Nick Merrill and Cindy Cohn recount challenges to FBI national security letters
· 1:06:42 · Watch on YouTube ↗
Summary
Nick Merrill and Cindy Cohn describe legal battles over FBI national security letters, changes to secrecy requirements, and privacy-by-design services intended to reduce the customer data available for disclosure.
Key points
- Merrill says the FBI demanded information about a Calyx customer through a national security letter that prohibited disclosure and lacked a judge’s authorization.
- With ACLU representation, Merrill challenged the demand and secrecy restrictions. Initial favorable rulings were stayed during appeals; the Patriot Act was not overturned.
- The government withdrew Merrill’s information demand, but secrecy restrictions persisted until further legal proceedings allowed him to discuss his experience.
- Cohn describes EFF challenges on behalf of CREDO Mobile and Cloudflare, including sealed proceedings and a government countersuit against CREDO.
- According to Cohn, statutory amendments introduced review of gag orders after an initial period of up to three years, rather than guaranteeing that secrecy automatically ends then.
- Merrill describes privacy by design as an alternative defense: CalyxOS limits telemetry, while Phreeli is designed to minimize customer information and separate payment from phone-service identity.
Article Details
- Topics
- [12:58] FBI demand for Calyx customer information and nondisclosure restrictions
- [18:15] National security letter authority and constitutional objections
- [31:58] Merrill’s litigation, appeals, withdrawal of the demand, and gag-order challenge
- [43:39] Cindy Cohn and EFF challenges on behalf of communications providers
- [52:52] Statutory changes to gag-order review and remaining oversight concerns
- [57:06] Privacy by design and Calyx privacy services
- [01:00:06] Phreeli’s minimal-data signup and separation of payments from subscriber identity
People
Cindy CohnEFF lawyer and executive who describes litigation challenging national security letters for CREDO Mobile and Cloudflare, and advocates prior judicial oversight of customer-data demands.Judge IllstonJudge whom Cohn identifies as finding amended national security letter secrecy procedures sufficient under the First Amendment after previously ruling against the statute.Nick MerrillCalyx founder who recounts challenging an FBI national security letter with ACLU representation and later developing privacy-focused services, including Phreeli.
Vendors
Calyx[08:25] JACK: The name of the ISP was called Calyx, and now that he had it stood up,Cloudflare[50:39] CINDY: So, just as we won the first case on behalf of CREDO, we had heard from Cloudflare,CREDO Mobile[46:57] to reveal to the public that our client was a little phone company called CREDO Mobile.Phreeli[01:00:34] I think that companies can do better. So, I built a company called Phreeli,