NEWS  Security  January 26, 2024  Reading time: 3 Minute(s)

Max (RS editor)

An open letter penned by US Senator Ron Wyden to the US Director of National Intelligence exposes a troubling practice within the National Security Agency (NSA). The senator, a member of the Select Committee on Intelligence, brings attention to the NSA's purchase of personal data obtained illegally from smartphone users through the apps they use.

 SEN. RON WYDEN [IMAGE CREDITS: SENATE.GOV] 

Privacy Breach and Unlawful Practices

The letter highlights the alarming fact that app developers, in their pursuit of user information, often fail to disclose the ultimate fate of such data – being sold to the Defense Intelligence Agency (DIA) and the NSA through data brokers. While developers are legally obliged to disclose the ways in which personal data will be used, the sale of this information to intelligence agencies remains undisclosed.

Legal Action and Ongoing Concerns

The Federal Trade Commission (FTC), acting as the US's primary federal privacy regulator, has deemed such practices illegal. Notably, the FTC took legal action against X-Mode Social, one of the data brokers involved in this illicit trade. Despite legal consequences, the open letter reveals that both the DIA and NSA persist in purchasing data obtained through these unlawful means.

Senator Wyden's Call for Cease and Desist

Senator Wyden emphasizes the illegality of obtaining personal data without informed consent, as ruled by the FTC. This particularly pertains to the sale of sensitive information such as location data, which can be misused to track individuals to places like medical facilities, religious worship areas, or shelters for survivors of abuse. The senator urges the intelligence community to cease these practices immediately.

Unveiling the Sensitive Nature of Location Data

The FTC, in its complaint, underscores the sensitivity of location data and the potential harm it can cause. This data can reveal individuals seeking assistance from suicide hotlines, survivors of sexual assault, or those escaping domestic abuse. Senator Wyden stresses that even data purchased from Internet Service Providers (ISPs) can be equally sensitive, potentially exposing individuals seeking help from various healthcare services.

Senator Wyden's Three-Point Plan

In his open letter, Senator Wyden outlines a three-point plan for the US Director of National Intelligence:

1. Audit Personal Data: Conduct a thorough audit of the personal data held on US citizens to assess the extent of the breach.
2. Identify Illegally Collected Data: Identify and acknowledge data that was illegally collected and subsequently sold.
3. Purge Unlawfully Obtained Data: Take immediate action to purge all data obtained through illegal means, ensuring compliance with privacy regulations.

Urgent Action Required

The open letter to the US Director of National Intelligence serves as a call to action, urging immediate measures to rectify the unlawful acquisition and usage of personal data by intelligence agencies. It brings attention to the critical need for transparency, accountability, and respect for privacy in the realm of national security.

 COVER IMAGE BY STUDIOGSTOCK ON FREEPIK / REVIEW SPACE