Leading technology companies have presented a unified front in calling for restrictions on U.S. government surveillance, as ongoing spying revelations undermine trust in their products around the globe.
Bombshell stories throughout the summer in The Guardian, Washington Post and other publications, based on leaks from former security contractor Edward Snowden, uncovered broad and varied digital surveillance programs by the National Security Agency and others. Many sucked up communications and user data handled by major tech companies either through legal requests, or secret taps on their networks.
The latest disclosure arrived on Monday, with news that U.S. and British spy agencies had infiltrated popular online games like World of Warcraft and Second Life. They created their own characters “to snoop and to try to recruit informers,” the New York Times reported, citing confidential documents provided by Snowden.
The move by AOL, Apple, Facebook, Google, LinkedIn, Microsoft and Twitter on Monday underscores the enormous toll that these disclosures could take on their bottom lines and expansion plans. Foreign citizens who lack privacy protections under U.S. law may choose to forgo the products of these companies, and some nations themselves are moving to block or sidestep U.S. Internet services.
Forrester analyst James Staten argued the cost to cloud services alone could reach as high as $180 billion, “or a 25 percent hit to overall IT service provider revenues” over the next three years.
The question is whether the combined lobbying strength of some of the biggest and most influential companies in the United States can rein in government spy tactics, in a way that public opinion and legislators have failed to do to date.
In an open letter to Congress and President Barack Obama published as full-page ads in several major newspapers, the seven tech companies stated: “This summer’s revelations highlighted the urgent need to reform government surveillance practices worldwide. The balance in many countries has tipped too far in favor of the state and away from the rights of the individual — rights that are enshrined in our Constitution.”
It added: “We urge the US to take the lead and make reforms that ensure that government surveillance efforts are clearly restricted by law, proportionate to the risks, transparent and subject to independent oversight.”
At a new website, ReformGovernmentSurveillance.com, the companies called for a series of specific principles and changes: including codifying “sensible limitations” on government’s ability to force online companies to turn over user data; creating stronger checks and balances on the ability of intelligence agencies to demand information, including review by an independent court that hears from critics; allowing companies to disclose “the number and nature of government demands” for user information; and creating a sort of international treaty that would offer a common framework governing requests for user data, cutting across the patchwork of often conflicting national rules.
In addition, the companies argued that governments shouldn’t restrict access to information outside national borders or require companies to locate their infrastructure or operations locally. That appeared to be a specific reaction to countries, such as Germany, where politicians or companies have called for keeping domestic Internet traffic and data within national boundaries.
The Snowden leaks have highlighted that the U.S. government has few legal restrictions on monitoring the communications of foreigners and even fewer compunctions about doing so. That apparently includes listening in on European leaders like German Chancellor Angela Merkel.
Brazil responded to these realizations by announcing a plan to sidestep the United Stations altogether, through construction of a direct, undersea fiber-optic connection between South America and Europe.
Meanwhile, it seems there are many other shoes to drop, as reportedly only one percent of Snowden’s leaks have been revealed so far.
Companies like Facebook, Google, Microsoft and Yahoo were required in many instances to hand over user data when presented with proper legal requests, although the court review process has been widely criticized. But it’s clear the NSA was also tapping into networks without companies’ knowledge, infiltrating communications links between data centers operated by Yahoo and Google, which infuriated some within these companies.
Some businesses took steps to prevent future government surveillance through this route, encrypting the information that passes between data centers.
“The security of users’ data is critical, which is why we’ve invested so much in encryption and fight for transparency around government requests for information,” Larry Page, chief executive of Google, said in a statement. “This is undermined by the apparent wholesale collection of data, in secret and without independent oversight, by many governments around the world. It’s time for reform and we urge the US government to lead the way.”
Yahoo CEO Marissa Mayer hit a similar note.
“Recent revelations about government surveillance activities have shaken the trust of our users, and it is time for the United States government to act to restore the confidence of citizens around the world,” she said in a statement.
There’s a grave fear in tech circles that these national movements to cut off foreign online services will lead to the Balkanization of the Internet, undermining its promise as an open, global platform for communications and commerce. Which is a valid fear and important issue.
But to be clear, the announcement on Monday is at least as much about money as it is high-minded ideals.
Most of these companies, but particularly Facebook and Google, are hardly privacy champions on any other day of the week. It’s not so much that an organization is trying to derive useful information from the bulk collection and analysis of their data — they do that themselves everyday for the purpose of targeting ads. The issue is that another organization is doing it and scaring away existing or potential users in the process.
“The government’s comment was, ‘Oh, don’t worry, basically we’re not spying on any Americans,’” said Mark Zuckerberg, CEO of Facebook, earlier this year at a TechCrunch conference. “Oh, wonderful, that’s … really going to inspire confidence in American Internet companies.”
Indeed.
I have no doubt that the technology giants that signed the open letter on Monday truly want these changes put in place: They would surely reduce the amount of government requests for data and simplify their job of complying with those demands.
But part of this is just good public relations, a way to distance themselves from the NSA in the minds of consumers. And far broader reforms than what they’re proposing are still necessary, as are stronger privacy rules aimed at the private sector itself.
But regardless of the motives, here’s the good news: the seven deep-pocketed companies speaking out for changes are harder for the government to ignore than the civil liberties groups that were calling for digital surveillance restrictions long before Snowden’s leaks began.
