The CIA Has Secretly Run a ‘Bulk Collection’ Program Affecting Americans

Newly Declassified Documents Reveal Previously Secret CIA Bulk Collection, Problems With CIA Handling of Americans’ Information

Senators Call for Critically Needed Transparency About CIA Bulk Collection; Documents Declassified at Wyden and Heinrich’s Request

Washington, D.C. – U.S. Senator Ron Wyden, D-Ore., and Sen. Martin Heinrich, D-N.M., both members of the Senate Intelligence Committee, called for new transparency about bulk surveillance conducted by the Central Intelligence Agency, following the release of documents that revealed a secret bulk collection program and problems with how the agency searches and handles Americans’ information.

Wyden and Heinrich requested the declassification of a report by the Privacy and Civil Liberties Oversight Board on a CIA bulk collection program, in a letter sent April 13, 2021. The letter, which was declassified and made public today reveals that “the CIA has secretly conducted its own bulk program,” authorized under Executive Order 12333, rather than the laws passed by Congress.

The letter notes that the program was “entirely outside the statutory framework that Congress and the public believe govern this collection, and without any of the judicial, congressional or even executive branch oversight that comes from [Foreign Intelligence Surveillance Act] collection.” 

“FISA gets all the attention because of the periodic congressional reauthorizations and the release of DOJ, ODNI and FISA Court documents,” said Senators Wyden and Heinrich in response to the newly declassified documents.  “But what these documents demonstrate is that many of the same concerns that Americans have about their privacy and civil liberties also apply to how the CIA collects and handles information under executive order and outside the FISA law.  In particular, these documents reveal serious problems associated with warrantless backdoor searches of Americans, the same issue that has generated bipartisan concern in the FISA context.”

Wyden and Heinrich called for more transparency from the CIA, including what kind of records were collected and the legal framework for the collection. The PCLOB report noted problems with CIA’s handling and searching of Americans’ information under the program.

“While we appreciate the release of the ‘Recommendations from PCLOB Staff’ which highlights problems associated with the handling of Americans’ information, our letter also stressed that the public deserves to know more about the collection of this information.  The DNI and the CIA Director have started this process.  We intend to continue to urge them to achieve the transparency the American people deserve.”

The Wyden-Heinrich letter is here.

A portion of PCLOB’s report on the program was made public here.

You may also enjoy reading, CVEs You May Have Missed While Log4J Stole The Headlines

Got to Cybersecurity News

Go to Homepage

Go to Cybersecurity Academy

Stay informed of the latest Cybersecurity trends, threats and developments. Sign up for RiSec Weekly Cybersecurity Newsletter Today

Remember, CyberSecurity Starts With You!

• Globally, 30,000 websites are hacked daily.
• 64% of companies worldwide have experienced at least one form of a cyber attack.
• There were 20M breached records in March 2021.
• In 2020, ransomware cases grew by 150%.
• Email is responsible for around 94% of all malware.
• Every 39 seconds, there is a new attack somewhere on the web.
• An average of around 24,000 malicious mobile apps are blocked daily on the internet.

• About
• Latest Posts

Connect

RiSec.n0tst3

Hello! I'm Steve, an independent security researcher, and analyst from Scotland, UK.

I've had an avid interest in Computers, Technology and Security since my early teens. 20 years on, and, it's a whole lot more complicated...

I've assisted Governments, Individuals and Organizations throughout the world. Including; US DOJ, NHS UK, GOV UK.

I'll often reblog infosec-related articles that I find interesting. On the RiSec website, You'll also find a variety of write-ups, tutorials and much more!

Connect

Latest posts by RiSec.n0tst3 (see all)

• UK: NCSC publishes new cybersecurity guidance for online retailers - 22 September 2022
• How to request a CVE: From vulnerability discovery to disclosure - 21 September 2022
• Rockstar confirms hack after Grand Theft Auto 6 leak - 19 September 2022