Homeland Security Publishes Privacy Report
The Department of Homeland Security has published its first annual report to Congress (pdf 2.1 MB) detailing the office's activities from April 2003 to June 2004. The report describes privacy policy development, outreach, and other initiatives, but fails to address the adequacy of the Privacy Office's authority to investigate privacy breaches. For example, the Privacy Office has not reported the extent to which the agency has obtained passenger record data from airlines since 9/11. For more information, see the EPIC Passenger Profiling Page. (Feb. 2)

Security Flaws Revealed in RFID Enabled Products
Students at Johns Hopkins University have discovered serious security flaws in the Radio Frequency Identification (RFID) chips which are used to protect cars from theft and prevent fraudulent use of Speedpass keys. The research shows that even RFID systems considered to be secure remain vulnerable, which only highlights the need to prioritize anaylsis of privacy and security prior to implementation of RFID technology. The potential for exploitation of the security deficiencies serves as a warning to all industries and governments that would hastily assemble RFID enabled systems in order to identify and/or track people as they cross borders. For more information, see the EPIC RFID Page. (Feb. 1)

EPIC Supplements Data Broker Filings
In a follow up letter to the Federal Trade Commission, EPIC supplemented earlier filings that requested that the agency investigate commercial data brokers for compliance with the Fair Credit Reporting Act. The letter points to recent news reporting that characterizes commercial data broker Choicepoint as a "private intelligence service" and a recent television broadcast showing private investigators using a commercial data broker without legal justification. For more information, see the EPIC Choicepoint and Fair Credit Reporting Act Pages. (Feb. 1)

EPIC Questions Secrecy of TSA Privacy Advisory Group
In a letter (pdf) to the Transportation Security Administration's privacy officer, EPIC has asked why the Secure Flight Privacy/IT Working Group is not being operated in accordance with federal law intended to ensure transparency of government advisory committees. "EPIC has urged TSA, since the earliest days of its existence, to develop aviation security policies and initiatives in an open and public manner," EPIC stated. "Given the clear privacy implications of the Secure Flight program . . . and the obvious public concern surrounding a system that will conduct background checks on tens of millions of citizens, we belive it is critical that any assessments of Secure Flight be made in an open manner." For more information, see EPIC's Passenger Profiling Page. (Jan. 31)

Acxiom Tried to Dilute Privacy Laws
EPIC has obtained documents (pdf 500k) under the Freedom of Information Act showing that commercial data broker Acxiom lobbied to water down key federal privacy laws immediately after the September 11, 2001 terrorist attacks. Acxiom sought broader access to "credit headers" and drivers information in order to develop a system for "identity and information verification that can be used by organizations such as airlines, airports, cruise ships, and large buildings and other applications to better determine whether a person is actually who they say they are." For more information, see EPIC's Drivers' Privacy and Financial Privacy Resources Pages. (Jan. 26)

Nation's Capital Under Unprecedented Surveillance
With the inauguration of President Bush this week, Washington, DC has become a city under technological siege. EPIC has documented the growing expansion of video surveillance in Washington though the Observing Surveillance project. EPIC has also obtained documentary evidence that surveillance equipment is directed toward activists and political protesters. EPIC has urged the DC City Council to establish privacy safeguards for residents, tourists, and employees in the US capital. (Jan. 20)

EPIC FOIA Suit Reveals FBI Kept Millions of Passenger Records
EPIC has learned through Freedom of Information Act litigation that the FBI obtained 257.5 million Passenger Name Records following 9/11, and that the Bureau has permanently incorporated the travel details of tens of millions of innocent people into its law enforcement databases. The FBI made the revelation as it explained (pdf) why it made heavy redactions in documents (pdf) it released to EPIC in September. For more information, see EPIC's Passenger Profiling Page. (Jan. 14)