• PC World
• » Security

Who Watches the Watchers?

The possibility that innocent people may become Echelon targets or that the project's spying may exceed legal boundaries bothers privacy activists. They note that when an intelligence project operates in total secrecy, the public has no way of knowing whether or not the program is operating within the law.

"Anytime you have a law enforcement or intelligence agency that claims it is policing itself, I have a real problem with it," says Wayne Madsen, a specialist on U.S. intelligence operations for the Electronic Privacy Information Center.

"I would feel a lot more comfortable if there was an outside ombudsman who was independent who could go in and take a look," he adds.

Echelon is so hush-hush that the NSA will not even acknowledge the program's existence, much less discuss its targeting criteria or its civil liberties safeguards. Only two fragmentary documents have been released under the federal Freedom of Information Act; they consist of just seven highly censored pages. The STOA reports are more detailed but still leave many questions unanswered.

Partly because of STOA's reports, the American Civil Liberties Union petitioned the House Committee on Government Reform last year and asked for an investigation of Project Echelon. The ACLU wants to ensure that Echelon is operating in accordance with federal law and the U.S. Constitution.

"Echelon is a black box, and nobody outside the intelligence community knows what is inside it," says ACLU national director Barry Steinhardt.

For those concerned about potential abuses, the issue is simple: "What it comes down to is, somebody is reading your mail," says Pike, who serves as director of the Federation of American Scientists' Intelligence Project.

"If it is an international transaction, the National Security Agency is monitoring it," Pike adds. "The target is wide open: Essentially, it consists of anything that would be of interest to the U.S. government--and the rest of the English-speaking world." And no one is watching to see what they do with the information.

Here's Looking at You, Kid

News of Echelon comes at a time when privacy concerns loom for us all. Consumer organizations and electronic privacy groups were up in arms after Internet advertising firm DoubleClick purchased a direct marketer last year and announced plans to merge data gathered about consumers into a megadatabase. The information would include consumers' real names and addresses, as well as their Web surfing habits and facts about their purchases.

The uproar, along with several pending lawsuits, recently led DoubleClick to put its plan on hold. Meanwhile, the ACLU, the Cellular Telecommunications Industry Association, the Electronic Privacy Information Center, and others have filed briefs in federal court challenging a Federal Communications Commission order that would force the telecom industry to support extensive police surveillance capabilities in connection with a 1994 law. A hearing on the matter is scheduled for May.

We know that our employers can monitor our e-mail. And no one condones terrorism or crime (except terrorists and criminals). But aren't we still entitled to some level of privacy? Echelon leaves us with few alternatives. Pike says encrypting e-mail may offer some protection--as long as you aren't under suspicion in the first place.

Services such as Anonymizer and Zero Knowledge can provide you with an e-mail name no one can trace to you--a tactic that may lend you some cover. But such a solution is not practical for businesses, and it certainly does not offer a viable long-term option.

For now, watch what you say, and where you send it.