EPIC Administrative Procedure Act (APA) Comments
The Administrative Procedure Act (APA) governs internal procedures of administrative agencies, including how they interact with the public. The APA is codified at 5 U.S.C. §§ 551-559, and encompasses the Freedom of Information Act (FOIA) (5 U.S.C. § 552) and the Privacy Act (5 U.S.C. § 552a). The APA serves to police improper agency behavior, protect public safety, and secure proper entitlements.
Since 1997, EPIC has consistently submitted extensive public comments to federal agencies, pursuant to the APA. EPIC has also submitted administrative comments to state and international administrative agencies. Through these comments, EPIC makes detailed recommendations, grounded in both policy and law, for stronger privacy protection. Below is a list of comments, arranged by agency in reverse chronological order, that EPIC has submitted since 1997.
The APA defines a "rule" as "the whole or a part of an agency statement of general or particular applicability and future effect designed to implement, interpret, or prescribe law or policy or describing the organization, procedure, or practice requirements of an agency and includes the approval or prescription for the future of rates, wages, corporate or financial structures or reorganizations thereof, prices, facilities, appliances, services or allowances therefore or of valuations, costs, or accounting, or practices bearing on any of the foregoing." In short, an agency creates a rule when it seeks to "implement, interpret, or prescribe law or policy."
The APA describes a particular rulemaking process with which agencies are required to comply. Typically, the agency must give a notice of a proposed rulemaking, published in the Federal Register. The Federal Register "is the official daily publication for rules, proposed rules, and notices of Federal agencies and organizations, as well as executive orders and other presidential documents." The notice must include the date the rule will come into effect, the legal authority the agency has proposed the rule under, and the substance of the rule.
After notice is given, the agency is required to solicit and accept public comments on the rule. There is no minimum period specified for the comment period to remain open, and it often varies with the complexity of the rule. Most comment periods last between 30 and 60 days, and some are re-opened if the agency believes that there was insufficient time for the public to respond or that the agency did not receive as much feedback as it would like. The agency must then consider all of the comments that are submitted in passing the final rule.
In certain cases, an agency must undergo a formal rulemaking, which requires a courtroom-style hearing. During formal rulemaking, decisions are reached on the basis of evidence given and received on the record. Formal rulemaking is appropriate in two cases: (1) where a statute provides that rules are "required to be made on the record after opportunity for an agency hearing"; and (2) in rulemakings that involve adjudicative facts, or facts specific to the rights of an individual. A statute that requires more than an informal notice and comment rulemaking, but is less stringent than a formal rulemaking, may result in a hybrid rulemaking that blends elements of each.
The APA also describes certain cases where the notice and comment rulemaking process is not required, including 2 general exceptions and 2 specific exceptions:
General Exception 1: the Rule involves a military or foreign affairs function of the United States
General Exception 2: The Rules involves a matter relating to agency management or personally or to public property, loans, grants, benefits, or contracts
Specific Exception 1: Cases of interpretative rules, general statements of policy, or rules of agency organizations, procedure, or practice
Specific Exception 2: When the agency finds for good cause that the notice and comment process is impracticable, unnecessary, or contrary to the public interest.Note that courts employ a functional analysis to determine if a rule is procedural or substantive, in that substantive rules embody value judgments or substantially alter the rights or interests of parties (see Air Transp. Ass'n of Am. v. Dep't of Transp., 900 F.2d 369). Also, under Specific Exception 2, the agency's own delay cannot bring about good cause that the notice and comment process is impracticable, unnecessary, or contrary to the public interest.
Like rulemakings, adjudications come in two forms - formal and informal. A formal adjudication is expressly required by statute to be held "on the record after opportunity for an agency hearing," though certain limited exceptions apply. The APA does not set out rules for informal adjudications, leaving it to each agency to determine its own procedures. However, formal adjudications require the same measures as formal rulemakings, including evidence introduced on the record.
Notice must be given to an individual subject to a formal adjudication, including the time, place, and nature of the hearing, the legal authority and jurisdiction, and the matters of asserted fact and law. An agency does not need to have a private party plaintiff - instead an agency can choose to initiate action to explore an issue or an alleged violation of some law or rule (see Office of Communication of United Church of Christ v. FCC, 359 F.2d 994). However, when a private party would have standing to appeal a decision, they will also have the right to intervene in a formal adjudication.
Formal hearings (and rulemakings) are presided over by an Administrative Law Judge (ALJ). The ALJ renders a final decision on the record, which can be held as final or appealed to the full agency. Final agency decisions are subject to judicial review.
Adjudications are subject to due process requirements when two requirements are met: (1) the hearing involves issues of adjudicative facts, or facts that effect a small, individualized group, and (2) the hearing involves the possibility of a deprivation of a property or liberty interest. That interest must be created and defined by existing rules or understandings that stem from independent sources (see Board of Regents v. Roth, 408 U.S. 564).
When a license is required by a law, the agency in granting that license must comply with the same procedures governing formal rulemaking and adjudication. Application for all other licenses is governed by internal agency rules. An agency cannot revoke a license while an application for a new license remains pending. Further, licenses cannot be revoked unless the agency gives notice as to what action has provided cause for the revocation and has allowed the licensee an opportunity to correct that action.
Final agency decisions are subject to judicial review. Generally, challenges to agency regulations have a six-year statute of limitations.
Scope of Review
The reviewing court shall decide "all relevant questions of law, interpret constitutional and statutory provisions, and determine the meaning or applicability of the terms of an agency action." The reviewing court must (A) compel agency action that was either "unlawfully withheld or unreasonably delayed" and (B) find unlawful and "set aside agency action, findings, and conclusions" that are: (1) arbitrary, capricious, an abuse of discretion, or otherwise not in accordance with law; (2) contrary to constitutional right, power, privilege, or immunity; (3) in excess of statutory jurisdiction, authority, or limitations, or short of statutory right; (4) without observance of procedure required by law; (5) unsupported by substantial evidence in a case subject to sections 556 and 557 of Title 5 (Government Organization and Employees) of the United States Code or otherwise reviewed on the record of an agency hearing provided by statute; or (6) unwarranted by the facts to the extend that the facts are subject to trial de novo by the reviewing court.
Standards of Review
There are three standards of review: (1) substantial evidence; (2) arbitrary and capricious; and (3) statutory interpretation.
The "substantial evidence" standard of review is required for formal rulemaking and formal adjudication. Courts are required to uphold a rule if they find the agency's decision to be "reasonable, or the record contains such evidence as a reasonable mind might accept as adequate to support a conclusion." Agency actions that are invalidated by substantial evidence review are typically abandoned.
The "arbitrary and capricious" standard is mainly applied to informal rulemakings. In Citizens to Preserve Overton Park v. Volpe (401 U.S. 402), the Supreme Court held that in order to find agency decisions arbitrary in informal adjudications, courts must first "consider whether the decision was based on a consideration of the relevant factors and whether there has been a clear error of judgment." In performing this inquiry, courts cannot inquire as to why agencies relied upon particular data to make their decisions; however, courts can inquire as to what data the agency reviewed. Typically, when agency action is invalidated under the arbitrary and capricious standard of review, the action is remanded to the agency to substantiate the record. In the Motor Vehicle Manufacturers Association of the United States, Inc. v. State Farm Mutual Automobile Insurance, the Supreme Court held that "the agency nevertheless must examine the relevant data and articulate a satisfactory explanation for its action" including a "rational connection between facts and judgment . . . to pass muster under the 'arbitrary and capricious' standard."
The "statutory interpretation" standard of review involves a two-step analysis, which derived from Chevron, U.S.A., Inc. v. Natural Resources Defense Council (468 U.S. 1227). Under Chevron, courts must first assess whether Congress has spoken to the "precise question at issue." To do this, courts must look to the language and design of the statute, as well as look to the traditional canons of construction. If the court finds that Congress has not directly addressed the precise issue, the court must then determine if the agency's action is based on a "permissible construction of the statute." Under Chevron, legislative regulations are given deference unless they are arbitrary, capricious, or manifestly contrary to the statute.
Mixed Judicial Review
Mixed judicial review encompasses judicial review of both law and fact. Judicial review of law investigates the statutory authority that permits the agency to make its regulation; judicial review of fact investigates the agency's factual findings that guided its decision-making process.
Persons who suffer a "legal wrong because of agency action" or are "adversely affected or aggrieved by agency action within the meaning of a relevant statute" has standing to receive judicial review of the agency's action (5 U.S.C. § 702). There are four elements that must be proven to gain judicial review: (1) injury in fact; (2)causation; (3) redressability; and (4) zone of interest.
Injury in Fact
In Sierra Club v. Morton (405 U.S. 727), the Supreme Court held that agency action which affected environmental, aesthetic, or recreational interest, could qualify as injury in fact for standing purposes. The Supreme Court also held that agency action must directly affect personal interests, not simply those of a corporation. Additionally, if government action or inaction injures a third person in a direct fashion, that person has suffered sufficient injury in fact for standing purposes.
Causation is the connection between the injury and the agency action.
Redressability analyzes whether judicial review of agency action is likely to bring relief to the complaining party.
Zone of Interest
The"zone of interest" requires the complaining party to demonstrate that her injury is the type of injury protected by the statute or regulation.
Search results for: 2018
Comments filed with Federal Agencies
- DHS Data Privacy and Integrity Advisory Committee; Committee Management; Notice of Federal Advisory Committee Meeting, Department of Homeland Security, Docket No. DHS–2018–0066 (December 10, 2018)
- Notice of Request for Comments: Preparing for the Future of Transportation: Automated Vehicles 3.0 (AV 3.0), Departement of Transportation, Docket No. DOT–OST–2018–0149 (December 8, 2018)
- COPPA Rule: Agency Information Collection Activities, Federal Trade Commission, Docket No. P155408 (December 3, 2018)
- Notice of Privacy Act System of Records; Notice Proposed Rulemaking, Department of Defense, Docket No. DoD-2018-OS-0076 (November 16, 2018)
- Developing the Administration’s Approach to Consumer Privacy, National Telecomm. and Info. Admin., Docket No. 180821780-8780-01 (November 9, 2018)
- Apprehension, Processing, Care, and Custody of Alien Minors and Unaccompanied Alien Children, Department of Homeland Security, Docket No. ICEB-2018-0002 (November 6, 2018)
- Notice of Privacy Act System of Records; Notice of Proposed Rulemaking, Department of Transportation, Docket No. OST-2018-0128 (November 2, 2018)
- Request for Information on Update to the 2016 National Artificial Intelligence Research and Development Strategic Plan, National Science Foundation, Docket No. (October 26, 2018)
- Notice of Modified Privacy Act System of Records, Department of Homeland Security, Docket No. (October 26, 2018)
- Proposed Information Collections: Application for Nonimmigrant Visa; Electronic Application for Immigrant Visa and Alien Registration, Department of State, Docket No. 83 FR 43952; 43951 (September 27, 2018)
- Freedom of Information Act Regulations, Office of Management and Budget, Docket No. 2018-18061 (September 24, 2018)
- Refreshed Record on Advanced Methods to Target and Eliminate Unlawful Robocalls, Federal Communications Commission, Docket No. (September 24, 2018)
- Privacy Act of 1974: Implementation of Exemptions; Department of Homeland Security/U.S. Citizenship and Immigration Services—018 Immigration Biometric and Background Check (IBBC) System of Records, Department of Homeland Security, Docket No. DHS-2018-0002; DHS-2018-0003 (August 30, 2018)
- Competition and Consumer Protection in the 21st Century, Federal Trade Commission, Docket No. (August 20, 2018)
- EPIC Comments on FTC Regulatory Strategy on Algorithms and AI, Federal Trade Commission, Docket No. FTC-2018-0056 (August 20, 2018)
- 2020 Census, U.S. Census Bureau, Docket No. 83 FR 26643 (August 7, 2018)
- In the Matter of ReadyTech, Federal Trade Commission, Docket No. 1823100 (August 1, 2018)
- International Internet Policy Priorities, National Telecomm. and Info. Admin., Docket No. 180124068-8068-01 (July 31, 2018)
- Agency Information Collection Activities: Biometric Identity, Customs and Border Protection, Docket No. 1651 - 0138 (July 24, 2018)
- Interpretation of the Telephone Consumer Protection Act in Light of the D.C. Circuit's ACA International Decision (Reply Comments), Federal Communications Commission, Docket No. 18-493 (June 28, 2018)
- Submission Requirements and Evaluation for the Lightweight Cryptography Standardization Process, National Institute of Standards and Technology, Docket No. 2018-10127 (June 28, 2018)
- Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy, National Institute of Standards and Technology, Docket No. SP 800-37 Rev. 2 (June 22, 2018)
- The Internet of Things and Consumer Product Hazards, Consumer Product Safety Commission, Docket No. Docket No. CPSC-2018-0007 (June 15, 2018)
- Interpretation of the Telephone Consumer Protection Act in Light of the D.C. Circuit's ACA International Decision, Federal Communications Commission, Docket No. 18-493 (June 13, 2018)
- DS-160 and DS-156, Application for Nonimmigrant Visa, OMB Control No. 1405-0182; DS-260, Electronic Application for Immigrant Visa and Alien Registration, OMB Control No. 1405-185, Department of State, Docket No. Public Notices 10260; 10261 (May 29, 2018)
- Internet Communication Disclaimers and Definition of “Public Communication”, Federal Election Commission, Docket No. 2018-06010 (May 24, 2018)
- In the Matter of Uber Technologies, Inc., Federal Trade Commission, Docket No. 152-3054 (May 14, 2018)
- Children's Online Privacy Protection Rule: Entertainment Software Rating Board's Safe Harbor Program Application to Modify Program Requirements, Federal Trade Commission, Docket No. P024526 (May 9, 2018)
- The Internet of Things and Consumer Product Hazards, Consumer Product Safety Commission, Docket No. CPSC-2018-0007 (May 2, 2018)
- In the Matter of PayPal, Inc., Federal Trade Commission, Docket No. FTC File No. 162-3102 (March 29, 2018)
- Revision of a Currently Approved Collection-CJIS Name Check Form (1-791), Federal Bureau of Investigation, Docket No. OMB Number 1110-0060 (January 8, 2018)
Comments filed with International Agencies
- Evaluation of the Toy Safety Directive (2009/48/EC), European Commission, Docket No. (December 12, 2018)
- Privacy Shield Annual Review, European Commission, Docket No. (August 14, 2018)
- Consultation on Guidelines 1/2018, European Data Protection Board, Docket No. (July 12, 2018)
- Consultation on Data Protection Impact Assessments (DPIAs) Guidance, Data Protection Commission Ireland, Docket No. (July 3, 2018)
- Consultation on ICO Draft Regulatory Action Policy, UK Information Commissioner’s Office, Docket No. (June 28, 2018)
- Open Public Consultation for building trust in Connected and Automated Mobility (CAM), European Commission, Docket No. (April 12, 2018)
- Consultation on Data Protection Impact Assessments (DPIAs) Guidance, UK Information Commissioner’s Office, Docket No. (April 12, 2018)
- Call for inputs to a report on "the right to privacy in the digital age", Office of the High Commissioner for Human Rights, Docket No. (April 6, 2018)
- Internet Universality Indicators: Online Consultation Phase II, United Nations Educational, Scientific and Cultural Organization, Docket No. (March 15, 2018)
- White Paper of the Committee of Experts on a Data Protection Framework for India, Ministry of Electronics and Info. Tech. of the Government of India, Docket No. (January 31, 2018)