As a devastating wildfire burned done a Maui town, sidesplitting much than 100 people, exigency absorption employees traded dozens of substance messages, creating a grounds that would aboriginal assistance investigators portion unneurotic the government's effect to the 2023 tragedy.
One substance speech hinted officials mightiness besides beryllium utilizing a second, untraceable messaging service.
“That's what Signal was expected to beryllium for,” then-Maui Emergency Management Agency Administrator Herman Andaya texted a colleague.
Signal is 1 of galore end-to-end encrypted messaging apps that see connection auto-delete functions.
While specified apps committedness accrued information and privacy, they often skirt unfastened records laws meant to summation transparency astir and nationalist consciousness of authorities decision-making. Without peculiar archiving software, the messages often aren't returned nether nationalist accusation requests.
An Associated Press reappraisal successful each 50 states recovered accounts connected encrypted platforms registered to cellphone numbers for implicit 1,100 authorities workers and elected officials.
It's unclear if Maui officials really utilized the app oregon simply considered it — a region spokesperson did not respond to questions — but the concern highlights a increasing challenge: How tin authorities entities usage technological advancements for added information portion staying connected the close broadside of nationalist accusation laws?
The AP recovered accounts for state, section and national officials successful astir each state, including galore legislators and their staff, but besides unit for governors, authorities attorneys general, acquisition departments and schoolhouse committee members.
The AP is not naming the officials due to the fact that having an relationship is neither against the rules successful astir states, nor impervious they usage the apps for authorities business. While galore of those accounts were registered to authorities cellphone numbers, immoderate were registered to idiosyncratic numbers. The AP's database is apt incomplete due to the fact that users tin marque accounts unsearchable.
Improper usage of the apps has been reported implicit the past decennary successful places similar Missouri, Oregon, Oklahoma, Maryland and elsewhere, astir ever due to the fact that of leaked messages.
Public officials and backstage citizens are consistently warned astir hacking and information leaks, but technologies designed to summation privateness often alteration authorities transparency.
Apps similar Signal, WhatsApp, Confide, Telegram and others usage encryption to scramble messages truthful lone the intended end-user tin work them, and they typically aren’t stored connected authorities servers. Some automatically delete messages, and immoderate forestall users from screenshotting oregon sharing messages.
“The cardinal occupation is that radical bash person a close to usage encrypted apps for their idiosyncratic communications, and person those connected their idiosyncratic devices. That’s not against the law,” said Matt Kelly, exertion of Radical Compliance, a newsletter that focuses connected firm compliance and governance issues. “But however would an enactment beryllium capable to separate however an worker is utilizing it?”
The U.S. Cybersecurity and Infrastructure Security Agency, oregon CISA, has recommended that “highly valued targets” — elder officials who grip delicate accusation — usage encryption apps for confidential communications. Those communications are not typically releasable nether nationalist grounds laws.
CISA leaders besides accidental encrypted communications could beryllium a utile information measurement for the public, but did not promote authorities officials to usage the apps to skirt nationalist accusation laws.
Journalists, including galore astatine the AP, often usage encrypted messages erstwhile talking to sources oregon whistleblowers.
While immoderate cities and states are grappling with however to enactment transparent, nationalist grounds laws aren’t evolving arsenic rapidly arsenic technology, said Smarsh wide manager Lanika Mamac. The Portland, Oregon-based institution helps governments and businesses archive integer communications.
“People are disquieted much astir cybersecurity attacks. They’re trying to marque definite it’s secure,” Mamac said. “I deliberation that they are truly trying to fig out, ‘How bash I equilibrium being unafraid and giving transparency?’”
Mamac said Smarsh has seen an uptick successful inquiries, mostly from section governments. But galore others person done small to restrict the apps oregon clarify rules for their use.
In 2020, the New Mexico Child, Youth and Families Department’s caller part manager told employees to usage the app Signal for interior communications and to delete messages aft 24 hours. A 2021 probe into the imaginable usurpation of New Mexico’s papers retention rules was followed by a tribunal colony with 2 whistleblowers and the part director's departure.
But New Mexico inactive lacks regulations connected utilizing encrypted apps. The AP's reappraisal recovered astatine slightest 3 section oregon bureau directors had Signal accounts arsenic of December 2024.
In Michigan, State Police leaders were recovered successful 2021 to beryllium utilizing Signal connected state-issued cellphones. Michigan lawmakers responded by banning the usage of encrypted messaging apps connected authorities employees’ work-issued devices if they hinder nationalist grounds requests.
However, Michigan's instrumentality did not see penalties for violations, and monitoring the government-owned devices utilized by 48,000 enforcement subdivision employees is simply a monumental task.
The champion remedy is stronger nationalist grounds laws, said David Cuillier, manager of the Brechner Freedom of Information Project astatine the University of Florida. Most authorities laws already marque wide that the contented of connection — not the method — is what makes thing a nationalist record, but galore of those laws deficiency teeth, helium said.
“They should lone beryllium utilizing apps if they are capable to study the communications and archive them similar immoderate different nationalist record,” helium said.
Generally, Cuillier said, there’s been a alteration successful authorities transparency implicit the past fewer decades. To reverse that, governments could make autarkic enforcement agencies, adhd punishments for violations, and make a transparent civilization that supports technology, helium said.
“We utilized to beryllium a beacon of airy erstwhile it came to transparency. Now, we’re not. We person mislaid our way,” Cuillier said.
___
Boone reported from Boise, Idaho. Lauer reported from Philadelphia. Associated Press reporters astatine statehouses nationwide contributed to this report.
English (CA) · 
English (US) · 
Spanish (MX) ·