Jeb Bush dumps emails including social security numbers of Florida residents online

Florida man strikes again

Jeb Bush, a rumored 2016 Republican presidential candidate, just decided to publish hundreds of thousands of emails sent to him during his time as governor of Florida. On its face it seems like a great idea in the name of transparency, but there's one huge problem: neither Bush nor those who facilitated the publication of the records, including the state government, decided to redact potentially sensitive personal information from them.

"In the spirit of transparency, I am posting the emails of my governorship here," a note on Bush's website says. "Some are funny; some are serious; some I wrote in frustration." Some also contain the email addresses, home addresses, phone numbers, and social security numbers of Florida residents. The emails are available in Outlook format, and can be searched on the web at Bush's website.

The Verge did not receive a response from Mr. Bush or his Political Action Committee's office at the time of publication.

"In the spirit of transparency, I am posting the emails of my governorship."

We reviewed many of the emails released by Bush, and found a wide variety of communications — everything from religious parables, to praise of the governor's support of creationism, to routine bureaucratic correspondence. But some of the emails appear to be highly sensitive or personal. Many, like the one excerpted below, share tales of personal struggle or sorrow.

Quote

This is just a sharing...today..i feel beaten down... ... want to help many and hope I can get there some day....through my empowerment it will be a testament to my message and the ability to share my future resources...its a lonely road...so many seem actively against you...your back is to the wall...you have many another two months of business survival...

P.S. this is just sharing with a friend... please no action or follow-up or any communications or assistance sought of nay kind...its my struggle to work through and find a way...just feeling "beaten" today...at 37 I feel like 60 today .....and tomorrow will be better.

Confidential communications intended for indicated recipient only

Other emails include potentially sensitive details about government operations. One email reviewed by The Verge discussed termination of a Florida Lottery employee; the email revealed the reasons for his termination, including "conduct unbecoming a public employee, insubordination, and neglect of duty." The employee had emailed then-governor Bush to appeal for reinstatement. Bush followed up with a lottery official to see if his request could be granted.

Some include personal appeals from citizens with medical or employment issues. And a subset of these messages contain sensitive data like social security numbers, as in the email shown below. (The redactions are our own.)

Another email, sent on behalf of a healthcare representative and shown below, contains information about a child with a life-threatening medical condition. The email exposes the child and mother's name, the mother's home state and phone number, her social security number, and her healthcare identification number.
     
Florida's freedom of information laws are very broad. As Bush notes in the signature of many of his emails, "Florida has a very broad public records law," and "your email communications may therefore be subject to public disclosure."  However, social security numbers in particular are protected. As Florida private attorney Richard A. Harrison tells The Verge, social security numbers are "both confidential and exempt" from public disclosure under state law. "They can be released only for the limited purposes specified in that section, of which this is not one," Harrison says. "It doesn't matter how an agency or official obtained the information; once obtained it is a public record and the SSNs are confidential and exempt under the law." But that doesn't mean the former governor is legally responsible for the data leak. Harrison says the state's legal custodian of records is charged with ensuring no confidential or exempt information is released.

Under Florida law, that custodian might get off with just a scratch. Violation of the public records statute in this circumstance is considered a "noncriminal infraction" that's punishable by a fine "not exceeding $500." Someone who knowingly or willfully violates the privacy law is subject to harsher penalties — but it might be pretty easy to avoid those given the immense size of the records.

Jeb Bush's camp was quick to shift blame to the state. Kristy Campbell, a spokesperson for Bush, told BuzzFeed News that the release is "an exact replica of the public records on file with the Florida Department of State and are available at anyone's request under Chapter 119 sunshine laws." Of course, that statement isn't entirely true, since social security numbers are definitely exempt (and confidential) under that same chapter of the law.

Social Security Numbers are both confidential and exempt from disclosure under Florida law
Many of the same emails Bush released today may have already been available online as of December, 2014, thanks to a request made by the Florida Center for Investigative Reporting. Some publications, including The Washington Post and The Hill, combed the email records for policy insight, but did not appear to stumble upon sensitive personal information.

Obviously one of the lessons here is that you shouldn't email information to public officials that you want to keep private, at least not in Florida. But even if most of these emails are broadly subject to disclosure under the state's sunshine law, it's concerning that such a huge, indiscriminate data dump could include so much personal information. "Emails that bear on public decisions should be made public, but certainly emails with social security numbers or private medical information are not relevant to that," Bruce Jacob, a constitutional and criminal law professor at Florida's Stetson University told The Verge. "It's hard to imagine a court finding a persona guilty of a crime if it was a mistake, but certainly this is not a good thing for private information of that kind to be released."

At minimum, the data dump shows a serious ignorance of the volume of sensitive information in the records and a carelessness about their disclosure. And while a Florida bureaucrat may ultimately be to blame, it's not a good look for Jeb Bush — someone who called himself the first "eGovernor," and a man who may want to sit in the White House.

Update, 3:10 PM: This story has been updated to include additional emails from the archive, as well as prior reports on the archive from December, 2014.

Update, 3:22 PM: Updated with a statement by a spokesperson for Jeb Bush.

Update, 3:53 PM: Time reporter Zeke Miller, reporting from a Q&A with Jeb Bush, reported on Twitter that Bush is now aware of the personal information in the email dump, and that it will be removed. Miller reports that Bush's PAC posted only what is already in the public record, echoing the statement given by Bush's spokesperson to BuzzFeed News. We're not sure how long that will take, or if Bush's PAC will take down the emails temporarily in the meantime (it will presumably take a while to scan through hundreds of thousands of emails), but we'll keep you updated.
 
Update, 5:35 PM: Researchers are now poring over the email dump for personal information. It appears Bush's team, and perhaps Florida state government, will have lots of work to do if they want to purge the data from the records — and some explaining about how this happened. It's more than a few bits of personal information.
 
Update, 11:00PM: The raw .pst files have now been removed from Jeb Bush's site. "We were informed that some personal information was available in the raw data so we removed these files," reads an error message. "You may still read these emails on the email calendar link, where we have redacted personal information we have been able to locate."

After more than a decade of debate and a record-setting proceeding that attracted nearly 4 million public comments, the time to settle the Net Neutrality question has arrived. This week, I will circulate to the members of the Federal Communications Commission (FCC) proposed new rules to preserve the internet as an open platform for innovation and free expression. This proposal is rooted in long-standing regulatory principles, marketplace experience, and public input received over the last several months.
   
Broadband network operators have an understandable motivation to manage their network to maximize their business interests. But their actions may not always be optimal for network users. The Congress gave the FCC broad authority to update its rules to reflect changes in technology and marketplace behavior in a way that protects consumers. Over the years, the Commission has used this authority to the public’s great benefit.
   
The internet wouldn’t have emerged as it did, for instance, if the FCC hadn’t mandated open access for network equipment in the late 1960s. Before then, AT&T prohibited anyone from attaching non-AT&T equipment to the network. The modems that enabled the internet were usable only because the FCC required the network to be open.   

Companies such as AOL were able to grow in the early days of home computing because these modems gave them access to the open telephone network.

I personally learned the importance of open networks the hard way. In the mid-1980s I was president of a startup, NABU: The Home Computer Network. My company was using new technology to deliver high-speed data to home computers over cable television lines. Across town Steve Case was starting what became AOL. NABU was delivering service at the then-blazing speed of 1.5 megabits per second—hundreds of times faster than Case’s company. “We used to worry about you a lot,” Case told me years later.

But NABU went broke while AOL became very successful. Why that is highlights the fundamental problem with allowing networks to act as gatekeepers.

While delivering better service, NABU had to depend on cable television operators granting access to their systems. Steve Case was not only a brilliant entrepreneur, but he also had access to an unlimited number of customers nationwide who only had to attach a modem to their phone line to receive his service. The phone network was open whereas the cable networks were closed. End of story.

The phone network’s openness did not happen by accident, but by FCC rule. How we precisely deliver that kind of openness for America’s broadband networks has been the subject of a debate over the last several months.

Originally, I believed that the FCC could assure internet openness through a determination of “commercial reasonableness” under Section 706 of the Telecommunications Act of 1996. While a recent court decision seemed to draw a roadmap for using this approach, I became concerned that this relatively new concept might, down the road, be interpreted to mean what is reasonable for commercial interests, not consumers.
That is why I am proposing that the FCC use its Title II authority to implement and enforce open internet protections.

Using this authority, I am submitting to my colleagues the strongest open internet protections ever proposed by the FCC. These enforceable, bright-line rules will ban paid prioritization, and the blocking and throttling of lawful content and services.  I propose to fully apply—for the first time ever—those bright-line rules to mobile broadband. My proposal assures the rights of internet users to go where they want, when they want, and the rights of innovators to introduce new products without asking anyone’s permission.
All of this can be accomplished while encouraging investment in broadband networks. To preserve incentives for broadband operators to invest in their networks, my proposal will modernize Title II, tailoring it for the 21st century, in order to provide returns necessary to construct competitive networks.  For example, there will be no rate regulation, no tariffs, no last-mile unbundling.  Over the last 21 years, the wireless industry has invested almost $300 billion under similar rules, proving that modernized Title II regulation can encourage investment and competition.

Congress wisely gave the FCC the power to update its rules to keep pace with innovation. Under that authority my proposal includes a general conduct rule that can be used to stop new and novel threats to the internet. This means the action we take will be strong enough and flexible enough not only to deal with the realities of today, but also to establish ground rules for the as yet unimagined.

The internet must be fast, fair and open. That is the message I’ve heard from consumers and innovators across this nation. That is the principle that has enabled the internet to become an unprecedented platform for innovation and human expression. And that is the lesson I learned heading a tech startup at the dawn of the internet age.   The proposal I present to the commission will ensure the internet remains open, now and in the future, for all Americans.

The finish line for the FCC’s new net neutrality proposal is drawing closer — and Republicans are looking for every avenue to throw up last-minute roadblocks. GOP leaders are mounting a multipronged attack on Chairman Tom Wheeler’s rules, which would tighten regulation of Internet service providers to ensure all Web traffic is treated equally. They’ve launched investigations into alleged White House interference in the FCC process, drafted an alternative and weaker net neutrality bill, complained the agency is drawing up plans behind closed doors — and even used net neutrality as a political rallying cry to supporters.
     
The moves amount to an emerging game plan for how Republicans plan to oppose the net neutrality rules, which have the backing of President Barack Obama. While the FCC’s Democratic majority is expected to approve Wheeler’s proposal at its Feb. 26 meeting, the GOP is doing everything it can to cause a delay — or make the move as politically painful as possible.

“The reason you’re seeing so much activity is because there’s so much fundamentally wrong with what the FCC and the White House is doing to regulate the Internet,” said former Sen. John Sununu (R-N.H.), who now serves as honorary co-chairman of Broadband for America, a nonprofit supported by the telecommunications industry. “On substance, there are fundamental problems with this kind of an over-reaching regulatory approach. In terms of process, there are fundamental problems with the way this has been pursued.”

House Oversight Chairman Jason Chaffetz (R-Utah) and Senate Homeland Security and Governmental Affairs Chairman Ron Johnson (R-Wis.) have both announced probes into whether the White House improperly influenced the FCC, which is an independent agency.

Obama inserted himself into the debate last fall, calling on the FCC to regulate broadband like a utility — a tough approach ultimately endorsed by Wheeler. While nothing prevents the president from expressing his views, the question of White House influence over the new rules is catnip for both Chaffetz and Johnson, who are new to their committee leadership posts and eager to seize their oversight roles.

“He’s supposed to be an independent agency,” Johnson said in an interview off the Senate floor Tuesday, referring to Wheeler. “We’re trying to find the communications between himself and the White House, his agency and the White House, to see if this really was an independent act.”

Another GOP strategy on net neutrality: legislate.

The party, which previously viewed any net neutrality rules as a solution in search of a problem, has come to the table with a bill that would prevent ISPs from blocking or throttling Web traffic — while also avoiding utility-style rules for broadband and tying the FCC’s hands on regulating the Internet.

Senate Commerce Chairman John Thune (R-S.D.) and his House counterparts Reps. Greg Walden (R-Ore.) and Fred Upton (R-Mich.) are seeking bipartisan support for their measure, which they say provides more solid legal footing and is better able to withstand lawsuits from the telecom industry.

But they’ve had trouble attracting Democrats, who say the bill effectively handcuffs the FCC and is riddled with loopholes that could allow for pay-for-play online “fast lanes.”

On another front, GOP lawmakers are increasingly making an issue out of transparency, chiding the FCC for not releasing Wheeler’s plan for public debate prior to the agency’s vote. And they’re getting an assist from the FCC’s senior Republican, Ajit Pai.

Pai drew attention last week for tweeting a photo of himself with a printout of the Wheeler net neutrality proposal, saying, “I wish the public could see what’s inside.” At a press conference Tuesday, Pai — who spoke at the FCC dais where the chairman presides over agency meetings — lambasted the rules and repeatedly called on Wheeler to fully reveal what he termed “the president’s plan.”

“The American people are being misled about President Obama’s plan to regulate the Internet,” the commissioner said. “Last week’s carefully stage-managed rollout was designed to downplay the plan’s massive intrusion into the Internet economy and to shield many critical details from the public.”

FCC officials and Pai, however, have noted the agency traditionally does not allow the publication of items before they’re approved by the commission — and Pai himself refused to release the Wheeler proposal.

As the net neutrality debate generates national headlines, Republicans like Sen. Mike Lee have also begun to use the traditionally wonky issue to rile up their base.

Sen. Ben Sasse (R-Neb.) sent an email to political supporters likening Wheeler’s plan to Internet censorship in Turkey and Iran and asking for signatures opposing the rules. The subject line of Sasse’s email: “Putin and Obama in charge of the Internet?”

The message is hyperbole — Wheeler’s proposal wouldn’t give the FCC control over Internet content — but it underscores how much Republicans are opposed to new forms of what they call government over-regulation.

“People on the right and in the middle are finally understanding that this debate isn’t really about ‘net neutrality’ at all,” said Berin Szoka, president of TechFreedom, a conservative think tank.