[I am sending out this issue of EPIC Alert in its entirety because it includes several useful items. I've reformatted it to 70 columns.] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= This message was forwarded through the Red Rock Eater News Service (RRE). You are welcome to send the message along to others but please do not use the "redirect" option. For information about RRE, including instructions for (un)subscribing, see http://dlis.gseis.ucla.edu/people/pagre/rre.html =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Date: Wed, 13 Feb 2002 18:01:32 -0500 From: EPIC News <alertat_private> To: epic_newsat_private Subject: EPIC Alert 9.03 ============================================================== @@@@ @@@@ @@@ @@@@ @ @ @@@@ @@@@ @@@@@ @ @ @ @ @ @ @ @ @ @ @ @ @@@@ @@@ @ @ @@@@@ @ @@@ @@@ @ @ @ @ @ @ @ @ @ @ @ @ @@@@ @ @@@ @@@@ @ @ @@@@ @@@@ @ @ @ ============================================================== Volume 9.03 February 13, 2002 -------------------------------------------------------------- Published by the Electronic Privacy Information Center (EPIC) Washington, D.C. http://www.epic.org/alert/EPIC_Alert_9.03.html ======================================================================= Table of Contents ======================================================================= [1] Opposition to National ID System Grows [2] Comcast Backs Down from Tracking Web Users [3] EPIC Urges Verizon, Ameritech to Drop Marketing Plans [4] Individuals Encouraged to Comment on Telemarketing Sales Rule [5] CPSR Announces New "Privaterra" Coalition [6] EPIC Bill-Track: New Bills in Congress [7] EPIC Bookstore - Web Security, Privacy & Commerce [8] Upcoming Conferences and Events ======================================================================= [1] Opposition to National ID System Grows ======================================================================= By compelling standardization of the issuance and content of driver's licenses, including additional immigration and biometric data fields, and obtaining legislative support for the implementation of its Driver Record Information Verification System (DRIVerS) to link state and national driver records, the American Association of Motor Vehicle Administrators (AAMVA) hopes to effect a nationally interoperable repository of drivers' personal information: a National ID system in all but name. EPIC has been involved in two key initiatives opposing AAMVA's plan to convert the state driver's license into a de facto National ID card. In a letter sent to President Bush and Transportation Secretary Mineta on Monday February 11, 2002, EPIC joined a broad coalition of civil liberties groups urging the administration to reject the creation of a National ID Card through the standardization of state driver's licenses. Also, EPIC today released the latest policy report in its Watching the Watchers series, entitled "Your Papers, Please: From the State Drivers License to a National Identification System." The paper offers a detailed assessment of the AAMVA proposal in the context of prevailing security concerns, Constitutional values and Congress' history of protecting the privacy of driver's license information. While EPIC supports efforts to detect and prevent fraud and counterfeiting of driver's licenses, AAMVA's move to standardize driver's licenses, to collect more invasive personal information, and to expand the legitimate function of state motor vehicle authorities must be rejected. The increased reliance on a single form of identification compromises privacy and exacerbates the risks and consequences of identity theft. The new report recommends that there should be wider public debate about the details and the consequences of AAMVA's national identification card and driver's license system. The combination of technical concerns and prevalent American Constitutional values protecting freedom of movement, privacy, and anonymity strongly suggest that this and any National ID system should be rejected. Letter Sent by Coalition to President Bush and Secretary Mineta: http://www.epic.org/privacy/id_cards/presidentltr2.11.02.html "Your Papers, Please: From the State Drivers License to a National Identification System" is available at: http://www.epic.org/privacy/id_cards/yourpapersplease.pdf EPIC's National ID Page: http://www.epic.org/privacy/id_cards/ ======================================================================= [2] Comcast Backs Down from Tracking Web Users ======================================================================= Comcast Corp., which yesterday acknowledged that it had begun tracking the Web browsing activities of its one million high-speed Internet subscribers without notifying them, announced today that it will no longer be engaging in this practice. Comcast's acknowledgment of its tracking activities raised questions from Representative Edward Markey (D-MA), a long-time privacy advocate in Congress. Markey sent a letter to Comcast asking about "the nature and extent of any transgressions of the law that may have resulted in consumer privacy being compromised," stating that he believed Comcast should be prohibited from collecting information without obtaining consent, pursuant to the 1984 Cable Act. Although the practice was part of a technology overhaul that Comcast claims was not intended to infringe on privacy, experts agree that an unnecessarily large amount of information was being collected, and that the use for that information was not clear. "Once a company collects this kind of data, it's really inviting all kinds of requests for access," said EPIC General Counsel David Sobel. "If they can't identify a specific need for collecting it, Comcast should take the necessary steps to eliminate it." Comcast had been recording subscriber IP addresses, along with Internet addresses of each requested Web page. This information was being stored "temporarily," although no figure has been provided stating exactly how long the information was being stored. Some angry Comcast customers likened this practice to the FBI's controversial Carnivore surveillance technology. Other large Internet providers such as America Online and Earthlink were quoted in reports as saying that they do not track their subscribers' Web browsing habits, citing privacy reasons. Comcast Cable Communications President Stephen Burke claims that the information the company was collecting has "never been connected to individual subscribers and has been purged automatically to protest subscriber privacy," though he added that "[b]eginning immediately, we will stop storing this individual customer information in order to completely reassure our customers that the privacy of their information is secure." Rep. Markey's Letter to Comcast is available at: http://www.epic.org/privacy/internet/markey_comcast.html ======================================================================= [3] EPIC Urges Verizon, Ameritech to Drop Marketing Plans ======================================================================= In letters to Ameritech President Gail Torreano and Verizon President Ivan Seidenberg, EPIC has urged the companies to suspend their plans to use records of telephone calls for marketing purposes. Both phone companies sent opt-out notice to customers in their most recent billing statements. The notices, which required customers to call a toll-free telephone number to opt-out of the sale of their calling data, sparked controversy as customers cited privacy concerns and experienced difficulty attempting to opt-out. The information that Verizon and Ameritech are planning on using is known as customer proprietary network information (CPNI), and includes the information contained within a billing statement, such as calls dialed. In late January, in response to a national campaign led by EPIC, with the support of state Attorneys General and consumers nationwide, Qwest Communications withdrew plans for opt-out marketing with CPNI. The company has stated that it will wait to devise its plans until the Federal Communications Commission (FCC) has proposed a final rule on the issue. EPIC's letters to Verizon and Ameritech urged the companies to follow Qwest's example. EPIC initiated the campaign for opt-in by filing comments, signed by 17 consumer organizations, with the FCC last November. The FCC's request for comments followed a federal court decision that the FCC's opt-in proposal violated the First Amendment because there was not adequate evidence that opt-in would protect customer privacy interests. The comments noted that 86% of consumers favor opt-in for communications services. EPIC's letter to Ameritech President Gail Torreano: http://www.epic.org/privacy/cpni/ameritechletter.html EPIC's letter to Verizon President Ivan Seidenberg: http://www.epic.org/privacy/cpni/verizonletter.html For a history of the debate, see EPIC's CPNI page: http://www.epic.org/privacy/cpni/ ======================================================================= [4] Individuals Encouraged to Comment on Telemarketing Sales Rule ======================================================================= EPIC has urged individuals to submit comments to the Federal Trade Commission (FTC) on the Telemarketing Sales Rule (TSR). The TSR governs how many telemarketers can contact individuals, and changes to the rule proposed by the FTC may have a significant effect on limiting sales calls. EPIC has posted a five-point guide to commenting on the privacy issues in the TSR. First, individuals should support a national Do-Not-Call (DNC) list. Second, the FTC should require telemarketers to send accurate caller ID information every time a sales call is initiated. Third, the FTC should require improvement to autodialers so that "dead air" or "abandoned" calls are eliminated. Fourth, the FTC should ban the collection and sharing of pre-acquired account information. Last, the FTC should find ways to expand the scope of the TSR, so that all commercial entities that engage in telemarketing are subject to the rule. Individuals can comment until March 29, 2002. EPIC's recommendations to the public for comment are online at: http://www.epic.org/privacy/telemarketing/ Individuals can comment on the FTC web site: http://www.ftc.gov/bcp/conline/edcams/donotcall/form.htm ======================================================================= [5] CPSR Announces New "Privaterra" Coalition ======================================================================= On January 30, Computer Professionals for Social Responsibility (CPSR) announced Privaterra, a new coalition of computer professionals, human rights workers and human rights organizations joined to harness the power of technology and help protect human rights workers worldwide. Established in December 2001, Privaterra will be an ongoing project of CPSR. Privaterra is a volunteer-based organization with offices in the United States and Canada, and members in North America, South America and Europe. To help human rights workers and organizations conduct their activities in safety, and to protect the safety and anonymity of those they serve, Privaterra is seeking funding, donations-in-kind, and qualified volunteers. Privaterra provides human rights workers with technology and teaches them how to secure their information and communications. The group is also constructing a protected clearinghouse of information and resources relating to privacy and security for human rights organizations. Privacy and security oriented NGOs from all over the world, including Amnesty International, have contributed support to the newly formed organization, recognizing the critical need for secure communications in the fight for human rights. Privaterra Website: http://privaterra.cpsr.org/ CPSR Website: http://www.cpsr.org/ ======================================================================= [6] EPIC Bill-Track: New Bills in Congress ======================================================================= *House* H.R.3482 Cyber Security Enhancement Act of 2001. To provide greater cybersecurity. Sponsor: Rep Smith, Lamar (R-TX). Latest Major Action: 12/13/2001 Referred to House committee: House Judiciary. H.R.3483 Intergovernmental Law Enforcement Information Sharing Act of 2001. To amend title 31, United States Code, to provide for intergovernmental cooperation to enhance the sharing of law enforcement information. Sponsor: Rep Horn, Stephen (R-CA). Latest Major Action: 12/13/2001 Referred to House committee: House Judiciary. H.R.3494 Use NICS in Terrorist Investigations Act. To give the Federal Bureau of Investigation access to NICS records in law enforcement investigations, and for other purposes. Sponsor: Rep McCarthy, Carolyn (D-NY). Latest Major Action: 1/14/2002 Referred to House subcommittee: House Judiciary. H.R.3525 Enhanced Border Security and Visa Entry Reform Act of 2001. To enhance the border security of the United States, and for other purposes. Sponsor: Rep Sensenbrenner, F. James, Jr. (R-WI). Latest Major Action: 12/20/2001 Referred to Senate committee: House Judiciary; House Select Committee on Intelligence; House International Relations; House Ways and Means; House Transportation and Infrastructure; Senate Judiciary. H.R.3555 United States Security (`USA') Act of 2001. To prevent, prepare for, and respond to the threat of terrorism in America, and for other purposes. Sponsor: Rep Menendez, Robert (D-NJ). Latest Major Action: 12/28/2001 Referred to House Committees: House Energy and Commerce; House Transportation and Infrastructure; House Education and the Workforce; House Government Reform; House Ways and Means; House Armed Services; House International Relations; House Select Committee on Intelligence; House Financial Services; House Judiciary. H.R.3600 National Border Security Agency Act. To establish a National Border Security Agency. Sponsor: Rep Tancredo, Thomas G. (R-CO). Latest Major Action: 1/15/2002 Referred to House Subcommittee: House Government Reform; House Judiciary; House Transportation and Infrastructure; House Ways and Means. *Senate* S.1881 Telemarketing Intrusive Practices Act of 2001. A bill to require the Federal Trade Commission to establish a list of consumers who request not to receive telephone sales calls. Sponsor: Sen Dodd, Christopher J. (D-CT). Latest Major Action: 12/20/2001 Referred to Senate committee: Senate Commerce, Science, and Transportation. S.1900 Cyberterrorism Preparedness Act of 2002. A bill to protect against cyberterrorism and cybercrime, and for other purposes. Sponsor: Sen Edwards, John (D-NC). Latest Major Action: 1/28/2002 Referred to Senate Committees: Senate Commerce, Science, and Transportation. EPIC Bill Track: Tracking Privacy, Speech, and Cyber-Liberties Bills in the 107th Congress, is available at: http://www.epic.org/privacy/bill_track.html ======================================================================= [7] EPIC Bookstore - Web Security, Privacy & Commerce ======================================================================= Web Security, Privacy & Commerce, by Simson Garfinkel (O'Reilly, 2nd Ed., November 2001). http://www.epic.org/bookstore/powells/redirect/alert903.html This new, expanded edition, nearly twice the size of the first edition, explores web security risks and how to minimize them. Aimed at web users, administrators, and content providers, Web Security, Privacy & Commerce covers Windows and Unix environments, Internet Explorer and Netscape Navigator, and many other programs, products, and features: cryptography, SSL, the Public Key Infrastructure (PKI), digital signatures, digital certificates, privacy threats such as cookies, log files, web logs, and web bugs, hostile mobile code, and web publishing (intellectual property, P3P, digital payments, client-side digital signatures, code signing, PICS). Web Security, Privacy & Commerce is the definitive reference on Web security risks and technologies and methods you can use to protect your organization, your system, your network, and your privacy. ================================ EPIC Publications: "Privacy & Human Rights 2001: An International Survey of Privacy Laws and Developments," (EPIC 2001). Price: $20. http://www.epic.org/bookstore/phr2001/ This survey, by EPIC and Privacy International, reviews the state of privacy in over fifty countries around the world. The survey examines a wide range of privacy issues including, data protection, telephone tapping, genetic databases, ID systems and freedom of information laws. ================================ "The Privacy Law Sourcebook 2001: United States Law, International Law, and Recent Developments," Marc Rotenberg, editor (EPIC 2001). Price: $40. http://www.epic.org/bookstore/pls2001/ The "Physicians Desk Reference of the privacy world." An invaluable resource for students, attorneys, researchers and journalists who need an up-to-date collection of U.S. and International privacy law, as well as a comprehensive listing of privacy resources. ================================ "Filters and Freedom 2.0: Free Speech Perspectives on Internet Content Controls" (EPIC 2001). Price: $20. http://www.epic.org/bookstore/filters2.0/ A collection of essays, studies, and critiques of Internet content filtering. These papers are instrumental in explaining why filtering threatens free expression. ================================ "The Consumer Law Sourcebook 2000: Electronic Commerce and the Global Economy," Sarah Andrews, editor (EPIC 2000). Price: $40. http://www.epic.org/cls/ The Consumer Law Sourcebook provides a basic set of materials for consumers, policy makers, practitioners and researchers who are interested in the emerging field of electronic commerce. The focus is on framework legislation that articulates basic rights for consumers and the basic responsibilities for businesses in the online economy. ================================ "Cryptography and Liberty 2000: An International Survey of Encryption Policy," Wayne Madsen and David Banisar, authors (EPIC 2000). Price: $20. http://www.epic.org/crypto&/ EPIC's third survey of encryption policies around the world. The results indicate that the efforts to reduce export controls on strong encryption products have largely succeeded, although several governments are gaining new powers to combat the perceived threats of encryption to law enforcement. ================================ EPIC publications and other books on privacy, open government, free expression, crypto and governance can be ordered at: EPIC Bookstore http://www.epic.org/bookstore/ "EPIC Bookshelf" at Powell's Books http://www.powells.com/features/epic/epic.html ======================================================================= [8] Upcoming Conferences and Events ======================================================================= The Biometric Consortium Conference. February 13-15, 2002 (rescheduled from September 12-14, 2001). Arlington, VA. For more information: http://www.nist.gov/bcfeb02/ Congressional Briefing on Cybersecurity. Forum on Technology & Innovation. February 14, 2002. Washington, DC. For more information: http://www.tech-forum.org/ CLA 6th Annual Cyberspace Camp Conference. Computer Law Association. February 14-16. San Jose, CA. For more information: http://www.cla.org/cal_camp.htm 2nd Annual BNA Summit: Combatting Cyber Attacks on your Corporate Data. Bureau of National Affairs. February 27-28, 2002. Washington, DC. For more information: http://cybersecurity.pf.com/ Rethinking Law & Marketing in the Age of Privacy & Security. Wiley Rein & Fielding LLP. February 28, 2002. Redwood Shore, CA. For more information: http://www.wrf.com/event/home.asp Understanding Privacy: New Laws, New Challenges. BC Freedom of Information and Privacy Association (FIPA). March 11-12, 2002. Vancouver, British Columbia, Canada. For more information: http://ellisriley.on.ca/fipa/ HIPAA Summit West II: The Leading Forum on Healthcare Privacy, Confidentiality, Data Security, and HIPAA Compliance. March 13-15, 2002. San Francisco, CA. For more information: http://www.hipaasummit.com/ Eighth Annual National Conference, "Managing the NEW Privacy Revolution," and First Annual Privacy Expo 2002. Privacy & American Business and Privacy Council. March 20-22, 2002. Washington, DC. For more information: http://www.ManagingThePrivacyRevolution.com/ Fourth Annual e-ProtectIT Infrastructure Security Conference. Norwich University. March 20-22, 2002. Northfield, Vermont. For more information: http://www.e-protectIT.org/ International Symposium on Freedom of Information and Privacy. Office of the New Zealand Privacy Commissioner. March 28, 2002. Auckland, New Zealand. For more information: Blair.Stewartat_private Workshop on Privacy Enhancing Technologies. April 14-15, 2002. San Francisco, CA. For more information: http://www.pet2002.org/ CFP 2002: The Twelfth Conference on Computers, Freedom & Privacy. April 16-19, 2002. San Francisco, CA. For more information: http://www.cfp2002.org/ 2002 IEEE Symposium on Security and Privacy. IEEE and the International Association for Cryptologic Research. May 12-15, 2002. Oakland, CA. For more information: http://www.ieee-security.org/TC/SP02/sp02index.html INET 2002. Internet Society. June 18-21, 2002. Washington, DC. For more information: http://www.isoc.org/inet2002/ ======================================================================= Subscription Information ======================================================================= Subscribe/unsubscribe via Web interface: http://mailman.epic.org/cgi-bin/mailman/listinfo/epic_news Subscribe/unsubscribe via email: To: epic_news-requestat_private Subject line: "subscribe" or "unsubscribe" Back issues are available at: http://www.epic.org/alert/ The EPIC Alert displays best in a fixed-width font, such as Courier. ======================================================================= Privacy Policy ======================================================================= The EPIC Alert mailing list is used only to mail the EPIC Alert and to send notices about EPIC activities. We do not sell, rent or share our mailing list. We also intend to challenge any subpoena or other legal process seeking access to our mailing list. We do not enhance (link to other databases) our mailing list or require your actual name. In the event you wish to subscribe or unsubscribe your email address from this list, please follow the above instructions under "subscription information". Please contact infoat_private if you would like to change your subscription email address, or if you have any other questions. ======================================================================= About EPIC ======================================================================= The Electronic Privacy Information Center is a public interest research center in Washington, DC. It was established in 1994 to focus public attention on emerging privacy issues such as the Clipper Chip, the Digital Telephony proposal, national ID cards, medical record privacy, and the collection and sale of personal information. EPIC publishes the EPIC Alert, pursues Freedom of Information Act litigation, and conducts policy research. For more information, e-mail infoat_private, http://www.epic.org or write EPIC, 1718 Connecticut Ave., NW, Suite 200, Washington, DC 20009. +1 202 483 1140 (tel), +1 202 483 1248 (fax). If you'd like to support the work of the Electronic Privacy Information Center, contributions are welcome and fully tax-deductible. Checks should be made out to "EPIC" and sent to 1718 Connecticut Ave., NW, Suite 200, Washington, DC 20009. Or you can contribute online at: http://www.epic.org/donate/ ======================================================================= Drink coffee, support civil liberties, get a tax deduction, and learn Latin at the same time! Receive a free epic.org "sed quis custodiet ipsos custodes?" coffee mug with donation of $75 or more. ======================================================================= Your contributions will help support Freedom of Information Act and First Amendment litigation, strong and effective advocacy for the right of privacy and efforts to oppose government regulation of encryption and expanding wiretapping powers. Thank you for your support. ---------------------- END EPIC Alert 9.03 ----------------------- .
This archive was generated by hypermail 2b30 : Thu Feb 14 2002 - 00:07:15 PST