Congressional Record: January 16, 2003 (Senate)
Page S1071-S1085
STATEMENTS ON INTRODUCED BILLS AND JOINT RESOLUTIONS
[...]
By Mr. FEINGOLD (for himself, Mr. Corzine, Mr. Wyden, and Mr.
Nelson of Florida):
S. 188. A bill to impose a moratorium on the implementation of
datamining under the Total Information Awareness program of the
Department of Defense and any similar program of the Department of
Homeland Security, and for other purposes; to the Committee on the
Judiciary.
Mr. FEINGOLD. Mr. President, I am pleased today to introduce the
Data-Mining Moratorium Act of 2003. Like many Americans, I was
surprised to learn during the last few months that the Department of
Defense has spent hundreds of millions of dollars developing a data-
mining system called Total Information Awareness while permitting the
progeny of Total Information Awareness to appear in places like the
Department of Homeland Security. The untested and controversial
intelligence procedure known as data-mining is capable of maintaining
extensive files containing both public and private records on each and
every American. Coupled with the expanded domestic surveillance already
underway by this Administration, this unchecked system is a dangerous
step forward and threatens one of the values that we're fighting for,
freedom. The Administration has a heavy burden of proof that such
extreme measures are necessary.
The Data-Mining Moratorium Act of 2003 would immediately suspend
data-mining in the Department of Defense and the Department of Homeland
Security until Congress has conducted a thorough review of Total
Information Awareness and the practice of data-mining.
Without Congressional review and oversight, data-mining would allow
the Department of Homeland Security, the Department of Defense and
other government agencies to collect and analyze a combination of
intelligence data and personal information like individuals' traffic
violations, credit card purchases, travel records, medical records,
communications records, and virtually any information collected on
commercial or public databases. Through comprehensive data-mining, as
envisioned
[[Page S1080]]
with Total Information Awareness, everything from people's video
rentals or drugstore purchases made with a credit card to their most
private health concerns could be fed into a computer and monitored by
the Federal Government.
Using massive data mining, like Total Information Awareness, the
government hopes to be able to detect potential terrorists. There is no
evidence that data-mining will, in fact, prevent terrorism. And when
one considers the potential for errors in data, for example, credit
agencies that have data about John R. Smith on John D. Smith's credit
report, the prospect of ensnaring many innocents is real. This approach
might also lead to the same kinds of so-called ``preventive''
detentions that are unconstitutional and put more than 1,100
individuals in jail after September 11. Although none of these people
were ever charged with orchestrating or aiding the attacks, they were
often held for months on end, and went for weeks without access to
counsel. There is every reason to be concerned that uncontrolled data-
mining systems would lead to the same abuse of power.
The Administration's assurances that a data-mining system will not
abuse our privacy rights ring hollow, particularly to those of us who
questioned the breathtaking new Federal powers in the USA PATRIOT Act.
We heard these same assurances when the Administration pressed for
enactment of that sweeping legislation in the months after September
11th, that the government would act with restraint to ensure that its
application of the Act would not infringe on our liberties. The
opposite has turned out to be true. In fact, some of the most serious
infringements on our personal freedoms in the USA PATRIOT Act can now
contribute to the data-mining effort.
The USA PATRIOT Act allows the government to compel businesses to
produce records about people who had only a remote contact with a
person sought in connection with an investigation of terrorism,
including sitting on an airplane with the suspect, or having used the
same payphone as the suspect. Under the PATRIOT Act, any business
records can be compelled, including those containing sensitive personal
information like medical records from hospitals or doctors, financial
records, or records of what books someone has taken out of the
liberary. This information is exactly the kind of data that data-mining
programs like Total Infomration Awareness will use when compiling its
files on the American people.
The danger of data-mining is compounded not only by provisions in the
USA PATRIOT Act, but also by the Administration's loosening of domestic
surveillance restrictions for FBI agents last year, restrictions that
were put in place following FBI abuses under J. Edgar Hoover. These
various initiatives of the Administration are building on each other to
give away more and more of our personal information, and give away more
and more of our personal freedoms.
It is reasonable to ask Americans to sacrifice some personal freedom
like submitting to more extensive security screenings at airports. But
should we allow the government to track our every move, from what items
we purchase online, to our medical records, to our financial records,
without limits and without accountability? I believe most Americans
would say that that's a police state, not the America we know and love.
We would catch more terroists in a police state. I don't doubt that.
But that's not a country in which most Americans would want to live.
Each time we have been told that government authorities would use
restraint with its new powers, but Congress and the American people
should not find comfort in these assurances, especially since they have
been made by an Administration that has been operating in greater and
greater secrecy. The Administration must suspend this massive data
mining project until Congress can determine whether the proposed
benefits of this practice come at too high a price to our privacy and
personal liberties.
I urge my colleagues to support this measure, and I ask unanimous
consent that the text of the bill be printed in the Record.
There being no objection, the bill was ordered to be printed in the
Record, as follows:
S. 188
Be it enacted by the Senate and House of Representatives of
the United States of America in Congress assembled,
SECTION 1. SHORT TITLE.
This Act may be cited as the ``Data-Mining Moratorium Act
of 2003''.
SEC. 2. FINDINGS.
Congress makes the following findings:
(1) Use of advanced technology is an essential tool in the
fight against terrorism.
(2) There has been no demonstration that data-mining by a
government, including data-mining such as that which is to
occur under the Total Information Awareness program, is an
effective tool for preventing terrorism.
(3) Data-mining under the Total Information Awareness
program or a similar program would provide the Federal
Government with access to extensive files of private as well
as public information on an individual.
(4) There are significant concerns regarding the extent to
which privacy rights of individuals would be adversely
affected by data-mining carried out by their government.
(5) Congress has not reviewed any guidelines, rules, or
laws concerning implementation and use of data-mining by
Federal Government agencies.
SEC. 3. MORATORIUM ON IMPLEMENTATION OF TOTAL INFORMATION
AWARENESS PROGRAM FOR DATA MINING.
(a) Moratorium.--During the period described in subsection
(b), no officer or employee of the Department of Defense or
the Department of Homeland Security may take any action to
implement or carry out for data-mining purposes any part of
(including any research or development under)--
(1) the Department of Defense component of the Total
Information Awareness program or any other data-mining
program of the Department of Defense; or
(2) any data-mining program of the Department of Homeland
Security that is similar or related to the Total Information
Awareness program.
(b) Moratorium Period.--The period referred to in
subsection (a) for a department of the Federal Government is
the period beginning on the date of the enactment of this Act
and ending on the date (after the date of the enactment of
this Act) on which there is enacted a law specifically
authorizing data-mining by such department.
SEC. 4. REPORTS ON DATA-MINING ACTIVITIES.
(a) Requirement for Report.--The Secretary of Defense, the
Attorney General, and the head of each other department or
agency of the Federal Government that is engaged in any
activity to use or develop data-mining technology shall each
submit to Congress a report on all such activities of the
department or agency under the jurisdiction of that official.
(b) Content of report.--A report submitted under subsection
(a) shall include, for each activity to use or develop data-
mining technology that is required to be covered by the
report, the following information:
(1) A thorough description of the activity.
(2) A thorough discussion of the plans for the use of such
technology.
(3) A thorough discussion of the policies, procedures, and
guidelines that are to be applied in the use of such
technology for data-mining in order to--
(A) protect the privacy rights of individuals; and
(B) ensure that only accurate information is collected.
(c) Time for Report.--Each report required under subsection
(a) shall be submitted not later than 90 days after the date
of the enactment of this Act.
SEC. 5. CONSTRUCTION OF PROVISIONS.
Nothing in this Act shall be construed to preclude the
Department of Defense or the Department of Homeland Security
from conducting--
(1) computer searches of public information; or
(2) computer searches that are based on a particularized
suspicion of an individual.
______