National security letter

Last updated
EFF-IA National security letter.pdf
EFF-IA National security letter.pdf
A National security letter issued to the Internet Archive demanding information about a user

A national security letter (NSL) is an administrative subpoena issued by the United States government to gather information for national security purposes. NSLs do not require prior approval from a judge. The Stored Communications Act, Fair Credit Reporting Act, and Right to Financial Privacy Act authorize the United States government to seek such information that is "relevant" to an authorized national security investigation. By law, NSLs can request only non-content information, for example, transactional records and phone numbers dialed, but never the content of telephone calls or e-mails. [1]

Contents

NSLs typically contain a nondisclosure requirement forbidding the recipient of an NSL from disclosing the FBI had requested the information. [2] The Director of the FBI must authorize the nondisclosure provisions and only after he or she certifies "that otherwise there may result a danger to the national security of the United States; interference with a criminal, counterterrorism, or counterintelligence investigation; interference with diplomatic relations; or danger to the life or physical safety of any person." [3] Nonetheless, the recipient of an NSL may challenge the nondisclosure provision in federal court. [4]

The constitutionality of such nondisclosure provisions has been repeatedly challenged. The nondisclosure provision was initially ruled unconstitutional as an infringement of free speech in Doe v. Gonzales , but that decision was vacated in 2008 by the Second Circuit Court of Appeals when it held the USA PATRIOT Improvement and Reauthorization Act gave the recipient of an NSL that included a nondisclosure provision the right to challenge the nondisclosure provision in federal court. In March 2013, a federal judge in the Northern District of California held an NSL nondisclosure provision was unconstitutional. On August 24, 2015, the Ninth Circuit Court of Appeals vacated the lower court's decision and remanded the case for further proceedings. On remand, the district court held the "NSLs were issued in full compliance with the procedural and substantive requirements suggested by the Second Circuit in John Doe, Inc. v. Mukasey, 549 F.3d 861 (2d Cir. 2008), which had held that the 2006 NSL law could be constitutionally applied"... and "the NSL law, as amended [by the USA FREEDOM ACT of 2015], was constitutional." The two petitioners appealed. On appeal, the Ninth Circuit Court of Appeals upheld the district court ruling, holding that NSLs are constitutional and stated, "the nondisclosure requirement does not run afoul of the First Amendment." Under Seal v. Jefferson B. Sessions, III, Attorney General, Nos. 16-16067, 16-16081, and 16-16082, July 17, 2017.

History

The oldest NSL provisions were created in 1978 as a little-used investigative tool in terrorist and espionage investigations to obtain financial records. Under the Right to Financial Privacy Act (RFPA), part of the Financial Institutions Regulatory and Interest Rate Control Act of 1978, the FBI could obtain the records only if the FBI first demonstrated the target was a foreign power or an agent of a foreign power. Compliance by the recipient of the NSL was voluntary and state laws for consumer privacy often allowed financial institutions to reject the requests. [5] In 1986, Congress amended RFPA to allow the government to request disclosure of the requested information. In 1986, Congress passed the Electronic Communications Privacy Act (ECPA), part of the Stored Communications Act, which created provisions similar to the RFPA that allowed the FBI to issue NSLs. Still, neither RFPA or ECPA included penalties for failure to comply with the NSL. A 1993 amendment removed the restriction regarding "foreign powers," thereby allowing NSLs to request information concerning persons who are not the direct subject of the investigation but who may have information relevant to it.

In March 2006, the USA PATRIOT Improvement and Reauthorization Act specifically allowed for judicial review of NSLs. A federal judge could repeal or modify an NSL if the court found the request for information was "unreasonable, oppressive, or otherwise unlawful." The March 2006 changes also weakened the nondisclosure provision the government could include in an NSL. A court could repeal the nondisclosure provision if it found it had been made in bad faith. Other 2006 amendments to the law allowed the recipient of an NSL to inform their attorney about the NSL and the government had to rely on the courts to enforce compliance with an NSL.[ citation needed ]

PATRIOT Act

Section 505 of the USA PATRIOT Act (2001) allowed the use of the NSLs when seeking information "relevant" in authorized national security investigations to protect against international terrorism or clandestine intelligence activities. The act also provided the Department of Defense when conducting a law enforcement investigation, counterintelligence inquiry, or security determination. The Central Intelligence Agency has also allegedly issued NSLs. [6] The Patriot Act reauthorization statutes passed during the 109th Congress added potential penalties for failure to comply with an NSL or disclosing an NSL if the NSL included a nondisclosure provision.

The PATRIOT Act increased the number of persons who could approve the issuance of NSLs, from the FBI Director (or their designees) to include the FBI Special Agent in Charge of the 56 field offices. [7]

Contentious aspects

Two contentious aspects of NSLs are the nondisclosure provision and judicial oversight when the FBI issues an NSL, both of which federal courts have held to be constitutional. When the Director of the FBI (or their designee) authorizes the inclusion of a nondisclosure provision in an NSL, the recipient may face criminal prosecution if it discloses the contents of the NSL or that it was received. The purpose of a nondisclosure provision is to prevent the recipient of an NSL from compromising the current FBI investigation involving for which the NSL was issued as well as future investigations (see 18 U.S.C. 2709), either of which would fetter the Government's efforts to address threats to national security. [8] An NSL recipient (later revealed to be Nicholas Merrill [9] [10] ) writing in The Washington Post said,

[L]iving under the gag order has been stressful and surreal. Under the threat of criminal prosecution, I must hide all aspects of my involvement in the case ... from my colleagues, my family and my friends. When I meet with my attorneys I cannot tell my girlfriend where I am going or where I have been. [8]

Like other administrative subpoenas, NSLs do not require judicial approval. For NSLs, that is because the U.S. Supreme Court has held the type of information NSLs obtain do not have a constitutionally protected reasonable expectation of privacy. The person has already provided the information to a third party, e.g., their telephone company, so they no longer have a reasonable expectation of privacy to the information and, therefore, there is no Fourth Amendment requirement to obtain court approval to obtain the information. [11] Nonetheless, an NSL recipient may still challenge the nondisclosure provision in federal court. [12]

A news media report in 2007 stated a government audit found the FBI had violated the rules more than 1,000 times in an audit of 10% of its national investigations between 2002 and 2007. [13] Twenty such incidents involved requests by agents for information not permitted under the law. A subsequent report in 2014 conduced by the Justice Department's Office of Inspector General concluded the FBI had corrected its practices and that NSLs now complied with federal law.

According to 2,500 pages of documents the FBI provided to the Electronic Frontier Foundation in response to a Freedom of Information Act lawsuit in 2007, the FBI had used NSLs to obtain information about individuals who were the subject of an FBI terrorism or counterintelligence investigation and information from telecommunications companies about individuals with whom the subject of the investigation had communicated. According to a September 9, 2007, New York Times report,

In many cases, the target of a[n FBI] national security letter whose records are being sought is not the subject of a terrorism investigation. Under the USA PATRIOT Act, the FBI must assert that the records gathered through the letter are considered relevant to a terrorism [or counterintelligence] investigation. [14]

In April 2008, the American Civil Liberties Union alleged that the military was using the FBI to skirt legal restrictions on domestic surveillance to obtain private records of Americans' Internet service providers, financial institutions, and telephone companies. The ACLU based its allegation on a review of more than 1,000 documents provided by the Defense Department. The Department of Justice Office of Inspector General later determined it was the Department of Defense (not the FBI) that had lawfully obtained the information under the National Security Act of 1947, not by an NSL.

Doe v. Ashcroft

Letter in Doe v. Ashcroft case 4610 001 redactednsl.pdf
Letter in Doe v. Ashcroft case

The lack of judicial oversight and the Supreme Court ruling in Smith v. Maryland was the core of Doe v. Ashcroft, a test case brought by the ACLU concerning the use of NSLs. The lawsuit was filed on behalf of "John Doe" plaintiff Nicholas Merrill, founder of Calyx Internet Access, [15] who had received an NSL. The action challenged the constitutionality of NSLs, specifically the nondisclosure provision. At the district court, Judge of the Southern District of New York held in September 2004 that NSLs violated the Fourth Amendment ("it has the effect of authorizing coercive searches effectively immune from any judicial process") and First Amendment. However, Judge Marrero stayed his ruling while the case proceeded to the court of appeals.

Because of the New York district court ruling, while the case was still on appeal, Congress amended the USA PATRIOT Act to provide for more judicial review of NSLs and clarified the NSL nondisclosure provision. [16] Based on the U.S. Supreme Court rulings, the FBI does not need judicial approval to issue an NSL.

The government appealed Judge Marrero's decision to the Second Circuit Court of Appeals, which heard arguments in May 2006. In March 2008, the Second Circuit ruled that nondisclosure provisions were permissible only when the FBI certified that disclosure may result in certain statutorily enumerated harms (see, e.g., 18 U.S.C. 2709), and held the nondisclosure provision to a strict scrutiny standard. The Second Circuit then returned the case to the district court based on amendments to the USA PATRIOT Act that Congress had enacted while the case had been on appeal.

Letter in the Doe v. Gonzales case Nsl kenneth sutton.pdf
Letter in the Doe v. Gonzales case

Another effect of Doe v. Ashcroft was increased congressional oversight. The amendments to the USA PATRIOT Act mentioned above included requirements for semiannual reporting to Congress. Although the reports are classified, a nonclassified accounting of how many NSLs are issued is also required. On April 28, 2006, the Department of Justice reported to the House and Senate that in calendar year 2005, "The Government made requests for certain information concerning 3,501 United States persons pursuant to NSLs. During this period, the total number of NSL requests ... for information concerning U.S. persons totaled 9,254." [17]

In 2010, the FBI agreed to lift partially the nondisclosure provision to allow Merrill to reveal his identity. [18] On August 28, 2015, Judge Marrero rescinded the nondisclosure provision associated with the NSL Merrill had received, thereby allowing him to speak about the contents of the NSL. On November 30, 2015, the unredacted court ruling was published in full. [19]

See also

Related Research Articles

<span class="mw-page-title-main">Patriot Act</span> 2001 United States anti-terrorism law

The USA PATRIOT Act was a landmark Act of the United States Congress, signed into law by President George W. Bush. The formal name of the statute is the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001, and the commonly used short name is a contrived acronym that is embedded in the name set forth in the statute.

<span class="mw-page-title-main">Freedom of Information Act (United States)</span> 1967 US statute regarding access to information held by the US government

The Freedom of Information Act, 5 U.S.C. § 552, is the United States federal freedom of information law that requires the full or partial disclosure of previously unreleased or uncirculated information and documents controlled by the U.S. government, state, or other public authority upon request. The act defines agency records subject to disclosure, outlines mandatory disclosure procedures, and includes nine exemptions that define categories of information not subject to disclosure. The act was intended to make U.S. government agencies' functions more transparent so that the American public could more easily identify problems in government functioning and put pressure on Congress, agency officials, and the president to address them. The FOIA has been changed repeatedly by both the legislative and executive branches.

American Civil Liberties Union v. Ashcroft is a lawsuit filed on behalf of a formerly unknown Internet Service Provider (ISP) company under the pseudonym John Doe, Inc. by the American Civil Liberties Union against the U.S. federal government, by the Department of Justice under former U.S. Attorney General John Ashcroft.

<span class="mw-page-title-main">Foreign Intelligence Surveillance Act</span> 1978 United States federal law

The Foreign Intelligence Surveillance Act of 1978 is a United States federal law that establishes procedures for the surveillance and collection of foreign intelligence on domestic soil.

<span class="mw-page-title-main">Electronic Communications Privacy Act</span> 1986 United States federal law

The Electronic Communications Privacy Act of 1986 (ECPA) was enacted by the United States Congress to extend restrictions on government wire taps of telephone calls to include transmissions of electronic data by computer, added new provisions prohibiting access to stored electronic communications, i.e., the Stored Communications Act, and added so-called pen trap provisions that permit the tracing of telephone communications . ECPA was an amendment to Title III of the Omnibus Crime Control and Safe Streets Act of 1968, which was primarily designed to prevent unauthorized government access to private electronic communications. The ECPA has been amended by the Communications Assistance for Law Enforcement Act (CALEA) of 1994, the USA PATRIOT Act (2001), the USA PATRIOT reauthorization acts (2006), and the FISA Amendments Act (2008)

The USA PATRIOT Act was passed by the United States Congress in 2001 as a response to the September 11, 2001 attacks. It has ten titles, each containing numerous sections. Title II: Enhanced Surveillance Procedures granted increased powers of surveillance to various government agencies and bodies. This title has 25 sections, with one of the sections containing a sunset clause which sets an expiration date, December 31, 2005, for most of the title's provisions. This was extended twice: on December 22, 2005 the sunset clause expiration date was extended to February 3, 2006 and on February 2 of the same year it was again extended, this time to March 10.

<span class="mw-page-title-main">Controversial invocations of the Patriot Act</span>

The following are controversial invocations of the USA PATRIOT Act. The stated purpose of the Act is to "deter and punish terrorist acts in the United States and around the world, to enhance law enforcement investigatory tools, and for other purposes." One criticism of the Act is that "other purposes" often includes the detection and prosecution of non-terrorist alleged future crimes.

<span class="mw-page-title-main">NSA warrantless surveillance (2001–2007)</span> Part of Terrorist Surveillance Program

NSA warrantless surveillance — also commonly referred to as "warrantless-wiretapping" or "-wiretaps" — was the surveillance of persons within the United States, including U.S. citizens, during the collection of notionally foreign intelligence by the National Security Agency (NSA) as part of the Terrorist Surveillance Program. In late 2001, the NSA was authorized to monitor, without obtaining a FISA warrant, phone calls, Internet activities, text messages and other forms of communication involving any party believed by the NSA to be outside the U.S., even if the other end of the communication lays within the U.S.

Title V: Removing obstacles to investigating terrorism is the fifth of ten titles which comprise the USA PATRIOT Act, an anti-terrorism bill passed in the United States after the September 11, 2001 attacks. It contains 8 sections regarding the capture and prosecution of terrorists.

<span class="mw-page-title-main">Section summary of Title II of the Patriot Act</span>

The following is a section summary of the USA PATRIOT Act, Title II. The USA PATRIOT Act was passed by the United States Congress in 2001 as a response to the September 11, 2001 attacks. Title II: Enhanced Surveillance Procedures gave increased powers of surveillance to various government agencies and bodies. This title has 25 sections, with one of the sections containing a sunset clause which sets an expiration date, of 31 December 2005, for most of the title's provisions. On 22 December 2005, the sunset clause expiration date was extended to 3 February 2006.

<span class="mw-page-title-main">United States Department of Justice National Security Division</span>

The United States Department of Justice National Security Division (NSD) handles national security functions of the department. Created by the 2005 USA PATRIOT Act reauthorization, the division consolidated all of the department's national security and intelligence functions into a single division. The division is headed by the Assistant Attorney General for National Security.

<span class="mw-page-title-main">Susan Illston</span> American judge (born 1948)

Susan Yvonne Illston is a senior United States district judge of the United States District Court for the Northern District of California. She was nominated by President Bill Clinton and confirmed by the Senate in 1995. She assumed senior status in 2013.

<span class="mw-page-title-main">Right to Financial Privacy Act</span> 1978 United States federal law

The Right to Financial Privacy Act of 1978 is a United States federal law, Title XI of the Financial Institutions Regulatory and Interest Rate Control Act of 1978, that gives the customers of financial institutions the right to some level of privacy from government searches.

<span class="mw-page-title-main">History of the Patriot Act</span>

The history of the USA PATRIOT Act involved many parties who opposed and supported the legislation, which was proposed, enacted and signed into law 45 days after the September 11 terrorist attacks in 2001. The USA PATRIOT Act, though approved by large majorities in the U.S. Senate and House of Representative, was controversial, and parts of the law were invalidated or modified by successful legal challenges over constitutional infringements to civil liberties. The Act had several sunset provisions, most reauthorized by the USA PATRIOT Improvement and Reauthorization Act of 2005 and the USA PATRIOT Act Additional Reauthorizing Amendments Act. Both reauthorizations incorporated amendments to the original USA PATRIOT Act, and other federal laws.

<span class="mw-page-title-main">Doe v. Gonzales</span> 2004 US lawsuit

John Doe v. Alberto R. Gonzales was a case in which the American Civil Liberties Union (ACLU), Library Connection, and several then-pseudonymous librarians, challenged Section 2709 of the Patriot Act; it was consolidated on appeal with a separate case, Doe v. Ashcroft.

<span class="mw-page-title-main">Stored Communications Act</span>

The Stored Communications Act is a law that addresses voluntary and compelled disclosure of "stored wire and electronic communications and transactional records" held by third-party Internet service providers (ISPs). It was enacted as Title II of the Electronic Communications Privacy Act of 1986 (ECPA).

<span class="mw-page-title-main">Nicholas Merrill</span> Free speech and privacy advocate

Nicholas Merrill is an American system administrator, computer programmer, and entrepreneur. He is the founder of Calyx Internet Access, an Internet and hosted service provider founded in 1995, and of the non-profit Calyx Institute. He was the first person to file a constitutional challenge against the National Security Letters statute in the USA PATRIOT Act and consequently the first person to have a National Security Letter gag order completely lifted.

The Connecticut Four are librarians who filed a lawsuit known as Doe v. Gonzales, challenging the constitutional validity of National Security Letters (NSL) issued by the Federal Bureau of Investigation (FBI) under the USA PATRIOT Act.

<span class="mw-page-title-main">USA Freedom Act</span> 2015 U.S. surveillance law

The USA Freedom Act is a U.S. law enacted on June 2, 2015, that restored and modified several provisions of the Patriot Act, which had expired the day before. The act imposes some new limits on the bulk collection of telecommunication metadata on U.S. citizens by American intelligence agencies, including the National Security Agency. It also restores authorization for roving wiretaps and tracking lone wolf terrorists. The title of the act is a ten-letter backronym that stands for Uniting and Strengthening America by Fulfilling Rights and Ensuring Effective Discipline Over Monitoring Act of 2015.

<i>American Civil Liberties Union v. Clapper</i> American federal court case

American Civil Liberties Union v. Clapper, 785 F.3d 787, was a lawsuit by the American Civil Liberties Union (ACLU) and its affiliate, the New York Civil Liberties Union, against the United States federal government as represented by then-Director of National Intelligence James Clapper. The ACLU challenged the legality and constitutionality of the National Security Agency's (NSA) bulk phone metadata collection program.

References

  1. USA PATRIOT Improvement and Reauthorization Act of 2005: A Legal Analysis Congressional Research Service's report for Congress, Brian T. Yeh, Charles Doyle, December 21, 2006.
  2. Bustillos, Maria (June 27, 2013). "What It's Like to Get a National-Security Letter". The New Yorker .
  3. 18 U.S.C.   § 2709(c)
  4. 18 U.S.C.   § 3511
  5. Andrew E. Nieland, National Security Letters and the Amended Patriot Act, 92 Cornell L. Rev. 1201, 1207 (2007)
  6. Lichtblau, Eric; Mezzetti, Mark (January 14, 2007). "Military Expands Intelligence Role in U.S." The New York Times .
  7. Bendix, William; Quirk, Paul J. (2016). "Deliberating Surveillance Policy: Congress, the FBI, and the Abuse of National Security Letters". Journal of Policy History. 28 (3): 447–469. doi:10.1017/S0898030616000178. ISSN   0898-0306. S2CID   156898376.
  8. 1 2 My National Security Letter, The Washington Post , 2007 Mar 23
  9. John Doe’ Who Fought FBI Spying Freed From Gag Order After 6 Years Kim Zetter, Wired.com, 2010 8 10
  10. "Doe v. Holder (Challenging Patriot Act's National Security Letter provision and associated gag provision)". S.D.N.Y. 04 Civ. 2614 (VM) (direct). NYCLU (New York Civil Liberties Union). Archived from the original on 2010-11-13.
  11. Smith v. Maryland, 442 U.S. 735 (1979); Fourth Amendment, U.S. Const.
  12. 18 U.S.C. § 3511
  13. "FBI agents broke the rules 1,000 times". RTÉ News Online. 2007-06-14. Retrieved 2007-06-14.
  14. Lichtblau, Eric (2007-09-08). "F.B.I. Data Mining Reached Beyond Target Suspects". The New York Times.
  15. "ACLU Sues Over Internet Privacy". cbsnews.com.
  16. "Congress.gov – Library of Congress". thomas.loc.gov. Archived from the original on 2008-11-27. Retrieved 2007-05-23.
  17. Report of Foreign Intelligence Surveillance Act Archived 2006-06-29 at the Wayback Machine , United States Department of Justice
  18. McLaughlin, Jenna (14 September 2015). "Federal Court Lifts National Security Letter Gag Order; First Time in 14 Years". The Intercept. Retrieved 16 September 2015.
  19. "Nicholas Merrill able to reveal the national security letter previously undisclosed". Information Society Project. Yale University. Retrieved 2015-11-30.