The U.S. intelligence community claims it's not spying on citizens until someone actually looks at the data it collects. That argument is deeply flawed.

Bruce Schneier Oct 21 2013, 8:00 AM ET

Director of National Intelligence James Clapper told Congress the NSA doesn't collect information on millions of Americans. (Reuters)

The basic government defense of the NSA's bulk-collection programs - whether it be the list of all the telephone calls you made, your email address book and IM buddy list, or the messages you send your friends - is that what the agency is doing is perfectly legal, and doesn't really count as surveillance, until a human being looks at the data.

It's what Director of National Intelligence James R. Clapper meant when he lied to Congress. When asked, "Does the NSA collect any type of data at all on millions or hundreds of millions of Americans?" he replied, "No sir, not wittingly." To him, the definition of "collect" requires that a human look at it. So when the NSA collects - using the dictionary definition of the word - data on hundreds of millions of Americans, it's not really collecting it, because only computers process it.

The NSA maintains that we shouldn't worry about human processing, either, because it has rules about accessing all that data. General Keith Alexander, director of the NSA, said that in a recent New York Times interview: "The agency is under rules preventing it from investigating that so-called haystack of data unless it has a 'reasonable, articulable' justification, involving communications with terrorists abroad, he added."

There are lots of things wrong with this defense.

First, it doesn't match up with U.S. law. Wiretapping is legally defined as acquisition by device, with no requirement that a human look at it. This has been the case since 1968, amended in 1986.

Second, it's unconstitutional. The Fourth Amendment prohibits general warrants: warrants that don't describe "the place to be searched, and the persons or things to be seized." The sort of indiscriminate search and seizure the NSA is conducting is exactly the sort of general warrant that the Constitution forbids, in addition to it being a search by any reasonable definition of the term. The NSA has tried to secretly redefine the word "search," but it's forgotten about the seizure part. When it collects data on all of us, it's seizing it.

Third, this assertion leads to absurd conclusions. Mandatory cameras in bedrooms could become okay, as long as there were rules governing when the government could look at the recordings. Being required to wear a police-issued listening device 24/7 could become okay, as long as those same rules were in place. If you're uncomfortable with these notions, it's because you realize that data collection matters, regardless of whether someone looks at it.

Fourth, creating such an attractive target is reckless. The NSA claims to be one of the biggest victims of foreign hacking attempts, and it's holding all of this information on us? Yes, the NSA is good at security, but it's ridiculous to assume it can survive all attacks by foreign governments, criminals, and hackers - especially when a single insider was able to walk out of the door with pretty much all their secrets.

Finally, and most importantly: Even if you are not bothered by the speciousness of the legal justifications, or you are already desensitized to government invasion of your privacy, there is a danger grounded in everything we have learned about how humans respond when put in positions of unchecked power. Assuming the NSA follows its own rules - which even it admits it doesn't always - rules can change quickly. The NSA says it only looks at such data when investigating terrorism, but the definition of that term has broadened considerably. The NSA is constantly pushing the law to allow more and more surveillance. Even Representative Jim Sensenbrenner, the author of the Patriot Act, says that it doesn't allow what the NSA claims it allows. It doesn't make sense to build systems that could facilitate a future police state.

A massive trove of surveillance data on everyone is incredibly tempting for all parts of government to use. Once we have everyone's data, it'll be hard to prevent it from being used to solve conventional crimes and for all sorts of things. It's a totalitarian government's wet dream.

The NSA's claim that it only looks when it's investigating terrorism is already false. We already know the NSA passes data to the DEA and IRS with instructions to lie about its origins in court - "parallel construction" is the term being used. What else is done with that data? What else could be?

It doesn't make sense to build systems that could facilitate a future police state.

This sort of surveillance isn't new. We even have a word for it: It's the Panopticon. The Panopticon was a prison design created by 18th-century philosopher Jeremy Bentham, and has been a metaphor for a surveillance state ever since. The basic idea is that prisoners live under the constant threat of surveillance. It's not that they are watched all the time - it's that they never know when they're being watched. It's the basis of Orwell's 1984 dystopia: Winston Smith never knew if he was being watched, but always knew it was a possibility. It's why online surveillance works so well in China to deter behavior; no one knows if and when it will detect their actions online.

Panopticon-like surveillance - intermittent, but always possible - changes human behavior. It makes us more compliant, less individual. It reduces liberty and freedom. Philosopher Michael P. Lynch recently wrote about how it dehumanizes us: "when we lose the very capacity to have privileged access to our psychological information - the capacity for self-knowledge, so to speak, we literally lose our selves .... To the extent we risk the loss of privacy we risk, in a very real sense, the loss of our very status as subjective, autonomous persons."

George Dyson recently wrote that a system that "is granted (or assumes) the absolute power to protect itself against dangerous ideas will of necessity also be defensive against original and creative thoughts." That's what living in a Panopticon gets you.

Already, many of us avoid using "dangerous" words and phrases online, even innocuously. Or making nervous jokes about it when we do.

By ceding the NSA the ability to conduct ubiquitous surveillance on everybody, we cede to it an enormous amount of control over our own lives. Once the NSA takes a copy of your data, you no longer control it. You can't delete it. You can't change it. You might not even know when the rules under which it uses your data change. And until Edward Snowden leaked documents that show what the NSA is doing, you didn't even know that the government had taken it.


The NSA's Surveillance Is Unconstitutional

Congress or the courts should put a stop to these unreasonable data seizures.
By Randy E. Barnett

The Fourth Amendment has two parts: First, "The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated." Second, that "no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized."

By banning unreasonable "seizures" of a person's "papers," the Fourth Amendment clearly protects what we today call "informational privacy." Rather than seizing the private papers of individual citizens, the NSA and CFPB programs instead seize the records of the private communications companies with which citizens do business under contractual "terms of service." These contracts do not authorize data-sharing with the government. Indeed, these private companies have insisted that they be compelled by statute and warrant to produce their records so as not to be accused of breaching their contracts and willingly betraying their customers' trust.

True, judges have long been approving search warrants by relying on ex parte affidavits from law enforcement. With the NSA's surveillance program, the Foreign Intelligence Surveillance Court has apparently secretly approved the blanket seizure of data on every American so this "metadata" can later provide the probable cause for a particular search. Such indiscriminate data seizures are the epitome of "unreasonable," akin to the "general warrants" issued by the Crown to authorize searches of Colonial Americans.

Still worse, the way these programs have been approved violates the Fifth Amendment, which stipulates that no one may be deprived of property "without due process of law." Secret judicial proceedings adjudicating the rights of private parties, without any ability to participate or even read the legal opinions of the judges, is the antithesis of the due process of law.

In a republican government based on popular sovereignty, the people are the principals or masters and those in government are merely their agents or servants. For the people to control their servants, however, they must know what their servants are doing.

The secrecy of these programs makes it impossible to hold elected officials and appointed bureaucrats accountable. Relying solely on internal governmental checks violates the fundamental constitutional principle that the sovereign people must be the ultimate external judge of their servants' conduct in office. Yet such judgment and control is impossible without the information that such secret programs conceal. Had it not been for recent leaks, the American public would have no idea of the existence of these programs, and we still cannot be certain of their scope.

Even if these blanket data-seizure programs are perfectly proper now, the technical capability they create makes it far easier for government to violate the rights of the people in the future. Consider why gun rights advocates so vociferously oppose gun registration. By providing the government with information about the location of private arms, gun registries make it feasible for gun confiscation to take place in the future when the political and legal climate may have shifted. The only effective way to prevent the confiscation of firearms tomorrow is to deprive authorities of the means to do so today.

Like gun registries, these NSA and CFPB databanks make it feasible for government workers to peruse the private contents of our electronic communication and financial transactions without our knowledge or consent. All it takes is the will, combined with the right political climate.

Congress or the courts must put a stop to these unreasonable blanket seizures of data and end the jurisdiction of the Foreign Intelligence Surveillance Court to secretly adjudicate the constitutionality of surveillance programs. Both practices constitute a present danger to popular sovereignty and the rights retained by the people.


The NSA has no constitutional right to secretly obtain the telephone records of every American citizen on a daily basis, subject them to sophisticated data mining and store them forever. It's time government officials are charged with criminal conduct, including lying to Congress, instead of going after those exposing the wrongdoing.

Contradicting a statement by ex-vice president Dick Cheney on Sunday that warrantless domestic surveillance might have prevented 9/11, 2007 court records indicate that the Bush-Cheney administration began such surveillance at least 7 months prior to 9/11.

Send comments to: hjw2001@gmail.com