Internet Safety Act Would Make Us Less Safe

March 12, 2009— -- Lawmakers recently called for a new federal law that would require any provider of Internet access to keep records related to the identity of anyone using its computer networks -- for up to two years.

That means all Internet service providers, businesses providing employees with Internet access, coffee shops and restaurants offering WiFi connections, libraries, and other Internet-enabled places would, at a minimum, be required to maintain records of who used a particular computer to access the Internet and when.

This requirement is problematic enough, but the ambiguity of a key provision in the bill, dubbed the Internet Safety Act, which requires retention of "all records or other information pertaining to the identity of a user" -- even if that usage is temporary -- could sweep in far more sensitive information.

In addition, the data retention requirements might be construed to apply not only to commercial providers but also to any household that has a broadband connection.

Intended to help law enforcement track and prosecute criminals who use the Internet to traffic child pornography, the legislation would in effect require ISPs to keep track of anyone who uses their Internet access.

We know that one of the best ways to protect our online privacy is to keep the amount of information we share and store on the Internet at a minimum.

Asking AOL, Comcast or Verizon to store details of our online activity in a giant database for two years would not only undermine the less-is-best principle, but also would subject a large stockpile of our personal information to theft or accidental disclosure. You might as well paint a bulls-eye on your private files; such a database would be an all-too-tempting target for computer criminals.

The Internet activity of government employees -- members of Congress, law enforcement and other agencies -- could also get swept up in Internet service providers' efforts to comply with this proposed law.