Senator Sends Letter to Tim Cook Over Touch ID Privacy Concerns

NewImageSenator Al Franken (D-MN) has sent a letter to Apple CEO Tim Cook expressing concern over the new Touch ID fingerprint sensor built into the iPhone 5s, which went on sale earlier today.

In the letter (PDF), the Senator, Chairman of the Senate Judiciary Subcommittee on Privacy, Technology and the Law, says he is an iPhone owner and is concerned about the use of fingerprints to unlock the device.

It's clear to me that Apple has worked hard to secure this technology and implement it responsibly. The iPhone 5S reportedly stores fingerprint data locally "on the chip" and in an encrypted format. It also blocks third-party apps from accessing Touch ID. Yet important questions remain about how this technology works, Apple's future plans for this technology, and the legal protections that Apple will afford it. I should add that regardless of how carefully Apple implements fingerprint technology, this decision will surely pave the way for its peers and smaller competitors to adopt biometric technology, with varying protections for privacy.

Franken goes on to ask twelve separate questions of Cook, including:

- If it's possible to convert locally-stored fingerprint data into a format that can be used by third parties.

- If it's possible to extract and obtain fingerprint data from an iPhone 5s either remotely or with physical access to the device.

- What diagnostic information the iPhone 5s sends to Apple about the Touch ID system.

- Whether Apple considers fingerprint data to be the "subscriber information" or "electronic communication transactional records", the "contents" of communications, customer or subscriber records, or a "subscriber number or identity" as defined in the Stored Communications Act, or a "tangible thing" as defined in the USA PATRIOT Act.

The last group of questions relates to when and if Apple could be required to disclose fingerprint information to U.S. Government law enforcement agencies.


Apple, for its part, has posted an extensive knowledge base article about the security benefits of the Touch ID system, though it only discloses broad details about how the iPhone 5s stores fingerprint data, but nevertheless, it may answer some of the questions that Senator Franken asked:

Touch ID does not store any images of your fingerprint. It stores only a mathematical representation of your fingerprint. It isn't possible for your actual fingerprint image to be reverse-engineered from this mathematical representation. iPhone 5s also includes a new advanced security architecture called the Secure Enclave within the A7 chip, which was developed to protect passcode and fingerprint data. Fingerprint data is encrypted and protected with a key available only to the Secure Enclave. Fingerprint data is used only by the Secure Enclave to verify that your fingerprint matches the enrolled fingerprint data. The Secure Enclave is walled off from the rest of A7 and as well as the rest of iOS. Therefore, your fingerprint data is never accessed by iOS or other apps, never stored on Apple servers, and never backed up to iCloud or anywhere else. Only Touch ID uses it and it can't be used to match against other fingerprint databases.

Senator Franken gave Tim Cook and Apple thirty days to answer the questions and, though it is not a subpoena and Apple is not required to respond, the company is likely to cooperate.

This is not the first time that Senator Franken has interacted with Apple -- in 2011, he asked both Apple and Google to require clear privacy policies for apps sold on their app stores. He also introduced a bill to help protect customer location data.

Popular Stories

iOS 18

iOS 18.4 Will Include These New Features for Your iPhone

Wednesday February 5, 2025 7:15 am PST by
iOS 18.3 was released last month, so the first iOS 18.4 beta should be coming soon. iOS 18.4 is expected to be a more substantial update for the iPhone, with several new features and changes related to Apple Intelligence and beyond. Apple's website suggests that iOS 18.4 will be released in April, following beta testing. Below, we outline what to expect from the update so far. Apple...
iCloud General Feature Redux

iPhone Users Who Pay for iCloud Storage Receive an All-New Perk

Thursday February 6, 2025 11:21 am PST by
If you pay for iCloud storage on your iPhone, Apple has a new perk for you, at no additional cost. iCloud+ is the official name for Apple's paid iCloud storage plans, which range from 50GB for $0.99 per month to 12TB for $59.99 per month in the United States. iCloud+ plans already come with multiple perks for free, such as Hide My Email and HomeKit Secure Video, and now there is another one...
maxresdefault

An Apple TV Refresh is Coming in 2025 - Here's What You Should Know

Wednesday February 5, 2025 10:17 am PST by
Apple hasn't refreshed the Apple TV since 2022, but rumors suggest that we're finally going to get an update in 2025. We don't have a full picture of what to expect yet, but we have some hints on what's coming. Subscribe to the MacRumors YouTube channel for more videos. Updated A-Series Chip The current Apple TV 4K uses the A15 Bionic chip that was in the iPhone 13 lineup, and it's time for...
iPhone SE 4 Single Camera Thumb

iPhone SE 4 Launching as Soon as Next Week

Thursday February 6, 2025 3:30 pm PST by
Apple's next-generation iPhone SE could debut as soon as next week with a launch to follow later in February, reports Bloomberg's Mark Gurman. Apple isn't expected to hold an event for the iPhone SE 4, and will instead unveil the device through a press release. The iPhone SE 4 is expected to have an iPhone 14-style design, with Apple eliminating the thick bezels and Touch ID Home button of...
iOS 18

iOS 18.3.1 Update Coming Soon for iPhones

Thursday February 6, 2025 7:31 am PST by
Apple is internally testing iOS 18.3.1 for iPhones, according to our website's analytics logs, which have been a consistently reliable indicator of upcoming iOS versions. The software update should be released within the next few weeks. iOS 18.3.1 should be a minor update that addresses software bugs and/or security vulnerabilities. Apple Intelligence notification summaries for news and...
iCloud General Feature Redux

Apple Ordered by UK to Create Global iCloud Encryption Backdoor

Friday February 7, 2025 2:37 am PST by
The British government has secretly demanded that Apple give it blanket access to all encrypted user content uploaded to the cloud, reports The Washington Post. The undisclosed order is said to have been issued last month, and requires that Apple creates a back door that allows UK security officials unencumbered access to encrypted user data worldwide – an unprecedented demand not before...
disney

Disney+ Loses 700,000 Subscribers Following Price Increase

Wednesday February 5, 2025 3:34 pm PST by
Disney+ lost 700,000 subscribers worldwide in recent months, according to Disney's earnings results for the first quarter of 2025. Disney said it now has 124.6 million Disney+ subscribers, a decrease of 0.7 million compared to its subscriber numbers in the fourth quarter of 2024. The drop in subscribers comes after Disney+ prices increased in the fall. Disney+ with Ads went from $7.99 to...
apple wallet drivers license feature iPhone 15 pro

iPhone Driver's Licenses to Expand to These 7 U.S. States

Wednesday February 5, 2025 6:27 am PST by
In select U.S. states, residents can add their driver's license or state ID to the Wallet app on the iPhone and Apple Watch, providing a convenient and contactless way to display proof of identity or age at select airports and businesses, and in select apps. Below, we outline which U.S. states and territories offer the feature, and additional states that have committed to rolling it out in...

Top Rated Comments

Superdrive Avatar
149 months ago
What he really meant: "What are you collecting and how can we get our hands on it?"
Score: 72 Votes (Like | Disagree)
MacIke Avatar
149 months ago
Nsa

I am far more concerned about the NSA and the issue of spying then I am of some company. A company has to actually respond to the customer. Whereas the government does not give a rats ass.
Score: 45 Votes (Like | Disagree)
HiVolt Avatar
149 months ago
PC laptops have had fingerprint sensors for years... Why isn't he writing Lenovo, Dell, HP?

This guy is just "concerned" to get his name in the news with a big name company like Apple and the new phone release, makes it look like he cares for his people...
Score: 37 Votes (Like | Disagree)
k1121j Avatar
149 months ago
Give me a break

Does this guy want to look good or something. If i am not mistaken this is not the first consumer product with fingerprint technology ( example all those laptops out there come to mind) and as far as i can tell Apple has gone further to secure your identity where there device. SOOO get off there back and be logical you silly senator
Score: 37 Votes (Like | Disagree)
croooow Avatar
149 months ago




Yeah, lets take this guy seriously...
Score: 34 Votes (Like | Disagree)
notabadname Avatar
149 months ago
But it's ok, it's Apple. If this was Google collecting this information, you guys would be up in arms.

Well, since Apple has made clear it is not collecting the data, and it resides only on the phone's chipset, your point is sort of irrelevant.
Score: 28 Votes (Like | Disagree)