Elec. Privacy Info. Ctr. v. U.S. Dep't of Commerce

356 F. Supp. 3d 85
CourtCourt of Appeals for the D.C. Circuit
DecidedFebruary 8, 2019
DocketNo. 18-cv-2711 (DLF)
StatusPublished
Cited by2 cases

This text of 356 F. Supp. 3d 85 (Elec. Privacy Info. Ctr. v. U.S. Dep't of Commerce) is published on Counsel Stack Legal Research, covering Court of Appeals for the D.C. Circuit primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Elec. Privacy Info. Ctr. v. U.S. Dep't of Commerce, 356 F. Supp. 3d 85 (D.C. Cir. 2019).

Opinion

DABNEY L. FRIEDRICH, United States District Judge

Plaintiff Electronic Privacy Information Center (EPIC), a non-profit organization dedicated to privacy and civil liberties issues, brings this action against the U.S. Department of Commerce and the U.S. Census Bureau under the Administrative Procedure Act (APA) and the Declaratory Judgment Act. The plaintiff claims that the E-Government Act requires the defendants to conduct and release "privacy impact assessments" addressing Secretary of Commerce Wilbur Ross's March 26, 2018 decision to include a citizenship question in the 2020 Census. The defendants agree, but insist they still have plenty of time to do so "before" actually "initiating a new collection of information" within the meaning of the E-Government Act.1 Before the Court is the plaintiff's Motion for a Preliminary Injunction, Dkt. 8, seeking to enjoin Commerce and the Bureau from implementing Secretary Ross's decision to add a citizenship question to the Census, see Dkt. 8-2. For the following reasons, the Court will deny the motion.

I. BACKGROUND

A. Statutory Background

The E-Government Act requires federal agencies to "conduct a privacy impact assessment,"

*87"ensure the review of the privacy impact assessment," and, "if practicable, ... make the privacy impact assessment publicly available" "before" "initiating a new collection of information" that "will be collected, maintained or disseminated using information technology" and that "includes any information in an identifiable form permitting the physical or online contacting of a specific individual, if identical questions have been posed to[ ] ... 10 or more persons." E-Government Act § 208(b)(1)(A)-(B).

The term "collection of information" is defined by statute as "the obtaining, causing to be obtained, soliciting, or requiring the disclosure to third parties or the public, of facts or opinions ... regardless of form or format, calling for" "answers to identical questions posed to ... ten or more persons[.]" 44 U.S.C. § 3502(3)(A) ; see also E-Government Act § 201 (incorporating § 3502 definitions by reference). The same term is also used in OMB regulations to "refer[ ] to the act of collecting or disclosing information, to the information to be collected or disclosed, to a plan and/or an instrument calling for the collection or disclosure of information, or any of these, as appropriate." 5 C.F.R. § 1320.3(c). The term "initiating" has no statutory or regulatory definition.

A privacy impact assessment-or "PIA"-must "address" "what information is to be collected;" "why the information is being collected;" "the intended use of the agency of the information;" "with whom the information will be shared;" "what notice or opportunities for consent would be provided to individuals regarding what information is collected and how that information is shared;" "how the information will be secured;" and "whether a system of records is being created under [the Privacy Act]." E-Government Act § 208(b)(2)(B)(ii).

B. Factual Background

On March 26, 2018, Secretary of Commerce Wilbur Ross announced his decision to include a citizenship question on the 2020 Decennial Census questionnaire. See Bachman Decl. ¶ 12, Dkt. 12-1. That decision has been challenged elsewhere on a number of grounds.2 For present purposes, all that matters is whether-and, more importantly, when -the decision to collect citizenship information had to be addressed in one or more PIAs.

The Bureau is no stranger to PIAs. When Secretary Ross announced the inclusion of the citizenship question in March 2018, the Bureau was already planning to conduct an annual PIA for the primary information technology system used for the decennial census. Bachman Decl. ¶¶ 3, 9. That system-called "CEN08"-shares Census-related information with four other systems: "CEN21," "CEN05," "CEN11," and "CEN13." Id. ¶ 14. And a sixth information technology system-called "CEN18"-enables the flow of information between CEN08 and the other four systems. Id.

The Bureau maintains and regularly updates PIAs for each of these systems. See id. ¶¶ 9, 15. The PIA for CEN08 was updated in June and September of 2018, and another update is in progress and scheduled for release in February or March of 2019. Id. ¶ 9. The PIAs for the remaining systems were all updated in June 2018 and will be reviewed and updated again "within the next two months" as part of the Bureau's annual PIA process. Id. ¶ 15. In the meantime, the current *88PIAs for these systems are available to the public online.3

The existing PIAs say little about the collection of citizenship information in particular. The PIAs for CEN05,4 CEN13,5 and CEN186 do not mention citizenship at all. And the PIAs for CEN087 and CEN118 mention citizenship only once, in a field labeled "Other general personal data (specify)," without any analysis or further context.9

Unsatisfied with this level of treatment, EPIC filed this action on November 20, 2018. The complaint asserts two counts under the APA and one count under the Declaratory Judgment Act. Count I alleges that the defendants acted unlawfully by adding the citizenship question to the Census without first conducting, reviewing, and releasing PIAs to address that decision. Compl. ¶¶ 64-70 (citing 5 U.S.C. § 706(2)(a), (c) ).

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Cite This Page — Counsel Stack

Bluebook (online)
356 F. Supp. 3d 85, Counsel Stack Legal Research, https://law.counselstack.com/opinion/elec-privacy-info-ctr-v-us-dept-of-commerce-cadc-2019.