Jerome H. Kahan*
Abstract
Not everyone knows that the federal government runs a secret terrorist watchlisting program that carries the names and other identifying information on known and suspected terrorists and that, if there is “reasonable suspicion,” also includes derogatory material about the associates and families of these entries. This program consists of four interrelated lists aimed at helping federal, state, and local authorities determine whether individuals they encounter might pose a threat to homeland security by trying to illegally enter the country, flee from domestic authorities, board aircraft when banned from doing so, obtain visas or passports when these require special investigations, or engage in suspicious activities noticed by authorities or reported by citizens. However, in the course of populating these lists, the program also sweeps up the names of innocent people without their knowledge who then experience adverse consequences as a result of being “blacklisted,” thus raising serious issues about the constitutionality of a process based upon the presumption of guilt until proven otherwise—the reverse of our how our criminal justice system works. Recent acquisition and publication of the 2013 Watchlisting Guidance by an online journal provided rare insight into how this watchlist operates and stimulated investigation into the workings of all the related watchlists. This article summarizes the nature and purpose of the terrorist watchlists, discusses the rules followed by agency screeners, explores the civil liberties implications of watchlisting, notes the links between gun controls and the watchlists, and identifies the need for oversight of the process. It offers conclusions about the efficacy of these lists and suggests ways that President Trump can improve them so they help capture terrorists without ensnaring innocent individuals, consistent with constitutional principles.
Introduction
What if you showed up at the airport with a ticket and went through the screening process without any problem, but at the last moment were denied boarding a commercial flight from Washington, D.C., to Seattle, Washington, with no explanation when you questioned authorities?[1] What if you were driving fifteen miles per hour over the speed limit and were pulled over by a policeman for what seemed to be a traffic violation, only to be told that you were a suspected terrorist and were then immediately taken to the police station for questioning?[2] What if a federal agent appeared at your door and took you into custody because you were supposedly an associate of a known terrorist, offering no further explanation?[3] These are not fictional scenarios, but rather real life vignettes of what could happen as a result of a secret watchlist program run by the federal government that collects and records information about individuals identified as being known terrorists or suspected of being involved in terrorist activities and can also include derogatory material about the associates and families of these entries.
Established by Presidential Directives, approved by the Attorney General, and implemented by the National Counterterrorism Center (NCTC) and the FBI, the watchlisting program consists of four interrelated lists aimed at helping federal agencies and law enforcement authorities at all levels determine whether individuals they encounter might pose a threat to homeland security by illegally entering the country, fleeing from domestic authorities having being accused of committing a crime, or seemingly engaging in suspicious activities or planning to take dangerous actions noticed by authorities or reported by citizens.[4] However, the system has often been accused of failing to catch potentially dangerous individuals, while at the same time inadvertently vacuuming up data on thousands of innocent people and entering their names on a watchlist.[5] These unfortunate individuals did not know and may never find out if, why, or when this occurred, yet once blacklisted a person can run into unexplained difficulties—including unrevealed invasions of their constitutional freedoms—when trying to travel or to find or hold jobs.[6]
Recent acquisition and publication by The Intercept of a 166-page restricted copy of the 2013 Watchlisting Guidance triggered a furor in the press, the public, pundits, and civil liberties organizations by opening up a window into how this list operates and the workings of the overall watchlisting system.[7] This article summarizes the nature and purpose of the terrorist watchlists, discusses the rules that screeners follow when individuals are encountered, explores the civil liberties implications of watchlisting, notes the links between gun controls and the watchlists, and highlights the need for independent oversight. It offers conclusions about the efficacy of these lists, suggests ways these lists can fulfill their missions more openly and consistent with constitutional principles, and recommends a series of steps President Trump should take to improve the watchlisting process so it can work against terrorists and for the safety and well-being of the American people.
I. The Watchlisting System
One of the reasons the U.S. government failed to anticipate and thwart the 9/11 attacks was that “information on terrorist suspects was disorganized and poorly used” in part due to “the lack of an integrated terrorist watch list,” which “has long been described as a critical shortfall in homeland security and the war against Al Qaeda and other terrorist groups.”[8] This gap was not only recognized by Congress but also by President Bush in his 2002 National Strategy for Homeland Security when he pledged to “build and continually update a fully integrated, fully accessible terrorist watch list,” making the FBI responsible for integrating the dozen existing terrorist lists operated by multiple agencies.[9] No actions were taken to implement this pledge, however, until September 16, 2003, when a Presidential Directive established a Terrorist Screening Center (TSC) that would be run by the FBI and would create “a unified and comprehensive watchlist [that] all investigators, agents, and screeners” could quickly consult to help them detect and disrupt terrorist threats.[10]
Although such a consolidated Terrorist Watchlist was developed by 2004, uniform policies and procedures for managing and populating this list were not issued until TSC published an official Terrorist Watchlisting Guidance in July 2007, followed by two annual updated editions.[11] Unexpectedly, this process was severely criticized on Christmas Day 2009 when it was discovered that the name of a suspected terrorist, the so-called “underwear bomber,” was not on this list, thus preventing authorities from identifying him as a potential threat and barring him from boarding a commercial airline flight at Amsterdam airport bound for the United States—a serious system failure publicly acknowledged by the Secretary of Homeland Security that could have endangered hundreds of lives if not for the alert intervention of passengers and crew while the plane was airborne.[12] This failure led to an interagency review of the watchlisting system, which recommended improvements to policies, processes, and standardization mechanisms that were captured in the July 2010 version of the Watchlisting Guidance and, after further improvements, the 2013 edition obtained by The Intercept.[13] The 2013 Guidance provides the latest set of rules for managing the Terrorist Watchlist, including the process for placing individuals on this list and conditions that might lead to removal of names, and also offers guidelines for the No-Fly and Selectee Lists, as will be discussed later.
The Watchlisting Guidance defines a “known terrorist” as an individual who has: (1) been indicted for conducting terrorist acts; (2) committed acts “dangerous to human life, property, or infrastructure . . . intended to intimidate or coerce a civilian population; . . . [sought to] influence the policy of a government by intimidation or coercion; or [(3)]. . . [tried to] affect the conduct of a government by mass destruction, assassination, kidnapping, or hostage-taking.”[14] The Guidance also explains that an individual can be watchlisted if he or she supports or facilitates a terrorist by providing safe houses, funds, and/or false documentation; makes available weapons such as conventional arms or explosives and/or weapons of mass destruction; offers transportation and/or communications; or possibly administers training on how to undertake terrorist operations.[15] Mainly focused on international terrorists, the Watchlist also includes data provided by the FBI on known domestic terrorists who engage in the foregoing activities within the territorial jurisdiction of the United States.[16]
The Watchlisting Guidance defines a “suspected terrorist” as an individual “who is reasonably suspected to be, or has been, engaged in conduct constituting, in preparation for, in aid of, or related to terrorism and terrorist activities based on an articulable and reasonable suspicion.”[17] This is a weak standard that presumes an individual suspected of being a terrorist or having ties to terrorism is guilty until proven otherwise—the opposite of what is perhaps the most sacred principle in our criminal justice system, that is, the assumption that a defendant is innocent until proven guilty.[18] The Guidance further states that neither irrefutable evidence nor concrete facts are needed to meet the reasonable suspicion criteria, as long as careful attention is given to all the information about an individual’s possible terrorist-related activities, including “derogatory information” to determine whether the reasonable suspicion standard has been met.[19] In this connection, about forty percent of the total entries on the Terrorist Watchlist consist of people who have no affiliation with terrorist groups but are nonetheless classified as suspected terrorists under the broad reasonable suspicion standard.[20]
Finally, the Guidance explains that anyone can be placed on a watchlist if they are associated with a terrorist group, even if that group has not been designated as an official terrorist organization by the U.S. government. It also explains that information about a suspected terrorist’s immediate family and other associated individuals is maintained as long as there is derogatory information sufficient to meet the reasonable suspicion standard.[21] The Guidance also warns that care must be taken before any person is entered on the Terrorist Watchlist, since many activities individuals undertake may be unrelated to terrorism.
II. Four Key Watchlists
The four watchlists discussed below—TIDE, the Terrorist Watchlist, and the No-Fly and Selectee Lists—are shared with all relevant federal, state, and local intelligence and law enforcement authorities in the country, as well as with selected foreign entities to assist them in screening and potentially interdicting individuals who might be terrorists when they plan to travel, arrive or depart a country, or pose homeland security dangers.
A. TIDE
The Intelligence Reform and Terrorism Prevention Act (IRTPA) of 2004, which created NCTC, mandated that this center, among its many duties, establish and maintain a “central and shared knowledge bank on known and suspected terrorists and international terror.”[22] Activated in May 2005, this repository, officially termed the Terrorist Identities Datamart Environment (TIDE), is comprised of all records possessed by the U.S. government related to known and suspected terrorists, including those affiliated with Hamas, Hezbollah, ISIS, and other recognized international terrorist groups. TIDE also includes high profile domestic terrorists, including information on “what terrorists have done and how we have been tracking them.”[23] Individual entries include names and other associated materials as well as other “derogatory information,” with each record assigned specific classifications from unclassified to the highest levels available—causing the entire database to be classified Top Secret/Sensitive Compartmented Information (SCI).[24]
Since it began functioning, members of the Intelligence Community (IC), the Department of Homeland Security (DHS), the FBI, and other federal agencies have nominated thousands of individuals for inclusion in TIDE. The records of these nominations are forwarded to NCTC, where special groups of analysts with authorized access to all-source terrorist-related intelligence information determine whether or not these individuals merit inclusion on this database as known or suspected terrorists.[25] In addition to obtaining information from IC sources and data acquired from its close contacts with select foreign counterparts, the CIA reportedly uses “a previously unknown program, code-named Hydra, to secretly access databases maintained by foreign countries and extract data to add to the watchlists.”[26] Based on a daily review of nominations received, NCTC analysts create new TIDE records and enhance existing ones as appropriate, while also exporting a sensitive but unclassified subset of terrorist identifiers each day to the consolidated Terrorist Watchlist.
As of June 2016, it was estimated that TIDE contained records for about 1.5 million people, primarily from outside the United States, with the records on American citizens and lawful permanent residents accounting for only about 15,000 of the total.[27] Due to its high classification and extraordinary sensitivity, NCTC will neither publicly confirm nor deny whether someone’s name has been entered on TIDE.
B. Terrorist Watchlist
The Terrorist Watchlist discussed earlier, officially designated as the “Terrorist Screening Database” (TSDB), was established on September 16, 2003, by Homeland Security Presidential Directive (HSPD)-6 to help government officials screen individuals they encounter by developing, integrating, and maintaining a database that contains complete, precise, and up-to-date information about individuals known or suspected to be terrorists.[28] As of June 2016, this Watchlist was estimated to contain over one million individual identifier records, primarily information about known or suspected terrorists living and operating overseas, with about 5,000 records containing names of U.S. citizens and legal permanent residents—a large number, but only a very small fraction of the total.[29]
As noted, TIDE is the main source for populating the Terrorist Watchlist with a subset of its unclassified listings. In turn, this Watchlist feeds information into a number of other lists, including the FBI’s special file on known and suspected terrorists, which is distributed to law enforcement authorities across the nation, the Consular Lookout and Support System (CLASS), a State Department list of people who might not be eligible for a visa or passport, and the TECS System operated by Customs and Border Protection to assist with the monitoring of border crossings. While sent to a range of government users, the Terrorist Watchlist is unclassified but sensitive and cannot be made available to the general public.[30]
TSC maintains and operates the nomination and distribution process for the Terrorist Watchlist, receiving proposed unclassified but sensitive nominations for inclusion on the list from the NCTC on a daily basis that are not only drawn from the larger TIDE database, but also from inputs received from other nominating agencies, such as CIA, DIA, DOS, and selected international entities.[31] The FBI is responsible only for domestic terrorism, including individuals associated with violent extremist organizations such as white supremacist movements. The Bureau’s Terrorist Review and Examination Center (TREX) sends nominations of known and suspected domestic terrorists with their identifiers directly to the TSC, based on investigative information in the Bureau’s databases and also from so-called “suspicious activity reports” (SARs) received by the FBI from alert citizens or cops on the beat.[32]
Whatever the origin, each submission to the TSC must meet the reasonable suspicion watchlisting standard, based on “articulable facts that objectively link a specific individual to terrorism or terrorist activities . . . [meaning] there must be an objective factual basis for the nominator to believe that the individual is a known or suspected terrorist”; in other words, not based upon a hunch, but a careful examination of the credibility of all sources and accounting for all other available information.[33] Only if the NCTC concludes that information qualifies under this standard will that data be sent to the TSC where this data will be further reviewed before being accepted for inclusion on the watchlist.
An individual can be placed on this Watchlist even if acquitted of a terrorism-related crime on the grounds that “conviction in U.S. courts requires evidence beyond a reasonable doubt, whereas watchlisting requires only a reasonable suspicion” of terrorist-related activities.[34] The vast majority of nominations submitted to the NCTC for entry on the Terrorist Watchlist are accepted and new identifier records established, though this can result in some individuals having multiple records with different information or classifications.[35]
A name can be removed from the Terrorist Watchlist if the nominating and validating agencies have credible reasons to believe that the individual is no longer engaging in terrorist-related activities or may have been mistakenly placed on this list. Unfortunately, innocent individuals, as well as known or suspected terrorists are not likely to know that their names are on the Terrorist Watchlist. Even if this is discovered, persons who have done no wrong face a difficult if not impossible redress procedure, which entails referring this complaint to TSC’s Traveler Redress Inquiry Program (TRIP) that is not known to be responsive to such concerns. Moreover, individuals who have a name similar to that of a known or suspected terrorist is already on the Terrorist Watchlist can result in innocent people being accused of involvement in terrorist activities—an “inconvenience” that TSC supposedly seeks to minimize.[36]
C. No-Fly List
The No-Fly List, also maintained by the TSC and classified sensitive, is primarily used by the Transportation Security Administration (TSA) to screen commercial air travelers at home and abroad to prevent known or suspected terrorists from flying into, out of, or within the United States, or at least to identify suspected terrorists who can be allowed to board a flight but will remain under surveillance.[37] Simply put, to be nominated for placement on the No-Fly List, an individual, regardless of her citizenship, must be seen as representing a threat to the safety of airlines and their passengers.[38] Of particular concern is the danger of terrorists seeking to hijack an aircraft and use it like a weapon or cause a mid-flight explosion. More generally, agencies can nominate individuals for the No-Fly List if they are operationally capable of posing a threat of committing an act of international terrorism abroad, but who do not meet the more specific other criteria.[39] Nominations for the No-Fly List require that nominated individuals reach a higher degree of plausible relationships to terrorism than it takes to get placed on the Terrorist Watchlist and are therefore closely scrutinized by a TSA person who works at TSC then given a thumbs up by a supervisor at the TSC if inclusion is warranted.
In recent years, the No-Fly List has experienced huge growth, with the TSC selecting names from the Terrorist Watchlist to be added to this list each evening, bringing the current number of entries to “about 81,000 names, with fewer than 1,000 U.S. persons.”[40] However, this is still only a very small fraction of the number of individuals on the terrorist watchlist.
Regarding airline security, each time an individual arrives at an airline ticket counter, that person’s name is checked to determine whether his or her name is on this list. If there is a match to that person’s name or to the same or similar name to someone on the No-Fly List, the individual could be detained for hours while being investigated and, if suspected of being a terrorist or associated with a terrorist or a terror group, not allowed to board at all.[41] Individuals placed on this list are not given official notification, and they often only discover this fact at the airport when they are denied boarding.[42] As with TIDE and the Terrorist Watchlist, it is government policy to neither confirm nor deny placement of an individual on the No-Fly List, keeping this information from both members of Congress and the public.[43]
Individuals who are denied travel on commercial air flights and assume this is because their name has been mistakenly placed on the No-Fly List can employ the latest version of the Traveler Redress Inquiry Program (TRIP), which provides individuals who have experienced difficulties with air travel or airport screening as well as when crossing U.S. borders a new redress process that is no longer “constitutionally deficient or otherwise improper.”[44] The current TRIP process represents a major improvement by triggering a review of the data on the No-Fly List that honestly seeks to determine whether and why an individual is on the list, and within a short period notifies the person in question about the results of this review, whether their name will be removed, or whether they must remain on the list for certain reasons. If this review shows no basis for that person’s name and identifiers to be on the list, this data would be removed and he or she will receive a letter to that effect. On the other hand, if the review determines that the individual needs to remain on the No-Fly List, the letter would confirm this status and in response to a request send a second letter that identifies “the specific criterion under which the individual has been placed on the No Fly List and will include an unclassified summary of information supporting the individual’s status, to the extent feasible, consistent with the national security and law enforcement interests at stake.”[45] While TRIP was improved in connection with No-Fly List issues, this was not the case for complaints relating to the Terrorist Watchlist, where the redress process remained flawed.
Finally, after the December 2009 “underwear bomber” episode, the Assistant to the President’s for Homeland Security and Counterterrorism was given the responsibility of temporarily placing an entire category of individuals whose names appear in TIDE or the Terrorist Watchlist onto the No-Fly List, assuming this proposal is approved by a panel of senior NSC officials.[46] The goal of this immediate Temporary Threat-Based upgrade (TBU) is to enable the government to rapidly prevent any known or suspicious terrorist who fits this classification from boarding airlines, but only as a precaution if there are credible intelligence reports indicating that a terrorist attack from members of the banned group was imminent.[47] However, the ability of a highly-placed executive to temporarily prevent an entire category of individuals from taking commercial flights to flee the country, supposedly after a few members of this category had committed a terrorist act, led to concerns that TBU could support profiling by barring an entire religious group or other categories of people from boarding international flights, especially since religious profiling via application of the TBU is inconsistent with Watchlisting Guidance and overall U.S. policy.[48] In May 2014, Judicial Watch validated the policy of no watchlisting based on religious profiling by obtaining a cache of modestly redacted DHS documents in response to a Freedom of Information (FOIA) request, including a recent Memorandum stating that “individuals could only be watchlisted if they were associated with a known or suspected terrorist, not based on their affiliation with . . . [a religious] or any other non-terrorist-related organization.”[49]
D. Selectee List
A Secondary Security Screening Selection List, or Selectee List for short, also maintained by the TSC, is a subset of both the No-Fly List and the Terrorist Watchlist and identifies individuals who need to undergo additional questioning, inspection, and screening before being allowed to board flights to, from, or over U.S. territory.”[50] The decision to include a person on the No-Fly List or Selectee List must include “additional derogatory requirements” that go beyond criteria required for inclusion in the Terrorist Watchlist but, as the ACLU observes, the government has refused to disclose those requirements.[51] However, we do know that there are circumstances when an individual not on the No-Fly List can appear on the Selectee List. Unless they are subject to independent derogatory information, immediate family members of known or suspected terrorists are either ineligible or unsuitable for inclusion on the Selectee List—or the No-Fly List for that matter—regardless of whether they have met the criteria for inclusion on the other lists, as noted earlier. The Selectee List currently contains 28,000 records, of which less than 1,700 are U.S. citizens or permanent residents.[52]
The Expanded Selectee List (ESEL) includes records from the comprehensive Terrorist Watchlist that contain an individual’s full name and date of birth, but fail to meet the special criteria for placement on either the No-Fly or Selectee Lists.[53] As with the Selectee List, individuals on the ESEL must undergo enhanced screening by Transportation Security Officers prior to boarding an aircraft, but neither the reasons why a person is placed on the ESEL nor the differences in the screening procedures for this list compared to those for persons on the Selectee List have been divulged. The TSA is required to notify the TSC of encounters with all individuals on the ESEL as well as on the No-Fly and Selectee Lists.[54] It is unclear whether the new TRIP process applies to individuals on the ESEL or Selectee List.
III. Screening for Watchlisted Individuals
HSPD-11, issued in August 2004, sets forth comprehensive procedures for front-line screening agencies to employ when checking individuals against the Watchlist with the goal of “detecting, identifying, tracking, and interdicting people” that might pose a threat to homeland security as they try to illegally enter the country or board aircraft, obtain visas or passports that require special attention, or engage in suspicious activities noticed by authorities or reported by citizens.[55] To this end, the TSC sends the latest version of the Terrorist Watchlist “downstream” to all front-line federal screening agencies, including TSA, CBP, USIS, ICE, and USCG—all components of DHS—as well as to the Drug Enforcement Administration (DEA), the Internal Revenue Service (IRS), the Departments of Defense (DoD) and State (DOS, and all overseas diplomatic posts.[56] The Watchlist is also distributed by the TSC to law enforcement agencies at all levels across the nation for use when an individual is arrested, detained for questioning, or stopped for a traffic violation.[57] Required information to be obtained from an encountered individual includes names and aliases, dates and places of birth, fingerprints or other biometric data, passport information, home location, countries of origin and nationality, license plate numbers, employment data, email addresses, and phone numbers.[58]
After questioning an encountered individual, all data gathered are transferred to the TSC, where experts in the Terrorist Screening Operations Center (TSOC) assess whether information about a person encountered by a screener matches a Watchlist record. If there is a match, TSOC coordinates the appropriate operational response to be taken by the FBI and/or other agencies; that could include immediately arresting the individual, subjecting the individual to additional screening at an airport checkpoint, denying the person in question a visa application, or subjecting the individual to a low level of monitoring—depending upon the Handling Codes assigned to each record. These codes run from the highest and most dangerous Code 1, which designates individuals as known terrorists, to the lowest and least dangerous Code 4, which classifies individuals as possibly associated with a suspected terrorist.[59] Most of the individuals questioned were released because neither watchlist records nor the information obtained during the encounter justified taking further steps, though valuable material that might lead to discovery of a possible terrorist is often developed. All information collected through an encounter is either used to create a new record or added to a person’s existing file for further scrutiny by authorities. Usually, TSOC notifies all relevant users when a screening process identifies a known or suspected terrorist, but in some cases, when a police officer notifies TSC of an encounter that is matched with a Watchlist entry, the FBI and other government agencies will track that person without alerting law enforcement officers of the individual’s status, a so-called “silent hit.”[60]
IV. Challenges to Civil Liberties
Over the years, concerns have been expressed that the watchlisting process violates individuals’ civil liberties and due process rights, as well as that the practice lacks clear standards by which to determine who is placed in the various databases, does not notify persons that they have been placed on these lists, and results in ethnic, religious, economic, political, and racial discrimination. In short, the watchlisting system has been accused of stigmatizing hundreds of thousands of innocent people by using an overbroad “reasonable suspicion” standard that requires neither irrefutable evidence nor concrete facts for placing someone on a watchlist, without publicizing these criteria.[61]
A. Blacklisting Innocent People
TIDE and the Terrorist Watchlist have grown exponentially in recent years, as has the No-Fly List, causing a former senior FBI special agent to argue that the watchlisting system is “revving out of control.”[62] Indeed, as these lists have grown, they have become “more error-prone, unreliable, and increasingly applied in an arbitrary and discriminatory manner,” with the result that watchlist records are filled with inappropriate, inaccurate, or outdated data.[63] This can be attributed, at least in part, to the fact that assessments of watchlisting nominations are in the hands of busy NCTC analysts whose decisions are not independently vetted by higher level officials who might otherwise consult intelligence data and other pertinent information to determine whether there is enough specific and credible information to support these judgments.[64] Moreover, in naming individuals for inclusion on the Terrorist Watchlist, analysts rely predominantly on the subjective standard of reasonableness, based on the dubious assumption that all nominations of known or suspected terrorists are by definition considered justified, unless NCTC has evidence to the contrary.[65] In essence, watchlisting individuals requires nominations to be “presumptively valid” reflecting grounds for reasonable opinion or belief—a standard that requires far less of a burden of proof than the need to prove guilt “beyond a reasonable doubt” as a key element of our criminal justice system. This results in a program that secretly blacklists people and then gives them “the impossible task of proving themselves innocent” of terrorist actions they have not committed.[66]
In response to these charges, government officials have repeatedly said there is a rigorous process for making sure no one is unfairly placed on any of the watchlists, claiming that any mistakes that do happen are corrected as soon as they are discovered.[67] This is quite an overstatement, given that the TSC conducts periodic “quality assurance reviews … to ensure that all . . . [watchlisted] records maintained are current, accurate, and thorough,” yet mistakes continue to be made.[68] Other officials reportedly admit that TIDE, for instance, has never operated perfectly, given its “fundamental design flaws that make the data difficult or even impossible to search [… and the fact that] there is no full proof way to ensure that only good data gets into the . . . system and unqualified data stays out”—so mistakes found in TIDE can trickle down into the Terrorist and No-Fly Lists.[69]
Considering the almost overwhelming amount of possible terrorist-related data collected on individuals, estimates suggest that the most accurate imaginable system would still generate on the order of “1 billion false alarms”—that is, emails, meetings, associations, phone calls, or items falsely tagged as terrorism-related—“for every real terrorist plot it uncovers.”[70] Making matters more frightening is the lack of an official procedure for discovering whether an individual has been placed on the highly classified TIDE roster or on the sensitive but unclassified Terrorist Watchlist.[71]
The 2013 Guidance calls for the Watchlist to be reviewed at least every two years or as needed, and also calls for all the watchlists to be periodically reviewed and audited to ensure that records are accurate, timely, consistent with anti-terrorism objectives, and purged of the names of innocent individuals.[72] In practice, however, efforts to rid watchlists of records judged to be outdated or obsolete have never kept up with the constant and growing ingestion of new names or identifier data for placement on the various lists. This phenomenon has led to watchlists that now contain massive numbers of records on innocent people who had been inadvertently placed on a list, many of whom, due to changed circumstances such as the availability of exculpatory evidence, should no longer be classified as suspected or actual terrorists. Additionally, one of the so-called “hidden costs” of terrorist watchlists is the high number of false positives caused by the growing number of records that should not have been retained, which in turn has the effect of swamping the data pertaining to individuals identified as known or suspected terrorists, thereby leading to more false positives in what can be characterized as a vicious circle.[73] In discussing this issue, the ACLU has argued that a focused watchlist with few false accusations “is not only better for civil liberties, but more likely to provide a security benefit” by catching known or suspected terrorists who might otherwise be lost in the maze of names on the currently inflated list of names.[74]
The rise in the number of innocent people falsely accused of being actual or potential terrorists and placed on watchlists has often led to serious consequences for the person in question, including ruining prospects for employment, unexplained audits by federal authorities, intrusive screening at points of entry into and egress from the United States, and being asked to provide all sorts of identifying evidence when encountered by law enforcement officials such as fingerprints and DNA samples. These and other adverse impacts on the privacy of individuals were reflected in the strong statement recently issued by a U.S. district judge that “[o]nce derogatory information is posted to the . . . [Terrorist Watchlist], it can propagate extensively through the government’s interlocking complex of databases, like a bad credit report that will never go away.”[75] There are even reports of “shadow” lists that continue to maintain the names and identifiers of people deemed as suspicious, even if their records are removed from one of the mainline watchlists.[76] As one commenter wryly put it: “Given that the information gleaned through this watchlisting process is shared with law enforcement throughout the land and the fact that concrete facts are not really necessary to get one’s name on the list, anyone could be in for a significant and unexpected surprise the next time that they are pulled over by a member of their local police force for a minor traffic infraction.”[77]
B. Violation of Civil liberties
The 2013 Guidance acknowledges that “watchlisting is not an exact science, […because] [T]here are inherent limitations in any primarily name based system and analytic judgments may differ regarding whether subjective criteria have been met.”[78] The Guidance goes on to say, “[G]iven these realities, the U.S. Government’s watchlisting process attempts to safeguard the American people from a terrorist attack while safeguarding privacy, civil rights and civil liberties.”[79] However, the ACLU has argued the watchlisting process is not only inconsistent with constitutional principles but also “unreliable and ineffective as a security measure . . . [leading to] a massive number of innocent people placed on the watchlists who have no connection to terror . . . [T]he false positives . . . [will soon outweigh] the numbers of those who are dangerous,” thereby swamping the system.[80]
In managing the watchlisting process, the TSC claims to be “dedicated to ensuring activities are conducted in a manner consistent with protecting privacy and civil liberties, [… not watchlisting individuals] based solely on race, ethnicity, national origin, religious affiliation, […or harming their First Amendment-protected activities, such as freedom of speech and the press as well as] “the right to peaceably assemble and to petition the government for a redress of grievances.”[81] In this connection, the ACLU Foundation of Southern California is suing USCIS for running the Controlled Application Review and Resolution (CARRP) program, a previously-secret effort that “directs agency officers to delay and ultimately deny the immigration benefits applications of applicants it has blacklisted, all without even telling these individuals that they were labeled threats to our nation, let alone giving them an opportunity to respond to the allegations.”[82]
As discussed earlier, until recently many innocent individuals banned from boarding a commercial flight presumably under the No-Fly List had great difficulty when following the redress procedures in finding out why they were placed on the list and seeking to get their names removed.[83] Now they can employ the new and improved TRIP in an effort to remove their names and associated records, a process that works relatively well in validating that an individual was indeed wrongly placed on the No-Fly list and taking steps to fix this error.[84] When it comes to the Terrorist Watchlist, however, individuals mistakenly recorded do not have a fair, effective, and prompt redress procedure.[85] To begin with, an innocent person must first find out that his or her name has been listed, which presents a formidable hurdle given the government’s policy of not informing individuals of their placement on the Watchlist. Many people go about their business without knowing they have been watchlisted, though individuals being subjected to surveillance and/or frequent questioning by law enforcement officers might guess that this might be the case. Other hints include denial of employment, difficulty in obtaining commercial or professional licenses, renewal of a passport, and/or delays or denials when applying for citizenship applications. Another way an innocent person might suspect that he or she has been watchlisted is to suddenly have to undergo a potentially lengthy investigation by the FBI for unspecified reasons but which entails multiple efforts to find evidence that the individual has ties to terrorism, including examination of the person’s family and associates for any connections they might have to known or suspected terrorists. Under certain circumstances, an FBI agent investigating a person might divulge the fact of that individual being watchlisted, with no details provided.[86]
If an innocent individual either discovers or suspects that he or she is on the Terrorist Watchlist, the only current recourse is to submit a form to the same redress program that handles No-Fly List issues. In this case, however, TSC is brought into the picture to work with the original nominating entity to determine whether the person’s name matches an individual listed in the Watchlist and, if so, assesses whether that person should remain on the list or be removed. This lengthy process attempts to be fair, but often leads to either controversial results or no final conclusion.
Meanwhile, the sizes of the various lists have exploded, notably the No-Fly List.[87] Administration officials argue that this exponential growth has not “choked the system” as critics claim, but rather have made it more effective by enabling analysts to have more data to analyze using sophisticated methods to uncover information and relationships that can lead to the prevention of terrorist attacks and the prosecution of potential perpetrators.[88] However, experts argue that the strategy of including a landslide of names on the watchlists has resulted in a “data glut,” making it more demanding, rather than less challenging, for the government to discover, investigate, and apprehend terrorists.[89]
V. Need for Oversight
Notwithstanding efforts by the DHS and DOJ Inspector Generals to monitor the functioning of the Terrorist Watchlist, a 2012 GAO investigation of the 2010 Guidelines concluded there was no executive agency or other entity responsible and accountable for periodically assessing the accuracy of the nominating process, the credibility of procedures leading to decisions to enter a nomination into the system, the efficacy of the screening process, or determining if adjustments to agency programs are needed.[90] In its 2016 study, the ACLU concluded that “the current watchlisting system lacks adequate substantive oversight,” arguing that the Executive Branch can be said to “own” this system and thus cannot be expected to credibly and independently oversee this effort, despite claims to the contrary.
As if anticipating the results of the ACLU’s study referred to above, that organization issued a statement for the record at a 2007 Hearing before the House Homeland Security Committee expressing concern that unless the legislative branch acts to overhaul the watchlisting process and the list itself, “[w]e will be stuck with a massive blacklist of mostly innocent persons that is hopelessly unreliable.”[91] In that same year, the Chairman of this Committee warned that “[t]he American people will support the watch list . . . [only] if there is accountability . . . [and] trust . . . [that this enterprise] is being done right, not . . . [instilling] fear that they are being monitored by Big Brother.”[92] Despite these warnings, Congress has failed to undertake the legislative actions needed to provide effective oversight that would ensure the watchlisting system does not ensnare innocent individuals as it seeks to meet its goal of recording essential information on known and suspected terrorists for use by enforcement authorities.
VI. Gun Control and Watchlisting
At the present time, “there is no . . . [legal] basis to automatically prohibit a person from possessing firearms or explosives because they appear on” any of the terrorist watchlists.[93] Though the phrase “No Fly–No Buy” is being used as a rallying cry for many legislators, bills proposed by gun control advocates in Congress are based on the proposition that not only names on the No-Fly List, but also those on the more comprehensive Terrorist Watchlist, should be barred from buying firearms.[94] As explained by the current Speaker of the House, “to allow someone who is on the terror watch list, who could be under investigation by the FBI, to purchase a weapon just doesn’t make sense.”[95] Others on the Hill have argued against these gun control advocates on the grounds that the watchlists are not only incomplete, but that they also include innocent people who might then mistakenly be denied the opportunity to buy guns.[96]
While all bills aimed at closing loopholes in gun purchasing and expanding background checks have failed thus far, these issues will continue to be heatedly debated in the Senate and the House. In the months prior to his election, Donald Trump, who welcomed support from the National Rifle Association, raised eyebrows by endorsing the policy of denying all types of guns to watchlisted individuals, and Mr. Trump will presumably work with the Republican-dominated Congress to implement the necessary legislation after taking office.[97]
VII. Conclusions
The federal government’s watchlisting system has developed “a life of its own,” with no external oversight, no true transparency, and no accountability about either the process of placing individuals on the various lists or how the screening process works in practice. There have even been reports of quotas being established for filling the various watchlists.[98] On the other hand, counterterrorism officials have recently described the watchlists as “a cornerstone of their efforts to detect possible terrorists before they can strike,” while guarding against improper listings of innocent individuals.[99]
A. Watchlisting System is Damaged
In March 2014, after an extensive investigation, the DOJ Inspector General (IG) reportedly found that “the FBI has made considerable progress in improving the accuracy and timeliness of the . . . terrorist watchlist,” but concluded that more needs to be done to ensure that this list was current and complete.[100] In this connection, the IG reportedly made a dozen recommendations, including requiring the TSC to “better document its actions during national security events, clarifying FBI information sharing policies to ensure they are consistent with those of the watchlist community, and improving the efficiency of the FBI’s watchlist nomination process for investigative and non-investigative subjects”—measures that were accepted by the Bureau with corrective action already underway.[101]
According to a well-known civil rights lawyer, approximately forty percent of the entries on the Terrorist Watchlist have no connection to a terrorist group yet are still branded as suspected terrorists due to the loose standards for watchlisting an individual.[102] Moreover, because the watchlist is not limited to known terrorists, an official can watchlist a person if there is “reasonable suspicion” to believe that the person is a suspected terrorist. In addition, watchlisting standards “are so low that the U.S. government’s guidelines specifically allow for a single, uncorroborated source of information—including a Facebook or Twitter post—to serve as the basis for placing you on its master watchlist.”[103] However, former officials who worked with the TSC reportedly acknowledged that while a single suspicious social media post can lead an individual to come to the attention of the FBI or other nominating agencies, “the full nominating process must be followed and the reasonable standard suspicion must be met before someone is placed on the watchlist.”[104]
In March 2014, the ACLU published a scathing criticism of the current watchlisting system, subtitled Unfair Process and Devastating Consequences, which pleaded that “Congress and the Obama administration must rein in what the Ninth Circuit Court of Appeals has called ‘a vast, multi-agency, counterterrorism bureaucracy that tracks hundreds of thousands of individuals’—a bureaucracy that remains secret and unaccountable to the public or the individuals that it targets for blacklisting.”[105] This study argued that we must ensure the system institutes stringent criteria for placing individuals on these lists, applies rigorous procedures for reviewing and removing incorrect entries, establishes guidelines that employ due process rather than the weak standards for inclusion currently in use, employs a credible process allowing individuals to question their inclusion on a watchlist, and reassesses whether watchlists should continue to carry the names of people who have passed away since terrorists often adopt identities of persons who have died.[106] Other critics have “blasted the effectiveness and reliability of the . . . [current] terrorist watch list system, asserting that too many people . . . are swept up by law enforcement agencies without proper vetting or due process—and that too many other . . . certifiable threats are left out.”[107]
A few years after the watchlisting program was initiated, the GAO concluded that “the government lacks an up-to-date strategy and implementation plan for optimizing use of the terrorist watch list . . . [that would] establish government wide screening priorities, assess progress toward policy goals and intended outcomes, consider factors related to privacy and civil liberties, ensure that any needed changes are implemented, and respond to issues that hinder effectiveness.”[108] Almost a decade later, these sensible recommendations remain relevant, with the proper balance still to be found between giving screening agencies the listings they need to discover terrorists or potential terrorists while keeping the names of innocent people off these lists.
B. For the new President to Fix
In his inaugural address, President Trump promised to fix those broken systems that are adversely affecting the functioning of our nation, though he did not cite the need to fix the terrorist watchlisting process.[109] Once this issue is brought to his attention, the new President should take the following actions during his first hundred days to remedy this problem:
Ask his Attorney General to propose changes in managing and employing terrorist watchlists that would make the processes more transparent and consistent with the constitutional rights of citizens, while retaining an updated database for screening individuals encountered by all front-line federal agencies and law enforcement authorities.
Order the NCTC to take appropriate steps to reduce the likelihood of innocent people being placed on a watchlist and ensure that families and associates of watchlisted individuals are included only if there is strong evidentiary material that ties them to terrorist activities.
Require the NCTC to cleanse the TIDE database of information that has become obsolete, irrelevant, or inaccurate, and require TSC to do the same by purging the Terrorist and No-Fly Lists.
Assign DHS the job of enacting an effective redress program for individuals who discover they have been erroneously placed on the Terrorist Watchlist, which would permit individuals to be exposed to and challenge the reasons for their inclusion and provide a transparent and objective adjudication process.
Seek legislation to the effect that watchlists must only be used for countering terrorism and not for unrelated reasons such as denial of employment, withholding professional licenses, or in other ways that would embarrass or hinder the functioning of listed individuals, but should be used in background checks for purchases of firearms in retail outlets and gun shows.
C. Establishing Effective Oversight
In addition to the foregoing actions, President Trump should take immediate steps to provide sorely needed oversight of the entire watchlisting system in terms of its effectiveness, efficiency, and respect for civil liberties. One such step should entail commissioning the Privacy and Civil Liberties Oversight Board (PCLOB)—an independent, bipartisan agency within the Executive Branch—to ensure that names and identifiers placed on the various watchlists to protect the nation from terrorism are balanced against the need to protect the constitutional rights and civil liberties of all individuals.[110] As an executive agency, however, the PCLOB is potentially subject to the sway of the White House. As an additional measure, therefore, the President should seek legislation to establish a Joint Select Oversight Committee on Watchlisting, modeled after the Senate and House Select Committees on Intelligence, to provide independent oversight of the watchlisting process.[111] Although a credible solution, this approach raises the philosophical question quis custodiet ipsos custodies: “who would watch the watchlisters”—in this case, members of the proposed Joint Watchlist Oversight Committee—to ensure they are acting responsibly in guarding the public’s interests?[112] On a practical level, this approach can work if members are chosen by the House and Senate leadership, endorsed by the White House, and rotated every few years.
D. Conclusion
Some civil liberties experts have reportedly concluded that “the watchlist system is broken […and beyond repair, because] in trying to watch too many people, we sometimes miss the glaring threats right in front of us, […while] government officials who worked closely with the watchlist system . . . say it is a deeply scrutinized process that is backed up by multiple levels of review and a constant concern for the balancing act of safeguarding civil liberties against protecting the American people.” [113] Cynics might argue that the government could do a better job in countering terrorism if it “introduced hidden microphones in every home, and tapped every conversation in every . . . car and train, and in every workplace—but the costs to privacy would be unacceptable.”[114] Readers of science fiction might argue that unless appropriate steps are taken, the watchlisting system might evolve into an Orwellian world that could turn the warning made almost fifteen years ago by the Chairman of a House Committee that “Big Brother” might be watching us into a reality rather than a literary allusion.[115]
Trashing the current watchlisting process would not be in the national security interest of the nation, since we do need to provide the identities of known and identified to screening agencies and law enforcement authorities to safeguard our borders and keep the nation as safe and possible. Information contained in the watchlists not only supports screening operations in the field, but is also systematically reviewed by NCTC analysts in an effort to “connect the dots” between supposedly unconnected data that can lead to the investigations and perhaps arrests of known or suspected terrorists and/or their associates. In the words of a U.S. counterterrorism official who did not want to be identified: “The watch list is created specifically to be one of the big dot-connectors in the counterterrorism effort—it’s among the most sophisticated systems the government has—and it’s proven itself to be effective.”[116]
If the benefits of terrorist watchlists are to be reaped in the future, we need a process that installs tight definitional and c