The FBI and the Biden administration at large have lobbied Congress to reauthorize the 702 program as is, ignoring calls for reform that have grown louder since the beginning of the year, manifesting this month in the form of a comprehensive privacy bill-the Government Surveillance Reform Act-legislation that likewise seeks to impose warrant requirements on the FBI, which at present can conduct searches of 702 data without a judge's consent, so long as it's "Reasonably likely" to find evidence of a crime. FBI director Christopher Wray, speaking before the House Homeland Security Committee on Wednesday, denounced plans to impose a warrant requirement under 702, calling it a "Significant blow" to the bureau's national security division. "A warrant requirement would amount to a de facto ban," Wray says, noting the FBI would often be unable to meet the legal standard necessary for the court's approval, and that the processing of warrants would take too long in the face of "Rapidly evolving threats." The report goes on to detail "Significant" violations at the FBI, most previously reported to the Foreign Intelligence Surveillance Court in 2022, before they were made known to the public in May. The majority of the incidents-including one in which an FBI analyst conducted "Batch queries of over 19,000 donors to a congressional campaign"-took place prior to a package of "Corrective reforms" that the FBI is crediting with practically curing its compliance issues. The report attributes "Most" misuses of 702 data to "a culture at the FBI" wherein access was granted to many "Poorly trained" agents and analysts with few internal safeguards. It states that FBI systems for storing 702 data had not been designed to make employees "Affirmatively opt-in" before conducting a query, "Leading to many inadvertent, noncompliant" issues of the system. "It also seems that FBI management failed to take query compliance incidents seriously," the report says, "And were slow to implement reforms that would have addressed many of the problems." The committee says the FBI "Realized the depth and breadth of its issues" and has begun implementing serious reforms on its own-including, among other measures, additional guidance for employees, ample system modifications, and heightened oversight in the form supervisory reviews by FBI legal experts and senior executives. The committee notes that the FISC-albeit somewhat "Encouraged" by recent improvements-has found the bureau's noncompliance with 702 procedures "Persistent and widespread," warning that it may become necessary to significantly curtail its employees' access to raw foreign intelligence in the future. "The FBI has a history of abuse regarding the querying of Section 702 information," the report says, adding that reforms soon to be advanced by the intel committee would see the number of FBI employees with access to the data cut by as much as 90 percent. Citing "Insufficient oversight and supervision" at the FBI, the committee says it should be prepared to audit every query targeting a US person "Within 6 months" of the search, and House and Senate leaders should be notified at once when and if an FBI analyst queries a term that might "Identify a member of Congress." "The American people deserve a law that protects them from both governmental overreach and security threats," the report says. "Section 702 must be reauthorized, but it also must be reformed."
This Cyber News was published on www.wired.com. Publication date: Thu, 30 Nov 2023 23:19:27 +0000