Virginia Police Departments Have Been Collaborating On An Ad Hoc, Secret Phone Record Database

from the HELP-US-BUILD-OUR-HAYSTACK!-DIAL-NOW! dept

Do you ever get the feeling that some law enforcement agencies just do whatever the hell they want? In most areas, this is the exception rather than the rule. In Virginia, however, that ratio seems to be reversed. Last year, an ACLU FOIA request uncovered the Virginia State Police's wholesale harvesting of license plates from political rallies.

The privacy expectations may have been minimal (vehicles parked in public places), but the implications of what could be done with this sort of data were much larger. Plate-and-location records could be read to determine likely political affiliations, and the state police's obvious desire to fill its database efficiently makes large gatherings of any sort attractive targets for automatic license plate readers. The revelation of the State Police's actions prompted a strong response from the State Attorney, as well as a clarification of rules governing the collection and retention of license plate data.

Now, news has emerged that a handful of law enforcement agencies in Virginia have constructed their own ad hoc phone record database and are inviting others to sign up for access.
The database, which affects unknown numbers of people, contains phone records that at least five police agencies in southeast Virginia have been collecting since 2012 and sharing with one another with little oversight. Some of the data appears to have been obtained by police from telecoms using only a subpoena, rather than a court order or probable-cause warrant. Other information in the database comes from mobile phones seized from suspects during an arrest.

The five cities participating in the program, known as the Hampton Roads Telephone Analysis Sharing Network (HRTASN), are Hampton, Newport News, Norfolk, Chesapeake and Suffolk, according to the memorandum of understanding that established the database. The effort is being led in part by the Peninsula Narcotics Enforcement Task Force, which is responsible for a “telephone analysis room” in the city of Hampton, where the database is maintained.
What it looks like is what it is: a dumping ground for any phone/phone-related records obtained by law enforcement through other means. Rather than being used in an investigation and disposed of upon conclusion, these agencies are dumping it all into a searchable pile and inviting other law enforcement agencies to do the same. The resulting mess is almost certainly illegal, and at least one invited agency -- the Virginia State Police, no less -- has refused to take part in it.

The HRTASN agreement presents the database as a fully legal operation while still writing itself a blank check for haystacking.
To the extent permitted by law, all participating agencies operating under this MOU agree to share telephone intelligence information derived from any source with the PNETF including: subpoenaed telephone call detail records, subpoenaed telephone subscriber information, and seized mobile devices.
"Derived from any source" is an incredibly open statement. And as for the database being "permissible by law," the legislative changes prompted by the Virginia State Police's abuse of its license plate readers seem to make this sort of unstructured, untargeted collection illegal.
The ACLU’s [Rob] Poggenklass said the database runs afoul of a privacy law in Virginia known as the Government Data Collection and Dissemination Practices Act, designed to curb the overcollection and misuse of digital personal information by state and local agencies…

While law enforcers enjoy some exemptions from privacy laws during the course of an investigation, according to the opinion, those exemptions don’t apply when collected data “is of unknown relevance and not intended for prompt evaluation and potential use.” In other words, there must be a clear law enforcement need. Without it, Poggenklass said, police should not be permitted to collect and retain records indefinitely in a database for future queries.
Right now, the database operates with no outside oversight. Worse, it operates with the explicit permission of the five communities whose representatives signed off on their local PD's participation. There's also no information forthcoming about the contents of the database -- whether it's just simple phone records, or if actual content (text messages, photos, contact lists, etc. pulled from seized phones) has made its way into long-term storage as well.

Unexpected daylight altered the State Police's use of its license plate readers. There's a good chance exposure will do the same to Peninsula Narcotics Enforcement Task Force's database.
Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: phone records, police, privacy, virginia


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • icon
    That Anonymous Coward (profile), 4 Nov 2014 @ 3:18pm

    Well we had a good run, I for one look forward to our new oppressive overlords.

    reply to this | link to this | view in chronology ]

    • identicon
      Anonymous Anonymous Coward, 4 Nov 2014 @ 3:54pm

      Re:

      I don't believe you or you forgot the /sarc mark.

      What we need to do is remove money from politics.

      In the mean time give all you can to the ACLU and EFF and other like organizations.

      And don't be such a downer, though some days I feel just like the sentiment you express.

      reply to this | link to this | view in chronology ]

      • icon
        That Anonymous Coward (profile), 4 Nov 2014 @ 4:43pm

        Re: Re:

        Protip: the /s mark is implied on nearly all the one liners I post around here.

        I'm just actually afraid that we've crossed that point from which we will never be able to pull back from, and no amount of effort will be able to change the course. We are heading into a black hole of thought crimes, right thinking, and doubleplusgood.

        reply to this | link to this | view in chronology ]

        • icon
          art guerrilla (profile), 5 Nov 2014 @ 5:55am

          Re: Re: Re:

          exactly...
          talked to my sister about this years ago, that it wasn't just the oppression we are experiencing, but how the pieces on the chess board were being moved in place that we could not extricate ourselves from this techno-tyranny without HUGE costs (on all sides)...

          Empire must fall,
          the sooner the fall,
          the gentler for all...

          reply to this | link to this | view in chronology ]

      • identicon
        Anonymous Coward, 4 Nov 2014 @ 10:54pm

        Re: Re:

        WEll, it's not sarcastic, given that LEOs are turning more and more into mafiosos, as a general rule.

        reply to this | link to this | view in chronology ]

    • identicon
      Anonymous Coward, 5 Nov 2014 @ 4:33pm

      Re:

      This is an unfortunate side effect of the Snowden revelations, and of NSA collaboration with DEA/FBI as detailed on this site. Now every agency knows this can be done, and if they can't get the data from NSA they will build a shiny new panopticon for themselves.

      Expect to see many more stories like this, with your local LEO's running Palantir on a custom Oracle database, hoovering up everything, and keeping it forever. While stonewalling any inquiries and using parallel construction to cover up the source in court, of course.

      reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 4 Nov 2014 @ 3:52pm

    I eagerly await our extra-terrestrial liberators.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 4 Nov 2014 @ 3:58pm

    So these marvelously clever people...

    ...have built a wonderful resource for pedophiles, rapists, stalkers, extortionists, blackmailers, kidnappers and other fine upstanding citizens.

    I'm certain that they've defended it with the superb level of security that characterizes other government projects.

    reply to this | link to this | view in chronology ]

  • icon
    Bill Sellers (profile), 4 Nov 2014 @ 4:41pm

    Hampton police responds..... video

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 4 Nov 2014 @ 5:02pm

    data collection at archives

    The same data collection law should apply to publicly supported library archives, which are legally classified as public records. They think they should be able to ask patrons how they are going to use a copy of a public domain work, like a photograph. Also works for which they do not own the copyright. Technically, public library archives are public records, and subject to FOI laws.

    The library of Virginia is currently keeping this patron information for 25 years, and these researcher application forms contained social security numbers up until a couple of years ago. So essentially there is a database of FOI requests containing SS numbers.

    The archive FOI request info is not even supposed to be kept after the request is filled. The excuse is that there may be exempt information given to researchers, and the researcher is under an obligation to screen for exemptions, not the archivist.

    The requirement that patrons obtain permission to publish is across the board, even applying to rare copies of books that were published in 1816.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 4 Nov 2014 @ 5:25pm

    "subpoenaed telephone call detail records, subpoenaed telephone subscriber information, and seized mobile devices."

    I love this. Attention all drug dealers, prostitutes, and other scofflaws in Virginia: please, PLEASE, start loading your mobile phone address books (heck, and make a few innocuous phone calls to boot) with the telephone numbers of your local congressmen, city council members, law enforcement, etc. Preferably more of those numbers than of your real contacts. Hilarity ensues and the data is useless (though, of course that won't keep them from maintaining and using it.) lulz.

    reply to this | link to this | view in chronology ]

  • icon
    got_runs? (profile), 4 Nov 2014 @ 5:41pm

    Police state unfriended.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 4 Nov 2014 @ 8:05pm

    no warrant required

    It's been standard practice for decades for police to record the license plates of people who show up at protest marches, and in recent years to photograph and video everyone present. And beware, having some "Anonymous" mask on your face is a crime in places like New York City.

    ... all for your own protection, of course.

    reply to this | link to this | view in chronology ]

  • identicon
    RA, 4 Nov 2014 @ 10:10pm

    Police too stupid to hurt average citizen

    Who the hell hands over a FOIA request to the ACLU. They are already criminals but the thought of disobeying that FOIA is too much.

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 5 Nov 2014 @ 8:19am

    Until the system gets hacked or one of the many dumb-asses leaves their password laying around, This shows you the lack of intelligence we have to deal with , I wonder how this sharing pertains to minors.

    reply to this | link to this | view in chronology ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here



Subscribe to the Techdirt Daily newsletter




Comment Options:

  • Use markdown. Use plain text.
  • Remember name/email/url (set a cookie)

Close

Add A Reply

Have a Techdirt Account? Sign in now. Want one? Register here



Subscribe to the Techdirt Daily newsletter




Comment Options:

  • Use markdown. Use plain text.
  • Remember name/email/url (set a cookie)

Follow Techdirt
Insider Shop - Show Your Support!

Advertisement
Report this ad  |  Hide Techdirt ads
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Chat
Advertisement
Report this ad  |  Hide Techdirt ads
Recent Stories
Advertisement
Report this ad  |  Hide Techdirt ads

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.