News & Commentary

No one wants something as valuable as their credit card numbers to fall into the wrong hands. That's why we limit private uses of this type of personal data. But what about government agencies that hold some of your most vulnerable, confidential information? We need to ensure that safeguards against unauthorized access to your data are in place, especially given the increasing amounts of personal information government agencies are able to collect. And those safeguards need to include measures that track government officials who access your data to ensure that their use of that data is legitimate.

This morning's media event was Facebook's announcement of "Graph Search," a new tool to find content and data on Facebook that could wind up making information about you far easier your friends or just about anyone else to find. Graph Search allows you to search Facebook for specific people, places, or content – for example, "friend of friends who live in New York and like sushi" or "restaurants liked by friends who also like Taco Bell" – using a brand-new interface. Here's what that means – and how you can follow Mark Zuckerberg's suggestion to "take some time to review your stuff" so that your private information isn't suddenly available to others.

In response to an ACLU of Northern California Public Records Act request, the California Emergency Management Agency, the state entity that administers federal homeland security grant funds, recently confirmed that the Alameda County Sheriff's Office is the only agency in the entire state of California to have applied for or obtained grant funding from Cal-EMA for a drone.

In a disturbing trend that can have a chilling effect on free speech, law enforcement agencies around the country are seeking wide-ranging information about the social networking activity of political activists. The San Francisco District Attorney recently issued subpoenas to Twitter for tweets by two political protesters, Lauren Smith and Robert Donohoe, who had been charged with rioting and unlawful assembly during a Columbus Day demonstration last year. They had been active on Twitter but disabled their accounts after the protest. The ACLU and EFF filed a brief in support of the protesters' motion to quash the subpoenas.

The next time a cop sees a picture of you, that picture may not have been taken by a person at all. Unmanned flying drones can allow their operators to remotely - and cheaply - monitor and record individuals, groups, or locations. These drones pose significant threats to privacy when police can use them to peer into homes or track an individual's actions from afar. While law enforcement agencies around the country, including, most recently, the Alameda County Sheriff's Office, are already expressing interest in acquiring drones, the federal government has done little to address privacy concerns - hardly surprising given that Congress is just now addressing decades-old privacy issues with electronic content such as email and cloud storage. We need to consider drone privacy protections now, and that means approaching these issues at the local and state level as well as pushing for federal drone privacy rules.

Buried on the Board of Supervisor's 66-item agenda for its December 4, 2012 hearing was a surprising request by the Alameda County Sheriff's Office for approval to "apply for, accept and administer" funds from the California Emergency Management Agency (Cal-EMA) to buy a drone.

Think Facebook is only interested in your online activity? Think again. The company recently announced a partnership with information broker Datalogix, which operates many of the loyalty card programs we use to get a discount at stores like CVS. The partnership — one of Facebook's three new advertising programs —allows Facebook to gauge the effectiveness of its ads by learning about the offline purchases of ad viewers. Unfortunately, Facebook has not given its users the ability to see what information is actually being shared with Datalogix or to opt out of the program from Facebook's end. Datalogix's opt-out option is not enough – these companies should allow individual users to see how their information is being watched and traded.

This morning, 26 individuals and organizations including the ACLU of California sent an open letter to new Yahoo! CEO Marissa Mayer asking her to add HTTPS security to Yahoo! Mail. Without secure connections, the email sent and received by Yahoo! users around the world — from dissidents living under repressive regimes to Americans communicating about sensitive topics — is vulnerable to interception by ISPs, WiFi "sniffers," and others. Please join us by telling Yahoo! (via Twitter or Yahoo's feedback form) to take this basic step to protect your email.

In mid-October, the Alameda County Sheriff's Office revealed that it was seeking funds to purchase a drone to engage in unspecified unmanned aerial surveillance. The ACLU of Northern California immediately sent a Public Records Act request seeking answers to three basic questions: 1) Are drones really necessary in our community; 2) How much will they cost to acquire, operate, and maintain; and 3) What safeguards will be in place to protect our privacy? The decision to buy a drone is a hugely important public policy question that needs to be debated through an open and transparent process, with full and informed participation by the community and our civilian elected leaders. This should not be a unilateral decision made by law enforcement. Unfortunately, while the Sheriff s Office has found the time to test a drone this past weekend, it is now dragging its feet in providing information that is responsive to our request and essential for that public debate to occur.