Facebook Has 25 People Dedicated To Handling Gov't Info Requests
nonprofiteer writes "A profile of Facebook's CSO reveals that his 70-person security team includes 25 people dedicated solely to handling information requests from law enforcement. They get thousands of calls and e-mails from authorities each week, though Facebook requires police to get a warrant for anything beyond a subscriber's name, email and IP address. CSO Joe Sullivan says that some government agency tried to push Facebook to start collecting more information about their users for the benefit of authorities: 'Recently a government agency wanted us to start logging information we don't log. We told them we wouldn't start logging that piece of data because we don't need it to provide a good product. We talked to our general counsel. The law is not black-and-white. That agency thinks they can compel us to. We told them to go to court. They haven't done that yet.'"
You've already saved them quite a bit of work there.
So Facebook provides all the necessary info for Law Enforcement, but doesn't engage in detailed logging, probably because it is too expensive and as the gentleman said, it doesn't yet fit in with FB's business model. Still, they provide peoples' names, emails, and IP addresses for Law Enforcement, so really they cooperate with the fuzz as much as is needed. Nice damage control, making themselves out to be standing up to Big Brother. Then again, IDNRTFA, and with the way sunmaries have been lately, this could be an article about My Little Pony, for all I know...
- elgo
What could possibly be so privacy-invading, not-worth-the-disk-space-to-log-it crazy that Facebook doesn't already log it? These people make tons of money selling every minute bit of data and metrics about their suckers^H^H^H^H^H^H^Husers that they can possibly hoover up. What could it be that even *they* wouldn't want to log?
Just goes to show, there is no boundary that some government agency won't want to cross to invade your privacy.
Paragraph (c)(2) at the following link:
http://www.law.cornell.edu/uscode/text/18/2703
"(2) A provider of electronic communication service or remote computing service shall disclose to a governmental entity the—
(A) name;
(B) address;
(C) local and long distance telephone connection records, or records of session times and durations;
(D) length of service (including start date) and types of service utilized;
(E) telephone or instrument number or other subscriber number or identity, including any temporarily assigned network address; and
(F) means and source of payment for such service (including any credit card or bank account number),
of a subscriber to or customer of such service when the governmental entity uses an administrative subpoena authorized by a Federal or State statute or a Federal or State grand jury or trial subpoena or any means available under paragraph (1)."
Paragraph (1) provides for broader disclosure under certain circumstances (but still requires a real warrant for disclosure of contents of communications). This is the same statute that lets the cops get access to your phone records without a warrant. An "administrative subpoena", does not require judicial review. Processes vary, but basically it amounts to getting a superior to sign off that you have a legitimate law enforcement reason to get the info (helps keep people from searching their spouses phone records, but does nothing to keep the cops from looking in anyone's records if they are in any way suspected of a crime).