FBI Search Abuses Could Number Thousands

April 16, 2008 — -- The FBI may have committed as many as 6,400 intelligence violations in the course of its use of national security letters, Justice Department Inspector General Glenn Fine told lawmakers Tuesday.

National security letters allow FBI investigators to obtain personal records such as Internet, phone and financial information without going first to a judge for a warrant.

Fine explained the method his office used to estimate the number of violations.

"The FBI's 10 percent review of field office NSLs found at least 640 potential intelligence violations from 2003 through 2006," Fine told members of a House Judiciary subcommittee.

"Extrapolating the results of the FBI's 10 percent statistical sample to the full number of NSLs means that the total number of possible intelligence violations among all NSLs issued over the four-year period could be as high as 6,400," Fine continued.

Fine also described his office's oversight since it disclosed last year that the FBI had issued more than 140,000 national security letters from 2003 to 2005.

Last month, Fine released a follow-up report, which found that the FBI had issued 49,425 national security letters in 2006 alone.

The inspector general's reviews prompted the FBI and Justice Department's National Security Division to begin internal audits of how NSLs are used.

Under federal law, all intelligence agencies are required to self-report possible violations of the law to the president's Intelligence Oversight Board.

At the hearing, FBI general counsel Valerie Caproni said that many of the violations "involved third-party errors or inattention to detail." According to FBI officials that type of infraction includes clerical errors.

Asked about the 6,400 figure after the hearing, Caproni disputed it and said, "Ninety percent of those are third-party errors."

A Freedom of Information Act lawsuit by the Electronic Frontier Foundation against the FBI previously disclosed documents that show the FBI overcollected data from entire e-mail servers instead of only the intended suspects' communications.