|Page 2 of 2 <|
Vast Data Collection Plan Faces Big Delay
Beyond the reporting burden, he said, privacy concerns are significant. "All this information will now end up in the hands of the U.S. government for them to sift through at their leisure without any apparent process to assure that it is being used for the most significant national security investigations," Riese said. He likened it to a "fishing expedition" -- "except that the government no longer has to go and put their hook in the water. We have to give all the fish."
To streamline reporting, Treasury officials are recommending a "first in" and "last out" system so that only a single U.S. financial institution -- the last one in a transfer out of the country, or the first one in a transfer in -- would have to report each transaction.
"It's another example of the U.S. government's pattern of sweeping up massive amounts of data that it can't possibly analyze, that is not likely to have any significant security benefit, but does threaten privacy" -- that of Americans and of foreigners doing business with Americans, said Barry Steinhardt, director of the American Civil Liberties Union technology project.
European officials, too, raised privacy concerns. "If the program affects non-U.S. citizens, it should be developed in close cooperation with these other countries," said Sophie in't Veld, a member of the European Parliament from the Netherlands.
Stephen R. Kroll, former Democratic special counsel for the Senate Banking Committee, said the statute "wasn't designed to require reporting of every wire transfer that goes in and out of America -- both because that's billions of transactions and because most of them are perfectly ordinary."
He said the law was designed to give the Treasury Department power for "targeted data collection," aimed, for example, at a country where there is known terrorist activity.
In an October interview, Robert W. Werner, who then was director of FinCEN, said most of the data collected would be "commercial oriented" transactions and "irrelevant" to FinCEN's mission to detect and prevent illicit activity. "The key is to have a system that allows you to be able to pull the relevant data without people worrying that irrelevant data is being browsed and used inappropriately," he said.
FinCEN would also need to develop the technical capability to store and analyze the information, the study noted. FinCEN is considering setting up a "federated data warehouse" to store the data, which would be held separately from other financial records data.
Officials said there would be strict rules to ensure that the data is not shared inappropriately, including audit trails to check for improper access. The program would be developed through a public rulemaking process over an extended period, officials said.
"We know there will be costs. We believe there is value. How do those two play out?" said Eric Kringel, senior policy adviser at FinCEN. He said that as a regulatory body, FinCEN "would not want to proceed" without determining if the benefit is worth the cost.
FinCEN has proposed taking a year to conduct a $1.1 million cost benefit analysis. Implementation would cost $32.6 million and take 3 1/2 years, officials said.