US Congress Committee Talking About Privacy

rm007 writes "The US House of Representatives Judicial Committee's Subcommittee on Commercial and Administrative Law is holding hearings on the Privacy Officer for the Department of Homeland Security and approved the Defense of Privacy Act. The DHS Privacy Officer hearings are to examine how well the incumbent, Nuala O'Connor Kelly, is doing and whether the statute creating the position sufficiently addresses concerns about the handling of personally identifiable information. This should be worth watching. Wired News has an article that covers both of these as does GovExec.com, a newsletter for senior Federal employees."

Comments

There is no Constitutional right to privacy

[Anonymous Coward]

The real problem here is that there is no Constitutional right to privacy.

Sure, some use amendments to imply one, but it just is not there, and the same amendments can be used to imply such things as a supposed "right to security" which can erode a supposed "right to privacy".

Time for an amendment.

Re:There is no Constitutional right to privacy

[BranMan]

Actually, the Constitution is very specific - I paraphrase: "Any right not enumerated is considered to belong to the people". Since privacy is NOT mentioned, it cannot be infringed by the Federal Gov. - the people have a right to privacy.

The framers, and the drafters of the "Bill of Rights" did not want to fall into the trap of forgetting something, so they made sure they had a safety net in place. They weren't dummies.

Re:There is no Constitutional right to privacy

[red floyd]

Actually, he's talking about the Ninth Amendment

The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.

The Tenth (same link) says that the Federal Government has no powers except those explicitly listed.

To paraphrase:

9. Even though we didn't mention them, you've got those rights.
10. If we didn't say the feds can do something, they can't.

A small explanation

[deltagreen]

For those that weren't immediately able to understand what the story is about (that includes me), here is the start of the Wired article:

For the third year in a row, a bipartisan congressional coalition is pushing a bill that would require all government agencies to study the privacy impact of new rules before they put them into effect.

The Defense of Privacy Act (PDF), which was approved by a House subcommittee on Tuesday, would complement the E-Government Act of 2001, which requires agencies to submit privacy impact assessments whenever they buy new technology

Re:A small explanation

[El Torico]

And here is a very important quote from that same article,

"The bill doesn't tell agencies they can't issue regulations that violate people's privacy rights," Nojeim said. "It simply tells them they must consider alternative, privacy-sensitive regulations. They don't have to adopt those, however."

Which translates as, "We may be just window-dressing here."

There is an inherent conflict between privacy and security, and it is good to see that this is at least being revisited. Election years are good times to review policies, so maybe there is a serious intent to protect everyone's privacy in the US, but I have doubts.

while this is true...

[tuxette]

Yes. Data on us are recorded every time we use a credit card or use the phone or buy a plane ticket or whatever else. However, the difference between the US and the EU is what can be done with this data.

Apparently in the US, "anything goes." Companies promise to keep data private, only to sell or transfer it to third parties, as in the case of several airlines. Sensitive personal data is outsourced to countries like India and Pakistan for processing. What happens? The natives can threaten to release this data if they're not paid a certain amount of money.

In Europe, EU and individual national laws dictate that this data can among other things only be used for a specific purpose determined before data collection, not be used for other purposes, and not be released to third parties without the consent of the data subject. Furthermore, personal data cannot be transferred to countries that do not have privacy laws equivalent to or stronger than the Directive.

The EU Directive is the rule; countries in the EU and EEA are required to have national privacy laws based on the Directive.