All U.S. agencies with counterterrorism programs that collect or "mine" personal data--such as phone records or Web sites visited--should be required to evaluate the programs' effectiveness, lawfulness, and impacts on privacy. A framework is offered that agencies can use to evaluate such information-based programs, both classified and unclassified. The book urges Congress to re-examine existing privacy law to assess how privacy can be protected...