Justice Department seeks mandatory data retention
Criminal investigations “are being frustrated” because no law currently exists to force Internet providers to keep track of what their customers are doing, the U.S. Department of Justice will announce tomorrow.
Context & Ripple Effects
This announcement is the third beat in a two-year legislative push: a 2009 bill would have forced ISPs to retain user data for two years, and in February 2010 the FBI asked for records of Web sites visited to be kept. What changes with the Justice Department stepping in publicly is that the demand moves from individual agencies' wish lists to an administration-level argument that criminal investigations 'are being frustrated' by the absence of any retention mandate.
The backdrop matters because the courts have already drawn lines here: as far back as 2005 a federal judge rejected the government's bid to track a mobile phone user's location without a warrant, requiring probable cause instead. A statutory retention duty would sidestep that case-by-case friction by making the logs exist before any request is made.
First-order effects
- Internet providers are the directly affected party: a mandate would force them to build and run logging infrastructure for every customer's activity, converting what is today voluntary or nonexistent record-keeping into a compliance cost.
- Federal investigators gain a standing evidentiary base — customer activity records would exist by default, removing the current gap where providers simply have nothing to hand over.
Second-order effects
- Privacy advocates and defense counsel can be expected to challenge any such law on Fourth Amendment grounds, testing whether compelled pre-emptive logging differs legally from the warrantless collection courts have already blocked.
- Smaller and regional ISPs face disproportionate burden relative to large carriers, pushing the market toward consolidation among providers who can absorb mandated storage and retrieval systems.
Third-order effects
- If the pattern holds — agency requests in 2009 and 2010 escalating to a Justice Department legislative push — the US moves from ad hoc evidence requests toward surveillance-by-default infrastructure embedded in consumer networks.
- A retention statute would also set the template for extending the same duties to adjacent services beyond wired ISPs, since the stated rationale (frustrated investigations) applies equally to any provider of communications access.
The trend: US law enforcement is shifting from requesting records after the fact to legislating that providers keep them in advance, with the Justice Department's 2011 push consolidating earlier FBI and congressional efforts into one statutory campaign.