from the you-have-no-privacy dept
Not surprisingly, the number of requests continues to rise drastically, with AT&T admitting that it had seen a tripling in requests in the last five years. As the report notes:
AT&T alone now responds to an average of more than 700 requests a day, with about 230 of them regarded as emergencies that do not require the normal court orders and subpoena.... Sprint, which did not break down its figures in as much detail as other carriers, led all companies last year in reporting what amounted to at least 1,500 data requests on average a day.This isn't a huge surprise, but does raise significant questions about how reasonable these information trawling operations are. Do we honestly believe that law enforcement needed all of that info? This seems like a case where, of course, if the info is easy to get, law enforcement wants it. But is that reasonable?
And, telcos have little incentive to stand up for the rights of their users. They actually make money from these kinds of requests:
AT&T, for one, said it collected $8.3 million last year compared with $2.8 million in 2007, and other carriers reported similar increases in billings.For a company that large, this isn't a major cash cow, but it is something. It's unclear how carefully the telcos review the request. At least one (smaller) telco, C Spire Wireless, reported that it had rejected about 15% of the requests, but most of the other operators didn't provide any info on rejections (and it makes you wonder if they ever rejected any requests at all).
None of this is surprising. When such a tool is available, it's almost impossible for it not to be abused. It's just too easy for law enforcement to snoop on anyone's location or text messages, and they can't resist doing so. It seems like telcos (1) could be a lot more transparent about this. While Google and Twitter both have voluntarily opened up to provide data on law enforcement requests, the only reason this info became public from the mobile operators was because of Markey's request. On top of that, it seems that the rules concerning an individual's privacy rights should also be a lot clearer, to give the telcos more ammo to push back against bogus requests.