PRESS RELEASE. Washington, D.C. - U.S. Senator Ron Wyden, D-Ore., released documents confirming the National Security Agency buys Americans' internet records, which can reveal which websites they visit and what apps they use.
In response to the revelation, today Wyden called on the administration to ensure intelligence agencies stop buying personal data from Americans that has been obtained illegally by data brokers.
A recent FTC order held that data brokers must obtain Americans' informed consent before selling their data.
Wyden fought for nearly three years to publicly release the fact that the NSA is purchasing Americans' internet records.
He succeeded in obtaining public confirmation of that fact after placing a hold on the nomination of Lt. General Timothy Haugh to serve as NSA director.
Web browsing records can reveal sensitive, private information about a person based on where they go on the internet, including visiting websites related to mental health resources, resources for survivors of sexual assault or domestic abuse, or visiting a telehealth provider who focuses on birth control or abortion medication.
Wyden, a senior member of the Senate Intelligence Committee, has revealed how multiple federal government agencies have bought and searched Americans' private records - including location data, internet records and more - without a warrant - in effect using their credit card to circumvent the Fourth Amendment.
In 2021, for example, Wyden revealed the Defense Intelligence Agency was buying and using location data collected from Americans' phones.
Wyden urged the DNI to direct U.S. intelligence agencies to stop purchasing Americans' private data that was obtained unlawfully in violation of new rules outlined by the Federal Trade Commission this month.
Wyden, who has spent seven years investigating the data broker industry, is not aware of any company that provides such a warning to users before collecting their data.
Conduct an inventory of the personal data purchased by the agency about Americans, including, but not limited to, location and internet metadata.
The cataloging of IC acquisition of commercially available information was also a recommendation of the Office of the DNI's Senior Advisory Group Panel on Commercially Available Information in its January 2022 report.
Where those data purchases do not meet the FTC's legal standard for personal data sales, promptly purge the data.
Should IC elements have a specific need to retain the data, such need, and a description of any retained data, be conveyed to Congress and, to the greatest extent possible, to the American public.
The text of the letter and the records provided by the NSA and Defense Department are here.
This Cyber News was published on www.darkreading.com. Publication date: Fri, 26 Jan 2024 22:10:04 +0000