Transcripts For CSPAN Washington This Week 20141116

Complete deniability. If i was the United States or the iranians i would want to keep it that way. Mark, in your presentation you mentioned that in iraq and the United States and iran are kind of tacitly in alignment supporting the central government, perceived as a broader shiite government. In syria the interests begin to diverge over the future of assad. How do you see that tension playing out over time, particularly when you have u. S. Forces in iraq where you also have iranian forces. Some inadvertent action that run up against each other how do you see these issues getting worked out over time . He makes this intriguing prospect of American Forces in iraq somehow not fighting advisers there are going to be engaged in combat. That is very much a disagreement depending on whether you talk to someone at the pentagon are at the white house. Certainly the chairman of the joint chiefs of staff have indicated that the pentagon envisions they will be working with iraqi forces on the ground, calling in airstrikes. That raises some very interesting prospects for whatever they are doing to beat back isis in iraq. I think the real question that we cant answer at this point is to what extent does the syria what is the ground picture in syria . Ground. It is hard to imagine that he is going to go back on that. But a lot can happen in two years. The question is if there was a military presence in syria, who will they be fighting and to what extent does this issue of a collision course assad remains at the center of the picture. It is in my mind in the reporting ive seen i still havent quite figured out how whatever force that has been trained to be the boots on the ground, what they are going to do, and you they are going to fight, and how that is going to be worked out with either an american presence or the presence of another arab nation. If you can imagine iraq is actually an easier thing to envision in syria, which is a far more complicated prospect. Thank you. Lets open to the floor for questions and comments. If the speakers could please identify themselves. Thank you. It was announced earlier this week that they have agreed to construct eight new Nuclear Reactors in iran. What are the impacts of that announcement . David, you broke the story earlier this week about the possibility of fissile material going to russia, and now this new development that they could build reactors, because one of the issues has been iran this opens the door to the possibility there might be some practical needs for the fuel cycle program. Whats your take . Its an excellent question and i think that the upside of this for the iranians has been were enriching fuel for a set of reactors that do not exist. The russian supply it and will be supplying it through 2021. Now the agreement that was announced was a bit vague. It talked initially about two reactors, the possibility of moving up to eight. We know from our own experience here in the United States, we know from the japanese experience and the European Experience its a lot easier to announce reactors than to build reactors, although it would be interesting to see if a not in my Backyard Movement crops up in iran. That would be an interesting story. It creates a rational of sorts under which the iranians could justify going up to the supreme leaders 190,000 centrifuges as a rational for fueling these when they get built. It takes so long to build them, they would have plenty of time to do this. To that degree it helps. The other side is the iranians are inefficient producers of uranium. If they wanted to do this at a cheaper price they would buy the nuclear fuel on the open market. There is a glut oist, particularly after the japanese closed down so many of their reactors. But there was a glut before that time. And so it doesnt make a lot of sense for the iranians to be producing this inefficiently, shipping it to russia, having it fabricated into this specialty fuel to fuel these reactors. But if, in fact, it is a way of maintaining control and people can see what they are producing, if its regularly leaving the country, we have a high confidence level the russians are doing this correctly, then its a potential solution. And there is no reason that the iranians shouldnt be allowed to produce this assuming there is an understanding about what happens to the spent fuel so it doesnt turn into plutonium fuel. May i add my sympathies about michael. He was a member of our Iran Task Force and very helpful in that regard. To david, how important is it that this declarified are you surprised that obviously nothing would happen until november 24, is it necessary for the findings to be publicized at some point . Could they be kept quietly . Could this be a long process that does not lose face for the iranians who insist they never intended to build Nuclear Weapons . Very good question. This is i think in many ways the toughest issue for the iranians, because if you believe the intelligence, and there is a big if there, prior to 2004 there was something that resembled the manhattan project, if you believe the intelligence and we wont know that until you get that amount of data. There are three levels to answer your question. One is should they have to respond to this because its an i. A. E. A. Investigation and theyve said they would answer the questions. Secondly, and i think for my own personal view and as a reporter not that it makes a difference, if you are going to enforce those norms in the future against other states, i think giving somebody a pass is problematic because then you have to justify it the next time and the time after that. The second question is do you make it public . That adds to the embarrassment question. In a post wickileaks, post snowden world operating with an organization that has 180 some odd members whose own control over information has been bless them, a little bit he has than full. S than its been the mark and david employment act over the years and you too when you were a full time reporter. It is a very important source of information whether they intend to be at times or not, i cant imagine that information would stay secret forever. It boggles the mind to imagine that. And the third question is even if you dont reveal the history, do you want to make sure that the iaea is constantly interviewing the scientists who worked on those programs to make sure they are gainfully employed on something other than a Nuclear Weapons projects. And so far they have not been able to interview any of them and the iranians have made the point when their Scientists Show up in public some place the sticky bomb ends up on the side of their car. They have some good reasons to not want to reveal who their scientists are. We have an overflow room. Let me take a question from there. We talked about the muddle through scenarios. Lets talk about the politics of that both here and in iran. There is an interim deal that pockets whatever progress has been made and opens the door to future negotiations on outstanding issues, how will that play here and potentially there . It would be a delicate balancing act because on one hand youd want to maintain the sanction structure to maintain the pressure on iran but there would have to be something in it for iran to go along with it. And the politics here particularly with the changing congress are complicated on the iranian side. Its the politically loaded question weve discussed it to be. How do you see an interim option sort of playing out if thats the outcome on november 24 . I think this would be tough with congress because a partial deal by necessity will not have a lot of specificity about time lines and sharp measures so you are in the position of lifting some sanctions without complete clarity unless some complete clarity is announced about what the iranians do in return. For them it would be difficult as well because presumably the u. S. Position and the p 5 plus 1 position would be we cant discuss permanent lifting of sanctions until you have a permanent deal. Im not sure they want to live with a temporary lifting of sanctions that could be easily reversed. I dont know how the rest of the region would feel but i think they would be nervous. I think they would be very nervous. Any attempt by iran to read the u. S. Political situation would be quite difficult, like what it means for them, the republican takeover of the senate just as it is for our own political analyst to read the political situation. I think whether iran sees benefit or risk of the new congress, i think that they i think once again it goes to robs point of its important for them to realize the opportunity when they have it. I think well close it there. Ill turn to my colleague, the director of the middle east program for closing remarks. And i should add it was the middle east program that sponsored todays event and we thank holly for that. Thank you. Thank you to our speakers. You couldnt have done a better job. I wish michael had been with us to have shared his views. I know he would have loved the discussions. In the last piece he authored for breaking defense on may 19 of this year, he thought the two sides faced intractable differences and had run into a brick wall. When i read this the next day, i started arguing with him and i told him i think its a mud wall and not a brick wall. And neither i was able to convince him nor he was able to convince me. He was not 100 pessimistic but he was not hopeful about the possibilities of a deal by november 24. He was still a skeptic when rob and i and our colleague saw him shortly before he passed away. He was not interested at all to talk about his health. He was interested in talking about the Nuclear Negotiations and what was happening. Michael was intimately familiar with the details of the negotiations. He was present at almost all the meetings of the negotiators in europe. He knew and had talked to most of the principles. And i remember when he went there to talk to the foreign minister, i argued with him and i said you dont have to go just because he wants to talk to you. He said no, this is an opportunity i dont want to miss. Every time there was a negotiators meeting, he wanted to be there and was there and in the last six, seven months, i tried to talk him out of attending the meeting, especially the one in geneva which i think was his last meeting in july of this year but he went. Im certain if he were still with us he would be finding stories over the weekend. Michael was working on a book on the history of the iran Nuclear Negotiations at the time of his death. He showed me the first 60 pages because i constantly nagged him and i said i want you to show me something. So one day he walked in and gave me 60 pages. And he opened the book with his one and only visit to iran charting the difficult road that lay ahead. And he was hoping to complete the book by december. We at the wilson center, his colleagues will get hold of the manuscript, we will make sure to finish it for him. But book or no book, we at the center, his colleagues, friends and editors will always remember michaels measured insightful observations as the negotiations with iran go forward. So we are very thankful that you are all here. We are very thankful to the family who joined us this afternoon and please join us for a reception which is in the dining room. Thank you. [applause] [captions Copyright National cable satellite corp. 2014] [captioning performed by the national captioning institute, which is responsible for its caption content and accuracy. Visit ncicap. Org] in his weekly address, president obama discusses the Affordable Care acts new open Enrollment Period which began today. U. S. Representative Brad Wenstrup discusses the republican legislative priorities for the lameduck session and the 114th congress. Hi, everybody. Over the past year, more than 10 million americans have gained the Financial Security and peace of mind that comes with health insurance. More than seven Million People enrolled in affordable coverage by visiting healthcare. Gov, or going to the marketplace in their state. On average, theyre paying just 82 a month for coverage. For a lot of people, thats less than a cell phone bill or a cable bill. Insurance companies can no longer deny you coverage just because you have a preexisting condition, and they now have to cover free Preventive Care like checkups and mammograms. If you missed your chance to get covered last year, heres the good news. Starting november 15th, today, you can go online or call 18003182596 and get covered for 2015. And weve spent the last year improving and upgrading healthcare. Gov to make it faster and easier to use. If you already buy insurance through the online marketplace, now is the time to take a look at some new options for next year. You might be able to save more money, or find a plan that fits your familys needs even better than the one youve got now. If you havent signed up for insurance yet, this is your chance. Odds are, youll qualify for tax credits to help you afford it. But this window wont stay open forever. You only have three months to shop for plans, so its worth starting right away. And it might make a big difference for your familys bottom line. Last year, i got an email from a woman named amy williams, in augusta, georgia. She and her husband are selfemployed in the trucking business. For years, they paid about 1,200 a month for their health insurance. Then they checked out healthcare. Gov. They found a plan with coverage they liked, and it was way less expensive. She says that theyve saved around 13,000 on their premiums this year alone. Stories like amys are why we fought so hard to pass the Affordable Care act. To help more families breathe a little easier. In part because this law is working, Health Care Prices have grown at their slowest rate in nearly 50 years. And this year, insurance premiums for families who are covered through an employer grew at a rate tied for the lowest on record. So spread the word. Tell your friends and family members to get covered. Talk to folks in your church or your classroom. Tell them to take a few minutes to check out healthcare. Gov, cuidadodesalud. Gov, or call 18003182596 it can make a big difference in their lives. Let them know that its easy, its affordable, and that they have just three months, starting today, november 15th, to sign up. Together, we can make sure that even more of america gets covered in the year ahead. Thanks, and have a great weekend. Good morning, im dr. Brad wenstrup, and i have the honor of representing ohios second congressional district. In the days since the election, republicans have begun to make good on our vow to honor your trust by focusing first on jobs and the economy. On friday, the house voted to approve the keystone xl pipeline, which will help Lower Energy Costs and get people back to work. We ask president obama and Senate Democrats to finally give this project the green light that the American People have been waiting for. Well also work to pass the hire more heroes act, which will encourage businesses large and small to hire americas veterans the very americans to which we owe our security and freedom. Well take on obamacare and well propose that congress not the bureaucrats has the final say on all new major regulations. This is just a start on getting some important things done in the months ahead. Now, after the election, the president may have said i hear you, but by the looks of things, its just the opposite. On monday, he proposed a new set of rules to regulate of all things the internet, one of the few places innovation has thrived, even in a struggling economy. Then he agreed with the Chinese Government on rules that continue his misguided crusade against affordable, reliable energy. In this economy, we need relief from the epas grip, not more heavyhanded mandates that take away american jobs and squeeze middleclass families. The president also continues to raise the possibility of taking unilateral action on executive amnesty. Weve warned him that such action would make it that much harder to pass Immigration Reform and find common ground. Sadly, theres even more. Weve now come to learn that one of obamacares architects said the law passed because americans were too stupid to know what was happening. This is the same arrogance weve seen time and time again from this administration and its allies. This is insulting to all of us. They say one thing and do another. They spend money we dont have with little to show for it but more debt and broken promises. And they stay off course even when hardworking people are stuck earning less and paying more for just about everything. Americans deserve far better. You deserve a government that doesnt just hear you, but actually listens to you and puts your priorities first that focuses on securing more jobs and a Better Future for our children. Thats what you can expect from the new republican majority. Thank you for listening, and god bless the United States of america. Our takestys t american tv on the road to learn about history. This week and partner with Charter Communications to go to madison, wisconsin. Is probably the most important political figure in Wisconsin History and one of the most important in the history of the 20th century of the United States. He was a reforming governor, he defined what progressive medicine was. He was one of the first to use progressive to self identify. He was a United States senator, who was recognized by his peers and the five great senators in American History. He was opponent of war and war one and stood his ground and stood his ground that advocated for free speech. He was about the people. Ofspent the latter part 1890s giving speeches all over wisconsin. If you what a speaker for your club or group, bob would give the speech. He went to county fairs. He went to every kind of event you could imagine. He built a reputation for himself. Was ready to run for governor and advocating on behalf of the people. We are sitting in the first studio. Ght was born in wisconsin, not too far from here. His family took him to massachusetts for a time. They returned to madison and he growth in madison and spent his teenage years in there. The verysome of briefly, the university of wisconsin. Before he decided to take on that find his fortune in chicago. He decided he should come out to this part of the country which is where her family was. Welsh pioneers spent his summers here. He spent his teenage summers and it is valley. Nd on these hill he got his love of nature and understanding and also his understanding of the topography of these hills. Chris watch all of our events from madison at 2 00 p. M. On American History tv on cspan 3. A Public Meeting on government information gathering and privacy rights. 7 00 a. M. , your calls and comments on washington journal. The oversighty, board held a Public Meeting examining government information gathering programs and privacy rights. The Panel Discussions included government private officials and private sector experts. The Oversight Board is an independent Agency Within the executive branch and was a recommendation of the 9 11 commission. Good morning. It is a 30 a. M. And we are many and the western ballroom and the washington marriott. This hearing was announced on the federal register october 21st. All five Board Members are present and there is the core and will now called the meeting to order. Proceed. What is privacy . The right to be left alone . The desire of personal activity the right to make decisions regarding private matters . States for intellectual developments and anonymity . Freedom from public attention freedom from being observed or disturbed by a others . Freedom from intrusion . Avoiding Public Disclosure about yourself and freedom from publicity which places you in a false light stemming from appropriation of your name or likeness and control how personal information is collected and used and freedom from surveillance. These are a few definitions given to privacy in the past i suspect we will hear others. The meeting today well form the approach to privacy issues of the statutory mandate. The first will focus on defining privacy interest. The second will consider counterterrorism and the path of technology. Next we will hear from Government Regarding to identify and address and the final panel is Lessons Learned from the private sector from the context. Each panelist moderated by a board member who will have the opportunity to pose questions. After words they can submit written and questions. But that is for the moderator to pose to the panelists. Those agreed to be here today we have a strict timekeeper sitting in front so the panelists are encouraged to keep remarks brief so we have a discussion. A lunch break is between 12 and 1 15 p. M. The transcript will be prepared and put on our web site within a week. Comments from the members of public are welcome and may be submitted through the end of the year. Finally thinking of the boards staff, shannon will send, so we will announce the first panel. Thank you. We will attempt to root explore say to defines to privacy but with the societal interest of the notion of privacy. And has remarked privacy is like the cheshire cat. We believe that concept is the mess. Most commentators to agree that there are aspects of privacy that go back to the most ancient civilization trying several Founding Fathers but the concept of privacy is a receptacle for a conglomerate of interest of values and individuals. Switch to varying degrees they are willing to balance with competing values such as National Security. So privacy consist of a situation that courts and legislators or government officials will recognize the privacy interest and to protect or not do that interest against the competing value. They will identify the individuals and the societal interest to discuss how far and under what conditions they should legitimately make claims to the particular interest. The format will be to talk initially seven minutes. [indiscernible] and that end, i will question them for 20 minutes and that is followed by another 20 minutes. Then i hope there is some time left for the written questions that members of the audience are invited to send to the front. You already has biographies of our panelists but i will identify them very briefly. We have the codirector for National Security. Thank you. I apologize in advance because i have a cold. But thanks for letting me participate in todays discussion. There is one thing i have learned with my own involvement is privacy is difficult did you differnt people david gave a comprehensive list. I am not sure what i would add except for those who are outside the mainstream in this country privacy meeting to be the government can be critical says judges religion and freedom and speech associations. We value all of those. So what does that mean for our analysis . It is interesting to think about different definitions of privacy and it is helpful to show the range of definitions that are out there. But congress nor the courts should be in the business of attempting a granular definition of privacy for its importance. Look at the freedom of religion. Courts dont probe what religion is or why it is important not because it is obvious by any means. So what the court does it is a concept of religion that broad enought to encompass many different roles. Information. Coming to information and privacy the best working concept that encompasses all of the important interests that privacy serves is control of the information. This concept avoids the why and thats how. And to the statecontrolled the papers they are secure enough. What are some of the ramifications to control mightily what one shares of with whom the to share with my mother or a close childhood friend but that does not mean i have chosen to share that with the entire world including the nsa. Res a chance my mohter out. R might rat me i did not know about and could be an informant but the Downside Risk that my confidence and misplaced with the disclosures to everyone in the upper rhone is really what the Third Party Doctrine is. Second, you dont relinquish all control over information about your public activities but there is such a thing functionally speaking with the freedom of information act. There is a privacy section that if releasing it was done to a compromise privacy. The Supreme Court held in 1999 a rap sheet is coverage despite the fact that all the information is available by diligent combing of court record so why is that so private . The court held while it was publicly available it was practically obscure. It is such a concept that deserves of komen Fourth Amendment jurisprudence. But it is practically obscure. When the government uses drones or Gps Technology and that is a privacy violation. Violations happen but we have heard with officials that that and is able collection of telephone records because nobody looks at them unless they suspect the government tells you what privacy shed value. Should the point at which the government collects the information is the point at which youve lost control. And for plenty of people that loss of control itself pro deuces harm. Had changed ents heir online behavior ann after disclosures. There was another survey of 520 that one riteers show out of six authors refrained from writing about certain topics because they feared surveillance. After new stories broke about the nypds infiltration, attendance in those associations dropped. In some ways these are some of the worst harms because theyre societywide. They impact the way we function as a society, they imporish our social discourse by causing people to sensor themselves and not put ideas out there. One last ramification of this concept of privacy, if i have time i cant believe i have time is young people. So i hear it said quite often that young people dont care about privacy. And its certainly true that many young people go on facebook and share incredibly personal information with 622 friends, but they dont share that information with 623 friends. What they share and the number of people that they share it with may very well have changed. But they still control the sharing or at least they think they do. And my impression, based on a totally unscientific survey, is that they still value that control. So the red card. I knew it was coming. Ill stop there. Thank you. Professor daniel sole of is the professor of law at the gw George Washington law center. Good morning. I would like to make five brief points this morning. The first point is that privacy is much more than hiding bad secrets. One of the common arguments about the people often make about privacy is that people shouldnt worry if they have nothing to hide. I hear this argument all the time. This argument and many other arguments about privacy are baseed on a conception of privacy a conseppings of privacy that is very narrow, that sees privacy as hiding bad or discredittable things. Well, privacy is much more than that. Privacy isnt just one thing. Its many different things. Privacy involves keeping peoples data secure. It involves the responsible use of data. It involves making sure that when data is kept, its kept accurately. Its making sure that people who keep the data are responsible stewards of that datea. That people have rights in that data. And some parts pation in the way the data is used. All these things have nothing to do with nothing to hide. They have nothing to do with secrets. And everything to do with how eir information is kept, collected, stored, et cetera. I think that as we see privacy broadly we can move away and abandon these very narrowly crafted views of privacy. The second point i would like to make is that society is a societal interest not just an individual one. When ballancing privacy and Security Privacy is auve seen as an individual right and then security is often seen as a social right. When theyre balanced, society generally wins out over the individual. I think this actually skews the balance to the societys side, to the securitys side. But in fact privacy isnt just an individual int rest. It doesnt just affect the individual. Its a societal interest. We protect privacy because we want to protect society. We want to shape the kind of society we want to live in. Privacy doesnt just protect the individual for the individuals sake. It protects the individual for the societys sake, because we want a free society where people are free to think and eak without worrying about negative cons quenses from that. The third point i would like to make is that the collection of personal data negative cons quenses from that. The third point i would like to make is that the collection of personal data through surveillance and other means of government information gathering can cause significant problems. Data collection and surveillance arent inherently bad. But just as industrial activity causes pollution, government surveillance and data gathering can cause problems. And these problems must be milt appear. N they some of the problems include, show peoples exploration of ideas, it can chill people in many different ways. Either they might not Say Something or they might Say Something differently or do things differently. And we dont want that chilling when it comes to legal act tivity. The other thing the other problem is that surveillance gives a lot of power to the watchers. Theres a lot that can be done with a vast repository of data beyond a particular aim that it might have been collected for. Data has a way of often being used in other manners, in other ways. I think that another issue, too, is the level of countability and oversight that goes into this, because its about the structure of our government and the relation of the government to the people that were talking about here. What kind of accountability will the government have when it gathers all this information . What limits will there be on the information gathered and used . How long will the information be kept . In a free society, people are free to act as they want to act as long as its within the bounds of the law without having to justify themselves. You dont have to go and explain their actions to a bureaucrat sitting in a room full of television monitors about what theyre doing. They dont have to go and explain themselves when a computers lights are blinking red because of something that they said and it could be misinterpreted. People dont have to worry about that. They can act freely without having to worry about how su spishes their actions might look. That is a key component to freedom. The fourth point i would like to make is that we cant adequately balance privacy and security without a reasonable amount of transparency. Theres an over arching principle that this nation was founded upon. It is that we the people are the boss, the government is our agent. We cant evaluate what government officials are doing if we dont know whats going on. Now, this doesnt mean there should be absolute transparency but it does mean that we need to know something enough to be able to evaluate government surveillance. Because ultimately the choice about the proper level of surveillance isnt the nsas to make. Its not the president s to make. Its the peoples choice. We cant forget that. Its the peoples choice. And the people must be given sufficient information to make that choice. My last point is that the government must get buyin from the people for its surveillance measures. Without buyin people are going to start to take selfhelp measures which is something that we see happening now. Companies are providing people with ways to encrypt their data , to protect it from snooping government entities. This is the market speaking. This is something that people want. This is something being sold to people. People are going to buy. Theres something in demand. Why . Why are people demanding this . Because they have lost trust. Because the laws regulating government surveillance are weak and do not provide adequate oversight or accountability. This is why strong privacy protections arent necessarily bad for security. Ensure that the people are comfortable, that there is adequate oversight and accountability for that surveillance, and that theyre comfortable and know that they have the information that they need to continually evaluate whats going on. And if they can evaluate whats going on and buy into whats going on, things will be a lot better when it comes to balancing privacy and security. Thank you. Paul is the founder of the Red Branch Consulting program and a Senior Adviser to the chertoff group. And he was formerly Deputy Assistant secretary for policy at the department of Homeland Security. Thank you i appreciate the opportunity to speak with you today. It is really entirle appropriate for the board to begin a discussion of privacy in this new technological age. In fact, in my judgement its essential. And the reason for that is essentially one that puts me in some disagreement with my fellow panelists. I think that our conceptions of privacy founded as they were ck in the 1907s with the fifth are somewhat outdated and dont survive the technological challenge that is we face. The 1973 thunder byrd was a marvelous car but we would not ld it out today as the state of innovation and we would not think today of the fips as privacy. What would that look like . Ways to answer that question and i think to by r it you have to begin thinking about what sort of value privacy is. And here again i think i find yself in some disagreement with other members on the panel and perhaps with members of the board ifment do not think that privacy is an aunt logical val u. I dont think its akin to religion. Its not an inherent human right or the product of natural law. In my judgment its an instrumental value, one that acts in the service of other societal values. Its ue till taryn value that derives its worth as it fosters other positive social gains. Privacy for its own sake is just an assertion as an autonomy from society. It is a valuable if insofar as it advances other objectives. Now, let me kind of put some salt on that. Buried in is that the word privacy are many different social values that were fostering, too many to eally catalog though the a good job of trying to start. For example, we often see and the discussion here privacy is enhancing our freedom from government observation. Thats probably the use thats salient to what the board does. But it also enables democracy. Thats why we keep the ballot private. It fosters personal morality. Why we keep the confessional private. Privacy is also about restraining government misbehavior which is why we see privacy values in the Fourth Amendment and other procedural limitations on Government Action. Another way in which privacy is obviously relevant to this board. And its also as dan said sometimes about transparencey in the sense that we have privacy roles so that i know what you know about me. It can be about control, about control of my own image and its also sometimes about simply shame. Since one ground of privacy is enabling me to keep from the world thing that is im not proud i did, of which there are too many i fear. Whats important to note is that in all these instances the value that were protecting that underlies privacy is different from the privacy itself. And that in turn suggests to me that the way to think about privacy is to think about what operational activities would protect the underlieing value most. It means we need to go to a microlevel to understand in general the nuance that arises from the particular interests that is at the core of the privacy that were talking about. For example, we protect the confidentiality of Attorney Client communeications. Why . Because we think we need to foster candor in the discussion between a client and an attorney. Thats something that we feel so strongly about that the instances in which we permit that privacy to be violated are few and far between and they come only with the highest level of judicial scrutiny. The Fourth Amendment itself reflects a similar ue till taryn value of the security of our persons places and things against intrusion. Once again, we impose a high bar of probable cause requirement and a strong independent outside adjudicator, a judge issueing a warrant. But those arent the only mechanisms by which we can protect privacy. We have a series of administrative processes that are often adequate to protect and restrain government obs vasion. Theyre embedd in many of the internal reviews that are very common in the ic in the Intelligence Community that you spend your time reviewing, theyre common in virtually every institution of government that we have at least at the federal level that im familiar with where we think that administrative review internal oversights inspectors general, Intelligence Committee oversight are adequate alternate administrative mechanisms. So what does that mean for some of the things that you think about . Let me look at the two programs that youve written about and just kind of express something there. The 215 program is one that directly impacts issues of government abuse or potential abuse because of the pervasiveness of the collection that underwent, that was there. It strikes me that that sort of pervasive collection is one that would require a strong independent review meckism because of the comprehensiveness of its activity. By contrast, the 702 program would which seems from what i read from the outside from your reports more narrowly focused is one in which less error correction mechanisms are necessary, less likelihood of advertent abuse is there, so those if you press on what is being protected you get a sense of beater way to protect it. Let me say one brief word about transparency. Completely agree with others on the panel that transparency is necessary to control misconduct. But the critical question is what type. Nd this requires even when were not disclosing information explicitly, more and more of what we do on line and off is recorded. An on Line Services often attach unique identifiers to recordings which is used to link them up again later. The second stage merges the datea. If two files can be determined to correspond to the same person, for example because they both contain the same unique identifier, then those files can be merged. And merging can create an avalanche effect because merged files convey more precise information about identity and behavior and that allows further merging. Merging those files links behavior and identity together. The third stage of the pipeline uses big data methods such as predictive analytics. E famous example is when stores use sales of an item. Inferences can have an avalanche effect because each inference becomes another data point to be used in making further inferences. Predictive analystics are most effective when many positive and negative examples are available. Target used many examples of both pregnant and nonpregnant women to build its predictive model. R example, that terrorists would have much less success because there are few examples of known terrorists in the population. Let me discuss a few implications for privacy. First, the consequences of collecting a data item can be very difficult to predict even if an item on its face doesnt seem to be conveying information and even if the contents seem harmless the collection could have substantial downstream effects. We have to account for the mosaic effect in which isolated seemingly isolated information combines to create a picture. The power of the mosaic effect. To understand what follows from collecting an eyes m we have to hink about how that item can be merged with other available data and how the merged data can be used to determine information about people. The information that the holder of a certain loyalty card account number purchased skin lotion on a certain date might turn out to be the key fact that unlocks an infrens that a particular identifiable woman is pregnant. Similarly, phone call meta data when collected and analyzed has been shown to enable predictions about social status affiliation Employment Health and personality. The second implication is the data handling systems have gotten much more scomplicate especially in the merging and analysis phases, that is after collection. The sheer complexity of these systems makes it very difficult to understand to predict and to control how they behave. Even the people who build and run these systems often fail to understand fully how they work in practice. And this leads to unpleasant surprises such as compliance failures or data breaches. Complexity frustrates oversight, it frustrates compliance and it makes failure more like lifment despite all best intentions orgizations can often find themselves out of compliance with their own polls sizz and obligations. Complex systemless often fail to perform as desired. Complex rules also make compliance more difficult. Its sometimes argued that we should abandon controls and focus only on use. Collection limits have important advantages, too. For example, its easier to comply with the rule that limits collection than one that allows collection and then puts elaborate limits on usage afterwards. And collection limits make oversight and enforcement easier. Limit and collection can also nudge agencies to develop innovative approaches while collecting less information. The third implication is the synergy between commercial and Government Data practices. As an example commercial put unique identifiers website accesses. And evesdropper collecting traffic can use these identifiers to link the users activity across different time and online sites and an evesdropper can use those identifying information. Even if the user switches locations and devices as many users do, an evesdropper can econstruct 60 to 75 of what a user does on line and can link that to a users identity. Final point is that Technology Offers many options beyond the most obvious in the data, ll then analyze and ng it later. And here i think pauls analogy a the 1973 thunder byrd is good one. We would no longer accept the that were nologies available on that vehicle. Owadays we expect air bags, we expect ant lock brakes we expect crumple zones, we expect the latest technology to reduce risk. And we should ask the same when it comes to privacy. We should ask agencies to use advanced technologies to limit how much information to collect, theres a large and growing literature on privacy preserving Data Analysis and methods. Determining whether collection of particular data is truly necessary, whether Data Retention is truly needed and what can be referred, these are deeply technical questions. In the same way that the board asks probing legal and policy questions of the agencies many independent technical experts in groups are able and willing to help you build this capacity. Hank you for your time and i look forward to your questions. Thank you. Ok. For the next 20 minutes or so m going to pose some questions to the members of the panel and i will pose them to a then if r member but ne of the other members have something very cogent everything you say is cogent feel free to contribute. Let me start with you. Our constitution enshrined certain aspects of privacy in the fourth eafment security of ones home and papers from unreasonable search and seizure and protections from general warrants. But are there other aspects of privacy that the Advocacy Community leads toward legal recognition and judicial oversight or can they all be encompassed within the bounds of the constitutional guarantee . Sure. And if so, what are the ones you think ought to be specifically recognized, protected . Sure. To start with i suppose the obvious. The Fourth Amendment applies only to the government. Its a restriction on the government. Its not a restriction on private parties. And irning theres absolutely a place for private entities and how they control, acquire and control peoples information, because the market doesnt always do a great job of many things and although it does a great job of other things. But we certainly know that people are not 100 satisfied with the privacy protections that have been provided by the private sector and that falls outside the Fourth Amendment but is deserving of regulation. Ber you go on. Theres another question but it leads directly from this. We hear an awful lot about the commercial acquisition of so much personal information and what they do with it and in fact the argument is sometimes made, look, dont worry so much about the government. Some of the private google, some of the communications, the internet have great masses of data. Do you think that theres any significant difference in the risk to privacy that are displayed by the holdings of so much personal information by the government as opposed to private entities . Or is it like too big sflr i do think theres a difference. I think the difference may be getting smaller but i think there is a difference. Private companies do not have the same coercive power over the individual that the government has. And private companies and private entities dont have the same moat vasions for to persecute people based on ideology or religion. These are things that we have seen in the history of this country, unfortunately. We have seen people targeted because for surveillance because they were political enemies of the ranging administration. So what i would say is that private entities have neither the ability nor the motive to throw people in jail on pretext because they are politically opposed to the current administration. That said, i think companies the line between Big Companies in this country and governance is getting thiner and thinner, and certainly Companies Might axes to political with respect to the workforce and they certainly have acsess to peoples information. I am not in the least bit unconcerned with the private accumulation of information but i remain more concerned with privacy visavis the government. Now, you wrote in something in an article called conceptualizing privacy. You went into a little bit in your private remarks. There are 16 kinds of act tivities that represent privacy risk. Privacy itself has six aspects and theyre all defined too broadly or theyre all defined too narrowly. So you concluded, if i read it correctly, that we should concentrate on specific types of disruptions to those interests. And what should be done about that. Can you apply that kind of framework to the kinds of collections protection that we need in National Security data and Surveillance Programs in collection processing, identification, secondary use, all of the other thing that is you talked about in your article . Yes. Actually, in what i wrote, i talked about privesy not being just one thing and having a common denominator but being a pool of common characteristics and actually applying to what i laid out was a tax on my of privacy about various types of problems and i wanteded to focus on the problems or areas where certain activities cause disruption. They have caused problems and we want to mitigate those problems and what are those problems because thats where we want to step in and say, hey , we should address these problems. It doesnt mean that the activity that is cause them are bad. But it does mean that they do cause the problems we need to address. Some of these problems that relate to Government Data gathering include, one, is aggregation, that you can take a lot of different pieces of data each one being particularly innocuous, not really saying a whole lot about somebody, but when you combine them you can learn new facts about somebody. This is what data mining is about. The whole become greater than the parts. It starts to create a mosaic, a portrapet of somebody. This leads to the revelation of information that someone might not have expected or wanted when they gave out little pieces of information here and there. And i think this causes a problem. It disrupteds peoples privacy expectations. It can lead to knowledge of information that people dont want exposed. Or that Society Might not want exposed. And so i think we need to address that problem and oftentimes conceptions of privacy will ignore aggregation because theyll say well the information all were different facts that were gathered from Public Information theres no privacy. But i dont think thats true. I think we really want to look at what the problems are. If we look at the problems, theres a problem here. Another aspect is a problem i call exclusion, which is the fact that people lack an ability in a lot of cases to have any say in how that information might be used against them. Any rights to correct that information or to make sure that its accurate. Thats a key component of a lot of privacy laws is a right for people to make sure that proper decisions are being made about them based on information. I cant go through all 16. I can hit some others. One is identification, the fact that this involves linking a body of data, what i call didgetal dose yea to a particular individual by identifying them you actually are connecting them to data that then can be used to make decisions about their lives. Some decisions could be good. But some decisions could in fact be harmful to an individual. Security is another issue that i see as related and part of my tax on my of privacy and its keeping data secure. And when data isnt kept secure it creates risks and vulnerabilities to people that could expose them to a lot of harm if in fact the data is leaked improperly. And that happens all the time. And were all at risk when all this data is gathered together in a big repository. There are a lot of other things but i will stop here because in the interest of time. But these are just some of the ways that the tax onmi addresses this problem. I think its important to think of the overarching point is dont start with some platonic concept of privacy and see what fits in it and what doesnt. I think its better to look at things from the bottom up and say where are the problems here. What are the problems and harms that are caused by these activities and how do we address those harms . If i could make a brief comment. I would agree with everything that dan said but i would also say also look at what the benefits are. The president s report on big data looked at the increase in the volume velocity and variety of data and championed the idea that largescale Data Collection creates sarin dip tuss knowledge that is of value. So it brings harm but it also brings with it benefits. And thats why i see it as kind of a costbenefit ue till taryn analysis. Ok. Go ahead. One thing quickly. It is a human right. Its listen in the declaration of human rights, in other treaties and protocols that the United States has signed and have the force of customary international law. So whatever ones personal feelings about that i dont think this board has the tude to decide that its not all these treaties we signed declaring it as a human rights are void. Defining whats included in that human rights is one of our problems. One small point. That is i think i totally agree about the benefits of big data and the use of these things but i think often the balance is wrongly cast between the benefits and lets weigh it against the harms. Because protecting privacy doesnt mean getting rid of big data or not engaging in surveillance or not doing the search. Fourth amendment allows searches and surveillance. It just rishese certain oversight. So we need to look at is not all the benefits of big data against privacy. We need to look at to what extent to oversight, accountability, and these protections on it to what extent do they diminish these benefits . And that is what gets put on the scale against privacy not all of big datas benefits. And i think if we weigh that appropriately, then i think we get a better balance. All right. Very briefly. We dont get to weigh these things denoveo when it comes to the Fourth Amendment. Struck. Nce has been the government cant say we do searches. We dont have a wasnt but we have a good reason. That ballance is struck by the drafters of the Fourth Amendment. In a vast majority of cases there are exception bus you need a wasnt based on probable cause of criminal activity to do those searches. This is not starting from scratch. Let me your approach, and you talked a little bit about this. Your approach for balancing privacy and National Security has i think been termed instrumental or consequential. But in one of your articles you talked about, you thought limiting the right of somebody to complain or to go to court et cetera to intervening on the basis of when they are suffering a tangible harm like a wasnt or being called before the grand jury as opposed to professor sole as of views of privacy as a kind of foundational value recognizeable in its own rights. Yet you also recognize in some of your other works the significance of some aspects of privacy to a Democratic Society now all of you have talked about it isnt just an individual right, its a right that an open society needs. Starting with even the necessity for people developing their personalities in an atmosphere in which they feel free to experiment a little bit to have relationships, to talk without feeling theyre constantly being judged by the government or society. Im wondering how you reconcile your rec nigs of the aspects of privacy that are necessary to a democratic open society with this notion that we really shouldnt start intervening until somebody is suffering some tangible harm. Thank you for the question. I think that the i dont see them as irreconcilable because i see the question about the adversity of cons quens and the error correction mechanisms as critical to the first part of your question, the inhernsy of the value. To see that i sort of sometimes use a thought experiment, which is what if in some hypothetical world, which i assure you does not exist, the government never abused anybody, never actually misused the data that was collected, never went after lists of enemies, no persecution, and never made a mistake. Now, granted thats an mpossible standard but if that were the instance, then in the long run the values that underlie the Democratic Values would be supported and people would no longer fear the collection because the lack of adverse consequence or the by hypothesis 100 would have gone away. So to my mind the way to support the value that is we see in the underlying democratic sphere is to build the error correction mechanisms, the audits, the oversights, this board into the ocess that in a way that reassures society as much as possible that were driving down the errors of and frankly both types, the false positives and the false negatives. But this board is principally concerned with the false pozz tist. Driving down the errors as much as we humanly can. We dont eliminate programs because every program, every human endeavor has the possibility of error. We arm Police Officers even though we know they can sometimes misuse their weapons. We try to drive down the error rate as much as possible so we engender peoples confidence in the police. We see sadly these days exactly what happens when peoples confidence in police is not maintained that our error correction mechanisms are deemed by society inadequate. And i think were sort of seeing some of the same thing in response to the snowden disclosures as well. But that suggests to me that the right way to support the underlying values is to go back and think about how to fix the error correction mess mechanisms. That me pursue one thing you brought up earlier, and that is which has come up up in some of our past reports and is bound to come up in future ones, i think. And that is at what stages or if you would go into more about the point in which urning an independent review of decisions outside of the governments internal auditting and processing are necessary to ensure that you have this kind of trust by the people that government is not takic risks through its privacy . And in terms of what you yourself suggested the history has got some lessons for us on the trust us aspect. Well, i certainly dont dispute that weve had failures in the past. Ybody who would dispute that hasnt read history. I would say that theres no one size fits all answer. It really depends on the harms involved and with a you antiss pate the failure mode would be. Two examples. N the one side we have the current tsa inspection programs at the airport. Probably fairly significant error rate of false positives pulling people aside for secondary inspection. On the other hand, a comparatively modest intrusion. And i say that knowing that many people think its a very large intrusion but nonetheless comparatively modest compared to the coercive nature of being put in jail, for example. So in that instance we seem reasonably happy with a principally administrative meth oddology that doesnt require any outside check because individual liberty is not at issue, longterm confinement is not at issue, the degree of harm is small. By contrast, you will infer that i certainly think that is essential view whenever peoples liberty is at stake, when significant aspects of livelihood are at stake. I think one of the strangest things i see is that we seem to get all wrapped up about things like the tsa screening and we dont look at how Government Data bases are used to deny employment to people. You cant get a job in the Transportation Industry with a record even if the record is itself rife with error because of the transportation work right. So i think we have it backwards a little. And that would be an instance where an independent review of some sort for somebody who is denied employment in the Nuclear Industry or the transtakes industry would be right. So putting that in this context i certainly think that any time there is an adverse consequence to an individual that we get to oint where theres a room for a scombrirble intervention, an independent intervention. Thats why i sort of like what the president has done in adding the reasonable art clabble suspicion trigger to the querying of the 215 data base because thats the point at which some individual becomes out of the mass pulled out for individual wutted scrutiny and thats the point in which he begins to at least suffer the risk of adverse consequences. So i like that as a transition point. Mr. If he woulden, youve for about independencey institutions including the government to build ever larger data bases and then to aggregate them. And i think youve said either today or in some of your writings that there are inherent risks to privacy interest when the data bases get larger and larger and gate ially when they ag thells them. So i guess my basic question to you is, what are the principles that what are the principles that you recommend as a protecting rt for privacy in the and the increasing use of technology in this field . All along the way from collection, aggregation, whatever you think . If somebody wanted to design a ystem in broad concepts that maximize privacy but took adequate concerns for security . What would they look to . Sure. Well, i think the first prince would be to try to look beyond the most brute force technical approach, which is collect all the data that might turn out to be useful and retain it all in a single Large Data Center for as long as you can. The more data you have, the more you collect. The greater the adverse consequences could be the greater the risk and the more of a target it is either for abuse or for breach. So the first principle is to try to fit the practices to the specific need to think in terms of what kind of analysis it is that one that you know you need to do and figure out which data you can collect and how you can structure a system in a that analysis while collecting less data, holding the data more separately, and preprocessing or minimizing the data first. And theres a growing array of Technical Methods that can do this. Nfortunately, this becomes a technical problem. So the key principle here is just simply to insist that that Technical Work be done to try to architect the system to mum of and hold a min data. Who should do that . The government or private industry . In my view, if say a if a Government Agency wants to argue that they have a need to collect and use certain data there should be some onus on them to justify the technical practices theyre using to justify the amount of data collected, the way theyre organizing it and so on, that those who would argue for a collection and use of data should be prepared to discuss these issues and offer a technical justification. When it comes to private parties, thats a more complicated discussion. Think that the best practice in industry ought to be to do that as well. Although obviously the legal and Market Mechanisms that drive that relationship are very different. My last question im going to throw out and you can all take a whack at it if you want to. But several of you, and i think you especially have talked about the element of control of information as being so essential. But then some other people have written in the field have said well that certainly cant be an absolute value. Theres got to be balance. We wouldnt be able to have any kind of National Security programs if indeed everybody said well, im keeping control over that piece of information. I dont want anybody to have it. So how do you what kinds of principles would you apply . Because i assume you recognize that some balance and even as paul pointed out that even in the Fourth Amendment theres an unreasonable clause which gives you a kind of balancing if you will crumb to talk about. How would you handle that . And then everybody can take a whack at it. And then my panelists will take some more whacks. So as i said before, i think n the vast majority of circumstances, the way it should be anyway, the drafters of the Fourth Amendment did that balancing for us and gave us what the government had to do to override the privacy right, and that is to show probable cause of criminal activity. There are some very narrow exceptions that the Supreme Court has recognized some of which are controversial, some of which are not. And again, so were not starting from scratch. We have to follow the Supreme Court case lau here and we cant just say i think this particular search was reasonable even though there wasnt a wasnt. If it doesnt fall within a delineated exception, you have to get a wasnt based on probable cause. Within those there is room for balanceing. What i would say about that is first of all the courts do their balancing when they do a review but congress has a role as well. And when congress does the balancing, on behalf of the people, i would agree with what i believe dan said, which is this is a choice for the public to make. This needs to be a public choice and an informed choice, not a choice made in secret by a small number of officials but by the public because this is a democracy. So we need to have the information about what the Security Threat is, how that threat could be mitigate bid the collection of this information, and what exactly is going to be the effect on either side. The other quick point i would make is that in balancing tests, National Security is too often a trump card. The words are uttered and were done. The kateo from institute made an excellent point. When you look at how courts weigh National Security against s rights. Dual you need to address National Security at large and weigh writ large against the value that privacy serves in our society. When you think about it that way National Security shouldnt be a trump card. If we talk about these values as being in competition. I think the evidence for the most part shows that targeted surveillance is more effective than dragnet surveillance. But when they are in conflict there needs to be a fair and public balancing. Thank you. Ill let everybody have a shot at this. So you can go down the line. Thanks. I think in thinking about these issues of control, its important to recognize the ways reassert eople try to control even if they dont have it legally. And im referring specifically to technical selfhelp measures that people use to try to limit the flows of information, to try to obfuse kate identity and behavior as well as strategic behavior in which people avoid doing certain things or deliberatively do certain things in order to present a different kind of image to whatever it is they worry is looking at their data. And these things have substantial cost. If youre going to do a balancing like paul was talking about, i think you need to take into account the ways in which resources are spent and sometimes really wasted in a kind of arms race between selfhelp and strategic behavior on the one hand and attempts to overcome that on the other side. And those costs can often be substantial. Just ask any teen ager about their on line use and what you will hear in privatesy what you will hear is an elaborate story about technical Counter Measures and strategic behavior. Paul. I think your point is generally well taken, which is to say that fundamentally the notion of control is at odds with government collection information, whether its for the purpose of imposeing a tax under the i. R. S. Or Law Enforcement or National Security. That doesnt mean that its not an important value. It is one that many would advance and i see no reason to discount that at all. But in some ways if you advance that as the touch stone of what you mean by privacy, youre setting privacy in opposition to effective Government Action in a heast of areas where people might reasonably want to control. Im sitting here as a republican on the panel thinking of all the friends i have who are Second Amendment people who think that the government should not collect any information about their gun ownership and thats a perfectly reasonable position for them to have. Its not one that we currently accept as a society. And the last point i would make, which is just in response to shes mentioned it twice. But when i was last in government, the percentage of searches that were conducted without warrents was actually quite high on the order of 50 . Now, i dont know if thats changeed much because its been a while since ive been a prosecutor, but many if not most of our typical interactions with Law Enforcement are adjudicated on an expost reasonableness standard wrather than an ex ante wasnt standard. I dont actually have the datea so i cant say more but i certainly seem to recall that its always a pree, as opposed to a post, activity review. The last one. A few quick points. Even if you cant always give people a totele control there are certain partial things you can give people for control. Its er thing is that not just people being in control. Its that the uses and gathering of the information is under control. Thats another important thing bout that is appropriate oversight and accountability and controls on that gathering, too. On the Fourth Amendment, i think that it would be wrong just to track existing Supreme Court interpretations of the Fourth Amendment which i think are a lot of times laud in a lot of cases. I think there are a lot of exceptions to the wasnt requirement, a lot of instances where the Fourth Amendment doesnt even get applied at all because the court has this platonic conception of privacy that is incredibly narrow and thats how we get a lot of bodies of Fourth Amendment law that often take the Fourth Amendment away from any kind of approach. The Fourth Amendment is i think a ue till taryn balancing. It says baseically the right to be secure against unreasonable s and seizures. And it actually doesnt say privacy it says a right to be secure against unreasonable searches and seizures. I think that means that any time the government is engaging in searchs and surveillance and gathering information, that it is unreasonable if it is creating problems that are not adequately dealt with the right amount of oversight and account ability. And thats really what the Fourth Amendment is trying to ex pose there, a justification to gatsdzer information, such as a wasnt and probable cause, or appropriate oversight to make sure that an independence nt judicial body looks at what the government wants to do and eval wuts it. I think its very important that we conduct the balance between privacy and security appropriately. Im not a privacy absoluteist. I think there should be a banls. But i think its very important that when we balance, we balance it correctly and not incorrectly and that we dont skew the balance too much to the Security Side by overweighing the security interests because its not the entire security interest on the scale. Its the marginal difference between a security interest without certain kinds of oversight and accountability and the security interest with oversight and accountability. And i think all branches should be playing a role and have a role to play in this. Congress in the 1970s had the Church Committee which did an extensive review of intelligence agencies, produced a very elume gnative public report about that. Congress hasnt done anything quite like that since. I think it should. I think the judiciary has a role to play. Has a role to dy play. Think the people ultimately this, re the key to all they have a role to play. Thank you. Were now going to have 20 minutes of questioning from my fellow Board Members. I think i will start with the chair and then well thank you. Liza raised a question about the proper standard for privacy and referenced the katz. And how some ways people rely on practical obscurity because the government is too complex or burdensome to gather information. Some ways in a computer age were beyond that which is the court file gathering dust now is easily accessible and public. The question is how should we look at privacy issues when public data bases are so readily available and theres also a reference to the fact that the line between government and demerble data bases isnt always great and the government can Access Commercial data bases . How do we look at privacy when the information is out there is publicly available but yet as ed pointed out you combine it into a mosaic and it can create a very detailed profile . And should the government be collecting that information . So what standard should we apply in this context . Whats the katz 2014 version as far as how the government ought to recognize privacy issues . Whoever wants to tick it. Take it. I might note that timewise were going to have about five minutes. And if you could give us so if you could keep your answers or your comments relatively brief well make sure everybody gets the full component of time. I think that right now whats been known as the mosaic theory that we see in the concurrent the concurrences to the jones case in the Supreme Court are starting to look at this very, very question. I cant really answer it in a few seconds but i think its to look at when we combine various pieces of date ave what are the implications of that and when does the combining of that data reveal new information that can create certain problems and harms to people . And thats where we want to step in. I would make two quick points. The first is of course that practical obscurity is itself sort of a post industrial concept. If you were in a medeival village back in the 1200s, there was no practical obscurity. You were limited to who you knew and they knew everything about you pretty much. That the data abrogation system was the coffee clutch where everybody talked to each other. So in order in advancing practical security were advancing a value that we tend to value more now. I think dans exactly right. The missouri ache is real. It gsh to deni that is the most likely points of intervention are at the collection or aggregation or the use of the aggregated data. You cant do it at collection databases are there. They are so vague it is impossible to stop unless youre going to keep google from collecting. We are going to have a Data Collection. Just a quick note, i remember agree with most of what has been said. Is tor way to look at it say the information that is being gathered and the using normal powers of observation would be in someones control. That the point of collection is a moot point. The mere fact that google has all of this information and facebook has all of this information does not mean the government has all this information. There are new Tech Knowledge hes technologies. There are still plenty of room to regulate at the collection point. I will be very brief as well. The other what panelists have said, i would point out that much of the information of that is in corporate databases is information that was observed rather than disclosed. Consent. Not always it is very thin from the person who the data is about. I dont think you can always in further there was an awareness. You cant inferred that information is in a corporate database. Might not know it was going to the government and used for government purposes. Should government not collect data under the circumstances . I hesitate to make a legal opinion here, not being a lawyer. Thats why youre here. I get very nervous when there is a legal fiction that something has happened when it is clearly not happening. A fiction of consent or that the mosaic exists are troubling. Thank you for being here. Going back to this notion of you went to the Fourth Amendment concept. I am interested in whether the notion of control that is embodied in the individual per dissipation concept can apply in the National Security context. Noted that individuals might not consent to being observed. If that was the standard, then you could that have Surveillance Programs. The fifth is on top of whatever the fourth baseline is. Allthis notion of apply at in the National Security context . I think it can apply. Because i am thinking of some of the premises of the question. It is not the case that people dont consent to the disclosure their information. The government can obtain your information with a want based on probable cause. We are layering on top of the Fourth Amendment. The reason i ask is if the nsa publishes a report on targeted Data Collection, they said they were applying. What i am wondering is if the fifth is not the right framework to apply in this context. This is individual per dissipation. Individual participation. I would like to think about that question. I want to think about it a little bit more and it put it in writing along with my testimony. I have a thought on it. I think the fifths model has some flaws to it. People dont read the privacy policies of companies in most cases. Ist providing a notice effective. We need to think about what works in this context. Cases wes in certain might want individuals to play a greater role. I think if you are on the tsa nofly list, you should have a right to be heard. There should be redress and challenging being on that list. I think some of the fifths make a lot of sense. Security makes sense. Other ones might not. I think the larger component of all this is there is adequate it is not really feasible under our certain things. Theres greater transparency. There is a public accountability and a generalized disclosure about what is going on. I thought that the acknowledgment in the nsa report that some of the phipps principles could not be implemented in the context of a National Security Surveillance Program was an accurate acknowledgment of reality. You cant provide error correction notice in all circumstances. I was talking about the secondary screening in the nofly list. You is going for to be tried figure it what the underlying values are and how to get at those in this context. I think the underlying value is prevention of a governmental abuse, that is what animates everybody in this sphere. The types of accountability and transparency that you have to help build our ones that match the operational needs of the Security System while providing protections. We tried that with the Intelligence Committees in the post Church Commission modifications of. We might call that delegated transparency. We trust the congress to do it right. We are less willing to do that now. I am not so certain that is a good impulse. Board, maybe it is the Judicial Panel with a cleared advocate in front of it. There are a lot of mechanisms that of the transparency could be imagined that would achieve the objective of controlling against governmental abuse and misuse while not completing completely frustrating the necessities that i think we see as remaining very and. We are thinking about what the use Case Scenarios are in building and enhanced ribas he protections on a technological level. You can have as much of your cake and still get to eat some of it. To the extent that a particular principle from the phipps might be difficult or impossible to apply in this setting, it seems there should be a greater obligation to further the goals of that principle. If you cant offer the right to control or correct errors in the could imagine asking for greater effort to ensure the correctness of the data as it is for extra safeguards regarding the possibility of error. Thank you. . Any thoughts very briefly. Agree. Ink i would what i am struggling with is how much are we giving up on this collection, which im not quite willing to do. Ofgo back to the issue surveillance and controlling information. I still want to go back. This is something ive not thought about enough. And look moreack carefully. It sounds to me like the best approach. We will be glad to. I want to remind the audience that if you have any questions, write them down. If they will bring them up to me and i will ok. Theyre coming. Thank you all for this forum. I was struck by the mosaic theory. We are transparent in seemingly this great way and are adversaries are trying to get information. Establishment would argue that the mosaic theory is in need to understand it to understand collection. To understand exactly exactly how the apparatus works. Be able too aggregate information. You can agree or disagree, but i was struck by the different applications of mosaic theory. I want to start with you, professor. I was interested in your notion of moving away from the brute force collection mechanism. Is one whereon 215 the government has made the argument that they need the brute force collection and the retention in order to identify previously unknown things. Have you given thoughts to whether there are technological . Ptions available can you be more specific about collection options . With respect to the section it, it is collected by the phone companies initially. If thes a question information needs to be transferred in bulk to the Intelligence Community. It is clear that as a technical matter, the kinds of linking and the intelligence agencies want to do can be done technically while the information is still held by a third party such as the phone company. Requires a modest amount of technical coordination. To reach in and extract the data , that is the kind of thing we can be done. There is further work that is more technical that goes to questions of advanced cryptography to allow the same analysis. Those sorts of methods are developing. There is some interest in the technical problem of how to do this in the independent Research Community in light of what we learned about publicly section 215 programs. Our biggest challenge is taking the concepts we are talking about today and developing practical, feasible recommendations that can actually be implemented. You both talk about risk mitigation. Assuming there are going to be arms, how do you mitigate those harms. What have you found to be the most effective mechanism for mitigating risk . Is it retention . I think it is not really just one thing i can point to. Those things are all very valuable. To make sure the information is accurate. When its grabbed from one context to another, what is Accurate Enough for amazon to recommend books is not the same level of accuracy we might not want from the government. Amazon makes a mistake and recommends the wrong books you, a deal. It doesnt need 100 accuracy. We accuracy differs as differ in context. Mechanisms need to make sure that the information taken from one context is appropriately accurate for that context. We need an analysis of how long we keep the data. We need all of these different things. It is actually a complex thing with much many parts. There are many moving parts. Since therspective, threat is a governmental, the pencil factors that i would focus on the team to focus on the government actors, training in the first instance so they know the rules and inculcating a culture of compliance that is preerror mechanisms. A lot of on it compliance work from outside inspectors general finally,ess and then this is perhaps where we fall down the most, the willingness to impose administrative sanctions on people who very from the accepted rules. Nothing attracts the attention of a Government Employee so much as a prospect of losing his job or been suspended for a term of months. That may be where i would focus. If we look at the failures of we see compliance, some of them that are individual employees doing things they shouldnt. Weve also seen some that are failures of the technical consistentlyhave with the internal policies. Operate without getting into the. Nuts and bolts of the technology. I think there is an opportunity to push an oversight in that area. Its moved to jim density. Thank you to all the witnesses. I think it is very important as we wrap up this panel to highlight what i heard a lot of commonality. I think it is important for the board and the public debate moving forward not to end up at the position that this is confusing. I heard a lot of commonality among the witnesses starting i think you all agree that if you start from the premise privacy is a human right or if you start from the premise that it is an instrumental right, all of you agree that it is an umbrella term that covers many different values and interests. Let the reflect record reflect knotting. I think i heard unanimity bird by giving information to one interest inlose all information. The disclosure to one surrenders her right with respect to disclosure to any other purpose. There was agreement that that concept disclosure to one is disclosure to all is not a valid constitutionally modernday reality. That just doesnt fit with the way we view it information and privacy. That disclosure to one is not a surrender of all interest in the information . I would say that the people interact today, it would be inappropriate to assume disclosure. I am not sure i would agree with what is implicit in your follows thatt it it is a constitutional legalicance or significance that should animate this board a. I want to think about that. Giving your information to your doctor does not mean you have disclosed your privacy rights. We promised them that their medical disclosures are not disclosures to all. That is a wonderful example because we accept statements made to a doctor as an exception from the hearsay rule because youre motivated to tell him the truth. The doctor can in some circumstances be compelled. Those realities work both ways. Not collected. There have been several witnesses mentioning the phipps. We are talking about the fair information practice principles. There is no definitive version of them. A version that was adopted at by the department of. Omeland security in 2008 this is as good as any i think. It seemed to me that there was they are relevant as a framework asking how to deal with information. Does it work . If it doesnt work, you compensate for it with more emphasis on other issues. It is a framework for asking the questions. It is a framework for a starting point of asking questions. Many of those questions dont withstand the technological transitions we are going through. Accepted it as a going off point. We may discard some of them as inoperable under current circumstances. What would you replace them with . The remaining aspects and to my mind, more analysis of the interests at stake and what the mechanisms are that the privacy interest is we have to protect. Fipps is onesizefitsall. We have a couple of questions from the audience. Im not sure of we will get to all of them. And directrbitrary them to a particular panel member. One, the writer wanted to direct toward you. The government gets telephone metadata, what has more regulation . The private entities collection or the government likes and from the private entity . I dont think i can answer that. And youreormation in contact with that contract with that company. Problems with the Metadata Program is there was no reading of the contract or the section of the patriot act that wouldve enabled any person to know what they were consenting to and at their information would go to the nsa. The answer is both . There is contractual regulation. There is the Fourth Amendment and all matter. There is lots of regulation everywhere. Private companies have no incentive to coerce or imprison risks ofhat is why the injury might be greater from the government than from private companies. Does that take into account the Homeland Security prison industry . They could not do it they do without 484 contractors. Are there risks inherent in the increasing commercialization of National Security . Problems can come from anywhere. They are not inherent things that could be said about where problems could because to. Does the access by the government great problems . You see a cooperation in the private sector that is going up to perform government functions. They are gathering and analyzing data and then sharing it with the government. All of these things create various problems that we need to address. Keep our i am the problems and stop looking elsewhere and look at the problems. We address those problems wherever they may happen. That is the best approach. Could the panelists iss what they think know you have covered a great deal. Just a summary would be great. The question is asking me to sum up a whole area of knowledge. I will try to do. That as with cars, as with the tesla and some type of highend car, you should think about what technology is available and a reasonably radical to use to minimize or control or limit the risk of certain information. You can ask that those be there. An entity ask that that wants to collect and use the information be willing to justify the choices they have made be willing to justify why they did not use some accepted technical privacy preserving one, what the method if its available. Application of privacy in federal organizations like the Postal Service . Pension benefits . How they impacted by the Fourth Amendment and concerns for privacy in those organizations . The honest answer would be im not sure. My understanding is that the Fourth Amendment applies to those institutions as they exercise Governmental Authority and acting as agents for the government. Assume Postal Service employees cant open your mail willynilly just because they are pseudoprivate actors. I may be wrong about that. , jim ista open my mail nodding that i am right. Question,ation of the is it emphasizes the point allies a maid. The line between government collection is increasingly blurring