Should President Obama have the power to shut down domestic Internet traffic during a state of emergency?
Senators John Rockefeller (D-W. Va.) and Olympia Snowe (R-Maine) think so. On Wednesday they introduced a bill to establish the Office of the National Cybersecurity Advisor—an arm of the executive branch that would have vast power to monitor and control Internet traffic to protect against threats to critical cyber infrastructure.
The Cybersecurity Act of 2009 (PDF) gives the president the ability to “declare a cybersecurity emergency” and shut down or limit Internet traffic in any “critical” information network “in the interest of national security.” The bill does not define a critical information network or a cybersecurity emergency. That definition would be left to the president.
The bill does not only add to the power of the president. It also grants the Secretary of Commerce “access to all relevant data concerning [critical] networks without regard to any provision of law, regulation, rule, or policy restricting such access.” This means he or she can monitor or access any data on private or public networks without regard to privacy laws.
The bill could undermine the Electronic Communications Privacy Act (ECPA), says CDT senior counsel Greg Nojeim. That law, enacted in the mid ’80s, requires law enforcement seek a warrant before tapping in to data transmissions between computers.
“It’s an incredibly broad authority,” Nojeim says, pointing out that existing privacy laws “could fall to this authority.”
Jennifer Granick, civil liberties director at the Electronic Frontier Foundation, says that granting such power to the Commerce secretary could actually cause networks to be less safe. When one person can access all information on a network, “it makes it more vulnerable to intruders,” Granick says. “You’ve basically established a path for the bad guys to skip down.”
The bill’s scope, she says, is “contrary to what the Constitution promises us.” That’s because of the impact it could have on Internet users’ privacy rights: If the Commerce Department uncovers evidence of illegal activity when accessing “critical” networks, that information could be used against a potential defendant, even if the department never had the intent to find incriminating evidence. And this might violate the Constitutional protection against searches without cause.