Hacker News new | ask | show | jobs
by mcmillion 4229 days ago
Wait, we have a Privacy Act? I'm assuming it doesn't work, then.
2 comments

And you're probably right. Is this the same 30 (?) year old Privacy Act that allows law enforcement to get our emails after 180 days without any warrant, because they are considered "abandoned"?

In the meantime, Google is trying to push everyone to archive rather than delete emails with its new Inbox client, making it once again very convenient for law enforcement to get this sort of data from us without too many obstacles.

And what's happening with that E2E plugin for Gmail? Is it still coming? What's the progress on that? Will it even work with Inbox? Because they seem to have pretty opposite goals. Maybe I wouldn't mind it too much, if I didn't know Google wants to eventually kill Gmail.com and replace it with Inbox.

It's actually very difficult to comply with, but that's a topic for a different conversation. That spreadsheet you keep of customer orders that you've mailed goods to from your personal eBay business? Definitely not Privacy Act-compliant.

Either way though as written it works well enough, the government was never going to raise privacy above the level of gaining military intelligence needed to win in World War 3, or to completely stop law enforcement investigations. Accordingly the Privacy Act would contain exemptions allowing for warrants to still work, if nothing else.

But this doesn't mean that the data, once captured by a warrant, need not be protected by privacy controls in accordance with the Privacy Act, and I think this is the argument Google is making, that the government should apply at least the same standards of data protection to data captured on foreign individuals (however it's captured) as it does to data captured on citizens. Additionally, if the government treats foreigners as if they were protected by Privacy Act it might also reduce the number of ways in which the government could compel production of evidence on those foreigners, especially data held by U.S. companies.

Privacy Act was never meant to prevent the collection of evidence for investigations, or to prevent legally-obtained evidence from being used in legal or administrative proceedings, but those are not the only protections Privacy Act gives, so applying it to aliens could well be a net gain. IANAL though, hopefully someone else can explain what exactly Google is going after here.