Electronic Privacy Information Center v. National Security Agency

CourtDistrict Court, District of Columbia
DecidedJuly 7, 2011
DocketCivil Action No. 2010-0196
StatusPublished

This text of Electronic Privacy Information Center v. National Security Agency (Electronic Privacy Information Center v. National Security Agency) is published on Counsel Stack Legal Research, covering District Court, District of Columbia primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Electronic Privacy Information Center v. National Security Agency, (D.D.C. 2011).

Opinion

UNITED STATES DISTRICT COURT FOR THE DISTRICT OF COLUMBIA

ELECTRONIC PRIVACY INFORMATION CENTER,

Plaintiff, Civil Action No. 10-0196 (BAH) v.

NATIONAL SECURITY AGENCY, et al.

Defendants.

MEMORANDUM OPINION

Pending before the Court is the partial motion to dismiss by the National Security Agency

(“NSA”) and the National Security Council (“NSC”) two of the four claims in the Complaint.

These claims stem from a Freedom of Information Act (“FOIA”) request that the plaintiff,

Electronic Privacy Information Center (“EPIC”), filed with the NSA seeking information related

to the Comprehensive National Cybersecurity Initiative, a multi-agency federal initiative to

ensure the security of the nation’s online infrastructure. In this case, the NSA referred part of the

plaintiff’s FOIA request to the NSC since a responsive document in the NSA’s possession had

originated with the NSC. The plaintiff brought this lawsuit against both the NSA and NSC to

compel the production of documents responsive to its FOIA request. The plaintiff believes that

releasing the documents it seeks “would provide the opportunity for meaningful public

participation in the development of new security measures that may have a significant impact on

civil liberties, such as privacy.” Def.’s Partial Mot. to Dismiss (“Defs.’ Mot.”), Ex. A at 2-3

(Plaintiff’s FOIA Appeal). The defendants now seek to dismiss the plaintiff’s claims in Count

III, which alleges that the NSC “failed to disclose responsive agency records in its possession in

response to the referral by the NSA,” Compl. ¶ 66, and in Count IV, which alleges that the NSA violated the Administrative Procedure Act when it referred the FOIA request to the NSC. Id. ¶

72. For the reasons discussed below, the Court will grant the partial motion to dismiss.1

I. BACKGROUND

On June 25, 2009, Plaintiff EPIC submitted a FOIA request to the NSA seeking

documents related to the Comprehensive National Cybersecurity Initiative (“CNCI”), an

initiative established by former President George W. Bush that outlines federal cyber-security

goals. Id. ¶¶ 6, 10, 15.

The plaintiff is a not-for-profit public interest research organization that reviews federal

activities and policies to determine their possible impact on civil liberties and privacy interests.

Id. ¶ 3. The NSA is an agency within the Department of Defense that is responsible for shielding

our nation’s coded communications from interception by foreign governments and for secretly

intercepting intelligence communications from foreign nations. See Founding Church of

Scientology of Wash., D.C., Inc. v. NSA, 610 F.2d 824, 825 (D.C. Cir. 1979); Larson v. Dep’t of

State, No. 02-01937, 2005 WL 3276303, at *17 (D.D.C. Aug. 10, 2005), aff’d, 565 F.3d 857

(D.C. Cir. 2009).

President Bush established the CNCI on January 8, 2008 by issuing National Security

Presidential Directive 54 (“NSPD 54”), also known as Homeland Security Presidential Directive

23. Id. ¶¶ 6, 8. The contents of NSPD 54 have not been released to the public. Id. ¶ 7. The

CNCI, as described by the Senate Committee on Homeland Security and Governmental Affairs,

1 The Court has jurisdiction over this case pursuant to 28 U.S.C. § 1331 because this case arises under a federal law – the Freedom of Information Act – and “the district courts . . . have original jurisdiction of all civil actions arising under the Constitution, laws, or treaties of the United States.” 28 U.S.C. § 1331. Jurisdiction is also established by the FOIA statute itself, which provides that “[o]n complaint, the district court of the United States. . . in the District of Columbia, has jurisdiction to enjoin the agency from withholding agency records and to order the production of any agency records improperly withheld from the complainant.” 5 U.S.C. § 552(a)(4)(B). Section 552(a)(4)(B) also makes venue proper in this District. See In re Scott, 709 F.2d 717, 720 (D.C. Cir. 1983) (citing 5 U.S.C. § 552(a)(4)(B) for the proposition that Congress expressly intended “to render the District of Columbia an all-purpose forum in FOIA cases.”).

is a “multi-agency, multi-year plan that lays out twelve steps to securing the federal

government’s cyber networks.” Id. ¶¶ 9-10. The CNCI was formed “to improve how the federal

government protects sensitive information from hackers and nation states trying to break into

agency networks.” Defs.’ Mot., Ex. A at 1-2.

On June 25, 2009, the plaintiff submitted a written FOIA request to the NSA that, in its

entirety, sought the following documents:

a. The text of the National Security Presidential Directive 54 otherwise referred to as Homeland Security Presidential Directive 23;

b. The full text, including previously unreported sections, of the Comprehensive National Cybersecurity Initiative, as well as any executing protocols distributed to the agencies in charge of its implementation; and

c. Any privacy policies related to either the Directive, the Initiative, including but not limited to, contracts or other documents describing privacy policies for information shared with private contractors to facilitate the Comprehensive National Cybersecurity Initiative. Compl. ¶ 15. The plaintiff also requested an expedited response to its request. Id. ¶ 16. The

expedited processing request was initially denied on July 1, 2009, but was granted on August 12,

2009, after the plaintiff filed an administrative appeal. Id. ¶¶ 22, 29.

The NSA responded to the plaintiff’s request on August 14, 2009 and produced two

redacted documents that had been previously released under FOIA, although the Complaint does

not indicate whether the plaintiff was the previous recipient of the documents. Id. ¶ 33. On

October 26, 2009, the NSA informed the plaintiff that its request had been processed further and

that three records responsive to the request had been located. Id. ¶¶ 36-38. The NSA withheld

two of the three records in their entirety, claiming that these two records were exempt from

release pursuant to various statutory exemptions to FOIA’s disclosure requirements. Id. ¶¶ 39-

41. The plaintiff’s Complaint indicates the NSA did not provide a factual basis for its

determinations that the claimed FOIA exemptions were applicable to the withheld documents.

Id. As for the third record responsive to the plaintiff’s request, the NSA indicated that this

record did not originate with the NSA, but rather with the NSC, and that the record had therefore

been referred to the NSC for “review and direct response to [EPIC].” Id. ¶ 42. The NSC is a

presidential advisory group composed of the President, Vice-President, Secretary of State,

Secretary of Defense, and other cabinet-level officials, including the National Security Advisor,

that advises the President of the United States on national security and foreign policy issues.

Armstrong v. Exec. Office of the President, 90 F.3d 553, 556 (D.C. Cir. 1996); 50 U.S.C. §

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Environmental Protection Agency v. Mink
410 U.S. 73 (Supreme Court, 1973)
Federal Bureau of Investigation v. Abramson
456 U.S. 615 (Supreme Court, 1982)
Louisiana Pub. Serv. Comm'n v. FCC
476 U.S. 355 (Supreme Court, 1986)
Bowen v. Massachusetts
487 U.S. 879 (Supreme Court, 1988)
Bell Atlantic Corp. v. Twombly
550 U.S. 544 (Supreme Court, 2007)
Ashcroft v. Iqbal
556 U.S. 662 (Supreme Court, 2009)
In Re Interbank Funding Corp. SEC. Litigation
629 F.3d 213 (D.C. Circuit, 2010)
Garcia v. Vilsack
563 F.3d 519 (D.C. Circuit, 2009)
Larson v. Department of State
565 F.3d 857 (D.C. Circuit, 2009)
Emily's List v. Federal Election Commission
581 F.3d 1 (D.C. Circuit, 2009)

Cite This Page — Counsel Stack

Bluebook (online)
Electronic Privacy Information Center v. National Security Agency, Counsel Stack Legal Research, https://law.counselstack.com/opinion/electronic-privacy-information-center-v-national-s-dcd-2011.