natgillin/translations-raw huggingface dataset:
Tilgængelig på adressen: https://www.whitehouse.gov/the-press-office/2014/01/17/presidential-policy-directive-signals-intelligence-activities.
May 20, 2011) (stipulated final order), available at https://www.ftc.gov/sites/default/files/documents/cases/2011/06/110609karnanistip.pdf; see also Lesley Fair, FTC Business Center Blog, Around the World in Shady Ways, https://www.ftc.gov/blog/2011/06/around-world-shady-ways (June 9, 2011).
Retshåndhævelses- og reguleringsorganer kan anmode om oplysninger fra foretagender til efterforskningsformål i USA i medfør af andre strafferetlige, civilretlige og regulerende beføjelser, hvilket ligger uden for rammerne af dette dokument, der kun vedrører nationale sikkerhedsbeføjelser.
Letter from Ken Hyatt, Acting Under Secretary of Commerce for International Trade, International Trade Administration, to Věra Jourová, Commissioner for Justice, Consumers and Gender Equality.
Tilgængelig på adressen: www.icontherecord.tumblr.com/ppd-28/2015/privacy-civil-liberties#ppd-28.
In determining whether to exercise its U.S. SAFE WEB Act authority, the FTC considers, inter alia: ‘(A) whether the requesting agency has agreed to provide or will provide reciprocal assistance to the Commission; (B) whether compliance with the request would prejudice the public interest of the United States; and (C) whether the requesting agency's investigation or enforcement proceeding concerns acts or practices that cause or are likely to cause injury to a significant number of persons.’ 15 U.S.C.
Disse procedurer gennemfører den målrettede overvågning, der redegøres for i dette brev, på en bestemt måde i de enkelte efterretningsenheder.
This authority does not apply to enforcement of competition laws.
Blot for at nævne et eksempel anføres det i NSA's procedurer til gennemførelse af PPD-28, at »indsamlingen så vidt muligt foretages ved brug af en eller flere selektorer for at rette indsamlingen mod specifikke udenlandske efterretningsmål (f.eks. en specifik kendt international terrorist eller terrorgruppe) eller specifikke udenlandske efterretningsemner (f.eks. en fremmed magt eller en agentspredning af masseødelæggelsesvåben)«.
In fiscal years 2012-2015, for example, the FTC used its U.S. SAFE WEB Act authority to share information in response to almost 60 requests from foreign agencies and it issued nearly 60 civil investigative demands (equivalent to administrative subpoenas) to aid 25 foreign investigations.
Tilgængelig på adressen: http://www.dni.gov/files/documents/1017/PPD-28_Status_Report_Oct_2014.pdf.
Although the FTC does not resolve or mediate individual consumer complaints, the FTC affirms that it will prioritize Privacy Shield referrals from EU DPAs.
Tilgængelig på adressen: http://www.dni.gov/files/documents/ICD/ICD%20204%20National%20Intelligence%20Priorities%20Framework.pdf.
In addition, the FTC uses complaints in its Consumer Sentinel database, which is accessible by many other law enforcement agencies, to identify trends, determine enforcement priorities, and identify potential investigative targets.
Intelligence Community Directive (ICD) 203, tilgængelig på adressen: http://www.dni.gov/files/documents/ICD/ICD%20203%20Analytic%20Standards.pdf.
EU individuals can use the same complaint system available to U.S. citizens to submit a complaint to the FTC at www.ftc.gov/complaint.
Se f.eks. rapport fra det amerikanske justitsministeriums generalinspektør »A Review of the Federal Bureau of Investigation's Activities Under Section 702 of the Foreign Intelligence Surveillance Act of 2008« (september 2012), tilgængelig på adressen: https://oig.justice.gov/reports/2016/o1601a.pdf.
For individual Privacy Shield complaints, however, it may be most useful for EU individuals to submit complaints to their Member State DPA or alternative dispute resolution provider.
Se www.dni.gov/clpo.
See FTC, Business Center, Legal Resources, https://www.ftc.gov/tips-advice/business-center/legal-resources?type=case&field-consumer-protection-topics-tid=251.
De amerikanske myndigheder kan ligeledes opnå retsafgørelser i medfør af andre bestemmelser i FISA med henblik på udlevering af oplysninger, herunder oplysninger overført under værnet om privatlivets fred.
The EU-U.S.
I Title I og III i FISA, der tillader henholdsvis elektronisk overvågning og fysiske ransagninger, stilles der krav om en retsafgørelse (undtagen i nødsituationer), og der stilles krav om, at der altid skal være en begrundet mistanke for at antage, at målet for den elektroniske overvågning er en fremmed magt eller en agent fra en fremmed magt.
Privacy Shield Framework in Context: An Overview of the U.S. Privacy and Security Landscape
Title IV i FISA tillader anvendelsen af pen-register- og trap and trace-anordninger i medfør af en retsafgørelse (undtagen i nødsituationer) i forbindelse med godkendte udenlandske efterretnings-, kontraspionage- og terrorbekæmpelsesefterforskninger.
The protections provided by the EU-U.S. Privacy Shield Framework (the ‘Framework’) exist in the context of the broader privacy protections afforded under the U.S. legal system as a whole.
Som anført nedenfor forbyder USA FREEDOM Act specifikt anvendelsen af FISA-retsafgørelser med henblik på installation af pen-register eller masseindsamling af forretningsoplysninger, og der stilles krav om en »specifik selektor«, der skal sikre en målrettet anvendelse af disse tilladelser.
Second, the landscape of consumer privacy and security protection in the United States has evolved substantially since 2000 when the original U.S.-EU Safe Harbor program was adopted.
Se Pub.
The broad scope of U.S. legal protections for consumer privacy and security applicable to commercial data practices complements the protections provided to EU individuals by the new Framework.
§ 1881a(a) og (b).
I. THE FTC'S GENERAL PRIVACY AND SECURITY ENFORCEMENT PROGRAM
Se PCLOB-rapport, s. 99.
The FTC is the leading U.S. consumer protection agency focused on commercial sector privacy.
§ 1881a(d) og (e).
The FTC has authority to prosecute unfair and deceptive acts or practices that violate consumer privacy, as well as to enforce more targeted privacy laws that protect certain financial and health information, information about children, and information used to make certain eligibility decisions about consumers.
Se PCLOB-rapport, s. 111.
The FTC has unparalleled experience in consumer privacy enforcement.
Director of National Intelligence 2014 Transparency Report, tilgængelig på adressen: http://icontherecord.tumblr.com/transparency/odni_transparencyreport_cy2014.
The FTC has sued businesses that allegedly spammed consumers, installed spyware on computers, failed to secure consumers' personal information, deceptively tracked consumers online, violated children's privacy, unlawfully collected information on consumers' mobile devices, and failed to secure internet-connected devices used to store personal information.
Minimeringsprocedurerne er tilgængelige på adressen: http://www.dni.gov/files/documents/ppd-28/2014%20NSA%20702%20Minimization%20Procedures.pdf (»NSA Minimization Procedures«), http://www.dni.gov/files/documents/ppd-28/2014%20FBI%20702%20Minimization%20Procedures.pdf, og http://www.dni.gov/files/documents/ppd-28/2014%20CIA%20702%20Minimization%20Procedures.pdf.
The resulting orders have typically provided for ongoing monitoring by the FTC for a period of 20 years, prohibited further law violations, and subjected the businesses to substantial financial penalties for order violations [1].
Se NSA Report, s. 4.
Importantly, FTC orders do not just protect the individuals who may have complained about a problem; rather, they protect all consumers dealing with the business going forward.
Se f.eks. NSA Minimization Procedures, s. 6.
In the cross-border context, the FTC has jurisdiction to protect consumers worldwide from practices taking place in the United States [2].
Intelligence Agency PPD-28-procedurer er tilgængelige på adressen: http://icontherecord.tumblr.com/ppd-28/2015/privacy-civil-liberties.
To date, the FTC has brought over 130 spam and spyware cases, over 120 ‘Do Not Call’ telemarketing cases, over 100 Fair Credit Reporting Act actions, almost 60 data security cases, more than 50 general privacy actions, almost 30 cases for violations of the Gramm-Leach-Bliley Act, and over 20 actions enforcing the Children's Online Privacy Protection Act (‘COPPA’) [3].
Se NSA Minimization Procedures, PPD-28 Section 4.
In addition to these cases, the FTC has also issued and publicized warning letters [4].As part of its history of strong privacy enforcement, the FTC has also regularly looked for potential violations of the Safe Harbor program.
§ 1881(l), se også PCLOB-rapport, s. 66-76.
Since the Safe Harbor program was adopted, the FTC has undertaken numerous investigations into Safe Harbor compliance on its own initiative and has brought 39 cases against U.S. companies for Safe Harbor violations.
Se »Semiannual Assessment of Compliance with Procedures and Guidelines Issues Pursuant to Section 702 of the Foreign Intelligence Surveillance Act, Submitted by the Attorney General and the Director of National Intelligence«, s. 2-3, tilgængelig på adressen: http://www.dni.gov/files/documents/Semiannual%20Assessment%20of%20Compliance%20with%20procedures%20and%20guidelines%20issued%20pursuant%20to%20Sect%20702%20of%20FISA.pdf.
The FTC will continue this proactive approach by making enforcement of the new Framework a priority.
Regel 13 i procedurereglerne for Foreign Intelligence Surveillance Court, tilgængelig på adressen: http://www.fisc.uscourts.gov/sites/default/files/FISC%20Rules%20of%20Procedure.pdf.
FEDERAL AND STATE PROTECTIONS FOR CONSUMER PRIVACY
Brev fra Reggie B. Walton til Patrick J. Leahy af 29. juli 2013, tilgængelig på adressen: http://fas.org/irp/news/2013/07/fisc-leahy.pdf.
The Safe Harbor Enforcement Overview, which appears as an annex to the European Commission's Safe Harbor adequacy decision, provides a summary of many of the federal and state privacy laws in place at the time the Safe Harbor program was adopted in 2000 [5].
Se Section 401 i USA FREEDOM Act, P.L.
At that time, many federal statutes regulated the commercial collection and use of personal information, beyond Section 5 of the FTC Act, including: the Cable Communications Policy Act, the Driver's Privacy Protection Act, the Electronic Communications Privacy Act, the Electronic Funds Transfer Act, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, the Right to Financial Privacy Act, the Telephone Consumer Protection Act, and the Video Privacy Protection Act.
Se også § 1881a(l)(1).
Many states had analogous laws in these areas as well.
Se også § 1881a(l)(3).
Since 2000, there have been numerous developments at both the federal and state level that provide additional consumer privacy protections [6].
Nogle af disse rapporter er klassificerede.
At the federal level, for example, the FTC amended the COPPA Rule in 2013 to provide a number of additional protections for children's personal information.
Udtalelse og afgørelse, 26 (FISC 2014), tilgængelig på adressen: http://www.dni.gov/files/documents/0928/FISC%20Memorandum%20Opinion%20and%20Order%2026%20August%202014.pdf.
The FTC also issued two rules implementing the Gramm- Leach-Bliley Act — the Privacy Rule and the Safeguards Rule — which require financial institutions [7] to make disclosures about their information sharing practices and to implement a comprehensive information security program to protect consumer information [8].
Se idem §§ 103, 201, 501.
Similarly, the Fair and Accurate Credit Transactions Act ( ‘FACTA’), enacted in 2003, supplements longstanding U.S. credit laws to establish requirements for the masking, sharing, and disposal of certain sensitive financial data.
Nationale sikkerhedsbreve har hjemmel i en række love og giver kun FBI mulighed for at indhente registeroplysninger såsom kreditoplysninger, finansielle oplysninger og elektroniske abonnent- og transaktionsoplysninger fra visse typer virksomheder med henblik på beskyttelse mod international terrorisme eller hemmelige efterretningsaktiviteter.
The FTC promulgated a number of rules under FACTA regarding, among other things, consumers' right to a free annual credit report; secure disposal requirements for consumer report information; consumers' right to opt out of receiving certain offers of credit and insurance; consumers' right to opt out of the use of information provided by an affiliated company to market its products and services; and requirements for financial institutions and creditors to implement identity theft detection and prevention programs [9].
Modtagere af et nationalt sikkerhedsbrev kan anfægte det ved domstolene.
Rules protecting consumers from unwanted telemarketing calls, robocalls, and spam have also gone into effect.
Se idem.
Congress has also enacted laws requiring certain companies that collect health information to provide consumers with notification in the event of a breach [11].
Se idem § 401.
States have also been very active in passing laws related to privacy and security.
Se idem § 602.
Since 2000, forty-seven states, the District of Columbia, Guam, Puerto Rico and the Virgin Islands have enacted laws requiring businesses to notify individuals of security breaches of personal information [12].
Se idem § 603.
At least thirty-two states and Puerto Rico have data disposal laws, establishing requirements for the destruction or disposal of personal information [13].
Se idem §§ 502(f)-503.
A number of states also have enacted general data security laws.
Tilgængelig på adressen: http://www.dni.gov/index.php/intelligence-community/intelligence-transparency-principles.
In addition, California has enacted various privacy laws, including a law requiring companies to have privacy policies and disclose their Do Not Track practices [14], a ‘Shine the Light’ law requiring greater transparency for data brokers [15], and a law that mandates an ‘eraser button’ allowing minors to request the deletion of certain social media information [16].
Tilgængelig på adressen: http://www.dni.gov/files/documents/Newsroom/Reports%20and%20Pubs/Principles%20of%20Intelligence%20Transparency%20Implementation%20Plan.pdf.
Using these laws and other authorities, federal and state governments have levied significant fines against companies that have failed to protect the privacy and security of consumers' personal information [17].Private lawsuits have also led to successful judgments and settlements that provide additional privacy and data security protection for consumers.
Tilgængelig på adressen: https://www.nsa.gov/civil_liberties/_files/nsa_report_on_section_702_program.pdf, https://www.nsa.gov/civil_liberties/_files/UFA_Civil_Liberties_and_Privacy_Report.pdf, https://www.nsa.gov/civil_liberties/_files/UFA_Civil_Liberties_and_Privacy_Report.pdf.
For example, in 2015, Target agreed to pay USD 10 million as part of a settlement with customers who claimed their personal financial information was compromised by a widespread data breach.
Se f.eks. New York Times v. Department of Justice, 756 F.3d 100 (2d Cir.
In 2013, AOL agreed to pay a USD 5 million settlement to resolve a class action involving alleged inadequate de- identification related to the release of search queries of hundreds of thousands of AOL members.
2014); American Civil Liberties Union v. CIA, 710 F.3d 422 (D.C. Cir.
Additionally, a federal court approved a USD 9 million payment by Netflix for allegedly keeping rental history records in violation of the Video Privacy Protection Act of 1988.
2014).
Federal courts in California approved two separate settlements with Facebook, one for USD 20 million and another for USD 9,5 million, involving the company's collection, use, and sharing of its users' personal information.
Generelle oplysninger er tilgængelige på adressen: https://www.pclob.gov/library.html#oversightreports.
And, in 2008, a California state court approved a USD 20 million settlement with LensCrafters for unlawful disclosure of consumers' medical information.
Generelle oplysninger er tilgængelige på adressen: https://www.pclob.gov/events/2015/may13.html.
In sum, as this summary illustrates, the United States provides significant legal protection for consumer privacy and security.
2000ee(d)(1); se også PCLOB Advisory Function Policy and Procedure, Policy 2015-004, tilgængelig på adrresen: https://www.pclob.gov/library/Policy-Advisory_Function_Policy_Procedure.pdf.
The new Privacy Shield Framework, which ensures meaningful safeguards for EU individuals, will operate against this larger backdrop in which the protection of consumers' privacy and security continues to be an important priority.
Section 2 og 4 i Inspector General Act fra 1978, som ændret (i det følgende benævnt »IG Act«), Section 103H(b) og (e) i National Security Act fra 1947, som ændret (i det følgende benævnt »Nat'l Sec.
Any entity that fails to comply with an FTC order is subject to a civil penalty of up to USD 16000 per violation, or USD 16000 per day for a continuing violation.
Act«), og Section 17(a) i Central Intelligence Act (i det følgende benævnt »CIA Act«).
See 15 U.S.C.
L. No. 113-293, 128 Stat. 3990, (Dec. 19, 2014).
Congress has expressly affirmed the FTC's authority to seek legal remedies, including restitution, for any acts or practices involving foreign commerce that (1) cause or are likely to cause reasonably foreseeable injury in the United States, or (2) involve material conduct occurring within the United States.
Generalinspektøren for forsvarsministeriet og generalinspektøren for efterretningstjenesterne har dog sammenfaldende beføjelser over disse agenturer.
In some instances, the Commission's privacy and data security cases allege that a company engaged in both deceptive and unfair practices; these cases also sometimes involve alleged violations of multiple statutes, such as the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, and COPPA.
Generalinspektøren for efterretningstjenesterne offentliggør ligeledes sine halvårlige rapporter på adressen: https://www.dni.gov/index.php/intelligence-community/ic-policies-reports/records-requested-under-foia#icig.
Trade Comm'n, FTC Warns Children's App Maker BabyBus About Potential COPPA Violations (Dec.
Brev fra Deputy Assistant Attorney General and Counselor for International Affairs Bruce Swartz, det amerikanske justitsministerium
Trade Comm'n, FTC Warns Data Brokers That Provide Tenant Rental Histories They May Be Subject to Fair Credit Reporting Act (Apr.
Dette brev giver et kort overblik over de vigtigste efterforskningsmetoder, der kan anvendes til at indhente forretningsoplysninger og andre optegnelser fra virksomheder i USA med henblik på strafferetlig håndhævelse eller den offentlige interesse (civilretlige eller reguleringsmæssige formål), herunder begrænsningerne for adgang i disse metoder [1].
3, 2013), https://www.ftc.gov/news-events/press-releases/2013/04/ftc-warns-data-brokers-provide-tenant-rental-histories-they-may.
Virksomheder, der får udstedt et pålæg i USA, kan desuden anfægte det ved domstolene som anført nedenfor [2].
For a more comprehensive summary of the legal protections in the United States, see Daniel J. Solove & Paul Schwartz, Information Privacy Law (5th ed.
Stævninger udstedt af anklagejuryen eller i en retssag (grand jury or trial subpoenas): Stævninger i straffesager anvendes til at understøtte målrettede retshåndhævelsesefterforskninger.
2015).
En stævning udstedt af anklagejuryen er en officiel anmodning fra en anklagejury (normalt på forbundsanklagerens foranledning) om at bistå anklagejuryens efterforskning ved mistanke om en bestemt overtrædelse af straffelovgivningen.
Financial institutions are defined very broadly under the Gramm-Leach-Bliley Act to include all businesses that are ‘significantly engaged’ in providing financial products or services.
Anklagejuryer er domstolens efterforskningsgren og udpeges af en dommer.
This includes, for example, check-cashing businesses, payday lenders, mortgage brokers, nonbank lenders, personal property or real estate appraisers, and professional tax preparers.
En stævning kan pålægge en person at vidne under en retssag eller at tilvejebringe eller udlevere forretningsoplysninger, elektronisk lagrede oplysninger eller andre konkrete ting.
Under the Consumer Financial Protection Act of 2010 (‘CFPA’), Title X of Pub.
Oplysningerne skal være relevante for efterforskningen, og pålæg må ikke være urimelige, dvs. overdrevne, undertrykkende eller byrdefulde.
1955 ( July 21, 2010) (also known as the ‘Dodd-Frank Wall Street Reform and Consumer Protection Act’), most of the FTC's Gramm-Leach-Bliley Act rulemaking authority was transferred to the Consumer Financial Protection Bureau ( ‘CFPB’).
Under begrænsede omstændigheder kan stævninger i straffesager med påbud om udlevering af dokumenter anvendes, efter at sagen er blevet rejst af anklagejuryen.
The FTC retains enforcement authority under the Gramm-Leach- Bliley Act as well as rulemaking authority for the Safeguards Rule and limited rulemaking authority under the Privacy Rule with respect to auto dealers.
Tilladelse til at udstede administrative pålæg (administrative subpoenas): Der kan udstedes administrative pålæg i forbindelse med straffe- og civilretlige undersøgelser.
Under the CFPA, the Commission shares its FCRA enforcement role with the CFPB, but rulemaking authority transferred in large part to the CFPB (with the exception of the Red Flags and Disposal Rules).
I forbindelse med strafferetlig håndhævelse kan der udstedes administrative pålæg i henhold til en række føderale love om tilvejebringelse eller udlevering af forretningsoplysninger, elektronisk lagrede oplysninger eller andre konkrete ting i sager, der involverer misbrug af sundhedsydelser, børnemishandling, beskyttelse af efterretningstjenester og kontrollerede stoffer, og i forbindelse med generalinspektørernes undersøgelser af regeringsorganer.
See 45 C.F.R. pts.
Hvis regeringen anmoder om at få håndhævet et administrativt pålæg ved domstolene, kan modtageren af det administrative pålæg i lighed med modtageren af en stævning med et pålæg udstedt af en anklagejury gøre gældende, at pålægget er urimeligt, fordi det er overdrevent eller undertrykkende eller byrdefuldt.
See, e.g., American Recovery & Reinvestment Act of 2009, Pub.
Retsafgørelser om installation af pen-register- og trap and trace-anordninger: I henhold til de strafferetlige bestemmelser om pen-register- og trap and trace-anordninger kan de retshåndhævende myndigheder få udstedt en retsafgørelse for at få ikke-indholdsmæssige realtidsoplysninger om opkald, routing, adressering og signalering for et telefonnummer eller en e-mailadresse efter fremlæggelse af dokumentation for, at de pågældende oplysninger er relevante for en verserende strafferetlig efterforskning.
L. No 111-5, 123 Stat.
Brug eller installation af en sådan anordning uden lovhjemmel er en føderal forbrydelse.
115 (2009) and relevant regulations, 45 C.F.R.
Electronic Communications Privacy Act (ECPA): Der er en række yderligere bestemmelser, som regulerer regeringens adgang til internetudbyderes, teleselskabers og andre eksterne tjenesteudbyderes opbevarede abonnentoplysninger, trafikdata og lagrede kommunikationsindhold, i Title II i ECPA, også benævnt Stored Communications Act (SCA), 18 U.S.C.
See, e.g., National Conference of State Legislatures (‘NCSL’), State Security Breach Notification Laws (Jan.
I SCA fastsættes en række lovbestemte rettigheder til beskyttelse af privatlivets fred, der begrænser de retshåndhævende myndigheders adgang til oplysninger ud over, hvad der kræves i forfatningsretten, fra kunder og abonnenter hos internetudbydere.
4, 2016), available at http://www.ncsl.org/research/telecommunications-and-information-technology/security-breach-notification-laws.aspx.
I henhold til SCA øges niveauet af beskyttelsen af privatlivets fred afhængigt af indsamlingens indgribende karakter.
NCSL, Data Disposal Laws (Jan.
Strafferetlige håndhævende myndigheder kan kun få udleveret abonnentoplysninger, IP-adresser og tilknyttede tidsstempler på grundlag af et påbud.
12, 2016), available at http://www.ncsl.org/research/telecommunications-and-information-technology/data-disposal-laws.aspx.