The House Republicans' first major technology initiative is about to be unveiled: a push to force Internet companies to keep track of what their users are doing. A House panel chaired by Rep. F. James Sensenbrenner of Wisconsin is scheduled to hold a hearing tomorrow morning to discuss forcing Internet providers, and perhaps Web companies as well, to store records of their users' activities for later review by police.
One focus will be on reviving a dormant proposal for data retention that would require companies to store Internet Protocol (IP) addresses for two years, CNET has learned.
Tomorrow's data retention hearing is juxtaposed against the recent trend to protect Internet users' privacy by storing less data. Last month, the Federal Trade Commission called for "limited retention" of user data on privacy grounds, and in the last 24 hours, both Mozilla and Google have announced do-not-track technology.
A Judiciary committee aide provided a statement this afternoon saying "the purpose of this hearing is to examine the need for retention of certain data by Internet service providers to facilitate law enforcement investigations of Internet child pornography and other Internet crimes," but declined to elaborate.
Thanks to the GOP takeover of the House, the odds of such legislation advancing have markedly increased. The new chairman of the House Judiciary committee is Lamar Smith of Texas, who previously introduced a data retention bill. Sensenbrenner, the new head of the Subcommittee on Crime, Terrorism, and Homeland Security, had similar plans but never introduced legislation. (It's not purely a partisan issue: Rep. Diana DeGette, a Colorado Democrat, was the first to announce such a proposal.)
Police and prosecutors are the biggest backers of data retention. FBI director Robert Mueller has said that forcing companies to store those records about users would be "tremendously helpful in giving us a historic basis to make a case" in investigations, especially child porn cases. An FBI attorney said last year that Mueller supports storing Internet users' "origin and destination information," meaning logs of which Web sites are visited.
And the International Association of Chiefs of Police, which will be sending a representative to tomorrow's hearing, previously adopted a resolution (PDF) calling for a "uniform data retention mandate" for "customer subscriber information and source and destination information." The group said today in an e-mail exchange that it still supports that resolution.
Jim Harper, director of information policy studies at the free-market Cato Institute, says the push for legislation is an example of pro-regulatory Republicans. "Republicans were put in power to limit the size and scope of the federal government," Harper said. "And they're working to grow the federal government, increase its intrusiveness, and I fail to see where the Fourth Amendment permits the government to require dragnet surveillance of Internet users."
Representing the Obama administration at tomorrow's hearing will be Jason Weinstein, deputy assistant attorney general for the Justice Department's criminal division, who has previously testified (PDF) on intellectual property infringement and was chief of the violent crime section of the U.S. Attorney's office in Baltimore.
For now, the scope of any mandatory data retention law remains hazy. It could mean forcing companies to store data for two years about what Internet addresses are assigned to which customers (Comcast said in 2006 that it would be retaining those records for six months).
Or it could be more intrusive, sweeping in online service providers, and involve keeping track of e-mail and instant-messaging correspondence and what Web pages users visit. Some Democratic politicians have previously called for data retention laws to extend to domain name registries and Web hosting companies and even social-networking sites. The police chiefs' proposal talks about storing information about "destinations" that Internet users visit.
Click for Full Text!