ALBANY, N.Y. (May 12, 2017) – Last week, a New York Assembly committee passed an electronic data protection bill would ban the use “stingrays” to track the location of phones and sweep up electronic communications without a warrant, and end warrantless collection of cell phone data in most situations. Passage of the bill would not only protect privacy in New York, but would also hinder at least two aspects of the federal surveillance state.
Assm. Jeffry Dinowitz (D-Bronx) introduced Assembly Bill 1895 (A1895) in January. Titled the New York Electronic Communications Privacy Act, the legislation would help block the use of cell site simulators, known as “stingrays.” These devices essentially spoof cell phone towers, tricking any device within range into connecting to the stingray instead of the tower, allowing law enforcement to sweep up communications content, as well as locate and track the person in possession of a specific phone or other electronic device.
The bill would require police to obtain a warrant before deploying a stingray device, unless they have the explicit permission of the owner or authorized possessor of the device.
Similar to legislation passed in California in 2015, A1895 would also bar law enforcement agencies from compelling third party communication companies to release mobile device information without a warrant. This would include actual communication content such as phone conversations, text messages and email, location information and other metadata such as identifying information.
The Assembly Codes Committee passed A1895 on June 20 by a 16-5 vote. Activists say they don’t expect the bill to move any further during this session, but it will carry over to 2018. According to activists on the ground, there is support for passing the measure in the Assembly, but leadership wants a greater indication of support and potential in the Senate before moving the bill to the Assembly floor.
The bill does include an exception to the warrant requirement pursuant to an emergency involving danger of death or serious physical injury to a person. Even then, law enforcement agencies must get a court order authorizing retention of the data within three days or they must destroy all information gathered.
Any information voluntarily provided to a law enforcement agency by a communications provider must be destroyed within 90 days unless it gets a court order authorizing retention, or explicit consent from the owner of the information,
Provisions in A1895 would severely limit sharing of any legally obtained data.
The legislation provides a legal remedy for anybody whose data is obtained in violation of the law.
“Persons who are party to or otherwise subject to a trial, hearing, or other legal or administrative proceeding may move to suppress electronic information obtained or retained in violation of this article, the United States Constitution, State Constitution, the New York State Constitution or the provisions of the criminal procedure law.”
A companion bill (S5730) has been introduced in the Senate.
IMPACT ON FEDERAL SURVEILLANCE PROGRAMS
The federal government funds the vast majority of state and local stingray programs, attaching one important condition. The feds require agencies acquiring the technology to sign non-disclosure agreements. This throws a giant shroud over the program, even preventing judges, prosecutors and defense attorneys from getting information about the use of stingrays in court. The feds actually instruct prosecutors to withdraw evidence if judges or legislators press for information. As the Baltimore Sun reported in April 2015, a Baltimore detective refused to answer questions on the stand during a trial, citing a federal non-disclosure agreement.
Defense attorney Joshua Insley asked Cabreja about the agreement.
“Does this document instruct you to withhold evidence from the state’s attorney and Circuit Court, even upon court order to produce?” he asked.
“Yes,” Cabreja said.
As privacysos.org put it, “The FBI would rather police officers and prosecutors let ‘criminals’ go than face a possible scenario where a defendant brings a Fourth Amendment challenge to warrantless stingray spying.”
The feds sell the technology in the name of “anti-terrorism” efforts. With non-disclosure agreements in place, most police departments refuse to release any information on the use of stingrays. But information obtained from the Tacoma Police Department revealed that it uses the technology primarily for routine criminal investigations.
Some privacy advocates argue that stingray use can never happen within the parameters of the Fourth Amendment because the technology necessarily connects to every electronic device within range, not just the one held by the target. And the information collected by these devices undoubtedly ends up in federal data bases.
The feds can share and tap into vast amounts of information gathered at the state and local level through a system known as the “information sharing environment” or ISE. In other words, stingrays create the potential for the federal government to track the movement of millions of Americans with no warrant, no probable cause, and without the people even knowing it.
According to its website, the ISE “provides analysts, operators, and investigators with information needed to enhance national security. These analysts, operators, and investigators…have mission needs to collaborate and share information with each other and with private sector partners and our foreign allies.” In other words, ISE serves as a conduit for the sharing of information gathered without a warrant.
The federal government encourages and funds stingrays at the state and local level across the U.S., thereby undoubtedly gaining access to a massive data pool on Americans without having to expend the resources to collect the information itself. By placing restrictions on stingray use, state and local governments limit the data available that the feds can access.
In a nutshell, without state and local cooperation, the feds have a much more difficult time gathering information. Passage of A1895 would represent a major blow to the surveillance state and a win for privacy.
By allowing defendants to suppress information obtained in violation of the law, A1895 would hinder and potentially stop one practical effect of NSA spying in New York.
Reuters revealed the extent of such NSA data sharing with state and local law enforcement in an August 2013 article. According to documents obtained by the news agency, the NSA passes information to police through a formerly secret DEA unit known Special Operations Divisions and the cases “rarely involve national security issues.” Almost all of the information involves regular criminal investigations, not terror-related investigations.
In other words, not only does the NSA collect and store this data, using it to build profiles, the agency encourages state and local law enforcement to violate the Fourth Amendment by making use of this information in their day-to-day investigations.
This is “the most threatening situation to our constitutional republic since the Civil War,” Binney said.
A1895 was referred to the Rules Committee where it will likely remain until the 2018 session. Privacy activists in New York say they plan to do outreach over the summer to obtain more co-sponsors and make sure the bill is visible to leadership in both chambers going into the next session. If you live in New York, contact both your state senator and representative and urge them to support A1895 and S5730. You can find your representative and senator HERE and HERE.