Topics
in style
AI
Amazon
Image Credits:Brooks Kraft LLC / Corbis / Getty Images
Apps
Biotech & Health
Climate
Image Credits:Brooks Kraft LLC / Corbis / Getty Images
Cloud Computing
Department of Commerce
Crypto
Enterprise
EVs
Fintech
Fundraising
widget
stake
Government & Policy
ironware
layoff
Media & Entertainment
Meta
Microsoft
privateness
Robotics
Security
Social
Space
inauguration
TikTok
Transportation
Venture
More from TechCrunch
upshot
Startup Battlefield
StrictlyVC
Podcasts
Videos
Partner Content
TechCrunch Brand Studio
Crunchboard
get through Us
Spy agency argues the practice is entirely legal — until a US court says otherwise
The U.S. National Security Agency is buying vast amount of commercially available web browsing information on Americans without a stock warrant , harmonise to the means ’s outgoing theater director .
NSA director Gen. Paul Nakasone disclosed the practice in a letter to Sen. Ron Wyden , a concealment mortarboard and senior Democrat on the Senate Intelligence Committee . Wydenpublished the letteron Thursday .
Nakasone said the NSA purchases “ various types ” of information from datum agent “ for foreign intelligence , cybersecurity , and authorized mission purpose , ” and that some of the information may come from twist “ used outside — and in certain cases , within — the United States . ”
“ NSA does grease one’s palms and apply commercially uncommitted netflow information relate to wholly domestic internet communications and internet communications where one side of the communicating is a U.S. Internet Protocol savoir-faire and the other is locate abroad , ” Nakasone said in the letter .
Netflow records contain non - contented entropy ( also know as metadata ) about the flow and book of internet traffic over a internet , which can reveal where cyberspace connections came from and which servers passed datum to another . Netflow datacan be used to track web bodily function traffic through VPNsand can help identify servers and web used by malicious hackers .
The NSA did not say from which providers it buy commercially available internet record .
In a responding letter of the alphabet to the Office of the Director of National Intelligence ( ODNI ) , which oversees the U.S. intelligence community , Wyden said that this internet metadata “ can be as sore ” as position data sold by datum brokers for its ability to distinguish Americans ’ private online activity .
Join us at TechCrunch Sessions: AI
Exhibit at TechCrunch Sessions: AI
“ Web browsing records can discover sensitive , private info about a person based on where they go on the internet , including visit websites related to genial health resource , resources for survivors of intimate assault or domesticated abuse , or chitchat a telehealth supplier who focalize on birthing control or miscarriage medication , ” said Wydenin a statement .
Wyden read he learned of the NSA ’s domestic internet records collection in March 2021 but was ineffectual to share the entropy publicly until it was declassified . As a member of the Senate Intelligence Committee , Wyden is allowed to receive and read classified materials but can not share them publically . The NSA snarf the restrictions after Wydenput a hold on the nomination of the next NSA conductor , the senator said .
The practice of the U.S. intelligence community of interests buying big sets of commercially available information from private data brokers , while not raw , was onlypublicly disclosed in June 2023 . The ODNI did not expose which U.S. spy agencies were buy the data , or say if it experience . By its own admittance , the ODNI said at the time that commercially purchased data “ clear provides intelligence value , ” but “ raises significant issues related to privacy and polite autonomy . ”
The NSA is not the only U.S. regime means relying on commercially bought data for intelligence information assembly or investigation . late reporting prove the Defense Intelligence Agencybought access to a commercial-grade database containing Americans ’ locating datain 2021 without a warrant . The Internal Revenue Service alsoused fix data point it bought from a information broker to identify suspect , as didthe Department of Homeland Security to track undocumented migrants , without warrants in both slip .
But the use of commercial-grade data point by the U.S. intelligence community raises question about the legality of the practice session , at a time when the NSA isfacing congressional scrutiny of its expiring legal surveillance powersand indirect admonishment from within the Union government .
In his letter to the ODNI , Wyden cited the Federal Trade Commission ’s late enforcement action mechanism against data factor as raise “ serious questions about the legality ” of government authority buy access to Americans ’ data .
originally this month , theFTC banned X - Mode , a prolific data agent that sharedthe location data of Moslem supplicant app users with military contractors , from selling phone location data and say the company to delete the data that it has collect . A week later , the FTC bring similar action against InMarket , another data agent , say the company did not find users ’ explicit consent before collecting their location data , andbanned the datum brokerfrom sell consumers ’ precise fix data .
That puts government departments and agencies that use commercially incur data , like the NSA , in a sound gray space .
When extend to by electronic mail Friday , FTC spokesperson Juliana Gruenwald Henderson say the regulator had no commentary on the NSA ’s use of commercial-grade information .
Government agencies typically have to stop up a court - approved sanction before obtaining secret data on Americans from a phone or a tech company . But U.S. agency have skirted this requirement by arguing they do not need a warrant if the data , like exact locating record or netflow datum , is openly for sale to anyone who wants to buy it — though this effectual theory remains untested in U.S. courts .
For its part , the NSA said in its varsity letter to Wyden that it was “ not aware of any requirement in U.S. law or judicial thought . . . that [ the Department of Defense ] incur a court order for acquire , approach or use information , such as [ commercially usable information ] , that is equally available for purchase to foreign adversaries , U.S. companies and private persons as it is to the U.S. government . ”
Wyden called on the ODNI to go through a insurance policy that only allows U.S. undercover agent agencies to purchase data point about Americans that cope with the FTC ’s monetary standard for legal data sales ; otherwise the agency should delete the datum . Wyden say that if a U.S. undercover agent agency has a specific need to hold the datum , it should at least inform Congress , if not the wide public .
It stay unclear if the NSA also purchases access to location databases , as other federal government bureau have done .
Nakasone said in his letter to Wyden that the NSA does not purchase and use positioning data call for from phone or vehicles “ known to be located in the United States , ” leaving start the interpretation that NSA could acquire commercially available data if it was not know to originate from U.S. devices .
When reached by email , NSA spokesperson Eddie Bennett sustain the NSA collects commercially available internet netflow data , but declined to clear up or point out on Nakasone ’s input .
you’re able to get hold of Zack Whittaker by Signal on +1 646.755.8849 orby email . You also can portion out files and written document with TechCrunch via ourSecureDrop .
US news confirms it buys Americans ’ personal datum
