4th Circuit Appeals Court Rolls Back Its Warrant Requirement For Cell Site Location Info
from the the-'summer-of-the-Fourth-Amendment'-is-so-last-year dept
The Fourth Circuit Court of Appeals was one of the few appeals courts to rule on the constitutionality of obtaining cell site location info without a warrant. And it was -- was -- the only appeals court to find warrantless access violated the Fourth Amendment. The decision was limited to the collection of historical cell site data for extended periods of time (the court appeared to believe anything beyond two weeks was questionable), mainly because there was a good chance the records would contain considerable detail about a person's movements in private places.
The government immediately requested an en banc hearing by the Appeals Court. The hearing was granted and the court has patched up its split with the other circuits by finding in favor of the government and the Third Party Doctrine. [PDF link]
We now hold that the Government’s acquisition of historical CSLI from Defendants’ cell phone provider did not violate the Fourth Amendment.
Supreme Court precedent mandates this conclusion. For the Court has long held that an individual enjoys no Fourth Amendment protection “in information he voluntarily turns over to [a] third part[y].” Smith v. Maryland, 442 U.S. 735, 743-44 (1979). This rule -- the third-party doctrine -- applies even when “the information is revealed” to a third party, as it assertedly was here, “on the assumption that it will be used only for a limited purpose and the confidence placed in the third party will not be betrayed.” United States v. Miller, 425 U.S. 435, 443 (1976).
All of our sister circuits to have considered the question have held, as we do today, that the government does not violate the Fourth Amendment when it obtains historical CSLI from a service provider without a warrant. In addition to disregarding precedent, Defendants’ contrary arguments misunderstand the nature of CSLI, improperly attempt to redefine the third-party doctrine, and blur the critical distinction between content and non-content information.
The Supreme Court may in the future limit, or even eliminate, the third-party doctrine. Congress may act to require a warrant for CSLI. But without a change in controlling law, we cannot conclude that the Government violated the Fourth Amendment in this case.
The nod to 1979's Smith v. Maryland is back in place, setting this decision firmly in Third Party Doctrine territory. If it's "voluntarily conveyed" to a third party, the government doesn't need a warrant to access it. The key, though, is the "voluntary" part. While the majority finds the collection of cell site location data by service providers to be somehow a "voluntary" conveyance by customers, the three dissenting judges aren't as impressed by this argument.
The dissenting opinion (starting at p. 47) goes through the majority decision's citations and sees a whole lot more voluntary effort being made by citizens than what happens during the automatic acquisition of cell site info by phone companies.
The Supreme Court, then, has intentionally employed the “voluntary conveyance” concept in every relevant case to limit the reach of an otherwise sweeping per se rule that denies Fourth Amendment protection. It seems therefore crucial here to ask: what, precisely, did the Court mean when it chose those words, in the context of those cases?
Here is what those various defendants actually did to “voluntarily convey” information. One used his finger to dial, one by one, the numerical digits of a telephone number. Smith, 442 U.S. at 741 (highlighting that pen registers disclose “only the telephone numbers that have been dialed” (quoting United States v. N.Y. Tel. Co., 434 U.S. 159, 167 (1977))). Another submitted multiple checks and deposit slips—each presumably bearing a date, a dollar amount, a recipient name, and a personal signature. Miller, 425 U.S. at 442. The others actually spoke. White, 401 U.S. at 746–47 (conversations with a bugged government informant related to narcotics transactions); Hoffa, 385 U.S. at 296 (statements to an associate “disclosing endeavors to bribe [jury] members”); Lewis, 385 U.S. at 210 (conversations with an undercover law enforcement agent in the course of executing a narcotics sale).
In all of these cases—the only cases that can bind us here— “voluntary conveyance” meant at least two things. First, it meant that the defendant knew he was communicating particular information. We can easily assume Miller knew how much money he was depositing, that Smith knew the numbers he was dialing, and that Hoffa, Lewis, and White knew about the misconduct they verbally described to another.
Second, “voluntary conveyance” meant that the defendant had acted in some way to submit the particular information he knew. Crucially, there was an action—depositing, dialing, speaking— corresponding to each piece of submitted information. And where many data pieces were compiled into records—financial records in Miller, phone records in Smith—there was presumptively a discrete action behind each piece of data. The Court never suggested that the simple act of signing up for a bank account, or a phone line, was enough to willingly turn over thousands of pages of personal data.
The dissent goes on to point out that CSLI -- unlike other "voluntarily conveyed" third-party records -- isn't even made available to the customers that generate it. Customers have access to call records, bank statements, and other information collected under the Third Party Doctrine, but there's no easily-accessible way for citizens to view the location records they're conveniently generating for the government. This lack of access to information strongly suggests the collection of cell site location data by phone companies has nothing to do with voluntary conveyance.
The majority believes that if a "fix" is required, it should be left to legislators.
The legislative branch is far better positioned to respond to changes in technology than are the courts.
This is said with a straight face before using the Electronic Communications Privacy Act as an example of legislators' prowess: a law gives the government access to the contents of any electronic communications older than 180 days -- and which has yet to be updated in any serious form by legislators over the past 30 years, even as the tech landscape surrounding it has experienced monumental changes.
The majority maintains Congress "has not been asleep at the switch" since the ECPA's institution. And it's somewhat correct. Attempts have been made to rewrite the law in reaction to the explosion of electronic communications since the mid-80s, but forward motion has been stalled by government agencies unwilling to cede ground to shifting expectations of privacy. So, yes, Congress can fix it, but it needs to run a gauntlet of agencies it's in no hurry to anger and administrations that overwhelmingly oppose any minimal contractions of government reach or power. And if Congress hasn't made any significant progress towards trimming back the Third Party Doctrine's overgrowth since 1979's Smith v. Maryland decision, it's tough to believe that this is the decade where it will finally make its move.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: 3rd party doctrine, 4th amendment, cell site location info, csli, location, privacy, warrants
Reader Comments
Subscribe: RSS
View by: Time | Thread
[ link to this | view in chronology ]
Cannot wait to see just how much this is abused like Operation choke point
https://en.wikipedia.org/wiki/Operation_Choke_Point
Nothing like illegaly forcing people you do not like out of business for no other reason than you don't like them.
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
How the hell is giving out my metadata a "voluntary" action? It's the definition of involuntary. I don't intend to give it, or I may not even be aware I'm giving it, but I'm giving it anyway because that's what seems to be necessary to make the service work.
But to say this is "voluntary" on my part, is complete BS. Judges was supposed to be independent and stop government's powers from expanding, not play by their rules.
[ link to this | view in chronology ]
Not many
The right interpretation: data held about me by a third party can be voluntarily relinquished by that third party without violating the Constitution (although doing so could violate a contractual agreement). When the government forces the disclosure without a warrant, the Constitution is clearly and obviously being violated.
The current interpretation: the government has access to anything they want without a warrant as long as they don't get it directly from you. It's corrosive nonsense.
[ link to this | view in chronology ]
Translation
[ link to this | view in chronology ]
Dear my wireless provider,
Well, it can't hurt to ask, right?
[ link to this | view in chronology ]
3rd Party Doctrine...
Welp, everyone likes to wonder why revolution is so bloody... this is why. Show me a person whom thinks they can get a fair trial in America today, and I will show you a doomed fool! Once enough Americans figure out there is no civil recourse for unconstitutional government activity then the only answer is violence, because at this point the only solution the government has for its citizens is violence.
You are no longer free, the police can murder you with little question. You have no liberty, you can be arrested the moment an officer decides it is necessary. Your rights are removed, the government can check your accounts, your privacy, or your very person and genitalia any time they choose in the name of national security. Have you day in court, the government will process you like a piece of meat and you will nary find a judge able to stand against the might of a willfully secretive and corrupt government.
[ link to this | view in chronology ]
Re: 3rd Party Doctrine...
[ link to this | view in chronology ]
Re: Re: 3rd Party Doctrine...
I hope everyone that agreed with any form of torture gets their nails ripped out by the very folks they supported. Such sweet sweet irony!
[ link to this | view in chronology ]
Well I'm certain then...
Hey, it's out there in the open, in public, you can't expect privacy there.
[ link to this | view in chronology ]
To get that accomplished, we will need to elect senators and representatives who are regular people from within our communities, not the candidates of the Democrats or the Republicans. It won't happen overnight, but I'm hoping that American dissatisfaction with our government will make that possible.
[ link to this | view in chronology ]
Third party doctrine and coerced sharing of information
The government says I "voluntarily" disclose real time information about my electricity usage (signal analysis is so good they can determine exactly which light bulb you turn on in real time)
The electricity company told me I had no say in the matter. State law requires me to have a smart meter, and it is a crime to refuse, and people have been prosecuted for refusal. So under penalty of law, I "voluntarily" disclose personal information to a third party -- information whose only purpose is to be seized by the government and used for surveilance purposes. (And sold to marketers).
"Voluntary" my ass.
[ link to this | view in chronology ]
Re: Third party doctrine and coerced sharing of information
Hell you don't even have to buy food, or live for that matter.
They know they are wrong, but it's not going to stop them, for the same reason a liar will still lie about what they did even when you catch them red handed.
They have MENTAL ISSUES, and we keep voting the fucking bastards in that give these mental fucking idiots power!
[ link to this | view in chronology ]
A meaningless statement.
There is no way for the courts to pass decisions to congress when changes in technology make interpretation of the law difficult. It falls onto them to make the decision. Saying congress can change it if they want applies regardless of which decision they make and is nothing but a cop out.
[ link to this | view in chronology ]
Cheap Legal Justification to English translation
Courts arguing that the absurdly horrible 'Third Party Doctrine' applies to cell-phone location information are basically saying that carrying a cell-phone with you allows anyone with a badge to track your movements in real or near-real time, completely without a warrant, entirely at their discretion.
Or to put it another way: Owning a cell phone is no different than 'voluntarily' carrying a tracking device accessible by any group or agency that wants access to the data, without any restrictions or limits on their access beyond what they can get the phone provider to hand over.
Because clearly when people decide to carry a cell-phone the absolute first thought on their mind is how it can be used to track them by anyone with the desire to do so, and as such the act of continuing to carry a cell-phone after that point, without disabling the ability to track them is them giving the okay to that no-limits tracking. /s
[ link to this | view in chronology ]
Are there any wireless providers who do not retain location logs?
Alternately, are there cell phone proxy providers who sign up for accounts on behalf of users, and then sanitize the data that is passed along to the cell provider? Seems like a great service, and one I would gladly subscribe to.
[ link to this | view in chronology ]
What third party?
[ link to this | view in chronology ]
Re: What third party?
location information is not sent until you physically dial 911.
[ link to this | view in chronology ]
meta data is "voluntarily provided"
[ link to this | view in chronology ]