CIAC Legal Standards & Ethical Considerations 3 — Questions and Answers
Question 1: Which principle requires that intelligence dissemination be limited to those with both a need-to-know and proper authorization?
- Compartmentalization
- Need-to-know and right-to-know (Correct answer)
- Mosaic theory
- Originator control (ORCON)
Correct answer: Need-to-know and right-to-know
The need-to-know principle requires that recipients must have both a legitimate operational need for the information and the appropriate authorization level to receive it.
Question 2: A fusion center analyst receives a tip about suspicious activity involving a person based solely on their religion and ethnicity. Under constitutional standards, the analyst should:
- Investigate immediately since tips must be taken seriously
- Reject the tip entirely and take no action
- Evaluate the tip based on specific behaviors or activities, not protected characteristics (Correct answer)
- Forward the tip to federal authorities without review
Correct answer: Evaluate the tip based on specific behaviors or activities, not protected characteristics
The First and Fourteenth Amendments prohibit government action based solely on protected characteristics; intelligence collection must be predicated on observed behaviors or activities.
Question 3: The Freedom of Information Act (FOIA) exemption most commonly used to protect ongoing law enforcement investigations is:
- Exemption 1 (classified national security information)
- Exemption 6 (personal privacy)
- Exemption 7(A) (law enforcement records that could interfere with proceedings) (Correct answer)
- Exemption 3 (statutes prohibiting disclosure)
Correct answer: Exemption 7(A) (law enforcement records that could interfere with proceedings)
FOIA Exemption 7(A) protects law enforcement records whose disclosure could reasonably be expected to interfere with enforcement proceedings.
Question 4: In the context of criminal intelligence ethics, 'source protection' means:
- Encrypting all digital intelligence files
- Safeguarding the identity and safety of confidential informants (Correct answer)
- Protecting analysts from public scrutiny
- Keeping intelligence methods secret from other agencies
Correct answer: Safeguarding the identity and safety of confidential informants
Source protection requires safeguarding the identity of confidential informants to prevent retaliation and preserve the ability to gather future intelligence.
Question 5: Which Supreme Court decision established that cell phone location data (CSLI) generally requires a warrant?
- Riley v. California (2014)
- Carpenter v. United States (2018) (Correct answer)
- United States v. Jones (2012)
- Smith v. Maryland (1979)
Correct answer: Carpenter v. United States (2018)
Carpenter v. United States (2018) held that accessing historical cell-site location information constitutes a Fourth Amendment search requiring a warrant.
Question 6: An analyst working on a terrorism case discovers the investigation has expanded to include a political protest group with no known criminal nexus. Ethical practice requires the analyst to:
- Continue collecting information since the groups may be connected
- Flag the issue to supervisors and legal counsel immediately (Correct answer)
- Delete all information collected on the protest group
- Share the information with media to expose the oversight
Correct answer: Flag the issue to supervisors and legal counsel immediately
When an investigation scope expands to include First Amendment-protected activity without criminal nexus, analysts must immediately raise the issue through proper legal and supervisory channels.
Question 7: The 'mosaic effect' in intelligence analysis refers to the risk that:
- Using multiple analytical methods produces conflicting results
- Combining individually benign pieces of information creates a privacy violation (Correct answer)
- Classified and unclassified information becomes mixed
- Intelligence reports become too long and complex
Correct answer: Combining individually benign pieces of information creates a privacy violation
The mosaic effect describes how aggregating individually harmless data points can create a comprehensive profile that constitutes a serious privacy violation.
CIAC Legal Standards & Ethical Considerations 3
Which principle requires that intelligence dissemination be limited to those with both a need-to-know and proper authorization?