The Password Problem

Every institution that holds a person also holds a file about that person, and every file sits behind a lock. In Williamson County, Texas, the locks are numerous: the jail's internal records systems, the medical and psychological files generated during pretrial detention, the telephone and messaging accounts that detainees and their families depend on to stay in contact, and the terminals that query criminal-history databases. Each of those locks opens with a credential, and each credential answers a question that is seldom asked out loud — who is permitted to know what happened inside the cell?

This publication's reporting has concentrated on the consequences of that question: jail medical abuse, suicide watch, solitary confinement, intergovernmental detention contracts, and the surveillance of detainees and their families. The password problem runs underneath all of it. This is not a story about a weak login. It is a story about a system in which the person most affected by a record is the person least able to open it.

The Password Problem Begins With Ownership

A password is usually explained to the public as a security measure, and in a narrow sense it is one. Look closely at any records system, though, and the credential does a second job: it decides who counts as an owner of the past. Detention files are unusually revealing of that second job, because the subject of the file is, by definition, someone the institution already controls.

Ownership is not authorship. A detainee's medical chart is written about him by people he did not choose, describing events he cannot independently record, and stored in a system he cannot query. He supplies the body of the record and none of its custody.

What the Jail Keeps Behind Its Login

County detention generates paperwork at every stage — intake, classification, medical screening, psychological observation, disciplinary action, and the housing decisions that place a person on suicide watch or in solitary confinement. Almost none of it is written for the detainee to read.

Families meet the same wall from the outside. A parent asking why her son was moved to another unit, a spouse trying to establish whether a medication was administered, both are told the information is protected, and neither is told from whom, or on what authority.

The Detainee Is the File

Pretrial detention sharpens the asymmetry, since a person held before trial has been convicted of nothing and is still the subject of the county's most intimate documentation. His body is examined, his mental state is observed, his movements are logged, and his family's calls are recorded. The record grows in detail as his ability to review it shrinks.

Reporting on jail medical abuse and suicide watch depends on that documentation existing at all. Where it exists and cannot be reached, harm becomes difficult to describe in the only form an institution accepts — evidence.

Surveillance Runs on Credentials

Coverage of NCIC queries and telephone surveillance shows the same structure from the opposite direction. Access is the asset. A terminal operator who can run a name, a system that retains message content, an account that binds a family's phone number to an inmate, each of these depends on a credential held by someone else.

Surveillance is often described as a technology. In practice it is an access arrangement: one party is granted the ability to look, and the party being looked at is never granted the ability to see who looked.

Access Written Into the Contract

Intergovernmental detention contracts extend the arrangement across jurisdictions. IGSA agreements move detainees between facilities, and the records follow each person into systems administered by agencies that never had to answer to the local public for them.

Custody changes hands. The file does not travel with the permission of the person inside it, and the community that might have asked questions about his care loses the standing to ask.

When the Answer Is Denied

A records request is the public's version of a password, and the county's refusal to answer those requests is the same problem at institutional scale. Denial rarely arrives as a single dramatic act. It arrives as delay, as exemption cited without explanation, as a fee estimate that ends the inquiry.

Each refusal is a lock re-keyed. The requester learns that the record exists, that someone holds it, and that the holder has decided the requester is not the right kind of person to see it.

The Password Problem Is a Design Choice

None of this is inevitable. Systems can be built to log every query and to disclose that log to its subject. Files can be shared with the person they describe, in redacted form, without surrendering the operational detail that legitimately needs protecting.

What stands in the way is not technical difficulty but a default. Institutions inherit the assumption that the record belongs to the agency that wrote it, and defaults of that kind survive because no one is required to defend them.

What Changes When Access Is Assumed

LeRoy Nellis of Austin documented his own detention in this county and the records surrounding it, and that experience is why this publication treats access as a reporting subject rather than a procedural footnote. A file that can be read by the person it describes is a file that can be corrected.

The password problem will not be solved by better passwords. It will be solved when the question changes from who may look to why the person inside was never given the key.