Public service by americas Cable Television companies and is brought to you today by your cable or satellite provider. Host Georgetown University law professor paul ohm, is law keeping up with technology . Guest its trying its darnedest, but like with a lot of us, its really hard to keep up with technology. And is so, you know, we have different areas of the law, constitutional law, statutory law, but at the end of the day, the shifts, the changes, the different ways we communicate, you know, the same things that befuddle just your average american has begun to also confuse lawyers and the legal system and judges in kind of disruptive and profound ways. Host is it because technology is changing so quickly, or is it because law is not changing guest well, its interesting, its a little of both. I mean, law is an ancient tradition, right . Its an ancient set of disciplines. But at the same time, law has also managed to keep up with kind of seismic or tectonic shifts in all sorts of things in society. And technology is, you know, the latest challenge. And so, so theres always going to be kind of a give and take when it comes to rapidly changing things in an Old Institution like the law. But again, its trying. And i think itll all work out in the end. But the growing pains are going to be really difficult. Host whats an example today that were facing . Guest so the fourth amendment, right . So we think about the again, at this point, centuriesold guarantee in the u. S. Constitution that unreasonable searches and seizures shall not occur without a warrant, lets say. And so the question is, how does Something Like that apply to cell phones, how does it apply to email accounts. And, again, its a great measure of how fast things change that the law is just figuring out those two examples, cell phones and email. And it may be figuring that out just about the time those two are not going to be as important in our daily lives, right . So theres just this builtin delay that the law suffers from, and its hard to keep up with the latest shifts. Host and this week on the communicators, were talking with Georgetown University law Center Professor paul ohm, he is also the faculty director for that universitys center on previous and technology. Privacy and technology. Also joining our conversation is dustin volz of reuters who cover toes cyber and surveillance. Thank you for being here, professor. How is this issue of knowledge of technology affecting government prosecutors, government lawyers who have to deal with cyber or criminals, who often have to use cyber means to pursue those criminals . Is in this warting criminal investigations in this thwarg criminal investigations . Guest after i graduated from law school, i became a criminal prosecutor at the Justice Department, so i was in a unit called the computer crime and intellectual property section, and its funny because now im such an old man that this was really a half generation ago where we were just beginning to deal with hackers and viruses and all sorts of emerging challenges online. And at the time and probably more so today, it was really a challenge to kind of figure out how to take these very old tools we had and adapt them to something as new as kind of exciter hacking. Computer hacking. And so it is a constant struggle of reeducation and trying to keep up. So is part of the problem here that lawyers who go to law school and then go into government, they arent science and mathematical in nature . Those types of folks maybe would go to Engineering School or medical school, so theyre coming at this from a disadvantage, and do we with need to focus on retraining them more . Is that the collusion . Guest so both halfs of what you said are definitely true. We could definitely stand to have more techies in law schools and eventually in law and then in policy, you know, propagating throughout the system. Really, really the dream is the person who is genuinely and legitimately well trained in both disciplines. But its just a simple matter of numbers. Were not going to get this. So one thing ive been thinking a lot about, this is my postprosecutor days, what can i as a legal educator do to bring along people who start with very little, and in the case of law school, nothing, to make them at least do no harm, but even better, to be competent, successful navigating this intersection. And so at georgetown, i believe you have a class that sort of helps these law students, teaching them coding basics, talking about these issues. Guest yeah. You tell us more about that, and is this something we should make mandatory at law school, forcing these students to learn criminal cyber law . Guest it would certainly be good for my longterm employment prospects if we could make it required. [laughter] we actually have several courses, but met me focus on one. I arrived at georgetown a year ago. I was at university of colorado for ten years before that. And at georgetown i have this kind of crazy idea that i could take my programming knowledge and use it to kind of educate lawyers. , and again, with a heavy emphasis on the people who know very little, and it turns out in law school there are a lot of people who are in law school because theyve made life choices that have pushed them away from technology. So theres a lot of people. So the course we created is called Computer Programming for lawyers, and its an intensive, three hours a week really, really deep dive into the nuts and bolts of Computer Programming but seen through a legal lens. And its just been a kind of painful but also fantastic experience both thinking about what does it mean to teach a lawyer Technical Skills like this, and at the same time just understanding and appreciating the pentup demand. So let me just tell you a quick statistical story. So we offered this course for the first time in mid november of last year, and you have to understand in law school mid november students are thinking of nothing else but their final exams, and with very little fanfare, we said you have to register by the start of the spring semester. By december 18th, i think it was, we had 120 students clamoring to get into the class. And theres a class that we had set aside 17 seat for. 17 seats for. So it was just beyond kind of my wildest expectations. Right. Guest yeah. So in your assessment given the focus on training and education, i mean, is that enough to fill gap . Is this problem getting worse because technology is becoming ever so more pervasive, or are you confident that the next couple of decades we might actually see some progress on this . Guest right. I can make some predictions about where Legal Education will go and where lawyers will go. Its harder to make predictions about where technology will go. So if we assume that were going to continue on this kind of radical growth rate where fundamental technologies seem to shift every five or six years, then i think we can keep up, right . I think that not only is it going to be kind of useful and important to educate lawyers before they become lawyers, but i also think were going to have some advantages generationally. And so i have 11yearold twins, they know about as much programming as my law students do at the end of my course. Is and i think theyre not an unusual story. I think a lot of kids like that will grow up to be law students and then lawyers with a real advantage. Host well, professor ohm to, is it important from the aspect that that lawyers need to know programming just as maybe a liability lawyer needs to know how a car built . Guest theres some of that. There absolutely is. Probably,ing thats a great analysis analogy, right . Host you can use it. [laughter] guest i will. Another example that i think about a lot is economics and statistics. And so, you know, a generation ago again there werent many lawyers who understood statistics, much less used it in their daily lives. Today if youre a tort, liability lawyer, if youre an agency lawyer, you really have to know how to not only understand economic analysis, guest so, for example, government hacking is very much in the news. Its something ive thought about in my research. And so now you have government investigators and crime fighters for the first time kind of using tools of the trade that we used to associate with criminals. And they do this, you know, in large part because encryption makes it difficult to use conventional methods to do surveillance. So heres the challenge. The challenge is you have an fbi agent, lets say, who is chomping at bit to use some very new and exotic vulnerability and exploit to, essentially, break into someones phone, right . I have no doubt that the fbi and these are not lawyers, these are, you know, engineers by training the fbi is teaching that person what they need to know to do their job. What about the prosecutor who is the one who has to go to the judge and explain what theyre trying to do . So we have recent examples where, you know, documents have come to light that suggest that the prosecutor on that particular case probably didnt go through the kind of training that i was talking about a few minutes ago. And either willfully or most likely entirely incidentally misrepresented what the technology did, confused the judge about what the technology did. And at the end of the day, that really is going to kind of have repercussions for civil rights and civil liberties. Host and privacy . Guest and privacy, absolutely. Its a little esoteric, but one question is if you send out Something Like this which is essentially indistinguishable from a virus, and you send it to anonymous person online, the odds are high that that person is not going to be in your jurisdiction. Right . So the thing you send out i from virginia may go to california, it may go to alaska, it may go to Eastern Europe. And there have been documented cases where the judge has signed the warrant knowing full well that they dont have the authority to sign a warrant to search Eastern Europe because they werent clear about the fact that this thing was about to slip the boundaries of their jurisdiction. And so, yes, theres a kind of rules violation there we should worry about, but theres also an underlying privacy story that we should worry about. Maybe thats too much power for a particular prosecutor or judge, but without understanding the technology, thats not even surfaced until much later. Theres this knowledge gap or confusion among Law Enforcement officials, prosecutors, judges. Are we seeing evidence this is having real policy applications on how we are applying this law, or are decisions being made by the fbi . I think of the san bern San Bernardino case, a lot of technicalminded people say that this effort by the fbi is borne out of a lack of understanding about how encryption works. These lawyers that were prosecuting that case just did not understand it. That something youre worried about . Are we seeing that happen in. Guest so i want to be clear, and this will allow me to be somewhat controversial with apple and the fbi in particular. What ive been describing so far in this conversation has been the main, the masses of prosecutors and how difficult it is to teach them the technology they need. There are elite pockets within the federal government where this isnt a problem at all, right . Where they hire technical people, they give them the resources they need, and they train them up to be quite sophisticated. And, sure, im biased, but i think the unit i was at at the Justice Department probably fits within that category. Okay, so what does that have to do with apple fbi . To me, at least and i think reasonable minds can differ probably reflected the failure of many different things, but im not sure it was a lack of technical sophistication. So if you look at what the fbi asked apple to do, it actually was a pretty sophisticated ask. If you look at the way they responded to okays from the encryption to objections from the encryption community, sure, they disagreed with that community, but i dont think its accurate to say they fundamentally misunderstood what the clipping toker ins cryptographers were telling them. I chalk it up to its a hard problem and one on which reasonable minds absolutely can differ. Host professor, was the law clear in that case . Guest right. I mean, one of the big problems in that case was the law was old. So you have a very old, very broad law that the Justice Department again, quite aggressively was trying to use in a very new set of circumstances. And so thats the reason why i think a judge quite reasonably could have said youre asking for too much. But what im trying to push back on is the critique that the fbi just doesnt understand, that they had no idea and i think we all regret that we didnt get to see this play out in the courts. It would have been fascinating to see what the judge did. But i think at the end of the day the judge had the technical con alation it needed consultation it needed, and it really was left with a difficult legal question at the end of the day. Host have any of these cases played out all the way to the Supreme Court . Guest sure. There have been numerous cases where the court has kind of had to really into technical delve into technical specificity, and im not even talking about patent law where they have to do it routinely. But we confine ourselves to surveillance and privacy and speech, i can think back in my own lifetime as a lawyer to 2001 in a landmark case called aclu v. Reno which is about attempts to restrict what children could get on new thing called the worldwide web, relatively new. And in that opinion i remember as a young lawyer, i thought it was so funny that the Supreme Court, in binding precedent, said, well, these web sites and everything was in quotes, of course they have these things called hyperlinks, and hyperlinks tend to be blue, period. [laughter] and i remember thinking that is a great example of knowing enough, you know, to hurt you, right . To be dangerous. Because i guess it was probably technically accurate but completely superfluous. So then if we fast forward to 2014, you have a case called reilly v. California which asks the question when the Police Arrest you on the side of the road, are they then howed to open up your phone allowed to open up your phone the same way they can rifle through your pockets. And here you have chief Justice Roberts writing a very sophisticated, very technically savvy opinion that i think gets most of the technology exactly right. So look at how far that institution, and talk about slowmoving institutions, has come in 13 years. So, yes, even the Supreme Court, i think, has it within them to keep up with the times, it just might take 14 years. Host what about the congress . Guest congress is, you know, hit or miss. Some, some members of congress are really sophisticated, some less so. One thing that i have really noticed is and this is so common place as to be, you know, obvious, a lot of it depends on is a member of congress committed to hiring the right staff, right in a zero sum world of staff, are they willing to allocate a perp or half a person to someone who really understands the technology. And, you know, im sure i havent met all of the hill staffers who are serious technologists, but i bet ive met most of them, and there arent enough. There should be more. I dont think our elected representatives need to be techies, but they really should hire them. Its not a bad idea. How much of this enduring problem, finding enough talent in the Justice Department or in congress, you know, enough technologists, is that from this salary gap problem that people can go and work in Silicon Valley and make hundreds of thousands of dollars instead of, you know, giving a few years to Government Service . Is that one of the fundamental problems when you talk about these issues . Guest i think that is. I think almost anyone in any workplace has faced this dilemma. All you want is a web site, and for some reason, youre going to have to pay that person same salary as you pay the management. And it is, in the government those challenges probably even more so given the restrictions they have on budget and salary. I think the aint dote to that aint dote a little bit to that is to appeal to the idealism of a lot of techies. Weve been talking about how nontech keys can learn tech, the reverse is also interesting. You know, ive had more deep conversations about law with computer scientists than i have had deep conversations about Computer Science with lawyers. A lot of computer scientists just love the law and love policy and probably think theyre better at it than they really are. But i wonder if that is something we can use to appeal to people to do their duty and spend two years in d. C. And help the government out. On that note, president obama has been call by some the first cyber president. He set up the digital service, hes done other things to try to reach out to Silicon Valley to forge those partnerships. We now have a president elect donald trump whos coming in whos had a little bit more adversarial approach to Silicon Valley. He called for boycotts of apple, said other things about closing off the internet. Do you see this as more of a tension with the Incoming Administration trying to get this talent to come and serve in washington . Guest from my vantage point, and i certainly, you know, have not talked to a lot of people in the new administration. From my vantage point, its mostly disinterest. I dont know if its outright hostility, you know . If someone has that secret list of priorities for the new administration, my guess is technology is not going to be on the first few pages. And is so what does that mean . That means that there will be, probably, some inattention paid not only to this core question weve been talking about which is kind of is, will the administration be sophisticated in technology, but even the more fundamental question, you know, what will their Telecommunications Policy be, what will their surveillance policy be. I think we simply dont know because they dont know. And so its a waiting game really. Like, you can predict some things the administration will do. I dont think you can on technology. But the other thing to say is, youre right, we are, i think, at a pinnacle with the Obama Administration on the narrow question of kind of a deep integration with technology and technologists. So no matter who would have been president , i think we would have had a dropoff. Im just wondering if its going to be a serious cliff at this point. Host do you have any advice for president elect trump and his administration to make sure that dropoff isnt as steep as it could be . Guest ing i think institutions matter a lot, so i think continuing to keep some of the positions even if you populate it with people more likeminded to your politics is a great idea. Obama has not only a cio, but a cto, a chief technology officer, ostp, the office of science and Technology Policy in the white house is more robust and vibrant, i think particularly on digital issues than ever. It would be great if the new administration said im going to keep those structure ors in place, and im going to find people who can populate them. And the same goes for the agencies. A lot of agencies are at their kind of peak right now in terms of sophistication. Itd be great if we could keep some of those structures too. Host well, professor ohm, this disconnect between technology and law has affected the federal trade communications and the federal Communications Federal trade commission and federal communications commission. Guest yes. They you said they have to get they understand they have to get good at this. And i have some experience with both agencies. I think they really have made strides. Probably not as quickly as i would like, but they both have made strides in recent years. Both of them now have established chief technologists. And going back years and years, those two offices have been populated by i think without exception just amazing people, sophisticated people. And so as long as they continue on that path, theyll be fine, theyll be kind of good at keeping a steady state. The problem, of course, with agencies is always resources. In a perfect world, we would double or triple the budgets we give for these purposes. And i dont think thats likely to happen with either of those two agencies, particularly within the new administration. Host have we had a period like in our history before where technology or industry of some type got way ahead of law . Guest ing sure. I mean, so the rise of antitrust haw was a direct result of the robberbarons and the railroads, and antitrust law got reinvented again with the deregulation of the airlines. The history of law in many senses is the history of trying to respond to the last great technological shift. One thing i talk to my students a lot about though the internet and digital technology, you know, its faster. I think everyone would agree with that. But the question is, is it a difference in degree merely, or is it really a difference in kind. Right . Are we seeing some sharp elbow in the curve that means that wont just be like the last times weve had to encounter this in and it might be something more fundamental and fast. And the jurys out. I mean, most days i wake up and think there really is something distinctive and different about whats going on, but other days i wake up and have a little more of a historical view. And i think, you know, other people have had that thought before, and this too shall pass. [laughter] you mentioned surveillance policy earlier. Im curious, is this problem made worse by the fact that were seeing surveillance in some ways expand, and the opportunities to collect data expand . This week on december 1st rule 41 is going to go into effect which is going to allow the government to ask judgements to issue warrants for remote searches of computers in any jurisdiction, not just their own jurisdiction, seen by some privacy advocates as an enormous expansion of surveillance powers. Does this all, given the fact that theres this confusion and knowledge gap among some government lawyers and prosecutors, does that make it more likely that we might see abuses, that we might see innocent people victimized by the way the government carries this out . Guest right. And for the most part, weve been talking about surveillance on the criminal side. The knowledge gap weve been talking about at the core of our conversation is so much worse on the National Security side. So here you have a presumption of secrecy and a presumption of classification, and you have kind of rigid structures in the intention community that give in the Intelligence Community that give a lot of deference to kind of people on the ground. And there are probably lots of good reasons to have everything i just described. But what it means is very few people can have an outsized impact on what to do with the latest technological advance. And so, yes, i worry a lot about that. I mean, i think its very easy for a few people, wellintentioned people, to say, you know, to advance the latest goal from the government we are going to really take advantage of the latest innovation, and were going to really men the law a bend the law along the way to allow us to do that. And given the inherent lack of sunlight in these spaces, you know, it might take the rest of it ten years to figure out whats going on. This is kind of the story of the telephone metadata leaks. This is kind of the story of a lot of the things weve learned about the nsa over the last ten years. And so in many ways, you know, i shudder a little bit to think about how surveillance law might expand partly because the techies rule the roost, and the lawyers really dont know thousand to ask them the right questions. I guess what youre saying is its not necessarily malicious intent, theres just a lack of understanding about how pervasive or intrusive it might be. Guest thats right. And we have had numerous filings from the lawyers who have gone to the secret fisa court and have said, you know, that thing we told you in that brief last year, turns out we were wrong, we just misunderstood what our technologists were telling us. Here you have an example of a real failure to communicate that has ended up, resulted in surveillance programs that are much more massive than they probably should have been under the law. Host what can congress do policy wise, in your view, to make this more smooth . Guest right. I mean, where should we begin, right . You know, theres the Electronic Communications privacy act which relates to a lot of what weve been talking about. Here you have a law created in 1986 which still is the foundational law that governs when the fbi can read your email. That thing is in dire need of updating. And there have been bills in several consecutive congresses that would make some sensible picks and changes. Congress itself could get better on science itself. Congress could, you know, create new offices to hire scientists to give them advice the way they do with the Congressional Research service at this time. Thatd be a wonderful kind of benefit for them. The Communications Act probably needs updating, the copyright probably needs updating. So its just pick a direction and fire. Theres probably something that could be fixed. Host paul ohm of Georgetown University and the center on privacy and technology, and dustin volz of reuters. This is the communicators on cspan. Cspan, where history unfolds daily. In 1979, cspan was created as a Public Service by americas Cable Television companies and is brought to you today by your cable or satellite provider. Abigail fillmore was the first first lady to work outside the home, teaching in a private school. Mamie eisenhowers hair style and love of pink created fashion sensations. Mamie pink was marketed as a color, and stores sold clip hon hon clipon bangs