02.29.16

Gardner Joins Bipartisan Coalition to Create National Commission on Digital Security

Washington – Senator Cory Gardner (R-CO) today joined a bipartisan, bicameral coalition in introducing legislation to establish an independent National Commission on Security and Technology Challenges. As stated by Sen. Mark R. Warner (D-VA), the purpose of the digital security Commission is to bring together all stakeholders, including tech leaders, law enforcement, the intelligence community, privacy and civil liberties advocates, computer science researchers, and global commerce leaders, who will be charged with developing recommendations for maintaining privacy and digital security while also finding ways to keep criminals and terrorists from exploiting these technologies to escape justice. 

The legislation is co-sponsored in the Senate by Brian Schatz (D-HI), Susan Collins (R-ME), Michael Bennet (D-CO), Shelley Moore Capito (R-WV), Angus King (I-ME), and Dean Heller (R-NV). In addition to House Homeland Security Committee Chairman Michael McCaul (R-TX), House co-sponsors are Reps. Jim Langevin (R-RI), Patrick Meehan (R-PA), Suzan Delbene (D-WA), Mike Bishop (R-MI), Ted Lieu (D-CA), Will Hurd (R-TX), Kathleen Rice (D-NY), Blake Farenthold (R-TX), Eric Swalwell (D-CA), Dan Donovan (R-NY), Jerry McNerney (D-CA), Barbara Comstock (R-VA), Mimi Walters (R-CA), Ryan Costello (R-PA), and Dave Reichert (R-WA).  

Under the proposal, a 16-member Commission, which will include a broad range of individuals with specific expertise, will be appointed in equal numbers by the bipartisan leadership of the House and Senate. The Commission also will include a nonvoting representative selected by the Administration. The Commission will be charged with issuing an interim report within six months, and will be required to submit majority recommendations for Congress to consider within 12 months of the law’s enactment. 

“Advances in technology drive the world economy and improve privacy for consumers, but those advances do not come without challenges. As the debate continues on how to balance the preservation of our civil liberties with the protection of our citizens, a strong consensus remains: there is no easy answer to solve this problem,” said Sen. Gardner. “That’s why the establishment of the Digital Security Commission is essential as it unites our country’s brightest experts from the government and private sector who are in the best position to develop and present recommendations to Congress to tackle the issue of digital security.”

“As someone who spent nearly two decades in the tech industry, I recognize that there are no easy or simple solutions to the challenges posed by the growing use of secure technologies. The same tools that allow terrorists and criminals to evade detection by American intelligence and law enforcement are also used each day by Americans who rely upon secure technologies to safely shop online, communicate with friends and family, and run their businesses,” said Sen. Warner. “I believe that we can strike an appropriate balance that protects Americans' privacy, American security, and American competitiveness, but we won't achieve that while all sides continue to talk past each other. What we don’t want is a solution that could simply drive terrorists to use software and hardware based overseas, pushing their communications even farther out of reach for American law enforcement and intelligence. Chairman McCaul has been a solid partner in this initiative, and I appreciate the support for this proposal from colleagues in both parties and on both sides of Capitol Hill.”   

“The challenge of protecting national security and digital security simultaneously, is complex. The ongoing Apple vs. FBI dispute is only a symptom of a much larger problem. But we are almost certain to see this scenario repeated unless the larger issue is addressed. Law enforcement clearly needs the ability to gain lawful access to information that can stop future attacks,” said Chairman McCaul. “I am proud to partner with Senator Warner on this initiative and I urge our colleagues in both chambers to quickly establish this Commission so we may effectively address this challenge for law enforcement now and in the future.”

Digital security and communications technology and national security are inextricably linked. Digital security and communications technology, including encryption, protects critical infrastructure, financial systems, health records, online security, commercial transactions, government information, and personal privacy.? But the same tools that Americans rely on to safely shop online, protect their health records, exchange emails and texts away from prying eyes, and run their businesses can be exploited by terrorists and criminals to hide their activities from U.S. intelligence and law enforcement. Because extremists are “going dark,” law enforcement officials warn that we are “going blind” in our efforts to track them.  

It is clear that the U.S. faces a difficult question of how to take advantage of privacy and security benefits of digital security and communications technology while minimizing risks posed by its abuse – yet no simple path forward exists despite years of dialogue between the tech sector, law enforcement, and national security professionals. The Commission will bring together leaders from tech companies, the privacy community, law enforcement, and others to examine the intersection of digital technology and national security and determine the implications for national security, public safety, data security, privacy, innovation, and American competitiveness in the global marketplace.? The panel will engage with all the key stakeholders to get to the heart of these challenges and publish findings and recommendations in a publicly available report for all to consider.

Composition of the Commission

Two commissioners will be selected from each of the following fields:

  • Cryptography
  • Global commerce and economics
  • Federal law enforcement
  • State and local law enforcement
  • Consumer-facing technology sector
  • Enterprise technology sector
  • Intelligence community
  • Privacy and civil liberties community

The Speaker of the House and Senate Majority Leader will appoint eight commissioners, one from each field, including a Chairman. The House Minority Leader and the Senate Minority Leader will appoint eight commissioners, one from each field, including one Vice Chairman.

In addition, the President may appoint one ex officio individual to serve on the Commission in a nonvoting capacity.

Reporting 

In a report to Congress, the Commission will provide, at a minimum, assessments of:

  • The issue of multiple security interests (public safety, privacy, national security, and communications and data protection) both now and in ten years.
  • The economic and commercial value of cryptography and digital security and communications technology.
  • The benefits of cryptography and digital security and communications technology to national security and crime prevention.
  • The role of cryptography and digital security and communications technology in protecting the privacy and civil liberties of Americans.
  • The effects the use of cryptography and other digital security and communications technology has on law enforcement and counterterrorism.
  • The costs of weakening cryptography and digital security and communications technology standards. 
  • International laws, standards, and practices for legal access to communications and data protected by cryptography and digital security and communications technology.

The Commission’s report will also include recommendations for policy and practice, and may include recommendations for legislation, regarding:

  • Methods to take advantage of the benefits of digital security and communications technology while mitigating the risk of abuse by bad actors.
  • The tools, training, and resources that could be utilized by law enforcement and national security agencies to adapt to the new digital landscape.
  • Cooperation between the government and private sector to work together to impede terrorists’ use of digital security and communications technology to mobilize, facilitate, and carry out attacks.
  • Any revisions to current law regarding wiretaps and warrants for digital data, while preserving privacy and market competitiveness.
  • Proposed changes to procedures for obtaining warrants to increase efficiency and cost effectiveness for the government, tech companies, and service providers.
  • Steps the U.S. can take to lead the development of international standards for digital evidence for criminal investigations, including reforming the mutual legal assistance treaty (MLAT) process.

 

The Commission will issue an interim report within 6 months, and a final report within 12 months. 

For the full bill text, click here. For a section-by-section summary, click here

 

# # #