In the South Carolina prison system, accessing Facebook is an offense on par with murder, rape, rioting, escape and hostage-taking.

Back in 2012, the South Carolina Department of Corrections (SCDC) made “Creating and/or Assisting With A Social Networking Site” a Level 1 offense [PDF], a category reserved for the most violent violations of prison conduct policies. It’s one of the most common Level 1 offense charges brought against inmates, many of whom, like most social network users, want to remain in contact with friends and family in the outside world and keep up on current events. Some inmates ask their families to access their online accounts for them, while many access the Internet themselves through a contraband cell phone (possession of which is yet another Level 1 offense).

Through a request under South Carolina’s Freedom of Information Act and other public records, EFF found that, over the last three years, prison officials have brought more than 400 disciplinary cases for “social networking”—almost always for using Facebook. The offenses come with heavy penalties, such as years in solitary confinement and deprivation of virtually all privileges, including visitation and telephone access. In 16 cases, inmates were sentenced to more than a decade in what’s called disciplinary detention, with at least one inmate receiving more than 37 years in isolation.

The sentences are so long because SCDC issues a separate Level 1 violation for each day that an inmate accesses a social network. An inmate who posts five status updates over five days, would receive five separate Level 1 violations, while an inmate who posted 100 updates in one day would receive only one.

In other words, if a South Carolina inmate caused a riot, took three hostages, murdered them, stole their clothes, and then escaped, he could still wind up with fewer Level 1 offenses than an inmate who updated Facebook every day for two weeks.

So extreme is the application of this policy that SCDC is forced to regularly suspend solitary confinement sentences because of a lack of space in disciplinary segregation. In many cases, the punishments associated with using social media are so unnecessarily long that inmates will never actually serve them since they exceed their underlying prison sentences.

Prison systems have a legitimate interest in keeping contraband devices out of their facilities and preventing inmates from engaging in illegal activities through the Internet. But South Carolina’s policy goes too far, and not only because of the shockingly disproportionate punishments. The policy is also incredibly broad; it can be applied to any reason an inmate may ask someone outside to access the Internet for them, such as having a family member manage their online financial affairs, working with activists to organize an online legal defense campaign, sending letters to online news sites, or just staying in touch with family and friends to create the type of community support crucial to reintegrating into society.

There is also a censorship component.

Facebook has processed hundreds of requests from SCDC officers who want inmates’ profiles taken down. Facebook’s stated policy is to suspend these pages under the auspices of Terms of Service (ToS) violations—specifically, purported violations of terms banning users from using aliases or sharing passwords with third parties—effectively allowing SCDC to censor inmates’ online speech. Yet, as described below, Facebook goes beyond its stated policy and agrees to SCDC requests to censor inmate pages even when no ToS violation has been alleged. In addition, Facebook seems to have taken no action against SCDC investigators who regularly violate these same terms in uncovering inmate profiles.

What’s more, this process is veiled in secrecy, with both Facebook and SCDC failing to create a public record paper trail documenting the takedown of inmate pages.

It’s time for South Carolinians to demand a review of this policy and for Facebook to reevaluate its role in helping prison systems censor and excessively punish inmates.

Social Media in South Carolina Lockups

Prisons and jails across the country have been looking for new ways to keep inmates off the Internet, not only by investing in controversial new cell-tracking technologies such as Stingrays and DRTboxes, but also using social networks as avenue to find and punish inmates.

South Carolina adopted a Level 1 social media offense [PDF] to punish “Creating and/or Assisting With A Social Networking Site,” defined as: “The facilitation, conspiracy, aiding, abetting in the creation or updating of an Internet web site or social networking site.”

SCDC defines “social networking” very broadly, covering everything from YouTube and Twitter to blogs and email, although all of the cases EFF reviewed [PDF] involved Facebook. Investigations are conducted by corrections officers and inmates are convicted during disciplinary hearings that often last mere minutes.

Since the policy was implemented, SCDC has brought 432 disciplinary cases against 397 inmates, with more than 40 inmates receiving more than two years in solitary confinement [PDF].

Here are some of the most severe social media punishments we’ve seen:

In October 2013, Tyheem Henry received 13,680 days (37.5 years) in disciplinary detention and lost 27,360 days (74 years) worth of telephone, visitation, and canteen privileges, and 69 days of good time — all for 38 posts on Facebook .

and lost 27,360 days (74 years) worth of telephone, visitation, and canteen privileges, and 69 days of good time In June 2014, Walter Brown received 12,600 days (34.5 years) in disciplinary detention and lost 25,200 days (69 years) in telephone, visitation, and canteen privileges, and 875 days (2.4 years) of good time — all for 35 posts on Facebook .

and lost 25,200 days (69 years) in telephone, visitation, and canteen privileges, and 875 days (2.4 years) of good time In May 2014, Jonathan McClain received 9,000 days (24.6 years) in disciplinary detention and lost 18,000 days (49 years) in telephone, visitation, and canteen privileges, and 30 days of good time—all for 25 posts on Facebook.

The average punishment length for a “social networking” case was 517 days in disciplinary detention, and the average length of lost privileges was even longer. [Update: We originally reported the average as 512. After a subsequent review, we have concluded the number was slightly higher.]

So disproportionate are these punishments that South Carolina doesn’t have space in disciplinary detention for all the offenders and “regularly” is forced to put the punishments on hold. In the cases of the three above inmates, SCDC says that none will serve the full punishment since they will be released from prison within the next five to 10 years.

As punishment for social media use, inmates also lose “good time” days that would had otherwise resulted in early release. Since 2012, inmates have collectively lost 14,564 “good time” days, the equivalent of 44 extra years in prison. In fiscal terms, that’s approximately $842,000 [PDF] more that taxpayers will have to pay to keep inmates behind bars—just because they posted on Facebook.

Social Media Investigations

SCDC investigators uses a variety of tools to catch inmates on social media. Sometimes, evidence is obtained during cell phone searches. Other times, investigators simply hear inmates talking about accessing Facebook.

In summer 2014, SCDC launched a mechanism for crowdsourcing social media investigations with a prominent button on the front page of its website, encouraging the public to report inmates using social media to SCDC. In only eight months, SCDC has collected more 230 submissions from the public about inmates using social networks and cell phones.

SCDC also uses outside contractors in its investigations, paying $12,500 to an unnamed entity for unspecified services. All but the price tag was redacted from the document [PDF] provided to EFF under South Carolina’s Freedom of Information Act.

Certain other tactics are more alarming. In response to inquiries from EFF [PDF], SCDC acknowledged that staff obtained inmate passwords through various means, including from inmates informing on inmates, family members, and the inmates themselves. In violation of Facebook’s Terms of Service, SCDC staff have used those passwords to access inmate accounts.

SCDC investigators have also created fake social media profiles in order to catch inmates in the act—again, a clear violation of Facebook’s Terms of Service. Unfortunately, all information regarding these investigations is shielded from disclosure under the state’s Freedom of Information Act.

In addition to the potential legal issues these practices may raise, the policies also pose problems for Facebook, which, as of February 3, has processed 512 “deactivation requests” from South Carolina corrections officers since 2012.

Facebook: Prison Censor

Facebook has made it all too easy for prisons to report inmates for having profiles: the site has a form titled “Inmate Account Takedown Request.” A corrections officer only needs to enter a few pieces of information about the inmate—the inmate’s name, profile link, and the crime for which they’re being imprisoned, but not the purported violation of Facebook’s Terms of Service—to get the inmate’s profile taken down.

In direct discussions with EFF, Facebook repeatedly asserted it does not enforce prison policies. Rather, according to Facebook, when a corrections officer contacts Facebook about an inmate page, Facebook staff may suspend the account on the grounds that the inmate violated the site’s Terms of Service.

Specifically, Facebook pointed to terms that forbid users from sharing their passwords or otherwise allowing other people to access their accounts, a practice common among inmates. Facebook claims that they suspend inmate accounts for violations of this policy not only because of the ToS violation, but also because it protects the inmate’s privacy. Facebook also forbids the use of aliases, which inmates also frequently employ.

However, prisons are very aware of how to exploit Facebook’s Terms of Service, with the Federal Bureau of Prisons even quoting the terms in handbooks [PDF] and presentations [PDF], adding that "Facebook also deactivates prisoner pages, regardless of who set up the page."

Facebook says this isn't true, but its claim that it does not enforce prison policies is contradicted by correspondence that shows Facebook explicitly censored a South Carolina inmate’s page when no ToS violation was alleged.

In July 2014, a South Carolina corrections officer emailed Facebook asking for the removal of the profile of an inmate who had violated prison policy by accessing Facebook through a cell phone. Accessing Facebook through a contraband cell phone in itself does not seem to be a ToS violation. But as the below email shows, Facebook still removed the page—not for a ToS violation, but for breach of “inmate regulations.”

Remarkably, this email exchange occurred after Facebook assured EFF it was not doing this exact thing.

This was the only email chain [PDF] between Facebook and SCDC that EFF received in response to the FOIA request. That’s because Facebook’s system allows for secret censorship. Inmate takedown requests usually occur through Facebook’s online form, which, as a Facebook employee told SCDC in a follow-up email, does not generate a receipt email. This means that more than 500 inmate take down requests have been filed without any kind of paper trail accessible to the inmate or the public—a lack of transparency that is simply not acceptable when government-instigated censorship is involved.

Even if you take Facebook at its word—i.e., that it only enforces its own Terms of Service (despite the evidence to the contrary)—Facebook is guilty of applying a double standard when it comes to ToS violations. SCDC’s practices of logging into inmate’s accounts and creating fake profiles is a clear violation of not only its ToS, but also the very same terms inmates are accused of violating. Despite SCDC’s rule-breaking, Facebook allows SCDC to maintain its own public Facebook page, where it posts career fair notices and positive news stories about its programs.

When EFF pointed this out, Facebook said it would remove any of SCDC’s secret alias pages we could identify—but this is a next to impossible feat given that information about such secret aliases isn’t publicly available through South Carolina’s FOIA.

Ensuring Accountability

South Carolina may be unique only in the frequency and severity with which it enforces social media punishments. In New Mexico, an inmate was sentenced to 90 days in solitary confinement after his family members accessed Facebook on his behalf. In Alabama, a law was recently passed to make it a misdemeanor to serve as a go-between for an inmate who wants to post information to the Internet.

These policies have not gone unchallenged. An Arizona law forbidding inmates from accessing the Internet through a third party was struck down as unconstitutional. The Florida Department of Corrections backtracked on a policy proposal similar to South Carolina's after the Florida Justice Institute and other civil liberties groups threatened litigation [PDF]. Just last week, the ACLU of Indiana filed a lawsuit alleging First Amendment violations when prison officials punished an inmate after his sister launched a social media campaign to get him freed.

SCDC has set up a system that allows prison administrators to hold inmates longer, in harsher conditions, and to largely cut them off from the rest of the world. South Carolinians should demand an immediate review of how this policy is applied.

We’re also calling on Facebook to embrace the position that inmate communication often has public value, such as when inmates raise issues about possibly unconstitutional prison conditions and other irregularities in the criminal justice system.

Steps Facebook should take include:

Stop censoring inmates without first evaluating whether a serious ToS violation has occurred (such as harassing a victim or engaging in a criminal enterprise).

Eliminate the inmate takedown feature, or, at the very least, ensure that a public record (such as a receipt email) is generated every time a prison official files a takedown request and every time Facebook complies.

Revise its transparency report to include detailed numbers of takedown requests Facebook has received, what agency sent each request, and how Facebook responded.

Hold law enforcement agencies, such as prisons, accountable for abusing Facebook’s ToS.

Balancing the rights of inmates with public safety is a tricky task, but prisons—and the companies that assist them—must consider proportionality and fairness for justice to be truly served.

Correction: The New Mexico inmate was originally sentenced to 90 days in solitary confinement, not 60 days. Other minor edits have been made for clarity. As noted above, we also originally reported the average sentence as 512 days in disciplinary detention. After a subsequent review, we have concluded it is actually 517 days.