Facebook and Microsoft have struck agreements with the US government to
release limited information about the number of surveillance requests they
receive, a modest victory for the companies as they struggle with the fallout
from disclosures about a secret government data-collection program.
Facebook on Friday became the first to release aggregate numbers of
requests, saying in a blog post it received between 9,000 and 10,000 US requests
for user data in the second half of 2012, covering 18,000 to 19,000 of its
users' accounts. Facebook has more than 1.1 billion users worldwide.
The majority of those requests are routine police inquiries, a person
familiar with the company said, but under the terms of the deal with the justice
department, Facebook is precluded from saying how many were secret orders issued
under the Foreign Intelligence Surveillance Act. Until now, all information
about requests under Fisa, including their existence, were deemed secret.
Microsoft said it had received requests of all types for information on
about 31,000 consumer accounts in the second half of 2012. In a "transparency
report" Microsoft published earlier this year without including national
security matters, it said it had received criminal requests involving 24,565
accounts for the whole of 2012.
If half of those requests came in the second part of the year, the
intelligence requests constitute the bulk of government inquiries. Microsoft did
not dispute that conclusion.
Google said late on Friday it was negotiating with the government and that
the sticking point was whether it could only publish a combined figure for all
requests. It said that would be "a step back for users", because it already
breaks out criminal requests and national security letters, another type of
intelligence inquiry.
Facebook, Google and Microsoft had all publicly urged the US authorities to
allow them to reveal the number and scope of the surveillance requests after
documents leaked to the Guardian suggested they had given the government "direct
access" to their computers as part of the National Security Agency program
called Prism.
The disclosures about Prism, and related revelations about broad-based
collection of telephone records, have triggered widespread concern and
congressional hearings about the scope and extent of the
information-gathering.
"We hope this helps put into perspective the numbers involved and lays to
rest some of the hyperbolic and false assertions in some recent press accounts
about the frequency and scope of the data requests that we receive," Facebook
wrote on its site.
Facebook said it would continue to press to divulge more information. The
person familiar with the company said that it at least partially complied with
US legal requests 79% of the time, and that it usually turned over just the
user's email address and internet protocol address and name, rather than the
content of the person's postings or messages.
It is believed that Fisa requests typically seek much more information. But
it remains unclear how broad the Fisa orders might be.
Among the other remaining questions are the nature of court-approved
"minimisation" procedures designed to limit use of information about US
residents. The NSA is prohibited from specifically targeting them.
"If they are receiving large amounts of data that they are not actually
authorised to look at, the question then becomes what are the procedures by
which they determine what they can look at?" said Kevin Bankston, a lawyer at
the Centre for Democracy & Technology. "Do they simply store that forever in
case later they are authorised to look at it?"
In addition, some legal experts say recent US laws allow for
intelligence-gathering simply for the pursuit of foreign policy objectives, not
just in hunting terrorists and spies.
No comments:
Post a Comment