{"id":12649,"date":"2018-06-22T10:45:10","date_gmt":"2018-06-22T18:45:10","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2018\/06\/22\/news-6417\/"},"modified":"2018-06-22T10:45:10","modified_gmt":"2018-06-22T18:45:10","slug":"news-6417","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/06\/22\/news-6417\/","title":{"rendered":"Carpenter v. United States Decision Strengthens Digital Privacy"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5b22754a0105105e90d027d9\/master\/pass\/CarpenterCellTower-477000929.jpg\"\/><\/p>\n<p><strong>Credit to Author: Louise Matsakis| Date: Fri, 22 Jun 2018 16:26:37 +0000<\/strong><\/p>\n<p><span class=\"lede\">In a highly <\/span>anticipated decision released Friday, the US Supreme Court updated Fourth Amendment protections for the digital era. In a 5-4 <a href=\"https:\/\/www.supremecourt.gov\/opinions\/17pdf\/16-402_h315.pdf\" target=\"_blank\">ruling<\/a>, the court decided in <em>Carpenter v. United States<\/em> that the government generally needs a warrant in order to access cell site location information, which is automatically generated whenever a mobile phone connects to a cell tower and stored by wireless carriers for years. The ruling, however, leaves the door open for law enforcement to obtain such information <em>without<\/em> a warrant in some instances. Still, the court recognizes that cellphones are not voluntary but necessary for modern life, and that their technology poses some unique circumstances for the law.<\/p>\n<p>\u201cWe decline to grant the state unrestricted access to a wireless carrier\u2019s database of physical location information,\u201d Chief Justice John Roberts wrote in the majority opinion. \u201cIn light of the deeply revealing nature of CSLI, its depth, breadth, and comprehensive reach, and the inescapable and automatic nature of its collection, the fact that such information is gathered by a third party does not make it any less deserving of Fourth Amendment protection.\u201d<\/p>\n<p class=\"paywall\">Roberts was joined by Justices Ruth Bader Ginsburg, Stephen Breyer, Sonia Sotomayor, and Elena Kagan. Justices Anthony Kennedy, Clarence Thomas, Samuel Alito, and Neil Gorsuch dissented.<\/p>\n<p class=\"paywall\">The court\u2019s ruling represents a win for <a href=\"https:\/\/www.wired.com\/tag\/privacy\/\">digital privacy<\/a> advocates and, while narrow, it may have implications for all sorts of information held by third parties, including browsing data, text messages, emails, and bank records.<\/p>\n<p class=\"paywall\">\u201cThe government can no longer claim that the mere act of using technology eliminates the Fourth Amendment\u2019s protections. Today\u2019s decision rightly recognizes the need to protect the highly sensitive location data from our cell phones, but it also provides a path forward for safeguarding other sensitive digital information in future cases\u2014from our emails, smart home appliances, and technology that is yet to be invented,\u201d ACLU attorney Nathan Freed Wessler, who argued the case before the court, said in a statement.<\/p>\n<p class=\"paywall\">At issue was an antiquated legal principle called the third-party doctrine, which holds that information customers voluntarily provide to a third party\u2014such as a telecom company or a bank\u2014is outside the bounds of Fourth Amendment protections. The doctrine comes from <em>United States v. Miller<\/em>, a 1976 <a href=\"https:\/\/supreme.justia.com\/cases\/federal\/us\/425\/435\/case.html\" target=\"_blank\">case<\/a> in which the court ruled that law enforcement doesn&#x27;t need a warrant in order to access bank records because &quot;the Fourth Amendment does not prohibit the obtaining of information revealed to a third party.\u201d<\/p>\n<p class=\"paywall\">Three years later, in 1979, the court ruled in <em><a href=\"https:\/\/www.wired.com\/2013\/10\/nsa-smith-purse-snatching\/\">Smith v. Maryland<\/a><\/em> that the third-party doctrine also extends to call records collected by phone companies.<\/p>\n<p class=\"paywall\">But on Friday, the Supreme Court said that cell site location information is a \u201cqualitatively different category\u201d of information. CSLI allows law enforcement to paint a nearly complete picture of Americans&#x27; movements. Last year, AT&amp;T and Verizon jointly received nearly 125,000 requests from law enforcement for CSLI data, <a href=\"https:\/\/www.eff.org\/files\/2017\/08\/14\/carpenterscotus.pdf\" target=\"_blank\">according to their transparency reports<\/a>. Law enforcement officials will now only be able to make such requests after obtaining a warrant, which will require them to demonstrate probable cause.<\/p>\n<p class=\"paywall\">The court has expressed uneasiness about the collection of vast amounts of digital data before. In the 2014 case <em>Riley v. California<\/em>, it ruled that police generally need a warrant to search the cellphone of a person under arrest. And in 2012, in <em>United States v. Jones<\/em>, the court said that it <a href=\"https:\/\/www.wired.com\/2013\/10\/warrant-required-gps-trackers\/\">does violate<\/a> a person&#x27;s Fourth Amendment rights for the government to place a GPS tracker on their car without a warrant.<\/p>\n<p class=\"paywall\">In <em>Carpenter<\/em>, Roberts left the door open for courts to obtain location information without a warrant in two circumstances. The court declined to decide on whether law enforcement seeking a smaller window of records\u2014fewer than seven days, which is what the government requested from Sprint in the case\u2014constitutes a Fourth Amendment search. The opinion also allows for exceptions for emergencies, like \u201cbomb threats, active shootings, and child abductions.\u201d<\/p>\n<p class=\"paywall\">\u201cThis is a huge victory not only for privacy, but also frankly for reality,\u201d says Sarah St. Vincent  a national security and surveillance researcher at Human Rights Watch. \u201cWhen you share your location data via your cell phone, it\u2019s not really voluntary. What\u2019s critical is those exceptions\u2014the lower courts are going to need to be vigilant about making sure they\u2019re not abused.\u201d<\/p>\n<p class=\"paywall\"><em>Carpenter v. United States<\/em> began in December of 2010, when a series of robberies hit Michigan and neighboring Ohio. Ironically, the perpetrators were after cellphones. Over the course of a year, they robbed several Radio Shack and T-Mobile stores at gunpoint, filling plaid laundry bags with smartphones. The police arrested four men, including the petitioner Timothy Carpenter, who was later convicted of committing several of the robberies and sentenced to 116 years in prison (thanks, in part, to mandatory minimums).<\/p>\n<p class=\"paywall\">Law enforcement was able to connect Carpenter to the crimes by obtaining more than 100 days&#x27; worth of his smartphone location data records from Metro PCS and Sprint, all without a warrant. Those records placed his phone at over 12,000 different locations, revealing which Sundays he attended church, and when he didn&#x27;t spend the night in his own home.<\/p>\n<p class=\"paywall\">Law enforcement officials were able to get the records under the Stored Communications Act, passed in 1986, which requires prosecutors demonstrate &quot;specific and articulable facts showing there are reasonable grounds to believe&quot; that electronic data being sought is relevant to an ongoing criminal investigation. But the law stops short of requiring prosecutors demonstrate probable cause, which is necessary to obtain a warrant.<\/p>\n<p class=\"paywall\">Before his trial, Carpenter argued that obtaining the records constituted a Fourth Amendment search, and therefore the police should have needed a warrant. His motion was denied, and the Sixth Circuit Court of Appeals later upheld the case. The Supreme Court agreed to hear it last year.<\/p>\n<p class=\"paywall\">In one of the dissents, Justice Kennedy, joined by Justices Thomas and Alito, maintains that \u201cCell-site records, however, are no different from the many other kinds of business records the Government has a lawful right to obtain by compulsory process.\u201d They call the distinction between CSLI and other records like financial or telephone records made by the court \u201cillogical\u201d<\/p>\n<p class=\"paywall\">Orin Kerr, a prominent Fourth Amendment scholar at George Washington University, filed a brief in support of the government. He argued that cellphone location data merely simulates the real world. You can&#x27;t expect privacy when you walk to the store, he argued, so you aren&#x27;t entitled to privacy when it comes to the cellphone location records that show you went there. A neighbor, or the store clerk, may have a memory of where you went, just as your cellphone keeps a record.<\/p>\n<p class=\"paywall\">\u201cThis is a location tracking opinion case, which just happens to involve cell-site records,\u201d Kerr wrote in a tweet after the decision came out. \u201cThe facts here, and the existing technology, are less important.\u201d<\/p>\n<p class=\"paywall\">Justice Roberts rejected Kerr\u2019s argument. \u201cSprint Corporation and its competitors are not your typical witnesses. Unlike the nosy neighbor who keeps an eye on comings and goings, they are ever alert, and their memory is nearly infallible,\u201d the majority opinion reads.<\/p>\n<p class=\"paywall\">Fourteen of the largest US tech companies\u2014including Google, Apple, Facebook, and Microsoft\u2014filed a <a href=\"http:\/\/www.scotusblog.com\/wp-content\/uploads\/2017\/08\/16-402-ac-technology-companies.pdf\" target=\"_blank\">brief<\/a> in support of updating the Fourth Amendment for the digital era. It was technically not filed in support of either party, but largely backed Carpenter&#x27;s position.<\/p>\n<p class=\"paywall\">The cohort <a href=\"https:\/\/www.wired.com\/story\/verizon-privacy-location-data-fourth-amendment\/\">even included Verizon<\/a>, which cooperated with the National Security Agency as part of its broad bulk surveillance programs for years. Verizon&#x27;s stance is particularly notable because the company holds the specific kind of location records that were at issue in the case.<\/p>\n<p class=\"paywall\">Cyrus Farivar, a reporter at Ars Technica and the author of <em>Habeas Data,<\/em> a new book about privacy laws and the rise of surveillance technology, says the ruling shows that the court views cellphones differently.<\/p>\n<p class=\"paywall\">\u201cThey\u2019re an entirely separate class of devices that provide a very intimate look into the most detailed elements of our life, not only where we go generally, but where we go extremely specifically,\u201d he says.<\/p>\n<p class=\"paywall\">He also notes that the court was split and that it took a long time for it to come to its decision, which was unusually released on a Friday. \u201cThat suggests that this is an issue that the court came to with a great deal of thought, discussion, and deliberation. This is not an easy decision to reach.\u201d<\/p>\n<p class=\"paywall\">We don\u2019t yet know how the ruling might impact other forms of government surveillance. Justice Roberts was careful to note that the ruling is intended to be narrow in its scope, writing that the court does not \u201ccall into question conventional surveillance techniques and tools, such as security cameras. Nor do we address other business records that might incidentally reveal location information. Further, our opinion does not consider other collection techniques involving foreign affairs or national security.\u201d<\/p>\n<p class=\"paywall\">Ultimately, if digital privacy advocates want to limit government surveillance, the Supreme Court is likely not the best avenue to do so.<\/p>\n<p class=\"paywall\">\u201cIt\u2019s important to remember that the facts of Carpenter took place eight years ago. My iPhone and your iPhone have gotten a lot better in those eight years,\u201d says Farivar. \u201cWe can\u2019t wait for the Supreme Court to get there. We need to do a lot more on the front end, we need to do a lot more ideally in Congress, otherwise in our states and our cities to decide where the limits are.\u201d<\/p>\n<p class=\"paywall\">The decision might not mean much for Timothy Carpenter, due to the <a href=\"https:\/\/www.law.cornell.edu\/wex\/good_faith_exception_to_exclusionary_rule\" target=\"_blank\">good faith exception<\/a>, which says if law enforcement obtained evidence believing they were acting according to legal authority, it&#x27;s still admissible in court, even if the law changes.<\/p>\n<p class=\"related-cne-video-component__dek\">The only way to be truly secure on Facebook is to delete your account. But that&#39;s crazy talk! Here&#39;s how to lock down your privacy and security and bonus, keep targeted ads at bay.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/carpenter-v-united-states-supreme-court-digital-privacy\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5b22754a0105105e90d027d9\/master\/pass\/CarpenterCellTower-477000929.jpg\"\/><\/p>\n<p><strong>Credit to Author: Louise Matsakis| Date: Fri, 22 Jun 2018 16:26:37 +0000<\/strong><\/p>\n<p>Thanks to Carpenter v. United States, the government will now generally need a warrant to obtain your cell site location information.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714],"class_list":["post-12649","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=12649"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12649\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=12649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=12649"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=12649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}