Fifth Circuit Court Of Appeals Upholds Decision That Warrantless Cell Phone Tracking Doesn't Violate Fourth Amendment

from the sadly,-another-one-for-the-'unsurprising'-column dept

The ongoing court battle over warrantless cell phone location tracking continues and the latest decision is another setback for the Fourth Amendment. The Fifth Circuit Court of Appeals held that individuals have no reasonable expectation of privacy over their location data. The decision states that location data is a "business record" created by private companies with the implicit consent of cell phone users and therefore are not subject to privacy protections.

[C]ell site information is clearly a business record. The cell service provider collects and stores historical cell site data for its own business purposes . . . the government merely comes in after the fact and asks a provider to turn over records the provider has already created.
The rationale is that cell phone companies are not required by the government to create or retain this data and that citizens are not required by the government to carry or use cell phones, thus making this data subject to the Third Party Doctrine and removing any expectation of privacy.

This rationalization goes counter to the recent NJ Supreme Court decision (unrelated other than in subject matter), which found that location data should be subject to privacy protections for nearly the same reason. Although cell phones aren't in any way "mandatory," the court stated that no one uses a cell phone with the intent of creating a location-specific metadata trail for law enforcement to scoop up without a warrant.

The decision to declare cell phone location data "business records" also plays into the hands of intelligence agencies like the NSA and FBI, allowing them to harvest vast amounts of data on Americans without running the risk of violating their constitutional rights (at least, not according to these interpretations). The court also added that there is some form of recourse for citizens worried about their rights being violated -- but both suggestions are a dead end.
"But the recourse for these desires is in the market or the political process: in demanding that service providers do away with such records (or anonymize them) or in lobbying elected representatives to enact statutory protections."
As the ACLU points out, neither of these "remedies" are likely to result in additional privacy protections.
Regarding the first point, perhaps the court is unaware how opposed the cell phone companies are to even disclosing how long they keep subscriber data. It took a nation-wide public records act request campaign before we received a Justice Department information sheet on how long carriers keep such records. (According to the 2010 document, Verizon keeps historical cell phone records for "1 rolling year" while Sprint keeps them for "18-24 months.") There is no cell phone company that doesn't retain historical cell site location data, or even one that keeps it only for a short time. And anyway, our Fourth Amendment rights should not depend on the largesse of for-profit corporations.
As for pressing for Congressional change, the ACLU has been doing just that for years. (The federal statute the government uses to obtain cell phone location records was written way back in 1986 and hasn't been meaningfully updated since.) But the mere fact that some other branch of government could provide a remedy is no reason for courts to take a pass on protecting Americans' privacy.
Expecting corporations to protect your privacy is, for the most part, a non-starter, especially if these corporations can monetize the data in any way. Furthermore, how many people actually believe the government would allow cell phone providers to simply scrap the data (or anonymize it) once it's served it purpose (monthly billing, for instance), rather than retain it for months on end? Intelligence agencies and law enforcement would simply push for legislation and court orders to ensure this flow of data continues uninterrupted.

In a 25-page dissent, Judge James Dennis pokes holes in the majority's "business records" rationalization, quoting Justice Sotomayor's reservations about the majority's opinion in US vs. Jones:
[In future cases] considering the existence of a reasonable societal expectation of privacy in the sum of one’s public movements[,] . . . it may be necessary to reconsider the premise that an individual has no reasonable expectation of privacy in information voluntarily disclosed to third parties. This approach is ill suited to the digital age, in which people reveal a great deal of information about themselves to third parties in the course of carrying out mundane tasks. People disclose the phone numbers that they dial or text to their cellular providers; the URLs that they visit and the e-mail addresses with which they correspond to their Internet service providers; and the books, groceries, and medications they purchase to online retailers. . . . I would not assume that all information voluntarily disclosed to some member of the public for a limited purpose is, for that reason alone, disentitled to Fourth Amendment protection.
By allowing law enforcement to access "business records" without a warrant, the Court opens up the possibility that these agencies will find a person's internet history, email and contact lists to be similarly devoid of Fourth Amendment protections. Saying one thing is a business record and one thing isn't only further obscures an aspect that needs clear delineation, one that would preferably draw the line before location data rather than attempt to determine which "parts" of a person's cell phone are subject to privacy protections.

We also have to ask why there's such an aversion to obtaining a warrant. In many cases, the information needed is historical. In other cases, when something more current or time-sensitive might be needed, there are emergency orders and other legal remedies (once in the courtroom) to allow some warrantless data collection to be admitted as evidence. The more these battles drag on, the more it appears that these agencies are benefiting from multiple interpretations of outdated laws, a benefit they'd clearly prefer to keep intact. This creates a path of least resistance, which becomes especially problematic when combined with the agencies' natural tendency to collect as much data as possible, "just in case."

Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: 4th amendment, business records, expectation of privacy, fifth circuit, gps, location tracking, phone tracking, privacy, third party doctrine


Reader Comments

Subscribe: RSS

View by: Time | Thread


  1. icon
    GMacGuffin (profile), 31 Jul 2013 @ 3:15pm

    Uh ...

    The rationale is that cell phone companies are not required by the government to create or retain this data and that citizens are not required by the government to carry or use cell phones, thus making this data subject to the Third Party Doctrine and removing any expectation of privacy.

    Uh, we're not required by the government to live in a house either, but I'm pretty sure the 4th Amendment covers that, as well as our "papers and effects" which in relation to cell phones, the former being accessible or stored in the latter.

    link to this | view in thread ]

  2. icon
    That One Guy (profile), 31 Jul 2013 @ 3:40pm

    Turnabout is fair play after all

    So I take it the judges would have no problem with FOIA or other requests that would allow people to track their movements via their cellphones then, as it's not considered 'private information'?

    link to this | view in thread ]

  3. identicon
    Anonymous Coward, 31 Jul 2013 @ 3:46pm

    Talk about a unconstitutional ruling. Fifth Circuit Court judges are guilty of treason against he Constitution and American People too.

    link to this | view in thread ]

  4. identicon
    Ray, 31 Jul 2013 @ 3:51pm

    My wife isn't required by the government to retain copies of our love letters and I am not required to carry them by the government. By this reasoning, the government can search my person and read my personal letters.

    We really need a method to throw judges off the bench on election day. Unfortunately, the politicians that could, have all been blackmailed through intrusive spying by a corrupt corporate owned fascist government.

    When a court ignores the constitution, they have committed a crime and the worst of all - treason. Making sure that judges do not carry a passport from two countries is a good place to start.

    link to this | view in thread ]

  5. identicon
    Anonymous Coward, 31 Jul 2013 @ 4:00pm

    The word "reasonable" is in the Amendment.
    How is unfettered collection "reasonable"?

    link to this | view in thread ]

  6. identicon
    Anonymous Coward, 31 Jul 2013 @ 4:05pm

    The rationale is that cell phone companies are not required by the government to create or retain this data


    And that's bullshit.

    The federal government has required wireless carriers to build location technology into their networks. When the Fifth Circuit says that cell phone companies haven't been required to build that location technology—those Fifth Circuit judges are just dishonest.
    “Sprint, Alltel, USC fined for missed e911 deadline”   (August 31, 2007)

    The FCC has fined Sprint, Alltel and U.S. Cellular a total of $2.83 million for not meeting the December 31, 2005 deadline for enhanced 911 services. By the end of 2005, all wireless carriers had to ensure that 95 percent of their subscribers had location-enabled handsets

    (Emphasis added.)

    The Fifth Circuit judges know this. The judges are being intentionally dishonest. The judges are lying.

    link to this | view in thread ]

  7. This comment has been flagged by the community. Click here to show it
    identicon
    out_of_the_blue, 31 Jul 2013 @ 4:11pm

    "How America's Top Tech Companies Created the Surveillance State"

    Highly relevant. -- And surprise! Real journalist mentions Google!

    http://www.nationaljournal.com/magazine/how-america-s-top-tech-companies-created-the-surv eillance-state-20130725

    "Facebook’s Mark Zuckerberg, he of the teen-nerd hoodie, said he’d never even heard of the kind of data-mining that the NSA leaker described—then fell quiet. Google cofounder Larry Page declared almost exactly the same thing; then he shut up, too. Especially for the libertarian geniuses of Silicon Valley, who take pride in their distance (both physically and philosophically) from Washington, the image-curdling idea that they might be secretly in bed with government spooks induced an even greater reluctance to talk, perhaps, than the Foreign Intelligence Surveillance Act, which conveniently forbids executives from revealing government requests for information."

    link to this | view in thread ]

  8. identicon
    Michael, 31 Jul 2013 @ 4:12pm

    Re: Uh ...

    we're not required by the government to live in a house either

    PLEASE stop giving them ideas.

    link to this | view in thread ]

  9. identicon
    Michael, 31 Jul 2013 @ 4:13pm

    Re:

    When you are doing the collecting.

    link to this | view in thread ]

  10. icon
    velox (profile), 31 Jul 2013 @ 4:19pm

    warrant = paper trail

    "We also have to ask why there's such an aversion to obtaining a warrant."
    Law enforcement hates warrants because they create paper trails, and paper trails can reveal unpleasantries such as incompetence - or worse.

    link to this | view in thread ]

  11. identicon
    S. T. Stone, 31 Jul 2013 @ 4:34pm

    Re: "How America's Top Tech Companies Created the Surveillance State"

    You know, if you want people to pay attention to you, maybe you should try pointing out examples of such behavior from companies other than Google.

    Otherwise, you tend to look as if you have a vendetta against Google and would willingly ignore the same behavior if other companies do it.

    link to this | view in thread ]

  12. identicon
    Anonymous Coward, 31 Jul 2013 @ 4:45pm

    I'm glad someone else noticed the Enhanced 9-1-1 backdoor legislators used to slip location tracking into every single cell phone, under the guise of "Safety".

    "Wireless network operators must provide the latitude and longitude of callers within 300 meters, within six minutes of a request by a PSAP."

    https://en.wikipedia.org/wiki/Enhanced_9-1-1#Wireless_enhanced_911

    link to this | view in thread ]

  13. identicon
    Anonymous Coward, 31 Jul 2013 @ 4:57pm

    Re:

    I'm glad someone else noticed…

    It's not a big secret. It never was.

    Furthermore, if you read the opinion carefully, it's painfully clear that the Fifth Circuit judges on the panel were well aware that the government has imposed requirements on the cell-phone carriers.

    For the judges to then turn around and say, well, the carriers didn't have to keep track of their users' locations—who the fuck are these judges trying to kid here?

    The majority opinion is intentionally dishonest. That's my conclusion.

    link to this | view in thread ]

  14. identicon
    Anonymous Coward, 31 Jul 2013 @ 5:38pm

    Re: Re: Uh ...

    I'm sure this is already covered by one or more of the secret laws passed by the secret government and ruled A-Ok by the secret court.

    link to this | view in thread ]

  15. identicon
    Anonymous Coward, 31 Jul 2013 @ 5:47pm

    Re:

    Build location awareness into cell phones they said.
    It will be a valuable addition to the 911 call system they said.
    Location data will not be abused they said.

    link to this | view in thread ]

  16. identicon
    Anonymous Coward, 31 Jul 2013 @ 6:14pm

    nothing new,

    presidents for this already exist, it clearly falls under 'green fields' and the court is correct it's business records, and is information the cellular system get, sure they were asked to retain that information, but not 'create' it. It already existed, it is a part of the system itself (what towers you talk too is part of the system working), the records of what towers are used for what calls is operational information.

    Government asked the phone companies to keep that information instead of deleting it, it's also a business record and as such there is a requirement by law to retain those records for business purposes. (7 years in Australia).

    link to this | view in thread ]

  17. identicon
    Anonymous Coward, 31 Jul 2013 @ 7:07pm

    Re:

    It's actually "unreasonable" in the Amendment. Massive data mining without "probably cause" (also in the Amendment) is certainly unreasonable.

    link to this | view in thread ]

  18. icon
    Nicholas Batik (profile), 31 Jul 2013 @ 8:39pm

    There is an implied contract with both public and private data

    The courts have already established that there are numerous venues within which you have no expectation of privacy. What is missing in this discussion is the implied contract that is associated with your public data, specifically that your public data is casual, random, limited, and segregated.

    It may be easiest to illustrate those with example:

    It is understood that if you venture into public you will be observed. No one expects privacy in that setting. You may encounter the same people in the same places, at the same times, or randomly at different times and venues, but you would become suspicious if you encountered the same person everywhere you went. You would probably suspect stalking.

    If that person recorded which lights turned on in the windows of your house, the order they turned on and their duration, when you opened and closed window shades, the time you entered and exited your house, where you went, what you bought, who you met, and so on, you would necessarily be worried. All that information is public, but it has crossed a threshold of limited, casual and random.

    It is understood that this behavior implies nefarious intent. Even if that person is a law enforcement officer, we have historically required reasonable suspicion of behavior, or a court order authorizing their collection of your public data on such a scale.

    If a store owner tracks your purchases to provide better service and try to better meet your needs, that is laudable. If he starts following you around the shopping mall to see what else you buy, that rapidly degrades into creepy behavior.

    We expect that grocery stores will track our grocery habits, the phone company will monitor our calling patterns, the credit card company will analyze typical and non-typical purchases to prevent fraud. Although all this data is ostensibly public, implied in this understanding is the segregation of that data. If the phone company started acquiring our grocery records, we would demand to know why, and act to put a stop to it.

    In order for the government to carry out its appointed tasks, it must obtain from its citizens specific personal data, that if disclosed, could result in loss of harm to that citizen. We entrust this information with the understanding that those in authority will take all necessary safeguards to protect it from disclosure or unauthorized use.

    When that same authority accumulates all our public data, from all of the available sources, combines that the private data of our financial and tax records, medical records, licenses, legal filings, driving records, political and religions affiliations, and all other disclosures, then it has far exceeded the authority issued by its citizenry.

    That it should then use this unprecedented store of information to identify and target individuals for propaganda and behavioral modification, as well as provide policing agencies the ability to observe and analyze the totality of every citizen's life for any and all activities that may be used to incriminate those individuals, for the entire duration of their lives, then it has crossed the boundaries of implied consent of both the public and private stores of data, and has ventured into realm of treason against its people.

    link to this | view in thread ]

  19. identicon
    DrMaqrel, 31 Jul 2013 @ 9:13pm

    Going dark has never sounded better. I might end up cancelling my cell phone at the end of August.

    link to this | view in thread ]

  20. identicon
    Ed C., 31 Jul 2013 @ 10:25pm

    Re: Turnabout is fair play after all

    No, they'll just call it "classified".

    link to this | view in thread ]

  21. identicon
    Pixelation, 31 Jul 2013 @ 10:51pm

    I'll call it political speech.

    It's time for an App that obfuscates location.

    link to this | view in thread ]

  22. identicon
    Anonymous Coward, 1 Aug 2013 @ 12:40am

    Re: Re:

    Who decides what probably cause is, when the court is not needed? It is a slippery slope on civil right erosion, but I do not think it will be stopped anytime soon... The court is probably already rocking the "no expectation of privacy on the internet"-meme.

    link to this | view in thread ]

  23. identicon
    Anonymous Coward, 1 Aug 2013 @ 2:49am

    Re: Re: "How America's Top Tech Companies Created the Surveillance State"

    It does have a vendetta against Google. Google has tons of cash, and it just has a computer and a wish to have those tons of cash.

    link to this | view in thread ]

  24. icon
    jilocasin (profile), 1 Aug 2013 @ 6:30am

    Mandatory data retention returning

    Dick Durbin, the Democratic senator from Illinois and Senate majority whip during yesterday's senate hearing asks this loaded question:

    "That's all very well, Durbin says, but would it not be possible for the phone companies to retain their own records over a given time period: "So it would not be in the grasp of the government?"

    Inglis says that would be possible. It would require legal changes."

    They (the government) tried to require companies to maintain "business records" so that they could rummage through it at their leisure (re: recent 5th circuit decision) without a warrant or any other oversight. It didn't happen. So, they just started collecting all of that data themselves.

    Now that they've been called out on it they are offering to stop, but only if they can force companies to store and maintain this data for them.

    Give us what we want or we'll do it ourselves, to heck if it's illegal. If you want us to stop then you should've just done what wanted to begin with.

    Sounds an awful lot like crooks telling you to give them all of your money. When later caught with their pockets full of your money and jewelry a helpful cop suggests; "What if we just put all of our money and jewelry in that box over there, that way you wouldn't have to break in to people's houses anymore? The robber replies, says that would be possible. It would require legal changes.

    How about if the government tries to actually follow the law?

    How about the president and congress upholding the constitution for a change?

    How about a law that says companies can not generate, keep, or re-purpose your data for any reason other than the one you gave it to them for?


    As for cell phones (a.k.a. government trackers that you can talk/text with) I find it kind of damming that you can't turn off your 'location services' (gps) for everything. It would be a simple matter for the phone to turn it back on again _when_you_dialed_911_. I guess if you could, you might, and then they would have to rely on the less accurate cell tower records.

    link to this | view in thread ]

  25. identicon
    Anonymous Coward, 1 Aug 2013 @ 6:39am

    Re: Mandatory data retention returning

    … then they would have to rely on the less accurate cell tower records.


    The e911 location requirement can be met by either GPS in the handset or by cell tower triangulation.

    The phone companies were fined $2.83 million because they weren't meeting the requirement on time using any acceptable technology—not even cell tower triangulation.

    link to this | view in thread ]

  26. identicon
    Anonymous Coward, 1 Aug 2013 @ 6:55am

    We need to boycott Verizon, AT&T, etc. if 50% of people do it for a couple months, it might cause change.

    link to this | view in thread ]

  27. identicon
    Anonymous Coward, 1 Aug 2013 @ 9:11am

    Re:

    Agreed, but how do we organize this? Does this include their non-wireless divisions?

    link to this | view in thread ]

  28. icon
    John Fenderson (profile), 1 Aug 2013 @ 9:53am

    Re: I'll call it political speech.

    Not possible. Your location is computed by the cell infrastructure (triangulating from the cell towers your phone has signaled to). Nothing you run on your phone can have any affect on that.

    link to this | view in thread ]

  29. icon
    Nicholas Batik (profile), 1 Aug 2013 @ 2:11pm

    Re: Boycott

    Wrong target. When you subscribe with the phone company you sign-off on the "I agree to..." notice regarding the collection of your data for business purposes, however grudgingly you may do so.

    As jilocasin points out, the issue is not the companies that collect, and eventually expire that data, it is the government that re-purposes and infinitely retains it, without our knowledge or consent.

    The question is: How do you boycott the government?

    link to this | view in thread ]

  30. identicon
    Anonymous, 2 Aug 2013 @ 5:08am

    And my weiner doesn't violate the 69th Amendment.

    link to this | view in thread ]

  31. identicon
    Anonymous Coward, 29 Jan 2015 @ 6:35pm

    This ruling pisses me off as a law abiding American citizen. I don't willingly turn over anything to my cellular provider, especially my location information! I have no say over what's collected. The only way I have a say is if I stop using a cellphone!

    I want to start yelling curse words at the Fifth Circuit Justices, so I'm just going to stop typing. Bravo to Justice James Dennis for actually understanding that Americans do in fact, have an expectation of privacy in their movements.

    American citizens should have more privacy rights than GPS tagged wildlife! Not so, says the Fifth Circuit majority. Despicable! Absolutely despicable!

    link to this | view in thread ]


Follow Techdirt
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Discord

The latest chatter on the Techdirt Insider Discord channel...

Loading...
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.