How ICE became a $2.8b domestic surveillance agency
Your US tax dollars at work
The US Immigration and Customs Enforcement (ICE) agency has spent about $2.8 billion over the past 14 years on a massive surveillance "dragnet" that uses big data and facial-recognition technology to secretly spy on most Americans, according to a report from Georgetown Law's Center on Privacy and Technology.
The research took two years and included "hundreds" of Freedom of Information Act requests, along with reviews of ICE's contracting and procurement records. It details how ICE surveillance spending jumped from about $71 million annually in 2008 to about $388 million per year as of 2021. The network it has purchased with this $2.8 billion means that "ICE now operates as a domestic surveillance agency" and its methods cross "legal and ethical lines," the report concludes.
ICE did not respond to The Register's request for comment.
The agency pulls data from Department of Motor Vehicle records, calls, child welfare reports, employment records, geolocation information, health-care and housing records and social media reports, the report said.
In addition to accessing public agencies' records on individuals, ICE also buys customer records from utility companies through its contact with data brokers Thomson Reuters. This is because undocumented people may not want to provide their information to government bodies — like the DMV — because they fear deportation. But they still need to connect their homes to water, gas, electricity and internet services.
"For people who are not easily traceable via traditional sources," a cited Thomson Reuters marketing letter reads, "locator information from utility hookup records may provide the only current and accurate address and phone number data available."
These types of contracts with private data brokers have helped ICE amass utility records from more than 218 million customers across all 50 states and Washington, DC, according to the Georgetown researchers.
Access to all of this information, along with AI tools for scanning and analyzing huge data sets, has turned ICE into a modern-day domestic spy agency, the report suggested:
By reaching into the digital records of state and local governments and buying databases with billions of data points from private companies, ICE has created a surveillance infrastructure that enables it to pull detailed dossiers on nearly anyone, seemingly at any time.
This includes using facial recognition technology to scan driver's license photographs of 32 percent of all adults in the US, the research said. In fact, ICE has access to driver's license data of 74 percent of US adults, and tracks the movements of cars in cities where nearly 70 percent of the adult population lives, it added.
- Europe proposes tackling child abuse by killing privacy, strong encryption
- US appeals court ruling could 'eliminate internet privacy'
- India's ongoing outrage over Pegasus malware tells a bigger story about privacy law problems
- 60 countries sign declaration to keep future internet open
Additionally, ICE was automatically alerted when 74 percent of US adults connected gas, electricity, phone or internet to a new home — thus providing the agency with their home addresses.
And as the researchers noted: "Almost all of that has been done warrantlessly and in secret."
In one particularly heart-wrenching example, the report detailed how ICE used interviews with unaccompanied children crossing US borders and being interviewed by Department of Health and Human Services about family members in America who could care for them. Per an information-sharing agreement between the two agencies, ICE used these kids' interviews to arrest at least 400 of their family members. The practice has now been formally banned by the agency.
Congress and state lawmakers remain mostly unaware of ICE surveillance activities, according to the researchers, which noted that there hasn't been any congressional hearings or Government Accountability Office report focused on such efforts.
And as such, the report authors called on Congress to do a better job overseeing ICE surveillance. This includes updating the Driver's Privacy Protection Act (DPPA) to prohibit, or at least require a warrant or court order, the use of any DMV data for immigration enforcement purposes.
Additionally, states should prohibit the disclosure, sale or resale of utility data for immigration purposes, the team suggests. ®
- Advanced persistent threat
- Black Hat
- Bug Bounty
- Common Vulnerability Scoring System
- Cybersecurity and Infrastructure Security Agency
- Cybersecurity Information Sharing Act
- Data Breach
- Data Protection
- Data Theft
- Digital certificate
- Federal Aviation Administration
- Identity Theft
- Immigration and Nationality Act of 1965
- Kenna Security
- National Labor Relations Board
- NSO Group
- Palo Alto Networks
- Privacy Sandbox
- Remote Access Trojan
- Telecommunications Act of 1996
- Trusted Platform Module
- United States Department of Defense
- United States Department of Justice
- US Securities and Exchange Commission
- Zero trust