for the signature of the EU-U.S. Data Protection Umbrella Agreement.”

Is the Judicial Redress Act really so historic? And will it actually “ensure that all EU citizens have the right to enforce data protection rights in U.S. courts”?

Sadly, no.

Europeans should not be fooled by statements such as those from Commissioner Jourová or her counterparts in other EU institutions. As we know from our own experience in court as US citizens, there are almost no real-world cases in which the Judicial Redress Act will provide any actual protection or enforceable legal rights to citizens or residents of the EU, or anywhere else.

The Judicial Redress Act gives some foreign citizens some of the rights that US citizens currently have, with respect to some of the uses and misuses by the US government of their personal information.  But in no case will any foreigner have more rights under the Judicial Redress Act than US citizens have under the Privacy Act.

Serious scrutiny of the terms of the Privacy Act, and of the history of attempts by US citizens to use the Privacy Act to protect themselves against misuse of our personal information by the US government, has been largely absent from the debate about the Judicial Redress Act. But from our experience as parties to one of the key lawsuits attempting to assert Privacy Act claims by US citizens in relation to one of the most controversial categories of personal information being transferred from the EU to the US — passenger name records (PNRs) for international airline flights — we have learned an important lesson that Europeans need to know: the Privacy Act is so limited and riddled with exceptions that it is almost worthless. It is because the Privacy Act is useless, not because the US government follows fair personal information practices in its dragnet surveillance, that there are so few examples of successful litigation against the US government by US citizens under the Privacy Act.

All of the limitations and exceptions that always rendered the “protection” of the Privacy Act inadequate — even for US citizens — will continue to render the protection of the Judicial Redress Act inadequate for foreigners, in all of the same ways, and in additional ones.

What are these exceptions and limitations? In order to make sense out of the Judicial Redress Act, it’s essential to understand the exemptions in the Privacy Act, as courts have interpreted them.

Federal agencies can exempt themselves from almost all of the requirements of the Privacy Act with respect to “investigatory material compiled for law enforcement purposes,” a catch-all category that has been applied to records of dragnet surveillance and other information compiled and used for “pre-crime” profiling, even when the data subjects have never been accused or suspected of any crime. All an agency has to do to opt-out is to publish a notice in the Federal Register that a particular system of records has been declared exempt by the agency that maintains the records. An agency can wait to promulgate such a notice until after it receives a request for access to records, a request for an accounting of disclosures, or a request for correction of records.

Read More

Jan 08 2016

DHS doubles down on its big lie about ID to fly

Just days after posting an out-and-out lie on DHS.gov about whether states that want to comply with the REAL-ID Act have to give other states unconditional access to their drivers’ license and ID database (they do, contrary to what the DHS claims), the DHS has posted an equally blatant lie about whether domestic air travelers do or will have to show ID (they don’t and they won’t, contrary to what the DHS claims).

Today’s whopper is part of a press release attributed to Secretary of Homeland Security Jeh Johnson, announcing arbitrary dates for “enforcement” of alleged REAL-ID Act requirements. One might expect those dates and requirements to be spelled out in the U.S. Code or in regulations published in the Federal Register. But rulemaking by press release, Web posting, or Tweet has become the norm for the DHS as part of its enforcement of standardless, discretionary, and secret adminstrative “law”.

Today’s announcement by the DHS comes in the midst of a new round of vigorous debate by state officials as to whether to agree to comply with requirements of the REAL-ID Act that they continue to find objectionable — especially with respect to its mandate for a distributed but integated and nationally accessible ID database. It also comes almost simultaneously with the introduction in both houses of Congress of bills to repeal the REAL-ID Act.

The REAL-ID Act does not purport to create any legal obligation on states to comply. It can’t: The Federal government has no authority to compel the enactment of state legislation. If financial carrots in the form of Federal grants to fund REAL-ID Act implementation aren’t sufficient to win over states that stand up for their residents’ rights, the only stick the Federal government has available to induce those states to comply with the REAL-ID Act is the threat to harass, delay, or prevent residents of those states from traveling by air.

Today’s DHS press release and Tweet make that threat explicit.

Read More

Dec 28 2015

TSA may require virtual strip-searches for flyers

The TSA may try to prevent (some) people who can’t or won’t submit to virtual strip-searches from traveling by air, according to a Privacy Impact Assessment (PIA) update quietly posted on the DHS website a few days before Christmas:

TSA is updating the AIT [“Advanced (sic) Imaging Technology”] PIA to reflect a change to the operating protocol regarding the ability of individuals to opt out of AIT screening in favor of physical screening. While passengers may generally decline AIT screening in favor of physical screening, TSA may direct mandatory AIT screening for some passengers as warranted by security considerations.

The DHS and TSA may have hoped that nobody would notice this change in “operating protocol”, but the new requirement for some air travelers to submit to virtual strip-searches has already been challenged in at least two Federal Circuit Courts of Appeal, as discussed further below.

Read More

Dec 18 2015

Are TSA actions subject to judicial review?

The real test of whether the TSA is above the law isn’t whether TSA or DHS officials, flacks, or lobbyists claim that there are legal procedures which (hypothetically) permit judicial oversight of TSA actions. The real test is what happens when real people object to specific conduct by TSA staff and contractors, or private parties such as airlines acting at the behest of the TSA, and ask the courts to review and decide whether the TSA or its minions are breaking the law or violating the US Constitution.

Nobody has done more to test the real-world limits of TSA lawlessness than our friend Sai, who has been waging a one-person, pro se legal crusade against the TSA for its disregard of the Constitution and of a variety of Federal laws providing for transparency, fairness, and due process. Sai’s pending lawsuits against the TSA include one of the most important challenges anyone has made to the TSA’s claims of authority for secret lawmaking, as discussed below.

Remarkably, and unlike most of those aggrieved by TSA general disregard for the law as well as more specific misconduct, Sai has even had some success. But that limited success gives a sense of just how outrageous is the TSA’s disregard for the law, and how far it has to go before the courts will rein it in.

Read More

Dec 14 2015

The right to travel and the right to bear arms

Last Thursday, December 3rd, the US Senate rejected a proposal to authorize the Attorney General to deny firearms licenses or permits to anyone the Attorney General suspects to “be or have been engaged in conduct constituting, in preparation for, in aid of, or related to terrorism, or providing material support or resources for terrorism.”

Just three days later, President Obama made a somewhat similar proposal, but based on the no-fly list and thus — under the latest revisions to no-fly listing procedures — on the discretion of the Secretary of Homeland Security rather than the discretion of the Attorney General:

“Congress should act to make sure no one on a no-fly list is able to buy a gun. What could possibly be the argument for allowing a terrorist suspect to buy a semi-automatic weapon?” (Address to the Nation by the President, December 6, 2015)

Since the President asks, we’ll try to answer.

Read More

Nov 06 2015

Most Federal agencies still ignore human rights complaints

Despite a recent decision by the European Court of Justice based in part on the inability of US courts to enforce US obligations under human rights treaties to which the US is a party, and despite a direct order from the President, most Federal agencies have still done nothing to create even administrative channels or points of contact for handling complaints of human rights violations.

Last April, we joined a broad coalition of civil liberties and human rights organizations in a public letter to some of the Federal departments engaged in the most egregious human rights violations — torture, extrajudicial killings, mass surveillance, denial of freedom movement, etc. — calling on them to carry out the President’s longstanding orders to designate points of contact responsible for responding to complaints that they have violated human rights treaties.

Six months later, there’s been no response to our letter and no publicly-disclosed indication that any of the agencies and departments to which it was sent has taken any action to fulfill its duties under Executive Order 13107, which was issued by President Clinton in 1998 and has remained in effect ever since.

This week, we joined in a follow-up letter, pointing out the failure to act and the heightened importance of showing a US government commitment to human rights, including the right to privacy, if the US wants to persuade other countries and their citizens that personal information transferred to via the US will be adequately protected against unwarranted mass surveillance.

The real lesson, of course, is that neither US citizens nor foreigners can rely on merely administrative mechanisms  for the protection of fundamental rights. If direct orders from the President aren’t enough to get Federal department heads even to receive and log human rights complaints, what could be?

As the UN Human Rights Committee recommended last year at the conclusion of its latest review of US (non)implementation of its human rights treaty obligations, what’s really needed is for Congress to enact effectuating legislation for human rights treaties to grant US courts — not the agencies that are the subjects of the complaints — the jurisdiction to hear and rule on complaints of violations of rights guaranteed by those treaties that the US has ratified and promised to honor and implement.