Feeds

FBI faked terror alerts to get phone records

Subpoena scamola spilled

Choosing a cloud hosting partner with confidence

The FBI fabricated terrorism emergencies to obtain thousands of phone records between 2002 and 2006, it's been revealed.

The Bureau created "exigent letters" to get around rules that had already been significantly loosened by the Patriot Act. The letters were used to obtain some 2,000 phone records, The Washington Post reports.

Washington Post and New York Times journalists were among the targets.

The internal concerns were confirmed in emails that are part of an investigation by the Justice Department's inspector general, which is due to report this month.

As well as fabricating emergencies, FBI counter-terror investigators obtained phone records by simply leaning on operators, getting approval after the fact with blanket authorisations.

The Patriot Act allowed investigators to effectively self-certify their requests for communications data, using a "National Security Letter" (NSL), a type of subpoena without judicial oversight. The Justice Department has found that by fabricating emergencies and sending NSLs after it had obtained phone records, the FBI violated what civil liberties protections remained.

In response, the FBI claimed that although it did not follow statutory process to obtain the records, they were all legitimate targets for investigation.

"The [Justice Department] report is not expected to find — nor were there — any intentional attempts to obtain records that counterterrorism personnel knew they were not legally entitled to obtain," said assistant director of public affairs Michael Kortan.

He added all the numbers obtained have been deleted and that "steps were taken as early as 2006 to ensure similar situations do not occur in the future". However, The Washington Post said it had seen emails showing FBI lawyers sounded the alarm in 2005.

The US NSL system is similar to the UK's Regulation of Investigatory Powers Act (RIPA) regime for authorities to obtain communications data from phone companies and ISPs. Each has no judicial oversight and investigators effectively self-certify their requests.

The UK system is much broader, however, with no requirement that national security is threatened and many more agencies, such as local councils, empowered to access records.

Oversight is provided by a former High Court judge appointed by the Prime Minister, who produces an annual report. In 2008, the most recent available, he says that 595 errors were made but added: "I am not convinced that any useful purpose would be served by providing a more detailed report of these errors."

The government is developing a major extension to communications surveillance that would require internet firms to retain huge amounts of extra data, under the Interception Modernisation Programme. Ministers have argued that that RIPA will be sufficient to govern access to the newly available terabytes of private information. ®

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
DOUBLE BONK: Testy fanbois catch Apple Pay picking pockets
Users wail as tapcash transactions are duplicated
Happiness economics is bollocks. Oh, UK.gov just adopted it? Er ...
Opportunity doesn't knock; it costs us instead
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
YARR! Pirates walk the plank: DMCA magnets sink in Google results
Spaffing copyrighted stuff over the web? No search ranking for you
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.