N.S.A. Buys Americans’ Internet Data Without Warrants, Letter Says

The National Security Agency purchases certain logs of Americans' domestic internet activities from commercial data brokers, according to an unclassified letter obtained by The New York Times. The letter highlights a legal gray zone on privacy.

ADVERTISEMENT

National Security Agency's Purchase of Internet Data

The National Security Agency buys certain logs related to Americans’ domestic internet activities from commercial data brokers, according to an unclassified letter by the agency.

The letter, obtained by The New York Times, offers few details about the nature of the data other than that it does not include the content of internet communications.

This disclosure highlights a legal gray zone, as intelligence and law enforcement agencies sometimes purchase potentially sensitive and revealing data from brokers, which would otherwise require a court order.

Federal Trade Commission's Crackdown on Data Brokers

The Federal Trade Commission has started cracking down on companies that trade in personal location data gathered from smartphone apps and sold without people’s knowledge and consent about its usage.

In a letter to the director of national intelligence, Senator Ron Wyden argues that internet metadata logs can be as sensitive as location data. He urges intelligence agencies to only purchase internet data collected under the standards set by the Federal Trade Commission.

Senator Wyden emphasizes that the US government should not be funding an industry that violates Americans' privacy and acts illegally.

Revelation and Response from the National Security Agency

The National Security Agency made its specific disclosure in a letter sent by its departing director, Gen. Paul M. Nakasone, to Senator Ron Wyden. The agency revealed that it buys and uses commercially available metadata related to wholly domestic internet communications for its intelligence and cybersecurity missions.

The statement from the agency clarifies that it purchases netflow data for its cybersecurity mission, takes steps to minimize the collection of US person information, and filters the data using technical means.

While the National Security Agency acknowledges that it acquires data associated with electronic devices being used both inside and outside the United States, it claims not to buy domestic location information.