Improving the transparency of government requests for user data from ICT companies

In 1968, the US Congress enacted a detailed list of requirements for transparency reporting of wiretaps but with subsequent surveillance statutes with minimal reporting requirements and rapidly evolving Internet technologies, the gap in surveillance transparency grew. The Snowden disclosures in 2013 provided a peek into the surveillance landscape and the central role of ICT companies in fostering it. While attempting to salvage their tarnished reputations and encourage public discussion, several companies began to see an incentive in publishing 'transparency reports', providing statistics on user data requested by the government. Since then, publishing these reports has become a norm in the industry but the reports provide little benefit in bridging the transparency gap. The varying formats, definitions and levels of granularity in the reports and the absence of a governance framework in the industry, prevent the reports from becoming useful tools for stakeholders wishing to inform policy decisions. In addition, new technologies, modern surveillance techniques, and evolving business models have created a set of transparency requirements that is markedly different from the initial set of requirements established under the US Wiretap Act. This thesis identifies the missing elements in the current transparency reports while providing a detailed list of necessary features. In addition, it uncovers the incentives that can be leveraged using available tools to encourage better reporting practices and suggests technical, legal and policy solutions so that transparency reporting may become a useful public policy tool rather than a ritualistic practice.

Department dc:contributor.department

Massachusetts Institute of Technology. Institute for Data, Systems, and Society.

Grantor dc:publisher

Massachusetts Institute of Technology

Year dc:date.issued

2016

Author dc:creator

• Rahman, Amn

Advisor dc:contributor.advisor

• Daniel J. Weitzner.

• Institute for Data, Systems, and Society.
• Engineering Systems Division.
• Technology and Policy Program.

Statement dc:rights

• M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission.

Licence dc:rights.uri

• http://dspace.mit.edu/handle/1721.1/7582

Language dc:language.iso

eng

Handle dc:identifier.uri

http://hdl.handle.net/1721.1/104826

OAI identifier oai:identifier

oai:dspace.mit.edu:1721.1/104826