Protecting Children from Internet Pornographers Act of 2011
The Protecting Children from Internet Pornographers Act of 2011 (H
Organizations that support the goal of the bill include the National Sheriffs' Association, the National Center for Missing and Exploited Children (NCMEC), the National Center for Victims of Crime, and Eastern North Carolina Stop Human Trafficking Now.
H.R. 1981 has been criticized for its scope and privacy implications.[2] Opponents of the bill, which include Electronic Frontier Foundation (EFF), the American Civil Liberties Union, and the American Library Association,[3] take issue with the violation of privacy that would necessarily occur if government could compel ISPs to render subscriber information.[4] Kevin Bankston, an EFF staff attorney, stated that "The data retention mandate in this bill would treat every Internet user like a criminal and threaten the online privacy and free speech rights of every American..., ".[5]
History
On May 25, 2011, Representative Lamar Smith of Texas introduced the bill. It was co-sponsored by 25 other House Representatives.[6] The bill passed the United States House Judiciary Committee on July 28, 2011, by a vote of 19-10.[7] As of January 2012, the bill had 39 co-sponsors.[3] A Congressional Budget Office report on the costs of enacting the bill was released on October 12, 2011.[8] The next step for the bill would be a debate in the House of Representatives.
Scope
H.R. 1981 would introduce harsher penalties for offenders and make it a crime to financially facilitate the sale, distribution and purchase of child pornography.[7] The bill would also amend Section 2703 of the Stored Communications Act, requiring ISPs to retain user IP addresses thereby enabling identification of "corresponding customer or subscriber information" listed in subsection (c)(2) of 18 USC 2703,[9] for at least one year.[1] Retained information would include subscribers' names, addresses, length of service, telephone numbers, and means and sources of payment for services (including credit card or bank account numbers, if they were used to pay for service.) The bill does not introduce limits on subscriber information that may be retained by the ISPs and accessed by the government.[10] The bill also protects ISPs from civil actions resulting from the loss of data stored as a requirement of the bill.[11] The bill also requires the Attorney General to conduct studies related to the costs of compliance for service providers as well as the compliance standards implemented by service providers. The cost assessment would include hardware, software, and all personnel involved in the compliance and the compliance assessment would include a survey of the privacy standards implemented by the providers and the frequency of reported breaches of data.
Use of the data ISPs would be forced to retain under the bill would not be limited to investigations of child pornography, but would be available for law enforcement perusal for any issue, but only with probable cause and a warrant. However, issues involving unregistered sex offenders would allow for the use of an administrative subpoena, which is different from a warrant or judicial subpoena, and which does not require probable cause.[12] The bill does not grant the right to access subscriber records to any "person or other entity that is not a governmental entity."
The bill also does not provide extra funding to investigate or prosecute additional child pornography related cases.[5]
Purpose
On July 12, 2011, the Sheriff of Bedford County, VA, provided testimony on H.R. 1981 before the United States House Judiciary Subcommittee on Crime, Terrorism, and Homeland Security. In his testimony, Brown claimed that the growth of technology and the ability to claim anonymity has "enabled child pornography to become a worldwide epidemic" and made it more difficult for law enforcement to identify and prosecute child predators. Brown further reasoned that an Internet Service Provider (ISP) could retain client records for a limited span of time, ranging from a couple hours, days, or weeks, and that a lack of uniformity across ISPs "significantly hinders law enforcement's ability to identify predators when they come across child pornography." He then provided an actual account of when his county received a cybertip from the NCMEC involving an individual who posted that they were exposing themselves to a toddler. The only information he claimed law enforcement possessed was the IP address that was accessing a YAHOO Chat room through an nTelos wireless connection. During the investigation, law enforcement discovered that the ISP only retained the Media access control address and IP history for 30 days, a limit that foreclosed their opportunity to access investigative material. [13]
NCEMC, which created CyberTipline over a decade ago, reported that, "To date, more than 51 million child pornography images and videos have been reviewed by the analysts in NCMEC's Child Victim Identification Program" and it is estimated that "[Forty] percent or more of people who possess child pornography also sexually assault children" and H.R. 1981 "equips federal, state and local law enforcement agencies with the modern-day tools needed to combat the escalation in child pornography and child exploitation crimes." [14]
It has been suggested by critics including the Center for Democracy and Technology, that H.R. 1981 was framed as a child protection measure at least in part to make it more difficult for members of Congress to reject the bill.[15][16]
Privacy issues
Various groups have expressed concerns over the privacy implications of the data providers would be required to retain under the act,[17] including the Electronic Frontier Foundation, the American Civil Liberties Union, and the American Library Association.[3] Concerns raised include the security of the data from a hacker,[18] the nature of the data collected,[17] as well as the potential for misuse by law enforcement, or use in investigations that are not child pornography-related.[4][19]
Even though only assigned IP addresses and certain subscriber data would be retained, some commenters, including the EFF and some editorialists, have suggested that the data could be used to deduce any given user's personal habits, including a detailed map of where they customarily are at any given point in a day.[17][20] The CDT also issued a comprehensive memorandum regarding the Data Retention Mandate in H.R. 1981, in which it detailed how data retention provisions in H.R. 1981 would raise issues concerning privacy and free speech, among the few other issues that the bill raises.[21]
Representative Zoe Lofgren, (D-Calif.), a vocal opponent of the bill, presented an amendment to rename the bill the "Keep Every American's Digital Data for Submission to the Federal Government Without a Warrant Act."[16] Rep. John Conyers (D-Mich.) also opposed it, saying "This is not protecting children from Internet pornography. It's creating a database for everybody in this country for a lot of other purposes."[10] She also argued that the bill's pertinence to "commercial" ISPs would allow criminals to circumvent legislation if they used the Internet anonymously in venues including Internet cafes or libraries.[22]
Lamar Smith, however, has defended the data retention requirements present in the bill in stating that, "Some Internet service providers currently retain these [IP] addresses for business purposes. But the period of retention varies widely among providers, from a few days to a few months. The lack of uniform data retention impedes the investigation of Internet crimes." Smith also stated that the number of child pornography cases has grown by 150% per year over the past ten years.[23]
Marc Rotenberg, president of the Electronic Privacy Information Center has gone on record for saying that "the bill's expansion of data retention is counter to the growing practice to limit data retention as a mechanism to counter security threats." In addition, Rotenberg also mentions that in fact, there is a strong movement towards minimization of data retention in the information security arena, and data retention is in direct conflict with that notion. Rotenberg concluded that data minization and not data retention is the best way to protect consumer privacy.[24]
Cost
On October 12, 2011 a report by the Congressional Budget Office on the financial impact of the bill was released.[8] This report stated that the cost to the government would be minimal and that the private companies providing Internet services would pay over $200 million in costs. Costs would include servers for storage of the user data.[8]
The Center for Democracy and Technology has issued a report suggesting that the cost of data retention would be much higher than the Congressional Budget Office report indicates, and would grow prohibitively expensive with ongoing trends in internet addressing.[25]
Similar legislation
H.R. 1981 is similar to Canada's Protecting Children from Internet Predators Act which "requires Internet providers to acquire the ability to engage in multiple simultaneous interceptions and gives law enforcement the power to audit their surveillance capabilities. Should it take effect, the bill would create a new regulatory environment for Internet providers, requiring them to submit a report within months of the law taking effect describing their equipment and surveillance infrastructure. Moreover, they would actively work with law enforcement to test their facilities for interception purposes and even provide the name of employees involved in interceptions to allow for possible RCMP background checks." [26]
See also
- Child pornography laws in the United States
- Cyber Intelligence Sharing and Protection Act
- Data retention
- Internet privacy
- Stored Communications Act
- Electronic Communications Privacy Act
- Fourth Amendment to the United States Constitution
- Russian State Duma Bill 89417-6
References
- 1 2 "Text of H.R.1981 as Reported in House". Open Congress. Retrieved February 4, 2012.
- ↑ McCullagh, Declan (3 February 2012). "Anti-SOPA forces have ISP snooping bill in their crosshairs". CNet. Retrieved 28 February 2012.
- 1 2 3 "H.R.1981: Protecting Children From Internet Pornographers Act of 2011 - U.S. Congress". OpenCongress. Retrieved 2012-01-21.
- 1 2 Friedersdorf, Conor (1 August 2011). "The Legislation That Could Kill Internet Privacy for Good". The Atlantic. Retrieved 27 February 2012.
- 1 2 "Big Brother heads online". The Virginian-Pilot. 31 July 2011. Retrieved 27 February 2012.
- ↑ "Bill Summary & Status: HR 1981". The Library of Congress. May 25, 2011. Retrieved 2011-10-24.
|first1=
missing|last1=
in Authors list (help) - 1 2 "Committee Passes Bipartisan Bill to Protect Children from Child Pornography". The United States House of Representatives. July 28, 2011. Retrieved 2011-10-24.
|first1=
missing|last1=
in Authors list (help) - 1 2 3 "H.R. 1981, Protecting Children From Internet Pornographers Act Cost estimate for the bill as ordered reported by the House Committee on the Judiciary on July 27, 2011" (PDF). Congressional Budget Office.
- ↑ "18 USC 2703".
- 1 2 McCullagh, Declan (July 28, 2011). "House panel approves broadened ISP snooping bill". CNET. Retrieved February 4, 2012.
- ↑ Ozer, Nicole. "Bill Harming Online Privacy Moving Through Congress". ACLU. Retrieved 27 February 2012.
- ↑ "Bill text on thomas.loc.gov". Library of Congress.
- ↑ "Testimony before the United States House Judiciary Subcommittee on Crime, Terrorism, and Homeland Security Hearing on "H.R. 1981 - Protecting Children From Internet Pornographers Act of 2011"" (PDF). Congress.
- ↑ http://www.gpo.gov/fdsys/pkg/CRPT-112hrpt281/pdf/CRPT-112hrpt281-pt1.pdf
- ↑ Kaste, Martin (24 August 2011). "Child Pornography Bill Makes Privacy Experts Skittish". NPR. Retrieved 27 February 2012.
- 1 2 Harris, Leslie (August 9, 2011). "The 'Just in Case You're a Criminal Someday' Act". ABC News. Retrieved 2011-10-24.
- 1 2 3 Meredith, Leslie (28 February 2012). "Child porn law could affect everyone's privacy". MSNBC. Retrieved 29 February 2012.
- ↑ Gross, Grant (27 February 2012). "Advocacy Group Takes Aim at Anti-Porn Bill". IDG News. Retrieved 29 February 2012.
- ↑ Adhikari, Richard (September 12, 2001). "Privacy: Can an Anti-child Porn Bill Go Too Far?". Technology News. Retrieved 2011-10-24.
- ↑ Reitman, Rainey. "How Internet Companies Would Be Forced to Spy on You Under H.R. 1981". EFF. Retrieved 29 February 2012.
- ↑ "Memorandum on Data Retention Mandate in H.R. 1981" (PDF). Center for Democracy and Technology.
- ↑ "Chairman Smith Stmt at Markup of H.R. 1981, the Protecting Children from Internet Pornographers Act". M2M Evolution.
- ↑ Gross, Grant (July 28, 2011). "House Panel Votes to Require ISPs to Keep Customer Records". PC World. Retrieved 2011-10-25.
- ↑ Brian Hammond (18 July 2011). "Cyber Policy Report". Aspen Publishers, Inc. Retrieved 4 April 2012.
- ↑ "Compliance with a Data Retention Mandate – Costs Will Skyrocket with Trends in Internet Addressing" (PDF). Center for Democracy and Technology. Retrieved 29 February 2012.
- ↑ Michael, Geist (26 February 2012). "Bill C-30 opens Canada to Big Brother Inc. business". online news article. Toronto: thestar.com.
External links
- H.R. 1981 at Open Congress
- H.R. 1981 on Thomas – Library of Congress
- H.R. 1981 on GovTrack
- Testimony on H.R. 1981 by Sheriff, Bedford County, VA Michael J. Brown
- Section 2703 of Title 18 of the United States Code
- Eastern North Carolina Stop Human Trafficking Now
- Memorandum on Data Retention Mandate in H.R. 1981
- Bill C-30