Court Says Password Protection Doesn't Restore An Abandoned Phone's Privacy Expectations
from the 1.-throw-in-ditch-2.-go-to-Mexico-3.-move-to-suppress? dept
In a decision reached recently by a Florida federal court, a person has no expectation of privacy in a phone that was thrown away. [h/t Orin Kerr] In this case, the defendant was sought in connection with a missing child investigation. He was questioned by police and released. A few days later (when he was supposed to be meeting detectives at his house), the defendant (allegedly) went for a walk in the rain and got lost. He discovered his phone was wet and, according to his testimony, threw the phone in a ditch because he believed the wet phone was completely useless.
The defendant's phone was recovered by someone else. The police traced the phone back to the phone's (temporary) new owner. The phone was then subjected to a warrantless search. Police were hoping to find information about the missing child as phone records obtained earlier showed the defendant's phone had been in the area. (They also exposed inconsistencies in the defendant's assertions about where he had and hadn't been.)
Instead, the police found something else: child porn. The defendant moved to have the evidence suppressed, arguing that while he may have abandoned the phone, he did not abandon his privacy interest in the phone's [contents]. From the decision [PDF]:
Although the abandonment doctrine has long been in place, Defendant argues that this case does not align with current precedent. This is because, according to him, the item discarded was a passcode-locked cell phone. To be clear, Defendant concedes that he ditched the physical cell phone on May 31. But he argues that he still had a reasonable expectation of privacy in the phone’s contents because the phone was password-protected and because he would not have discarded it but for his belief that the phone was broken. (Doc. 56 at 13). In other words, he asserts that even if the phone worked when he discarded it, the contents were not accessible without his passcode, and thus he maintains standing to challenge the search of his phone’s contents.
The court calls this argument "novel," and it sort of is. As the decision states, abandoned items -- including containers -- lose their privacy interest immediately. But not every court has seen it this way when it comes to password-protected cellphones. The court notes the Supreme Court's Riley decision, which instituted a warrant requirement for cellphone searches because the vast amount of information stored in today's cellphones makes them more analogous to a person's house than the contents of a person's pockets (as the government argued).
But the argument isn't completely novel, as the Florida state appeals court arrived at the opposite conclusion late last year.
While we acknowledge that the physical cell phone in this case was left in the stolen vehicle by the individual, and it was not claimed by anyone at the police station, its contents were still protected by a password, clearly indicating an intention to protect the privacy of all of the digital material on the cell phone or able to be accessed by it. Indeed, the password protection that most cell phone users place on their devices is designed specifically to prevent unauthorized access to the vast store of personal information which a cell phone can hold when the phone is out of the owner’s possession.
The court here cites the state court decision, but ultimately abandons it. (It has no precedential value in a federal court anyway, seeing as the state court decision didn't rely on Florida state law, but rather a Supreme Court decision.) As it notes, that decision was one of several related to abandoned cellphones, but it was the only one to arrive at this expectation of privacy conclusion.
Defendant urges this Court to adopt the logic of K.C. and the dissenting opinions in Brown and Samalia. The Court respectfully declines to do so. To start, K.C. is not binding on this Court. And for the reasons previously stated, the Court does not agree that the reasoning in Riley for why cell phones should not be subjected to a warrantless search incident to arrest applies to abandoned cell phones with or without a passcode. Recall that the Supreme Court was concerned about the capacity to store private information on a cell phone that far exceeds that of other physical objects. But abandonment is about intent, and when a person abandons a physical object, he maintains no right of privacy in the contents. This is fundamentally different from a search incident to arrest, and the decision in K.C. does nothing to persuade this Court otherwise. Also telling, the Supreme Court in Riley did not require law enforcement officers to obtain a warrant to search every phone that falls into their possession.
The court goes on to note that the phone being thrown in a ditch simply for being wet isn't a very credible assertion. First, the defendant made no effort to retrieve his phone, not even after he knew who had recovered it and that it was in working condition. Other testimony indicated several calls went unanswered before the phone was literally ditched by the defendant because it was too wet to use. And the court gives testimonial credit as to the phone's condition to the person who found the phone since he didn't know the defendant or have any details about the investigation. Then there's the defendant's apparent attempt to leave the country, which was uncovered by investigators.
In contrast to the state court ruling the federal court has no obligation to adopt, the defendant's phone wasn't merely left behind, but rather an affirmative effort made by the defendant to distance himself from his cellphone by throwing it into a ditch while "lost" in the rain (and apparently avoiding detectives coming to speak to him).
Chances are, this might have gone a little more the defendant's way if he hadn't tossed his phone out, immediately replaced it, and hightailed it towards Mexico. The court doesn't sound like it's making an across-the-board ruling on cellphone privacy, but rather responding to the circumstances of this particular case and the defendant's lack of credibility.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: 4th amendment, abandoned phone, passwords, privacy
Reader Comments
Subscribe: RSS
View by: Time | Thread
He discovered his phone was wet and, according to his testimony, threw the phone in a ditch because he believed the wet phone was completely useless.
Why did he make this statement? His case would have been infinitely stronger had he stated that he lost the phone ("accidentally"). Was there some unrelated reason he wanted to make it clear he threw it away?
Alternatively, I guess he could just have had the worst legal representation ever.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
The defendant's argument is that the phone had a passcode, so he expected privacy. He freely admits that he tossed a locked container of information with no intent to return for it.
If he held that it was lost or stolen, he could claim an expectation of privacy. But if he gave the statement of tossing the phone prior to it being turned over to forensics, it seems reasonable to hold it was abandoned.
[ link to this | view in chronology ]
Re: Re:
That doesn't seem to have been raised in court, however, and I'm not sure there aren't valid reasons for the court to reject that line of reasoning in any case.
[ link to this | view in chronology ]
Bad cases make bad precedent
[ link to this | view in chronology ]
Re: Bad cases make bad precedent
nuff said...
[ link to this | view in chronology ]
Re: Bad cases make bad precedent
This would be a bad case if he had left the phone at home and the cops took it. But he states he tossed the phone and my common sense says he abandoned it.
[ link to this | view in chronology ]
What about a stolen phone??
If so, now we have the cops asking criminals to steal the phone, then they can open it up sans warrant.
Seems like business is booming in the "Police hiring criminals to bypass the Constitution" business.
[ link to this | view in chronology ]
Re: What about a stolen phone??
[ link to this | view in chronology ]
Re: Re: What about a stolen phone??
Isn't the government using data collected by third parties sans warrant already?
Replace "criminals" with "Verizon" or "AT&T" - which in this case is synonymous.
[ link to this | view in chronology ]
Re: What about a stolen phone??
As long as you hold that you always maintained an interest in the phone, this ruling could be used to protect you.
And even if the cops took your phone from you, the voluntary requirement would hold as well and you could maintain an expectation of privacy because you have an expectation of getting the phone back.
[ link to this | view in chronology ]
Re: What about a stolen phone??
[ link to this | view in chronology ]
Re: What about a stolen phone??
Stolen isn't Abandoned
So this ruling may not apply in a case where a stolen phone was then hacked open by the police. There's still an expectation of privacy.
[ link to this | view in chronology ]
analog analogy
[ link to this | view in chronology ]
Re: analog analogy
[ link to this | view in chronology ]
Re: Re: analog analogy
Ulimately, is "reduce/reuse/recycle" even legal, or is it an invasion of privacy?
[ link to this | view in chronology ]
Re: Re: Re: analog analogy
Except that no one is claiming any obligation to preserve people's abandoned objects or any data on them. If your thing is melting down locked objects from junkyards, knock yourself out. Similarly, re-using or recycling various media isn't in relevant to the discussion here, since the government isn't searching the items as part of any recycling process.
The question is whether the government should treat any object that it can claim as "abandoned" as an opportunity for a fishing expedition. Keep two things in mind. First, the objects in question were locked and were understood (incorrectly in this case) to not have retrievable data on them. Second, this incentivizes government claims that something was abandoned whether or not they knew that it really was.
[ link to this | view in chronology ]
It's amazing what one of these "rock" things will do for your privacy when applied correctly.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
[ link to this | view in chronology ]
In other words, if one thinks the media is effectively destroyed, doesn't that mean one can reasonably expect that no one can access the data on it? This isn't a trivial issue and people's ignorance and misconceptions about technology play an important role here. The fact that Techdirt readers are more technically aware than average doesn't mean that the law shouldn't make some allowance for the average person's technical sophistication, or lack thereof.
Meanwhile, what data is recoverable from "abandoned" media changes with technology. Do you shred your paper documents? Is that enough? I am certain that software either exists or could be written that would take high resolution images of appropriately spread out shreddings and reassemble them into a document. So, when the cops troll through someone's trash without a warrant and use that software to recreate a document that is used against someone in court, are we going to be so quick to say that the lack of warrant was okay because the document was abandoned and there is no expectation of privacy for it?
Similarly, there is technology that can recover or partially recover erased data from magnetic media, even when it has been overwritten. If you toss out an old laptop, even after long formatting its drive, is it okay for the court to rule that you had no expectation of privacy and that the government didn't need a warrant to fish for evidence on your old device?
[ link to this | view in chronology ]
Response to: freedomfan on Jun 2nd, 2017 @ 10:01am
[ link to this | view in chronology ]
Re: Response to: freedomfan on Jun 2nd, 2017 @ 10:01am
I do not think a cellphone is such an object.
A truly bricked cellphone is merely a physical object.
Any cellphone that powers up is very much unlike a safe: That cellphone's contents are not physical.
In this case the actually expectation-of-privacy question is "when a person abandons a software object".
Therefore I suggest that law enforcement departments ought not be searching through an abandoned cellphone (hard disk) without first convincing a court that it is permitted for this specific person's device.
[ link to this | view in chronology ]
Re: Response to: freedomfan on Jun 2nd, 2017 @ 10:01am
Of course even after you purchase a movie or a music CD you seem to take offense when the consumer reviews it because fair use doesn't exist in your world, despite the object no longer being in the artist's control. Why is that? It's almost like your definition of physical ownership doesn't mean jack when held up to closer scrutiny.
[ link to this | view in chronology ]