You are on page 1of 32

COU CIL OF THE EUROPEA U IO

Brussels, 27 ovember 2013

16 !7"13

#AI 107! U$A 61 %ATAPROTECT 1!& COTER 1'1 E FOPOL 3 & OTE from: to: S#$%ect:

Presidency and Commission Services C !"P"! !eport on t&e findin's $y t&e "( Co)c&airs of t&e ad &oc "()(S *or+in' Gro#p on Data Protection

De,e'ations -i,, find attac&ed t&e !eport on t&e findin's $y t&e "( Co)c&airs of t&e ad &oc "()(S *or+in' Gro#p on Data Protection.

/////////////////

16987/13 DG D 2B

GS/np

1

E

A

E(

Re)or* o+ *,e -.+/.+0s b1 *,e EU Co23,4.rs o- *,e 4/ ,o3 EU2U$ 5or6.+0 7rou) o+ %4*4 Pro*e3*.o+

18

AI9 A % $ETTI 7 UP OF THE 5OR:I 7 7ROUP

3n 4#ne 25136 t&e e7istence of a n#m$er of (S s#rvei,,ance pro'rammes invo,vin' t&e ,ar'e)sca,e co,,ection and processin' of persona, data -as revea,ed. 8&e pro'rammes concern in partic#,ar t&e co,,ection of persona, data from (S internet and te,ecomm#nication service providers and t&e monitorin' of data f,o-s inside and o#tside t&e (S. Given t&e centra, position of (S information and comm#nications tec&no,o'y companies in t&e "( mar+et6 t&e transat,antic ro#tin' of e,ectronic data f,o-s6 and t&e vo,#me of data f,o-s across t&e 0t,antic6 si'nificant n#m$ers of individ#a,s in t&e "( are potentia,,y affected $y t&e (S pro'rammes.

0t t&e "()(S 4#stice and 9ome 0ffairs :inisteria, :eetin' in 4#ne 25136 and in ,etters to t&eir (S co#nterparts6 ;ice)President !edin' and Commissioner :a,mstr<m e7pressed serio#s concerns re'ardin' t&e impact of t&ese pro'rammes on t&e f#ndamenta, ri'&ts of individ#a,s in t&e "(6 partic#,ar,y t&e f#ndamenta, ri'&t to protection of persona, data. C,arifications -ere re=#ested from t&e (S a#t&orities on a n#m$er of aspects6 inc,#din' t&e scope of t&e pro'rammes6 t&e vo,#me of data co,,ected6 t&e e7istence of %#dicia, and administrative oversi'&t mec&anisms and t&eir avai,a$i,ity to individ#a,s in t&e "(6 as -e,, as t&e different ,eve,s of protection and proced#ra, safe'#ards t&at app,y to (S and "( persons.

>#rt&er to a C !"P"! meetin' of 18 4#,y 25136 an ad &oc "()(S *or+in' Gro#p -as esta$,is&ed in 4#,y 2513 to e7amine t&ese matters. 8&e p#rpose -as to esta$,is& t&e facts a$o#t (S s#rvei,,ance pro'rammes and t&eir impact on f#ndamenta, ri'&ts in t&e "( and persona, data of "( citi?ens.

>#rt&er to t&at C !"P"! meetin'6 a @second trac+@ -as esta$,is&ed #nder -&ic& :em$er States may disc#ss -it& t&e (S a#t&orities6 in a $i,atera, format6 matters re,ated to t&eir nationa, sec#rity6 and t&e "( instit#tions may raise -it& t&e (S a#t&orities =#estions re,ated to t&e a,,e'ed s#rvei,,ance of "( instit#tions and dip,omatic missions.

16987/13 011"2

GS/np DG D 2B

2

E

n t&e "( side6 t&e ad &oc *or+in' Gro#p is co)c&aired $y t&e Commission and t&e Presidency of t&e Co#nci,. 3t is composed of representatives of t&e Presidency6 t&e Commission services6 t&e "#ropean "7terna, 0ction Service6 t&e incomin' Presidency6 t&e "( Co#nter)8errorism Co) ordinator6 t&e C&air of t&e 0rtic,e 29 *or+in' Party6 as -e,, as ten e7perts from :em$er States6 &avin' e7pertise in t&e area of data protection and ,a- enforcement/sec#rity. n t&e (S side6 t&e 'ro#p is composed of senior officia,s from t&e Department of 4#stice6 t&e ffice of t&e Director of 1ationa, 3nte,,i'ence6 t&e State Department and t&e Department of 9ome,and Sec#rity.

0 preparatory meetin' too+ p,ace in *as&in'ton6 D.C. on 8 4#,y 2513. :eetin's of t&e Gro#p too+ p,ace on 22 and 23 4#,y 2513 in Br#sse,s6 on 19 and 25 Septem$er 2513 in *as&in'ton6 D.C.6 and on 6 1ovem$er 2513 in Br#sse,s.

8&e findin's $y t&e "( co)c&airs of t&e ad &oc "()(S *or+in' Gro#p are presented in t&is report. 8&e report is $ased on information provided $y t&e (S d#rin' t&e meetin's of t&e ad &oc "()(S -or+in' 'ro#p6 as -e,, as on p#$,ic,y avai,a$,e doc#ments6 inc,#din' c,assified doc#ments disc,osed in t&e press $#t not confirmed $y t&e (S. Participants on t&e "( side &ad an opport#nity to s#$mit comments on t&e report. 8&e (S -as provided -it& an opport#nity to comment on possi$,e inacc#racies in t&e draft. 8&e fina, report &as $een prepared #nder t&e so,e responsi$i,ity of t&e "()co c&airs.

8&e distinction $et-een t&e "()(S *or+in' Gro#p and t&e $i,atera, second trac+6 -&ic& ref,ects t&e division of competences $et-een t&e "( and :em$er States and in partic#,ar t&e fact t&at nationa, sec#rity remains t&e so,e responsi$i,ity of eac& :em$er State6 set some ,imitations on t&e disc#ssion in t&e *or+in' Gro#p and t&e information provided t&erein. 8&e scope of t&e disc#ssions -as a,so ,imited $y operationa, necessities and t&e need to protect c,assified information6 partic#,ar,y information re,ated to so#rces and met&ods. 8&e (S a#t&orities dedicated s#$stantia, time and efforts to respondin' to t&e =#estions as+ed $y t&e "( side on t&e ,e'a, and oversi'&t frame-or+ in -&ic& t&eir Si'na, 3nte,,i'ence capa$i,ities operate.

16987/13 011"2

GS/np DG D 2B

3

E

1861D.. 3n most cases6 pro$a$. a#t&orities t&at serve as $ases for t&e co.. F 1881aDG and Section 21E of t&e (S0 P08!3 8 0ct 2551 C-&ic& a.. 8-o ..i'ence o#tside t&e (S derives direct. comm#nity or &ave ot&er-ise deve. 1 2 @Pro$a$.so s#fficient.y re. 8&e (S c. >or pro$a$.e searc&es and sei?#res@ and re=#ires t&at a -arrant m#st $e $ased #pon @pro$a$.e ca#se &as to e7ist prior to arrest6 searc& or sei?#re6 inc.ieve a crime &as $een committed or t&at certain property is connected -it& a crime. 0ccordin' to t&e (S S#preme Co#rt6 forei'ners -&o &ave not previo#s..aenforcement a#t&orities can ma+e an arrest or searc& -it&o#t a -arrant.e'a.S..ance 0ct of 1978 C>3S0D Cas amended $y t&e 2558 >3S0 0mendments 0ct6 E5 (. 26A)266.oped si'nificant vo.evant to ma+e reference to it &ere. 2E9 C1995D6 pp. 8&e >3S0 Co#rt &as a ro.i'ence co. 8&e protection of t&e >o#rt& 0mendment of t&e (S Constit#tion6 -&ic& pro&i$its @#nreasona$.y re.e ca#se@ m#st $e s&o-n $efore an arrest or searc& -arrant may $e iss#ed.y to (S nationa.e'a. a#t&orities.ection #nder $ot& .C.S.so amended >3S06 E5 (.e ca#se to e7ist t&ere m#st $e s#fficient reason $ased #pon +no-n facts to $e.y on t&e >o#rt& 0mendment if t&ey are part of t&e (S nationa.ance pro'rammes are $ased and carried o#t. A9A (.i'ence S#rvei. 0ccordin' to t&e (S S#preme Co#rt6 forei'ners -&o are not residin' permanent. . $asis #pon -&ic& s#rvei.i'ence a'encies are: Section 752 of t&e >orei'n 3nte.#ntary connections -it& t&e (S cannot invo+e t&e >o#rt& 0mendment2.S. GS/np DG D 2B A 16987/13 011"2 E ..C.#din' in cases -&en .ect forei'n inte. frame-or+6 as interpreted $y t&e (S S#preme Co#rt is a.e'a.. 8&e overa.s and citi?ens of any nation residin' -it&in t&e (S.erd#'o)(r=#ide? H A9A (.y from &is capacity as @commander in c&ief@ and from &is competences for t&e cond#ct of t&e forei'n po.ection of persona.e ca#se@1 e7tends on.icy6 as ens&rined in t&e (S constit#tion. data $y (S inte.. (S constit#tiona.S..e in a#t&orisin' and overseein' inte.arified t&at t&e PresidentBs a#t&ority to co.y deve.y in t&e (S can on.28 THE LE7AL FRA9E5OR: 8&e (S provided information re'ardin' t&e .oped s#fficient connection -it& t&e (S to $e considered part of t&at comm#nity: (S v.

ection of information concernin' non)(S persons6 it is of partic#..8&e (S f#rt&er c.ectronica.so dra-n to "7ec#tive rder 123336 iss#ed $y t&e (S President in 1981 and amended most recent..s and messa'es6 doc#ments and internet $ro-sin' &istoryD and co..ection of e.i'ence co.@ 0s t&e provision is directed at t&e co. 8&e (S confirmed t&at it is #nder Section 752 t&at t&e 1ationa.y in 25586 -&ic& sets o#t certain po-ers and f#nctions of t&e inte. (nder Section 7526 information is o$tained @from or -it& t&e assistance of an e..y stored data6 inc...'.#din'6 accordin' to c.o+ 702 FI$A ....#din' content data6 $y means of directives addressed to t&e main (S internet service providers and tec&no.ocated o#tside t&e (nited States.a-.evance for an assessment of t&e impact of (S s#rvei.8a.i'ence a'encies6 inc..osed in t&e press $#t not confirmed $y t&e (S6 :icrosoft6 Ia&oo6 Goo'.y stored data and data in transmission.ection..ectronic comm#nication service provider@.ection met&ods6 inc.i'ence co.e6 S+ype and Io#8#$e.i'ence information@ re'ardin' persons -&o are @reasona$.'0 U8$8C8 < 1!!14= Material scope of Section 702 FISA Section 752 >3S0 provides a ..ection re. data of "( citi?ens.1.ection of forei'n inte.ection of @forei'n inte. $e3*. 8&e Gro#pBs attention -as a..assified doc#ments disc.o'y companies providin' on.. 16987/13 011"2 GS/np DG D 2B E E . inte.#din' -iretaps and ot&er forms of interception of e.arified t&at not a.ies on t&ese provisions of >3S0G t&ere are ot&er provisions t&at may $e #sed for inte.#din' t&e co..ine services6 inc.o-s co. 8&is can encompass different forms of persona. emai..y $e. $asis for t&e co..+6 0 J6 0pp.ar re. 1o %#dicia. oversi'&t is provided for inte. information Ce.1..ance pro'rammes on t&e protection of persona.i'ence information.ectronica.ieved to $e . 2818 2.e6 >ace$oo+6 Pa.s6 p&oto'rap&s6 a#dio and video ca..e stat#tory .e'a.ica$.. 8&is a.ection #nder "7ec#tive rder 123336 $#t activities commenced p#rs#ant to t&e rder m#st not vio.ate t&e (S constit#tion or app.i'ence co. Sec#rity 0'ency C1S0D maintains a data$ase +no-n as P!3S:.

ected..i'ence is co. E5 (.'.i'ence information@6 as defined $y >3S06 inc.ear as t&e concept of forei'n inte. 8&e (S noted t&at @forei'n inte.ance Co#rt C>3SCD of 3 cto$er 2511 and of 35 1ovem$er 2511.so confirmed t&at Section 752 provides t&e .ection of data is carried o#t #nder Section 7526 $eca#se co. @>orei'n inte.C. F1851CeD C2D read in con%#nction -it& F1851CaD CED and C6D..y $een e7p. '#ide.iferation of -eapons of mass destr#ctionD as -e..y for a specified forei'n inte.imitations on its interpretation6 $#t t&e (S e7p. tar'etin'.#de information concernin' t&e po.#des specific cate'ories of information Ce.ained t&at t&ey co#.S...'.i'ence@ inc. pro..ained in t&e a$stract terms set o#t &ereafter and it remains #nc.. terrorism and internationa.i'ence information and any .es6 at transmission pointsD.ance Co#rt C&ereafter B>3SCBD Co#rt a rationa.i'ence co#. Section 752 does not re=#ire t&e 'overnment to identify partic#... a#t&orities or interna..S.i'ence p#rpose.d $e of interest to t&e (S for its forei'n po..ar tar'ets or 'ive t&e >orei'n 3nte.@ Priorities are identified $y t&e *&ite 9o#se and t&e Director of 1ationa.i'ence S#rvei. internationa..d not provide t&is as to do so -o#.. Section 752 states t&at a specific -arrant for eac& tar'et is not necessary. 8&e "( side as+ed for f#rt&er specification of -&at is covered #nder @forei'n inte.. 8&e act#a.ace on.8&e (S a. 1 2 pinions of t&e >orei'n 3nte.icy2.+ co. specific operationa..s or 'ro#ps6 or activities of 'overnment a'encies6 -&ere s#c& activity co#. as @information re.d6 on t&e face of t&e provision6 inc..ection pro'rammes..d revea.i'ence co.e'a.i'ence &as on...C. 8&e (S stated t&at no $. scope of t&is .ection@G t&is is #nderstood to $e t&e interception of 3nternet comm#nications $y t&e 1S0 as t&ey transit t&ro#'& t&e (S 1 Ce.ist is dra-n #p on t&e $asis of t&ese priorities. F1851CeD6 s#c& as references to .e'a.y -&ic& p#rposes forei'n inte. >orei'n inte. activities of individ#a. $asis for so)ca.ed @#pstream co.i'ence and a .an+et or $#. t&ro#'& ca$. GS/np DG D 2B 6 16987/13 011"2 E .e for individ#a..ear for e7act.ines s#$stantiatin' t&e scope of forei'n inte.i'ence information6@ -it&in t&e meanin' of >3S0 E56 (.i'ence S#rvei.ection of data ta+es p.atin' to t&e cond#ct of t&e forei'n affairs of t&e (S.imitation remains #nc. aspects of inte.#des information 'at&ered -it& respect to a forei'n po-er or a forei'n territory as defined $y >3S06 E5 (SC 1851. 3nte.itica..

ector and transactions containin' m#.e'ations)of)economic)espiona'e.i'ence information $e t&e so..f of ) or 'ive inte.#des t&e ac=#isition of entire BtransactionsB@6 -&ic& @may contain data t&at is -&o..i'ence va..imit its co.)inte..assified >3SC pinions indicate t&at6 d#e to t&e $road met&od of co.ieved to $e .p&p/ne-sroom/press) re...ities to stea. 3t is stated in t&e >3SC Dec.ector@ Cp.i'ence -e co. Statement $y Director of 1ationa.ti comm#nication transactionsL t&at contain references to tar'eted se.. of -&ic& may $e to6 from or a$o#t a tas+ed se.y incapa$. 3nte.d $e re...apper on 0. data is co..ector6 inc.e'ations of "conomic "spiona'e6 8 Septem$er 2513: @*&at -e do not do6 as -e &ave said many times6 is #se o#r forei'n inte..i+e.ection in addition to forei'n inte.ection devices &ave tec&no.y to contain forei'n inte.. 9o-ever6 t&e (S #nder. C. competitiveness or increase t&eir $ottom ...'.eases)2513/926)statement)$y)director)of)nationa. 16987/13 011"2 GS/np DG D 2B 7 E . statement avai..ection on.i'ence 'at&erin' internationa. 1 2 3 Spea+in' at a press conference in Stoc+&o..ect to ) (S companies to en&ance t&eir internationa. 8&e (S e7p.e of distin'#is&in' $et-een transactions containin' on. content of discrete comm#nications t&at are not to6 from6 or a$o#t t&e faci.i'ence capa$i. espiona'e and referred to statements of t&e President of t&e (nited States1 and t&e Director of 1ationa. and t&e Director of 1ationa. Section 752 does not re=#ire t&at forei'n inte.ected t&at may not $e re.o'iesD t&at &as a forei'n inte.y t&e tar'etin' of persons reasona$. 3nte.y6 o#r foc#s is on co#nterterrorism6 -eapons of mass destr#ction6 cy$er sec#rity )) core nationa.ied #nder t&e #pstream pro'ramme and a.e discrete comm#nications6 not a.#din' t&e f#.ectionB of 3nternet comm#nications inc.#e.y affect t&e scope of co...evant portion or portions of eac& :C8@ Cp..ectors are .. t&e macroeconomic sit#ation in a partic#.y to t&e re.i'ence may a#t&ori?e %oint.y a sin'.ined t&at information t&at is o$tained -&ic& may provide a competitive advanta'e to (S companies is not a#t&orised to $e passed on to t&ose companies. 8&e >3SC f#rt&er notes t&at @1S0Bs #pstream co. E7D.n t&e =#estion -&et&er @forei'n inte.assified pinion of 3 cto$er 25116 @1S0s B#pstream co..m on A Septem$er 25136 President $ama said: @-&en it comes to inte..#de activities t&at co#.evant to forei'n inte. 0ccordin' to t&e >3SC Dec. 9o-ever6 t&e dec.o'ica.tip.evant to (S economic interests6 t&e (S stated t&at it is not cond#ctin' any form of ind#stria.. ED.ine@G f#.. sec#rity interests of t&e (nited States@.y #nre.ar co#ntry6 disr#ptive tec&no.i'ence)%ames)r)c.e p#rpose or even t&e primary p#rpose of ac=#isition6 $#t rat&er @a si'nificant p#rpose of t&e ac=#isition@.i'ence information.eases/191)press)re. 8&ere can $e ot&er p#rposes of co.i'ence Ce.i'ence 4ames !.ection devices are 'enera. .a$..y $e.ated to t&e tas+ed se.ocated o#tside t&e (S to ac=#ire forei'n inte.imitations t&at si'nificant. Section 752 provides t&at #pon iss#ance of an order $y >3SC6 t&e 0ttorney Genera.'ov/inde7.e discrete comm#nication to6 from6 or a$o#t a tas+ed se.ection@ Cp.assified pinion t&at @t&e portions of :C8s Km#. 3nte..apper) on)a.ection@ Cp.e for 1S0 to .ect economic inte..i'ence information6 and t&at it is not feasi$..i'ence. reasons6 persona.ity tas+ed for co. 31D.ection app. t&e trade secrets of forei'n companies on $e&a.ained t&at it may co.i'ence information@ can inc. 35D6 and t&at @1S0Bs #pstream 3nternet co..dni..i'ence2.e at: &ttp://---...i'ence3..so d#e to tec&nica..

y tar'et a person $e.imitations set fort& in Section 752 C$D >3S0 -&ic& e7c..ocated o#tside t&e (nited States to ac=#ire forei'n inte.ected is necessary to t&e p#rpose p#rs#ed2.y concern (S citi?ens or non)(S persons -it&in t&e (S1...S.2. 3n addition6 p#rs#ant to t&e same provision6 ac=#isition of data m#st $e @cond#cted in a manner consistent -it& t&e >o#rt& 0mendment to t&e Constit#tion of t&e (nited States@6 t&at pro&i$its @#nreasona$.y6 ac=#isition of data a#t&orised #nder Section 752 may not: CiD intentiona.y re=#ires t&e information to $e related to t&e p#rpose p#rs#ed3.y $e. GS/np DG D 2B 8 16987/13 011"2 E .e searc&es and sei?#res@ and re=#ires t&at a -arrant m#st $e $ased #pon @pro$a$.a-f#..C.2. 3t is aimed at t&e tar'etin' of non)(S persons -&o are overseas. :ore specifica.ieved to $e .#din' a corporation or association t&at is a forei'n po-er.ieved to $e .#sive.S.ien .e ca#se@. F1851CeD.ocated o#tside t&e (SG CivD intentiona.y admitted for permanent residence6 an #nincorporated association a s#$stantia..y $e.y tar'et a (S person reasona$.y tar'et any person +no-n at t&e time of ac=#isition to $e .ocated o#tside t&e (S if t&e p#rpose of s#c& ac=#isition is to tar'et a partic#.y $e.ieved to $e in t&e (SG CiiiD intentiona. n#m$er of mem$ers of -&ic& are (S citi?ens or permanent residents6 or a corporation incorporated in t&e (S $#t not inc. 8&is is confirmed $y t&e .i'ence information@. E5 (.1.i'ence information@ on.ieved to $e . Personal scope of Section 702 FISA Section 752 >3S0 'overns t&e @tar'etin' of persons reasona$.. 1 2 3 @(S person@ is defined in E5 (.i'ence information@ re=#ires t&at t&e information to $e co. intended recipients are +no-n at t&e time of ac=#isition to $e . 3$id. 0s far as (S persons are concerned6 t&e definition of @forei'n inte..C.y ac=#ire any comm#nication as to -&ic& t&e sender and a.ocated in t&e (S.ar6 +no-n person reasona$...ocated in t&e (SG CiiD intentiona... F1851CiD as a (S citi?en6 an a. Concernin' non)(S persons6 t&e definition of @forei'n inte.

assified minimi?ation proced#res C2511D #sed $y t&e 1S0 in connection -it& ac=#isitions of forei'n inte.751 C$D CAD CCDG 18 (.ection and f#rt&er processin' of persona. data of non)(S persons incidenta.ection #nder Section 752 is s#$%ect to tar'etin' and minimisation proced#res t&at aim to red#ce t&e co. scope of co.y ac=#ired.'.751 C$DCADCBDG 18 (.0s disc#ssed $e. F 2E15. one -&ic& provides to t&e p#$.e6 accordin' to t&e (S6 non (S persons may $enefit from some re=#irements set o#t in t&e minimi?ation proced#res16 t&ere are no tar'etin' or minimisation proced#res #nder Section 752 t&at specifica...S. F 2711. as t&e f#rt&er processin' of persona.ity to send or receive -ire or e.. >3S0 s.C.. information6 faci.751 C$D CAD C0DG A7 (. 8&is encompasses a -ide ran'e of e.ectronic comm#nications Ct&is co#.i'ence information p#rs#ant to Section 752 >3S0.ecomm#nications services Ce.ection of forei'n inte.s in t&e "( in t&eir possession: CiD any service -&ic& provides #sers -it& t&e a$i. GS/np DG D 2B 9 16987/13 011"2 E . F 1E3.3.S...#din' t&ose t&at may &ave persona. >3S0 s. 2.C. 3nte. 3P providersD2G CiiD any @remote comp#tin'@ service6 i...i'ence information. data of (S persons #nder Section 7526 as -e.ectronic comm#nications system3G CiiiD any provider of te.. data pertainin' to individ#a..#de e.ectronic comm#nication service provider@ to provide immediate.y a. Geographical scope of Section 702 FISA Section 752 does not contain .y ac=#ired #nder Section 752. See Section 3 CaD >3S0 s.ection of persona.i'ence may direct an @e. emai.d inc. Section 752 C&D provides t&at t&e 0ttorney Genera. and t&e Director of 1ationa.o-6 co.'. data of (S persons incidenta.6 c&at and .ic comp#ter stora'e or processin' services $y means of an e. 3nternet service providersD&G and 1 2 3 & Dec.S.imitations on t&e 'eo'rap&ica.1.C..ities or assistance necessary. *&i..e.ectronic comm#nication services and operators6 inc.y aim to red#ce t&e co.

i'ence dec.ection@ of data t&at transits t&ro#'& t&e (S2. B#rea# of 3nvesti'ation C>B3D to ma+e an app.ated to Section 21E6 inc.ined to rep.o* A3* .ic some doc#ments re.andestine inte.. GS/np DG D 2B 15 16987/13 011"2 E .751 C$D CAD CDD. Dec.o+ 21' U$ P4*r.ocated in t&e "(G and data from 3nternet transmission ca$. terrorism or c.CivD any ot&er comm#nication service provider -&o &as access to -ire or e.ection of or access to data not .y on t&e 'ro#nds t&at t&e =#estions pertained to met&ods of inte.ance pro'rammes t&at -as disc#ssed $y t&e ad &oc "()(S -or+in' 'ro#p.osed. 9o-ever6 t&e (S ffice of t&e Director of 1ationa.in' t&e . Section 21E f#rt&er specifies t&at prod#ction of information can re.ection #nder Section 752 t&at &ave a -ide reac&6 s#c& as t&e P!3S: co.o#dG data processed $y s#$sidiaries of (S companies . 3nte.ect Committee on 3nte.ocated or not e7c. reasonin' of t&e >3SC on Section 21E.'0 U8$8C8 < 1!61= Section 21E of t&e (S0)Patriot 0ct 2551 is t&e second . 1 2 3 >3S0 s..andestine inte.i'ence6 p.ocated in t&e (SG data stored or ot&er-ise processed in t&e c. 2828 $e3*..assified and made p#$. 3)A of anne7ed doc#ment.ection...#sive.y #pon t&e $asis of activities protected $y t&e first amendment to t&e Constit#tion.i'ence information not concernin' a (nited States person or to protect a'ainst internationa.ication for a co#rt order re=#irin' a $#siness or anot&er entity to prod#ce @tan'i$. See dec.evant for an investi'ation to o$tain forei'n inte.ectronic comm#nications eit&er as t&ey are transmitted or as t&ey are stored1.ate to an investi'ation on internationa.es o#tside t&e (S.etters of A :ay 2552 from D 4 and D13 to t&e C&airman of t&e (S senate and 9o#se of !epresentativesB Se.e'a..assified >3SC opinions confirm t&at (S inte.e t&in's@6 s#c& as $oo+s6 records or doc#ments6 -&ere t&e information so#'&t is re.#din' doc#ments revea. 8&e (S dec.i'ence activities3..i'ence a'encies &ave reco#rse to met&ods of co...y ... 8&e order is secret and may not $e disc. 3t permits t&e >edera.assified .i'ence co. a#t&ority for s#rvei.. 8&e "( as+ed for specific c.e'a..e.ection of data from internet service providers or t&ro#'& t&e @#pstream co.i'ence activities concernin' a (S person6 provided t&at s#c& investi'ation of a (S person is not cond#cted so.arifications on t&e iss#e of co. terrorism or c.

16987/13 011"2 GS/np DG D 2B 11 E .y t&e data of (S persons6 $#t a.. 0ccordin' to t&e e7p. 8&ese records cover information s#c& as te.andestine inte. 0n order for data #nder Section 21E can concern not on. as t&e date6 time and d#ration of ca.ained t&at Section 21E a.ep&one conversations.8&e (S confirmed t&at t&is provision serves as t&e $asis for a pro'ramme of inte.y #pon t&e $asis of activities protected $y t&e first amendment to t&e Constit#tion@6 i. 8&at pro'ramme is .t&o#'& t&e co.s are made6 as -e..... terrorism or c.#des from its scope @investi'ation of a (nited States person KML cond#cted so.i'ence co.ained t&at6 a.ep&ony @meta)data@..ecomm#nications service providers to provide specified non)content te.ep&one n#m$ers dia.#de t&e content of t&e ca..y e7c.a$.. >or t&at pro'ramme6 t&e information is stored $y t&e 1S0 and =#eried on.y: -&en app...e.i'ion6 t&e freedom of speec& or of t&e press6 as -e.e. terrorism.. 8&e (S a.y and to petition t&e Government for redress for 'rievances.. Bot& (S and "( data s#$%ects6 -&erever .i'ence information not concernin' a (S person6 or to protect a'ainst internationa.imited to t&e p#rpose of investi'ation of internationa.ep&ony meta)data maintained $y t&e company to -&om t&e order is addressed...i'ence a'encies cannot6 t&ro#'& t&is pro'ramme6 .ocation information.e to non)(S persons6 as Section 21E specifica.s6 t&e names6 address or financia.i'ence a'encies for any ot&er p#rpose. made to6 from or -it&in t&e (S and -&ose meta)data is maintained and prod#ced $y a company to -&om t&e order is addressed..yin' for an order6 t&e >B3 m#st specify reasona$.so of non) (S persons.ed and t&e n#m$ers from -&ic& ca..ocated6 fa. 8&e (S e7p.ecomm#nications service providers.ep&ony @meta)data@ maintained $y specified te.so e7p. detai.. -it&in t&e scope of t&e te.s6 $#t do not inc.imited to t&e co.ection is $road in scope6 t&e f#rt&er processin' of t&e meta)data ac=#ired #nder t&is pro'ramme is . 8&ere are .+ records may not $e accessed or =#eried $y inte.isten to or record te.anations provided $y t&e (S6 t&is means t&at t&e inte. 3n addition6 (S persons $enefit #nder Section 21E from a f#rt&er protection #navai.y for co#nter)terrorism p#rposes.. site . information of any s#$scri$er or c#stomer6 or any ce.ep&ony meta)data pro'ramme6 -&enever t&ey are party to a te. records6 or te.ection of ca.i'ence activities..imitations on t&e scope of Section 21E 'enera.e 'ro#nds to $e...+@ co.. as t&e freedom of assem$.ection of te.ection via orders o$tained $y t&e >B3 from t&e >3SC directin' certain te.ieve t&at t&e records so#'&t are re.ep&one ca.o-s for @$#.evant to an a#t&orised investi'ation to o$tain forei'n inte. activities protected $y t&e freedom of re. 3t -as stated t&at t&e $#.

y report to t&e &eads of t&eir a'encies and to Con'ress on t&e #se as -e. oversi'&t of its #se6 e7cept in .ementa.i'ence anne7ed to t&e re.f does not set any restriction to $#.s in t&e "( and any app. 8&e (S confirmed t&at "7ec#tive rder 12333 is t&e 'enera.ines and s#pp.ection of contact .ve Or/er 12333 8&e (S indicated t&at "7ec#tive rder 12333 serves as t&e $asis for ot&er s#rvei.imited circ#mstances s#c& as -&en information is #sed in a .y -it& t&e (S Constit#tion and app.i'ence co.e .e'a..t&o#'& t&e "7ec#tive rder re=#ires t&at a'encies operate #nder '#ide.s inte.so provides a .evant re'#.. acco#nts and/or co.2838 E>e3u*.e'a.i'ence 'at&erin' inside and o#tside t&e (S.ied t&at t&ey -ere not a-are of a pro&i$ition of s#c& practices. "7ec#tive rder 12333 a.i'ence a'encies s&o#. "7ec#tive oversi'&t is e7ercised #nder "7ec#tive rder 12333 $y t&e 3nspector)Genera.ists are a#t&orised6 t&e (S representatives rep.ection of data .ines approved $y t&e &ead of t&e a'ency and t&e 0ttorney Genera.ain6 &o-ever6 t&at t&e "7ec#tive rder states t&at inte.ation settin' fort& proced#res #nder 12333 is c.ica$. 1 2 See Dec..assified6 as are t&e s#pp.. 0. 8&e (S -as #na$. 11...ar -it& re'ard to t&e app.. as on $reac&es of "7ec#tive rder 12333.assified minimi?ation proced#res6 at p. is not re=#ired #nder "7ec#tive rder 12333 and t&at t&ere is no %#dicia. 8&e "( re=#ested f#rt&er information re'ardin' t&e scope and f#nctionin' of "7ec#tive rder 12333 and t&e '#ide.e to provide any =#antitative information -it& re'ard to t&e #se or impact on "( citi?ens of "7ec#tive rder 12333.ection #nder "7ec#tive rder 12333 are not desi'ned to .ection6 its impact on individ#a. inte.ica$.. data of non)(S persons.i'ence co.+ data co. proceedin'.ocated o#tside t&e (S e7cept to reiterate t&at a.a-.ection of in$o7 disp.imitations on inte.+ co..6 t&e rder itse.s of eac& a'ency6 -&o re'#.e6 on t&e =#estion -&et&er co.imit t&e co. See "7ec#tive rder 123336 Part 1... 8&e (S did e7p. frame-or+ on inte.ar.1 CcD.ays from emai. $asis to disseminate to forei'n 'overnments information ac=#ired p#rs#ant to Section 7521. 8&e "( re=#ested information in partic#.. approva.ained t&at t&e part t&at covers si'na.ection of persona. 8&e (S e7p. proced#res -&ose adoption is provided for #nder t&e "7ec#tive rder.ysis6 $#t t&at t&e foc#s of t&ese proced#res is on protectin' information of (S persons.iferation of -eapons of mass destr#ction2.e safe'#ards.ementary proced#res on data ana. >or e7amp.. emp&asis@ to detectin' and co#nterin' t&e t&reats posed $y terrorism6 espiona'e6 and t&e pro. 8&e (S confirmed t&at %#dicia.ication of "7ec#tive rder 12333 to $#.d 'ive @specia.. GS/np DG D 2B 12 16987/13 011"2 E .ection m#st comp.. 8&e (S indicated t&at t&e .ance pro'rammes6 t&e scope of -&ic& is at t&e discretion of t&e President.

Data protection ri'&ts and o$.a-6 t&e initia. safe'#ards and . 3t appeared from t&e disc#ssions t&at t&ere is a si'nificant difference in interpretation $et-een t&e "( and t&e (S of a f#ndamenta. 8&is means t&at -&i.i'ations are a. data.ected and on t&e #se of -&at is co. a#t&orities6 accordin' to t&e (S6 privacy is protected $y a m#.ection and is a form of processin' of persona.ection.e'a. >or t&e "(6 data ac=#isition is synonymo#s -it& data co.ti) .ready app.s as to t&e . (nder $ot& .y -&en it is ana.ection of persona.s are $ased on t&e nat#re and intr#siveness of t&e co.atin' to t&e processin' of persona. data does not a.e. $ases for inte... data protection safe'#ards arise at t&e time of processin'.e'a.. 16987/13 011"2 GS/np DG D 2B 13 E .. information $ased on Section 752 >3S0 and Section 21E Patriot 0ct is s#$%ect to a n#m$er of proced#ra. a#t&orities and proced#res app. data $y sec#rity a'encies.ayered system of contro.ected6 and t&ese contro. 0ny s#$se=#ent operation carried o#t on t&e data co.ected6 s#c& as stora'e or cons#.8&e (S f#rt&er confirmed t&at in t&e (S t&ere are ot&er .i'ence co..s on -&at is co. ac=#isition of persona..data is co.tation $y &#man eyes6 constit#tes f#rt&er processin'.. concept re.e certain safe'#ards arise at t&at moment of ac=#isition6 additiona..ained6 #nder (S . 38 COLLECTIO A % FURTHER PROCE$$I 7 OF %ATA 3n response to =#estions from t&e "( re'ardin' &o.e'a. 0s t&e (S e7p.ection -&ere t&e data of non)(S persons may $e ac=#ired $#t did not 'o into detai.imitative conditions.ysed $y means of &#man intervention..ica$. dataG data is @processed@ on.ected and #sed #nder t&e s#rvei.ica$.e at t&at sta'e.-ays constit#te processin' of persona.ance pro'rammes6 t&e (S stated t&at t&e co..

aces6 premises6 or property to -&ic& an ac=#isition of data -i.1.assified.a-.o+ 702 FI$A Certification and a thori!ation proced re Section 752 does not re=#ire individ#a..ities6 p.i'ence m#st contain a.i'ence information so#'&t to $e ac=#ired. n t&e =#estion of -&et&er data is @p#s&ed@ $y t&e companies or @p#. -&et&er it is consistent -it& t&e p#rpose or proportionate6 and in t&is re'ard cannot s#$stit#te t&e determination made $y t&e 0ttorney Genera.t&e certifications or cate'ories of forei'n inte. or revie.i'ence. certifications s#$mitted in -ritin' $y t&e 0ttorney Genera. and t&e Director of 1ationa.3818 3. 16987/13 011"2 GS/np DG D 2B 1A E ... 3nstead6 t&e >3SC approves ann#a. orders or -arrants a#t&ori?in' co.ements and tar'etin' and minimi?ation proced#res to ens#re t&at t&ey are consistent -it& >3S0 and t&e >o#rt& 0mendment to t&e (S Constit#tion.ements #nder Section 752 CiD6 inc. $e directed or in -&ic& it -i. 3t revie-s Section 752 certification to ens#re t&at t&ey contain a.. t&e re=#ired e.'.. 8&e certification s#$mitted to >3SC $y t&e 0ttorney Genera.ied -it& a -ritten directive6 respond to it and are t&erefore informed of a re=#est for data.i'ence information. 8&e >3SC &as %#risdiction to revie. %#dicia.aceG providers are s#pp. 8&ere is no co#rt approva.e6 identify cate'ories of forei'n inte.y from t&eir infrastr#ct#re6 t&e (S e7p..of t&e ac=#isition of data in eac& specific case.es $eca#se t&e certifications are c. 3nte.ected $y means of directives addressed to e. moda.. 8&e "( re=#ested6 $#t did not receive6 f#rt&er information re'ardin' &o.assified #nder (S . assistance necessary..... re=#ired e.ection p#rs#ant to Section 752..ed@ $y t&e 1S0 direct. Section 752 e7press. 8&e (S e7p.ess dec. Bot& t&e certifications and t&e >3SCBs orders are secret6 #n. 8&e >3SC does not scr#tinise t&e s#$stance of t&e attestation or t&e need to ac=#ire data a'ainst t&e p#rpose of t&e ac=#isition6 e...i'ence p#rposes are defined and is t&erefore not in a position to assess t&eir scope. 8&ey are t&erefore critica.y specifies t&at certifications are not re=#ired to identify t&e specific faci. 3nte.ities depend on t&e provider and t&e system t&ey &ave in p.ained t&at t&e specific p#rpose of ac=#isition is set o#t in t&e certification6 $#t -as not in a position to provide mem$ers of t&e Gro#p -it& e7amp.#din' an attestation t&at a si'nificant p#rpose of t&e ac=#isition is to o$tained forei'n inte.ectronic comm#nications services providers to provide any and a.. 3nte. $e cond#cted.ained t&at t&e tec&nica. as tar'etin' and minimi?ation proced#res.i'ence.ection a'ainst eac& tar'et.. and t&e Director of 1ationa. n t&e $asis of >3SC)approved certifications6 data is co. 8&e certifications6 -&ic& are rene-a$. doc#ments for a correct #nderstandin' of t&e scope and reac& of co. $e3*.certifications as -e. and t&e Director of 1ationa.1.

pdfD6 0nne7 06 p.ectors t&at are #sed $y t&e tar'eted individ#a... scr#tiny of t&e se. 0ssessment of Comp.. as e7amp.6 s#c& as a te.ected.so Semi)0nn#a.es/doc#ments/Semiann#a..ep&one n#m$ers6 or +ey-ords. 3nte.ance 0ct6 S#$mitted $y t&e 0ttorney Genera.i'ence on 21 0#'#st 2513 C&ttp://---. 1 See a. 8&ere is no %#dicia.ectors tas+ed6 e..i'ence S#rvei.ectors6 $#t no f#rt&er c.ieved to $e #sed to ret#rn forei'n inte. 8&e (S confirmed t&at it is possi$. 02. 3nte.'ov/fi.i'ence6 dec. 8&e (S e7p.a-f#.dni. GS/np DG D 2B 1E 16987/13 011"2 E .. address.0ccordin' to t&e (S61 #nder Section 7526 once comm#nications from specific tar'ets t&at are assessed to possess6 or t&at are ..inesO25iss#edO25p#rs#antO25toO25SectO25752O2 5ofO25>3S0.eness or t&eir #se.i'ence information.)te7t searc&es of comm#nications co..e criterion is t&at t&e =#ery terms s&o#.'. activity nor of a specific investi'ation. and t&e Director of 1ationa.O250ssessmentO25ofO25Comp.e s#spicion neit&er of #n.arifications -ere provided. t&eir reasona$.ected #nder Section 7526 $#t on. 8&e tar'etin' decisions made $y 1S0 in order to first ac=#ire comm#nications are revie-ed after) t&e)fact $y t&e Department of 4#stice and t&e ffice of t&e Director of 1ationa.assified $y t&e Director of 1ationa..y $e.ines 3ss#ed P#rs#ant to Section 752 of t&e >orei'n 3nte.ained t&at t&ere are no random searc&es of data co. 8&e app.y tar'eted =#eries.i'enceG ot&er instances of oversi'&t e7ist -it&in t&e e7ec#tive $ranc&.y to comm#nicate6 forei'n inte.#de names6 emai. 3nte.i'ence information &ave $een ac=#ired6 t&e comm#nications may $e =#eried..e to perform f#.ep&one n#m$er or an emai. *&en =#ery terms are #sed to searc& data$ases6 t&ere is no re=#irement of reasona$.ica$.ected6 and access $ot& content information and metadata -it& respect to comm#nications co..ectors are defined and c&osen6 as -e. N#ery terms inc..iance -it& t&e Proced#res and G#ide.d $e reasona$.ianceO25 -it&O25proced#resO25andO25'#ide. 8&e "( re=#ested f#rt&er information on t&e criteria on t&e $asis of -&ic& se.es of se. addresses6 te. 8&is is ac&ieved $y tas+in' se.i+e.

data -&en it is not necessary or re.ot&er e.icit. 8&e (S did not c. 8&ese proced#res e7p.ection of data is s#$%ect to specific @minimisation@ proced#res approved $y t&e >3SC.y to information incidenta. 8&ere is no o$. information of non)(S persons o#tside t&e (S...y app..e'a.arify -&et&er and &o.ection or processin' of non)(S persona.ection6 retention6 and dissemination of incidenta..y re.meas#res -ere on.so t&e dec. possi$.y6 t&e >3SC revie. See dec. >ina.imitin' t&e co.y to comm#nicate forei'n inte.....e provided $y t&e (S in Section A of t&e :inimisation Proced#res6 -&ic& contains attorney)c.y -it& t&is re=#irement &ad $een fo#nd to $e #nsatisfactory in re. 0n e7amp.e6 t&e "( as+ed -&et&er information t&at is not re.ation to @#pstream@ co..#de revie.ica$.y in practice to non)(S persons6 and did not state -&ic& r#. meas#res to protect t&e persona.ection and processin'G and t&at ne.y non)(S persons .i'ence p#rpose1..y proposed $y t&e 'overnment to comp..i'ence.e6 on.ient protections for anyone #nder indictment in t&e (nited States6 re'ard.y fo#nd to $e satisfactory for t&e protection of (S persons.y in practice to t&e co.y co.evant to a forei'n inte. 8&e co.so s#$%ect to specific @tar'etin'@ proced#res t&at are approved $y t&e >3SC.8&e co.so $enefit non)(S persons6 since t&ey are aimed at .i+e.ines to t&is end. 8&ese @tar'etin'@ proced#res primari. A6 Section 3 C$D CADG $#t see a.e to provide a rep. GS/np DG D 2B 16 16987/13 011"2 E .assified 1ovem$er 2511 >3SC pinion -&ic& fo#nd t&at meas#res previo#s.ection of data is a.eted and -&et&er t&ere are '#ide.es app. 9o-ever6 accordin' to t&e (S6 t&e minimisation proced#res a.i'ation to minimi?e impact on non)(S persons o#tside t&e (S.d depend on t&e app.ocated a$road are tar'eted.y aim to protect t&e privacy ri'&ts of (S persons6 $y . 9o-ever6 t&e (S refers to t&e fact t&at t&e tar'etin' proced#res contain factors for t&e p#rpose of assessin' -&et&er a tar'et possesses and/or is .of potentia. 8&ey primari.ess of citi?ens&ip stat#s.. $asis and certification approved $y >3SC.ements of t&e minimisation and tar'etin' proced#res app. 8&e (S -as #na$.y ac=#ired $y t&e (S is de. 1 2 3$id6 at p.ection to data reasona$.evant $#t incidenta.assified 1S0 tar'etin' proced#res6 p A.e scenarios and stated t&at t&e retention period -o#.ected of6 or concernin'6 (S persons.y aim to protect t&e privacy ri'&ts of (S persons6 $y ens#rin' t&at6 in princip.evant to forei'n inte.does not inc.i'ence information2. >or e7amp..imitin' t&e co.y ac=#ired information to6 from or a$o#t (S persons..e ..y coverin' a.

y necessary.6O of a.#me streamin' and do-n.many certifications and se.y #sed6 &o. 1et-or+in' 3nde76 2512 Cavai.116 Section 7G and t&e dec. internet traffic is @ac=#ired@ and 5.ance pro'rammes #nder Section 752 and in partic#./ns3A1/nsE2E/nsE37/ns75E/ns827/-&ite/pape r/c11)A81365.is#a.#tions/co. internet traffic consists of &i'&)vo.tip. part of '.. to minimi?e t&e .ected via #pstream co.2..i'ence information $#t ens#res t&at non) tar'et information t&at is s#$%ect to protection #nder >3S0 or t&e >o#rt& 0mendment Ki. t&e Co#rt conc..3.e comm#nicationsL6 are @reasona$.o$a.ection.3.yin' t&em to K@#pstream co.y desi'ned ..52EO of it is se.ation to (S)persons data2.o$a.oo+ed at $y 1S0 ana. 3..evision series6 fi.. '.ained t&at t&ese retention periods app. 8&e (S did not disc#ss t&e specific n#m$er of certification or se.y retained for five years6 a. 1 2 See Cisco .assified 1ovem$er 2511 >3SC pinion6 at pa'e 13)1A: @8&e t-o)year period 'ives 1S0 s#$stantia.. Comm#nications data ma+es #p a very sma.i'ence information.s in t&e "(6 or re'ardin' t&e stora'e capacities of t&e s#rvei.ection is retained for t-o years.y to $ot& (S and non)(S person information. 8&e (S confirmed t&at 1.e information concernin' #nconsentin' (nited States persons consistent -it& t&e need of t&e (nited States to o$tain6 prod#ce6 and disseminate forei'n inte.e to =#antify t&e n#m$er of individ#a..t&o#'& data co.. time to revie.its #pstream ac=#isitions for forei'n inte. of non) p#$. " antitati#e indicators 3n order to assess t&e reac& of t&e s#rvei.ms and sports1.cisco.. #nrevie-ed data6 so t&ey app.many of t&em concern individ#a.imits in re.@ GS/np DG D 2B 17 16987/13 011"2 E .. $etention Periods 8&e (S side e7p.s in t&e "( affected $y t&e pro'rammes.a$.on'er t&an is reasona$..a$.ectors. 8&e vast ma%ority of '..y avai..ected for revie-G &ence 5.y6 t&e (S -as #na$..#ded @#pstream@ data co. 8&e (S did not confirm -&et&er t&ese fi'#res inc..'.s in t&e "(6 t&e "( side re=#ested fi'#res6 e..ysts. 9o-ever6 t&e (S e7p..o$a..atera. retentionKL . information pertainin' to (S personsL is not retained any .1.ection@ of 3nternet transactions containin' m#.oads s#c& as te..assified minimisation proced#res6 at p.1. internet traffic is .pdfD See Dec.e at: &ttp://---.y state t&ese time ...ar t&eir impact on individ#a.ected #nder Section 752 is 'enera. &o. '. 8&e minimisation proced#res on.y to a.ained t&at @#nrevie-ed data@ co. 0dditiona.com/en/(S/so.ectors are c#rrent..ic.ance pro'rammes..o$a.555AO of a.e. internet traffic.#des t&at t&e amended 1S0 minimi?ation proced#res6 as 1S0 is app.

ed or disr#pted and 12 cases concerned materia. indications of crimina.so $e s&ared if s#c& information meets t&e standard #nder t&e app. &n'ard transfers and sharing of infor(ation 8&e (S indicated t&at t&e co.es as emp.i'ence comm#nity6 e.ots t&at -ere foi.ected t&at does not respond to =#ery on t&e $asis of a =#ery termD.3f t&e data is deemed to $e of forei'n inte. 3. contractors are vetted and s#$%ect to t&e same r#..%.eted. cond#ct6 t&ey can $e transferred to or s&ared -it& ot&er a'encies o#tside t&e inte.y.. @a'e off of t&e system@.ected data are stored in a sec#re data$ase -it& .ear -&et&er and -&en s#c& data is de.ected #nder Section 752 revea.imited access for a#t&orised staff on.e.). 3t remains #nc. 8&e (S confirmed t&at o#t of t&e tota.y -i.. 8&e (S -as #na$.. 0ccordin' to t&e (S6 information t&at is not revie-ed p#rs#ant to a =#ery made to t&at data$ase norma..y o$tained@ information Cinformation not re..imitation on t&e .ica$. 8&e (S responded t&at it is not @co.ection #nder Sections 752 and 21E contri$#ted to t&e prevention and com$atin' of terrorismG 2E of t&ese invo... n t&e #se of private contractors6 t&e (S insisted t&at a.1..ected #nder "7ec#tive rder 12333. 8&e "( as+ed -&at &appens to @non)responsive@ information Ci.. .so confirmed t&at in case data co.e. of EA cases6 A2 cases concerned p.....en't& of retention.e to provide fi'#res re'ardin' "7ec#tive rder 12333.1. 8&e (S did not specify t&e retention period of data co.i'ence and -it& t&ird co#ntries.ectin'@ non) responsive information. 3.i'enceD may a.ica$. data co.e proced#res. *ffecti#eness and added #al e 8&e (S stated t&at in EA instances6 co.oyees. @3ncidenta.i'ence interest6 t&ere is no .evant to forei'n inte. 8&e minimisation proced#res of t&e recipient a'ency are app. 16987/13 011"2 GS/np DG D 2B 18 E . 8&e (S &o-ever a.ved "( :em$er States. s#pport for terrorism cases.a.enforcement a'encies6 for p#rposes ot&er t&an forei'n inte.'.

imits on t&e percenta'e of comm#nications t&at can $e s#$%ect to s#rvei.ep&ony meta)data.o* A3* A thori!ation proced re (nder t&e Section 21E pro'ramme disc#ssed &erein6 t&e >B3 o$tains orders from t&e >3SC directin' te.imited6 for e7amp.1.post 8&e "( as+ed -&et&er peop.ied is .ransparency and re(edies e-.in+ to serio#s crime or matters of state sec#rity is . (nder t&e te.e #nder (S crimina. 8&e (S e7p. 9o-ever6 if information o$tained t&ro#'& s#rvei.y prove to $e re.app.ection pro'ramme6 t&e 1S06 in t#rn6 stores and ana.e ca#se@ #nder crimina..a-..ess strin'ent t&an @pro$a$. .+.y6 since a piece of information t&at mi'&t not $e re.e -&o are s#$%ect to s#rvei.ance of comm#nications of peop.ained t&at6 'enera.i'ence information not concernin' a (S person or to protect a'ainst internationa.evant@ to an investi'ation and t&at t&is is #nderstood $road.imits e7ist #nder (S .2.e -it& no identified .a.y for co#nterterrorism p#rposes.y6 t&e app... . 8&e (S stated t&at s#c& a ri'&t does not e7ist #nder (S .y #sed for t&e p#rposes of crimina. 8&e standard app.1.yses t&ese $#.1.evant at t&e time of ac=#isition co#.d s#$se=#ent.3.ance pro'rammes is s#$se=#ent. proceedin's6 t&e protections avai. 8&e (S e7p.i'ence a#t&orities to e7tract re.ection of data in order to a. 16987/13 011"2 GS/np DG D 2B 19 E .ecomm#nications service providers to provide te..ance t#rns o#t to $e #n%#stified..evant for an investi'ation..y.. $e3*. terrorism or c.ieve t&at t&e records are re..i'ence activities.e in terms of =#antitative ..t&e inte. 8&e (S stated t&at no s#c& .ication for an order from t&e >3SC p#rs#ant to Section 21E m#st specify reasona$.ained t&at t&e information so#'&t m#st $e @re.ance are informed after-ards6 -&ere s#c& s#rvei.evant to an a#t&orised investi'ation to o$tain forei'n inte.+ records -&ic& can $e =#eried on.andestine inte...o. 3.e 'ro#nds to $e.ep&ony metadata co.evant information. 3828 3. proced#ra.a$.a.ance.o+ 21' U$ P4*r. &#erarching li(its on strategic s r#eillance of data flo's 8&e "( as+ed -&et&er s#rvei.and permits $road co.7.a-. .

a.tip. " antitati#e indicators 8&e (S e7p.evance #nder Section 21E is interpreted as not re=#irin' a separate s&o-in' t&at every individ#a.ated =#ery..a$. Maryland6 AA2 (.ep&one ca. 8&e n#m$er of persons affected $y searc&es on t&e $asis of t&ese identifiers6 #p to t&ird)tier contacts6 remains t&erefore #nc.s &ave no reasona$.y6 t&ere m#st $e a @reasona$.ained t&at on. 8&e (S a.a$. 0ccordin' to t&e (S6 t&e same identifier can $e =#eried more t&an once6 can 'enerate m#.evance is met if t&e entire data$ase is considered re.ection of meta)data #nder Section 21E does not affect t&e constit#tiona.tip.e responsive records6 and can $e #sed to o$tain second and t&ird)tier contacts of t&e identifier C+no-n as @&ops@D.y =#eried.ep&one n#m$erD #sed to =#ery t&e meta)data is associated -it& a specific forei'n terrorist or'anisation. 0 sma.ica$.. record in t&e data$ase is re.. protection of privacy of (S persons #nder t&e >o#rt& 0mendment.of t&e (S S#preme Co#rt2 accordin' to -&ic& parties to te.e'a..so stressed t&at t&ey consider t&at constit#tiona..e =#eries may $e performed #sin' t&e same identifier. 1 2 See . 3t -as f#rt&er e7p. 3.e6 artic#.ear.e .2.e6 artic#. n#m$er of =#eries can $e &i'&er t&an 355 $eca#se m#. fraction of t&e te.e e7pectation of privacy for p#rposes of t&e >o#rt& 0mendment re'ardin' t&e te..e/9E552)1D (.'. 73E C1979D: GS/np DG D 2B 25 16987/13 011"2 E .2.#me of data act#a.e s#spicion@ standard constit#tes a safe'#ard a'ainst t&e indiscriminate =#eryin' of t&e co. S#preme Co#rt6 S(ith #.. 3t -as e7p..y to t&e type of data co.evant to t&e investi'ation. privacy protections do not app.S.imits t&e vo. 8&e (S referred to case).ained $y t&e (S t&at t&e @reasona$.y 2513 C&ttp://$eta. 8&e act#a.S.. 3t appears t&at t&e standard of re..e s#spicion@ t&at an identifier Ce.ected and retained #nder t&e Section 21E)a#t&orised pro'ramme is f#rt&er revie-ed6 $eca#se t&e vast ma%ority of t&e data -i.e >3SC a#t&ori?ation is not re=#ired prior to t&e searc&in' of t&e data $y t&e 1S06 t&e (S stated t&at Co#rt &as approved t&e proced#res 'overnin' access to t&e meta)data ac=#ired and stored #nder t&e te.ess t&an 355 #ni=#e identifiers -ere approved as meetin' t&e @reasona$.a$.etter from D 4 to !epresentative Sensen$renner of 16 4#. n#m$er of senior 1S0 officia.e s#spicion@ standard and -ere =#eried. standard.ected data and 'reat.s &ave $een a#t&orised to determine -&et&er t&e searc& of t&e data$ase meets t&e app.ep&ony meta)data pro'ramme.e'a.evant for t&e p#rposes so#'&t.ained t&at in 2512 .e6 artic#. never $e responsive to a terrorism)re.'ov/con'ressiona.ected #nder t&e te.y a very sma.1 *&i.8&e .ep&ony meta)data co.)record/2513/7/2A/senate)section/artic.con'ress.ep&ony meta)data pro'ramme a#t&orised #nder Section 21E.ep&one n#m$ers #sed to ma+e and receive ca.y . Specifica. standard of re.. a te.sG t&erefore6 t&e co.

d6 -&en appropriate6 determine a more specific disposition instr#ction6 s#c& as @De. app.ications.a$..d $e appropriate in a. p#rposes.ications.3.etion -&en t&e a'ency determines t&at t&ey are no .e at: &ttp://---.e at: &ttp://---. app.many "( te.Bs G#ide.on'er needed. p#rposes@.d $e de.e'a.eted or destroyed -&en @t&e a'ency determines t&ey are no . is not needed to set retention periods for records in t&e G!S t&at are a#t&ori?ed for destr#ction -&en no . items in t&is sc&ed#.ed from t&e (S &ave $een stored #nder Section 21E)a#t&orised pro'rammes6 t&e (S e7p..d $e appropriate to a.ines do not specify retention periods $#t provide t&at information o$tained -i.#sion in its records disposition directives or man#a.3n response to t&e =#estion of t&e =#antitative impact of t&e Section 21E te..on'er needed for administrative6 . 10!0 approva.'ov/a'/readin'room/'#ide.on'er needed for administrative6 .ained t&at6 in princip.arifications $eca#se it does not +eep t&is type of statistica.y to data t&at is f#rt&er processed in a specific investi'ation. 8&ese G#ide.ete -&en 2 years o.e are a#t&ori?ed for eras#re or de.a$.es do not esta$.din' t&e information6 e.din' t&e information or cond#ctin' t&e investi'ation.o-s t&at t&e retention period for data processed in a specific investi'ation is determined $y t&e a'ency &o.in' into t&e (S or &avin' $een ca. t&e 1S0 or anot&er a'ency s#c& as t&e >B3 -it& -&om 1S0 s&ared t&e data..d6@ for inc..an approved $y t&e 1ationa.arc&ives.@ GS/np DG D 2B 21 16987/13 011"2 E .is& a more specific retention t&at -o#.es@ or @De.ectronic records s&o#. 3E.%#stice.ected #nder Section 21E is retained for five years6 -it& t&e e7ception for data t&at are responsive to a#t&ori?ed =#eries.ep&one n#m$ers ca. 8&e 1ationa.pdf6 p.. 10!0 cannot esta$.'.ines for Domestic >B3 perations@1 -&ic& app.&tm.6 a#dit6 or ot&er operationa. 8&e (S referred t&e Gro#p to t&e @0ttorney Genera.2. 3.: @8&e records covered $y severa. 3n re'ard to data t&at are responsive to a#t&ori?ed =#eries6 t&e data may $e retained p#rs#ant to t&e proced#res of t&e a'ency &o.'ov/records)m'mt/'rs/'rs25.is& specific retention periods t&at -o#.e to provide s#c& c. !ecords Sc&ed#.ete after 2 #pdate cyc. $e +ept in accordance -it& a records retention p..6 a#dit or ot&er operationa. 3nstead6 it is provided t&at e.e &o.e6 data co. information for eit&er (S or non)(S persons. "ac& a'ency s&o#.ep&ony meta)data pro'ramme in t&e "(6 for e7amp.ines. 0rc&ives and !ecords 0dministrationBs Genera.e'a. 0rc&ives and !ecords 0dministration.. $etention periods 8&e (S e7p. 1 2 0vai.2 3t fo.ained t&at it -as not a$. 0vai.

Bs G#ide.y -it& t&e Department of 4#stice and t&e ffice of t&e Director of 1ationa. oversi'&t is .ance $et-een t&e ro.y data t&at are responsive to a#t&ori?ed =#eries for co#nterterrorism =#eries.e departments of t&e e7ec#tive $ranc&.ained t&at activities a#t&orised $y Section 752 >3S0 and Section 21E Patriot 0ct are s#$%ect to oversi'&t $y t&e e7ec#tive6 . 3n re'ard to t&e >B3Bs &and. (nder t&ese '#ide.ected persona. directives6 1ationa. 0ttorney Genera.s -it& re'ards to s&arin' of data co.ines6 t&e >B3 may disseminate co. &8 O?ER$I7HT A % RE%RE$$ 9ECHA I$9$ 8&e (S e7p.'ov/a'/readin'room/'#ide...enforcement a#t&orities of t&e e7ec#tive $ranc& Ce.ayed $y t&e e7ec#tive $ranc& in t&ese cases. 8&e oversi'&t re'ime and t&e $a.ation to Section 752 and co.%#stice. Sec#rity Co#nci.pdf.e'is.ar'e. &n'ard transfers and sharing of infor(ation 8&e "( as+ed for detai.and Sec#rity Co#nci.e'a. 1 2 0vai. directives6 and 0ttorney Genera.i'ence a'encies as -e. directives6 9ome. 0ccordin' to t&e (S6 t&e orders for t&e prod#ction of te.es of eac& of t&e $ranc&es in overseein' t&e s#rvei.d appear to ta+e p.. a#t&orities2.Bs G#ide.e is p.2.e at: &ttp://---.'.imited in re.a$. GS/np DG D 2B 22 16987/13 011"2 E . oversi'&t6 a 'reater ro.ance pro'rammes differ accordin' to t&e . 3nte.ection..ines for Domestic >B3 perations@1.a. $ranc&es.ace .icies6 memoranda of #nderstandin'6 or a'reements@.ection on a forei'n tar'et is in +eepin' -it& Section 752 -o#.data and permit 1S0 to s&are -it& ot&er a'encies on.ines.in' of data t&at it may receive from t&e 1S06 t&e (S referred to t&e @0ttorney Genera. versi'&t re'ardin' -&et&er co.%.. Department of 4#sticeD for a n#m$er of reasons or on t&e $asis of ot&er stat#tes and .i'ence as t&e responsi$... 3E)366 provide t&at @KtL&e >B3 s&a. as to . information to ot&er (S inte.e'a.ative and %#dicia. >or instance6 $eca#se %#dicia.ep&ony meta)data6 amon' ot&er re=#irements6 pro&i$it t&e s&arin' of t&e ra.ected #nder Section 21E $et-een different a'encies and for different p#rposes..ection #nder "7ec#tive rder 12333 is not s#$%ect to %#dicia..3. $asis of co..)approved po.ines for Domestic >B3 perations6 p. s&are and disseminate information as re=#ired $y stat#tes6 treaties6 "7ec#tive rders6 Presidentia.

t&e Gro#pBs attention to t&e fact t&at since 1 4an#ary 2553 nine individ#a.0.i'ence6 revie. 3nte. 3nte. 8&e Director of 1ationa.ays an important ro.#din' t&e ffice of t&e Director of 1ationa. !e'#...i'ence comm#nity6 inc..ation to t&e ac=#isition of data re.so s#$mit reports to Con'ress on a t-ice)year.t&e operation of t&e pro'rammes6 compe.ected6 a n#m$er of e7ec#tive oversi'&t mec&anisms and reportin' proced#res app.ance #nder "7ec#tive rder 12333.y.so .&818 E>e3u*. nce t&e data is co. 8&e 1ationa.ar $riefin's to t&e inte.ve overs. 8&e (S e7p. t&e 1S0 emp.y to t&e Director. 3nte...ated matters.f of t&e (S inte. 3nte. t&e prod#ction of doc#ments6 carry o#t on)site inspections and address Con'ress -&en needed.i'ence a'encies m#st comp.e6 t&e 1S0 3nspector)Genera.ve comp... interests.o-in' t&e co. 8&e independence of certain 3nspectors Genera.i'ence and t&e Privacy and Civi. 3nte..i'ence p. Sec#rity Division of t&e Department of 4#stice oversees t&e imp..ays a ro.ar reportin' is done $y t&e e7ec#tive $ranc& and s#$mitted to t&e >3SC and Con'ress..ayers of e7terna. 8&ese attorneys6 to'et&er -it& personne.i'ence comm#nity. 3nte.eac& tas+in' #nder >3S0 752 Cc&ec+in' %#stification for a va. 8&ere are interna..oys more t&an 355 personne. 8&ere are a.etter of Septem$er 2513 to Con'ress referred to t-e. from t&e ffice of t&e Director of 1ationa.ementation of its decisions on $e&a.. in a .i'ence &as a Genera.i'ence p#rposeG addressin' over)co.ained t&at t&ese emp.i'ence a.id forei'n inte.. Ji$erties versi'&t Board..3n t&is conte7t6 t&e (S dre.ection of inte.i'ence a.oyees eit&er retired6 resi'ned or -ere discip. 16987/13 011"2 GS/np DG D 2B 23 E .y -it&. "ac& of t&e 17 a'encies t&at form t&e inte.i'ence.* "7ec#tive Branc& oversi'&t p.e in t&e definition of t&e priorities -&ic& t&e inte..i'ence committees of $ot& t&e 9o#se of !epresentatives and t&e Senate to disc#ss >3S0)re.y $asis and participates in re'#. and an 3nspector Genera.s Ce.'.ection6 -it& re'ard to t&e processin' of t&e inte.ated to non)(S persons for persona..iance effortsD.so &as a Civi.. 0s an e7amp.. -&o s#pport comp. is protected $y a stat#te and -&o can revie. 8&e Director of 1ationa. oversi'&t -it&in t&e "7ec#tive Branc& $y t&e Department of 4#stice6 t&e Director of 1ationa.i'ence and fo.ined. 8&e Department of 4#stice and t&e ffice of t&e Director of 1ationa..iance incidents re. Co#nse.. a#dits and oversi'&t contro.ated to s#rvei.ection iss#es6 ens#rin' t&at incidents are reported to t&e >3SCD and t&e re=#est for prod#ction #nder Section 21E Patriot 0ct.s &ave $een investi'ated in re.e $ot& prior to t&e co. Ji$erties Protection fficer -&o reports direct.

ection or certifications6 -&ic& can $e approved6 sent $ac+ for improvement6 e.y 2EO of app.ementation or modification.ed description of t&e oversi'&t arc&itect#re61 t&e (S did not provide =#a.i'ence co.ection #nder Section 21E Patriot 0ct 2.ica$.y 35 to A5 staff. 3t &as a mandate to revie. *&i.a-s $y Con'ress6 inc.i$erties are proper.e6 t&e .'. 8&e n#m$er of forma.. =#estions a$o#t &o.y $a.oy appro7imate.m. oversi'&t of inte.assified information. 8&e >3SC is presented -it& 'overnment re=#ests for s#rvei.iance.* Con'ressiona. GS/np DG D 2B 2A 16987/13 011"2 E .o+4l overs. 3t &as investi'ation po-ers6 inc.ess t&ey are dec.0..#din' on si'nificant >3SC opinions a#t&orisin' inte.#din' t&e $#.itative information on t&e dept& and intensity of oversi'&t or ans-ers to a.i'ence activities t&at ta+e p.i'ence Committee and t&e 4#diciary Committee of $ot& Senate and t&e 9o#se6 -&ic& emp. .assified.ection pro'rammes6 and t&at t&ere -as specific re)a#t&orisation of t&e app. &828 Co+0ress.i'ence activities is cond#cted t&ro#'& t&e 3nte.t&e action of t&e e7ec#tive $ranc& in matters of co#nterterrorism and to ens#re t&at civi.#din' t&e a$i.s is very sma.e t&e (S side provided a detai.y to non)(S persons..ications s#$mitted are ret#rned for s#pp. &838 #u/.ity to access c..*4*.ance in t&e form of a#t&orisations for co.e . to $e modified or narro-ed do-n6 or ref#sed.4l overs.y 2513 and 11 cto$er 2513. 0ccordin' to t&e (S6 >3SC &as estimated t&at at times appro7imate.ar $asis6 inc. 8&e (S e7p.. 1 2 See Semi)0nn#a. $efore reac&in' t&e >3SC6 as -e.even >edera..0.ayers of administrative contro... committees are provided -it& information from t&e >3SC re'ardin' its proced#res and -or+in' met&odsG see6 for e7amp.. %#d'es6 oversees inte. 3ts proceedin's are in ca(era and its orders and opinions are c. as t&e iterative process $et-een t&e >3SC and t&e administration prior to a >3SC decision.. 0ssessment of Comp.ained t&at t&e reason for t&is is t&e amo#nt of scr#tiny of t&ese re=#ests $y different .3..etters of >3S0 Co#rt Presidin' 4#d'e !e''ie *a.assified6 #n.o+s 8&e >3SC6 comprised of e.)time c&airman.8&e Privacy and Civi.+ co.ace on t&e $asis of Section 752 >3S0 and Section 21E Patriot 0ct. Ji$erties versi'&t Board -as esta$.s#c& mec&anisms app.ton to Senator Jea&y of 29 4#. 3n addition6 t&e Con'ressiona. ref#sa.*@ FI$C role 4+/ l.is&ed after 9/11...anced. 8&e (S emp&asised t&at $ot& Committees are $riefed on a re'#. 3t is comprised of fo#r part)time mem$ers and a f#.

ection in t&e form of an order to a specified company for prod#ction of records. 0s t&e . data of non)(S persons are concerned. 1 Clapper # A(nesty International6 4#d'ment of 26 >e$r#ary 25136 E68 (.o... 3nte.y to $ot& (S and "( data s#$%ects.ection and f#rt&er processin' of t&e persona.. 3n addition6 t&e (S S#preme Co#rt &as esta$.ection6 $#t t&e companies can nevert&e. disproportionate $#rden or depart#re from previo#s ordersD. (nder Section 7526 it is t&e 0ttorney Genera.e'a..ication for an order. oversi'&t is ..ection6 and t&e Co#rtBs ro.i'ence t&at a#t&orise co.. $asis of co.s or or'anisations do not &ave standin' to $rin' a . oversi'&t of pro'rammes cond#cted #nder "7ec#tive rder 12333.imited as far as t&e co..a-s#it #nder Section 7526 $eca#se t&ey cannot +no. 8&ere is no %#dicia.y is s#$%ect to %#dicia. redress #nder Section 752 of >3S0.i'&t of t&e a$ove6 it appears t&at individ#a. (nder Section 7526 t&e >3SC does not approve 'overnment)iss#ed directives addressed to companies to assist t&e 'overnment in data co.en'e to a directive in t&e >3SC.ance or not1.e to t&e *or+in' Gro#p did not a.it to assess t&e scope and dept& of oversi'&t re'ardin' t&e impact on individ#a.imitations on co. 3n . t&e e.ess $rin' a c&a.-&et&er t&ey &ave $een s#$%ect to s#rvei.s in t&e "(. oversi'&t depends on t&e ..a$..ection and processin' app.e consists of confirmation t&at t&e certifications s#$mitted contain a.imited information avai.ection.e for a company to mo#nt a c&a. >3SC proceedin's are non)adversaria.*&at e7act.y primari.ements re=#ired and t&at t&e proced#res are consistent -it& t&e stat#te. effects Ce. 0 decision of t&e >3SC to modify6 set aside or enforce a directive can $e appea.s &ave no aven#es for %#dicia.is&ed t&at individ#a.. C2513D GS/np DG D 2B 2E 16987/13 011"2 E .d app.y to (S persons as re=#ired $y t&e (S Constit#tion6 it appears t&at %#dicia. S.. and t&e Director of 1ationa. 8&is reasonin' -o#.en'e on t&e s#$stance as t&e reasonin' of t&e re=#est is not provided. 8&e .. (nder Section 21E6 t&e Co#rt is as+ed to approve co.'. and t&ere is no representation $efore t&e Co#rt of t&e interests of t&e data s#$%ect d#rin' t&e consideration of an app. 3t is not possi$. Companies may contest directives on 'ro#nds of proced#re or practica.ed $efore t&e >3S0 Co#rt of !evie-.

y to "( citi?ens not residin' in t&e (S.y if necessary to t&e specified p#rpose..t&at .e to "( data s#$%ects compared to (S data s#$%ects6 name.ied for t&e co.o-er t&res&o. or dan'ero#s activity.i'ence@ if it relates to t&e p#rposes p#rs#ed.e6 not a#t&orised #nder Section 752. data of individ#a.. versi'&t of t&e s#rvei.. ii.i'ence p#rposes6 inc.ar'e)sca.. *&ere it is a#t&orised6 data of (S persons is considered to $e @forei'n inte.ection of data pertainin' to (S persons is6 in princip.ements of certain aspects of t&ese pro'rammes6 #nder -&ic& data co.y at protectin' (S persons.ection and processin' is done -it& a $asis in (S .ica$.ance pro'rammes and t&e 'eo'rap&ica.ts in . $ases a. iii. data of "( citi?ens. t&er e.e'a. 8&ese proced#res do not impose specific re=#irements or restrictions -it& re'ard to t&e co.d $ein' app. scope of s#rvei..ays do-n specific conditions and safe'#ards. protections Crespective.ements remain #nc. C2D 8&ere are differences in t&e safe'#ards app.'8 C1D $U99ARA OF 9AI FI %I 7$ (nder (S . 8&is necessity re=#irement does not app.. 8&e (S &as confirmed t&e e7istence and t&e main e.#din' co#nter)terrorism6 of persona. (nder $ot& Section 21E and Section 7526 (S persons $enefit from constit#tiona.a.ance pro'rammes aims primari.a-6 a n#m$er of .. Co. 8&e tar'etin' and minimisation proced#res approved $y >3SC #nder Section 752 are aimed at red#cin' t&e co.ection and processin'6 for forei'n inte.y: i..ection6 processin' or retention of persona.y6 >irst and >o#rt& 0mendmentsD t&at do not app.... 8&is res#.o. data t&at &as $een transferred to t&e (S or is processed $y (S companies.i'ence@ on.s in t&e "(6 even -&en t&ey &ave no connection -it& terrorism6 crime or any ot&er #n.a-f#.ection of persona.ection6 retention and dissemination of persona. 16987/13 011"2 GS/np DG D 2B 26 E ..e co.ance pro'rammes #nder Section 752.ear6 inc..y to data of "( citi?ens -&ic& is considered to $e @forei'n inte. data of or concernin' (S persons.#din' t&e n#m$er of "( citi?ens affected $y t&ese s#rvei..

redress...ario#s . 3ts orders and opinions are c.ice)President .. se.ayers of oversi'&t $y t&e t&ree $ranc&es of Government app.eve.ysisD.. of individ#a.arity remains as to t&e #se of ot&er avai..ance pro'rammes6 different . or administrative6 for eit&er "( or (S data s#$%ects to $e informed of -&et&er t&eir persona.ica$.ia :a. 8&is is especia...ance pro'rammes as -e. 8&ere is no %#dicia.. data is $ein' co.ess t&ey are dec.e to t&ese pro'rammes.ection #nder Section 21E and ann#a. oversi'&t of t&e co.e .evant re'ardin' "7ec#tive rder 12333.ection of forei'n inte.y a capacity to compe. approva.mstr<m6 Commissioner for 9ome 0ffairs6 to (S co#nterparts 16987/13 011"2 GS/np DG D 2B 27 E .i'ence o#tside t&e (S #nder "7ec#tive rder 123336 -&ic& are cond#cted #nder t&e so. 8&ere are no opport#nities for individ#a.C3D :oreover6 #nder (S s#rvei.assified and companies are re=#ired to maintain secrecy -it& re'ard to t&e assistance t&ey are re=#ired to provide6 t&ere are no aven#es6 %#dicia. as .ectors to =#ery t&e data co.#din' >3SC orders for t&e co.. CAD 0 .assified. content dataD and different sta'es of data processin' Cinitia.a$. 8&ere is no %#dicia. C6D . certifications t&at provide t&e $asis for co. ac=#isition vs.ected or f#rt&er processed. f#rt&er processin'/ana.imitative conditions app.ected #nder Section 21E or tas+ed for co.ac+ of c.y to activities on t&e $ase of Section 21E and Section 752. $ases6 t&e e7istence of ot&er s#rvei.y to different types of data Cmeta)data vs.ection #nder Section 752.e competence of t&e "7ec#tive Branc&. 0nne7es: Jetters of ..ection #nder Section 752.s of data protection safe'#ards app. CED Since t&e orders of t&e >3SC are c. 8&ere is %#dicia..parte and in ca(era. information6 inc.iviane !edin'6 Commissioner for 4#stice6 >#ndamenta.y re.e'a. !i'&ts and Citi?ens&ip and Commissioner Ceci. 8&e >3SC operates e.assified6 #n. oversi'&t for activities t&at imp.s to o$tain access6 rectification or eras#re of data6 or administrative or %#dicia.

16987/13 011"2 GS/np DG D 2B 28 E .

16987/13 011"2 GS/np DG D 2B 29 E .

16987/13 011"2 GS/np DG D 2B 35 E .

16987/13 011"2 GS/np DG D 2B 31 E .

//////////////// 16987/13 011"2 GS/np DG D 2B 32 E .