Chapter 4:
Government Data Collection and Use

The Temptation to Abuse Government Databases

Governments at every level collect personal data, with varying degrees of scope and detail. Data is necessary for many parts of government to function, from providing social services, to enrolling students in public schools, to issuing passports. The scale of collection is expansive and growing, but it’s also difficult to quantify,^[103] particularly because private companies often play a central role in helping governments gather and store data.^[104] Data needs to be accessible to government employees and contractors for legitimate purposes. But, in far too many instances, the availability of personal data—and government’s inability to properly manage and oversee its own staff’s activities—has led to abuse.

At a local level, women appear over-represented among the targets of such abuse, especially by police.

At a local level, women appear over-represented among the targets of such abuse, especially by police. Law enforcement officers have been accused of inappropriately using databases to stalk women in Minnesota,^[105] Illinois,^[106] New Jersey,^[107] New York,^[108] and North Carolina.^[109] One officer went so far as to travel to a woman’s vehicle and leave a note for her.^[110] Another extensive episode involved an NYPD detective who “hacked into computers to collect private email accounts and passwords of 21 fellow officers and nine other people to snoop on his ex-girlfriend.”^[111] Officers have also been accused of using databases to look up individuals at the request of women they were trying to impress in Connecticut^[112] and Alaska.^[113]

The federal government maintains an enormous amount of data, raising similar issues on a national scale. For example, Edward Snowden recently claimed that it was common for analysts at the NSA to share nude photos they find in the course of their duties.^[114] A similar story emerged in 2008 when two former NSA analysts came forward to discuss their access to the personal communications of US citizens living abroad. They reported that the analysts would recommend particular calls to each other based on their sexual content and that the list of calls is “stored the way you’d look at songs on your iPod and you could pull up a song on your iPod” using a person’s phone number.^[115]

In a series of cases commonly referred to as LOVEINT, the NSA confirmed that, in the last decade, there were at least 12 cases of individual analysts using the SIGINT (signals intelligence) system to inappropriately track individuals, as well as two other cases currently under investigation.^[116] In most cases, analysts were searching for information on people they knew socially or romantically.^[117] The NSA Director of Compliance argued that the number of incidents by the agency was extremely low compared with its overall activities^[118] But most of the incidents were self-reported,^[119] so its not unreasonable to believe that the actual number of infractions taking place is higher than the reported number.

Collecting, storing and analyzing massive amounts of personal data enhances the government’s ability to help and protect ordinary citizens. But the availability of data can pose a temptation too great for a small percentage of those individuals who have access. As governments expand their use of data, there is significant room to improve the policies and practices to further lower the risk that this data is abused.