Privacy & Cybersecurity Law Blog

On January 23, 2014, the Privacy and Civil Liberties Oversight Board (“PCLOB”) released a report (the “Report”) concluding that the National Security Agency (“NSA”) does not have a valid legal basis for its bulk telephone records collection program. The NSA’s bulk collection of consumer telephone records has been under increased scrutiny since Edward Snowden leaked information about the program in June 2013, and recently has faced legal challenges. According to the Report, the NSA’s program exceeded its statutory parameters.

The PCLOB is an independent agency within the executive branch, composed of a chairman and four part-time members. Its duties include reviewing the counterterrorism activities of the executive branch to ensure that the privacy and civil liberties of individuals is protected.

The NSA’s bulk collection of consumer phone records ostensibly is conducted pursuant to Section 215 of the USA PATRIOT Act. According to the Report, however, the NSA’s collection of consumer telephone records far exceeds the framework devised by Section 215. The Report states that Section 215 is designed to allow the FBI to acquire business records when those business records are relevant to an FBI investigation. According to the Report, however, the telephone records collected by the NSA “have no connection to any specific FBI investigation.” The Report further states that because the records are collected in bulk, “they cannot be regarded as ‘relevant’ to any FBI investigation as required by [Section 215] without redefining the word relevant in a manner that is circular, unlimited in scope, and out of step with the case law from analogous legal contexts.”

In addition, the PCLOB concluded that the NSA’s bulk collection of consumer telephone records violates the Electronic Communications Privacy Act (“ECPA”). ECPA prohibits telephone companies from disclosing customer records to the government, except in specified scenarios. The Report stated that none of the ECPA scenarios permitting disclosure apply to the NSA’s bulk collection of customer records.

Read the PCLOB’s Report.