
A pair of bills introduced in the U.S. Senate would grant the White House sweeping new powers to access private online data, regulate the cybersecurity industry and even shut down Internet traffic during a declared "cyber emergency." Senate bills No. 773 and 778, introduced by Sen. Jay Rockefeller, D-W.V., are both part of what's being called the Cybersecurity Act of 2009, which would create a new Office of the National Cybersecurity Advisor, reportable directly to the president and charged with defending the country from cyber attack. Privacy advocates and Internet experts have been quick to sound the alarm over the act's broadly drawn government powers. The whole thing smells bad to me," writes Larry Seltzer in eWeek, an Internet and print news source on technology issues. "I don't like the chances of the government improving this situation by taking it over generally, and I definitely don't like the idea of politicizing this authority by putting it in the direct control of the president." In a statement explaining the bill's introduction, Sen. Rockefeller said, "We must protect our critical infrastructure at all costs – from our water to our electricity, to banking, traffic lights and electronic health records – the list goes on." Critics, however, have pointed to three actions Rockefeller and Snowe propose that may violate both privacy concerns and even constitutional bounds: First, the White House, through the national cybersecurity advisor, shall have the authority to disconnect "critical infrastructure" networks from the Internet – including private citizens' banks and health records, if Rockefeller's examples are accurate – if they are found to be at risk of cyber attack. The working copy of the bill, however, does not define what constitutes a cybersecurity emergency, and apparently leaves the question to the discretion of the president. Second, the bill establishes the Department of Commerce as "the clearinghouse of cybersecurity threat and vulnerability information," including the monitoring of private information networks deemed a part of the "critical infrastructure." Third, the legislation proposes implementation of a professional licensing program for certifying who can serve as a cybersecurity professional. According to Granick, granting the Department of Commerce oversight of the "critical" networks, such as banking records, would grant the government access to potentially incriminating information obtained without cause or warrant, a violation of the Constitution's prohibition against unlawful search and seizure.
No comments:
Post a Comment