Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Privacy

US Senate Panel Passes Email Privacy Measure

WASHINGTON – A US Senate panel approved a bill to boost email privacy protections in a vote Thursday that followed widespread uproar over the FBI probe that toppled CIA director David Petraeus.

The measure, which if enacted would require police to obtain a warrant in most cases to access email accounts, drew immediate praise from privacy activists.

WASHINGTON – A US Senate panel approved a bill to boost email privacy protections in a vote Thursday that followed widespread uproar over the FBI probe that toppled CIA director David Petraeus.

The measure, which if enacted would require police to obtain a warrant in most cases to access email accounts, drew immediate praise from privacy activists.

The proposal had been pending for some time but garnered increased attention after the resignation of Petraeus earlier this month due to an extramarital affair exposed by a search of his email records.

Email Privacy LawSenate judiciary chairman Patrick Leahy, who sponsored the measure, said it would update a 1986 privacy law as “Americans face even greater threats to their digital privacy.”

“After decades of the erosion of Americans’ privacy rights on many fronts, we finally have a rare opportunity for progress on privacy protection,” the Vermont senator said in a statement.

Leahy’s measure requires the government to obtain a search warrant based on probable cause in order to obtain email content from a third-party service provider, with some exceptions in cases of national security or imminent threats.

It also calls for the government to notify an individual whose electronic communication has been disclosed, and provide that individual with a copy of the search warrant used.

Gregory Nojeim of the Center for Democracy and Technology said the bill offered a historic step forward for privacy rights.

“Our privacy laws are woefully outdated given the rapid advance of technology,” he said.

Advertisement. Scroll to continue reading.

Nojeim said the measure “keeps the government from turning cloud providers into a one-stop convenience store for government investigators and requires government investigators to do for online communications what they already do in the offline world: Get a warrant.”

The American Civil Liberties Union also hailed the move.

“This is an important gain for privacy. We are very happy that the committee voted that all electronic content like emails, photos and other communications held by companies like Google and Facebook should be protected with a search warrant,” said Chris Calabrese, ACLU legislative counsel. “We believe law enforcement should use the same standard to search your inbox that they do to search your home.”

The Electronic Frontier Foundation welcomed the move, saying it would “close a dangerous loophole in the 1986 Electronic Communications Privacy Act,” which authorities have argued allows them to access private emails that are more than 180 days old without a warrant.

Robert Holleyman, head of the Software Alliance, also praised the panel for “an important step in building trust and confidence in cloud computing and other digital services.”

“Law enforcement access and civil protections should be the same for online files and other digital records as they are for papers stored in a file cabinet,” Holleyman said.

Petraeus resigned when it became clear that his affair with 40-year-old military reservist Paula Broadwell, his biographer, would become public.

FBI agents stumbled on the liaison after a complaint from Jill Kelley — a friend of Petraeus — who told a federal agent that she had received threatening emails, which investigators later traced to Broadwell.

The Leahy measure would need to pass the Senate and the House of Representatives before going to President Barack Obama’s desk to be signed into law.

Related Reading: Petraeus Case Fuels Fresh Debate on Online Privacy

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Artificial Intelligence

Two of humanity’s greatest drivers, greed and curiosity, will push AI development forward. Our only hope is that we can control it.

Cybersecurity Funding

Los Gatos, Calif-based data protection and privacy firm Titaniam has raised $6 million seed funding from Refinery Ventures, with participation from Fusion Fund, Shasta...

Privacy

Employees of Chinese tech giant ByteDance improperly accessed data from social media platform TikTok to track journalists in a bid to identify the source...

Privacy

Many in the United States see TikTok, the highly popular video-sharing app owned by Beijing-based ByteDance, as a threat to national security.The following is...

Application Security

Open banking can be described as a perfect storm for cybersecurity. At one end, small startups with financial acumen but little or no security...

Mobile & Wireless

As smartphone manufacturers are improving the ear speakers in their devices, it can become easier for malicious actors to leverage a particular side-channel for...

Government

The proposed UK Online Safety Bill is the enactment of two long held government desires: the removal of harmful internet content, and visibility into...

Cloud Security

AWS has announced that server-side encryption (SSE-S3) is now enabled by default for all Simple Storage Service (S3) buckets.