Ninth Circuit Enacts Miranda-Like Code for Computer Search and Seizure:
The Ninth Circuit's new computer search and seizure decision in United States v. Comprehensive Drug Testing is a truly astonishing decision. The majority opinion, by Judge Alex Kozinski, announces a laundry list of brand-new rules, introduced with no citations to any authority, that henceforth the government must follow when executing warrants for digital information. I can't recall having read anything quite like it, although it does bring to mind Miranda v. Arizona.
Judge Kozinski helpfully sums up the new rules the Ninth Circuit has announced as follows:
Also, I should add that I'm not sure what most of Judge Kozinski's new requirements actually mean. To pick one example, what does it mean to "waive plain view"? Is the idea that the government promises not to rely on the Fourth Amendment's plain view doctrine to admit evidence out of the scope of the warrant? I have never seen anything like that, and I don't know if such a waiver is even enforceable.
I'll probably blog a lot about this case over the next few days: This is the most free-wheeling, "look ma no hands" legal decision I've read in a long time, so there is a lot to digest.
Judge Kozinski helpfully sums up the new rules the Ninth Circuit has announced as follows:
When the government wishes to obtain a warrant to examine a computer hard drive or electronic storage medium in searching for certain incriminating files, or when a search for evidence could result in the seizure of a computer, see, e.g., United States v. Giberson, 527 F.3d 882 (9th Cir. 2008), magistrate judges must be vigilant in observing the guidance we have set out throughout our opinion, which can be summed up as follows:I should add that I think these rules are being announced as Fourth Amendment rules, although at first blush that's not entirely clear: The opinion is remarkably light on the sources of its authority.
1. Magistrates should insist that the government waive reliance upon the plain view doctrine in digital evidence cases. See p. 11876 supra.
2. Segregation and redaction must be either done by specialized personnel or an independent third party. See pp. 11880-81 supra. If the segregation is to be done by government computer personnel, it must agree in the warrant application that the computer personnel will not disclose to the investigators any information other than that which is the target of the warrant.
3. Warrants and subpoenas must disclose the actual risks of destruction of information as well as prior efforts to seize that information in other judicial fora. See pp. 11877-78, 11886-87 supra.
4. The government’s search protocol must be designed to uncover only the information for which it has probable cause, and only that information may be examined by the case agents. See pp. 11878, 11880-81 supra.
5. The government must destroy or, if the recipient may lawfully possess it, return non-responsive data, keeping the issuing magistrate informed about when it has done so and what it has kept. See p. 11881-82 supra.
Also, I should add that I'm not sure what most of Judge Kozinski's new requirements actually mean. To pick one example, what does it mean to "waive plain view"? Is the idea that the government promises not to rely on the Fourth Amendment's plain view doctrine to admit evidence out of the scope of the warrant? I have never seen anything like that, and I don't know if such a waiver is even enforceable.
I'll probably blog a lot about this case over the next few days: This is the most free-wheeling, "look ma no hands" legal decision I've read in a long time, so there is a lot to digest.
Related Posts (on one page):
- What Happens When Comprehensive Drug Testing Meets the New Rule 41?:
- An Interesting Consequence of United States v. Comprehensive Drug Testing:
- How the Ninth Circuit Tried To End Plain View for Computer Searches Without Ending Plain View for Computer Searches:
- Do Magistrate Judges Have a Power to Refuse To Sign Warrants Based on Expectations of How a Warrant Would be Executed?:
- Ninth Circuit Enacts Miranda-Like Code for Computer Search and Seizure:
- Ninth Circuit Hands Down En Banc Decision in United States v. Comprehensive Drug Testing:
- Oral Argument in United States v. Comprehensive Drug Testing:
- An Analysis of United States v. Comprehensive Drug Testing:
Would a federal court not have power to impose such rules as part of its inherent authority? (Absent congressional action to the contrary.)
With regard to waiving Plain View, let's say they are searching a computer based on a warrant for stolen credit card data. The investigators cannot click on the desktop icon that is labelled "Child Porn." Do you think that's what they are meaning?
If you walked into a house and saw child porn on the table, the Plain View exception would apply. But since you can't look inside a computer without a warrant, there is no Plain View inside the box.
Or maybe they mean you can't size the child porn on the table, when you walk in to seize the PC. I'll be lunch someone will try to interpret the ruling that way.
Wow.
Forensic computer tools are very good. They don't even have to boot the OS of the hard drive, because the OS can help hide the tools.
If you are looking for evidence of financial data misdealings, then you use the tools designed for analyzing financial data.
The tools to identify child porn are different and unless you can articulate a reason to run the tools, you don't have the right to run them anymore unless the warrant says that is what you are looking for.
If the Officer walking up to the computer screen sees Child Porn on the Screen or clearly labeled on the desktop, it was not in Plain View.
Computer Seizures should not be fishing expeditions and this decision clearly outlines rules so that they are not anymore.
This is wrong, I meant to say "Unless the Officer walking up to the computer screen sees Child Porn on the Screen or clearly labeled on the desktop, it was not in Plain View."
Now, suppose the government argues that the first method is difficult to do and that it would prefer to do the second method. Is it unreasonable to argue that a magistrate should still insist on scope limits?
Tell that to the folks who signed the Declaration of Independence.
Secondly, I doubt whether this is the kind of Supreme Court composition that will allow such a Miranda-like usurpation - even if it IS a good idea. ( I think Miranda was)
That will be a lot of people's first thought, I bet.
Fair enough. Let's change the hypothetical to the feds are looking for child porn and find a snuff film (solely involving adults, and including the owner of the computer).
I read the 9th Circuit's rules as saying the feds have to destroy that video and not use it as evidence.
(In English law there are a few old statutes that still apply, like the Statute of Frauds, and a few old cases, but in actual argument it is extremely rare to find something cited that is older than, say, 150 years.)
Which is why my remark was only partly in jest.
I wrote an article on that risk, and how courts should or should not respond to it: Orin S. Kerr, Searches and Seizures in a Digital World, 119 Harv. L. Rev. 531 (2005).
Reasonable question because I believe the tools to identify the snuff film would be similar to the tools to find child porn.
If the tool turned up the snuff film mixed into a variety of other illegal pornography including the child porn that the warrant specified, the Government might be able to argue plain view and get it admitted with the rest of the case.
However, if the search for child porn just resulted in the one illegal porn (ie snuff film) file, the computer expert might only be able to tell the investigator that "no files covered by your warrant were found"
Except in Constitutional Law.
computer search tools are sophisticated enough to search the contents of the files without ever seeing what the name of the file is.
They would do a search for financial records, find your spreadsheets because of their content and be able to turn them over to the investigator.
In the US, there are a dozen or so Courts of Appeals, and one of them has now made a bold proposal for a solution to this problem. Hopefully, other Courts of Appeals and District Courts (,State Supreme Courts, etc.) will take up the challenge and follow this proposal or discuss it and reject it, and ultimately it will come before the Supreme Court, and they will have the last say. The Common Law implies a great amount of autonomy for the Courts, including the power to take bold steps. (Brown v Board of Education, Donoghue v Stevenson, Hadley v Baxendale, etc.)
If that's not the kind of Common Law you want, rewrite the constitution to strike a different balance. In English law, all constitutional rulings can be overruled by simple Act of Parliament. In the Netherlands, the courts are forbidden to review the constitutionality of statutes, as they are in France (almost). But ever since Marbury v Madison, this is the way the system works in the US.
So what happens when they find evidence of other crimes in those papers? Isn't that exactly analogous to the computer search? Nothing in my file drawer is in plain view, as I (perhaps incorrectly) understand it. Neither is anything in a file on my computer.
If you have a warrant to search the closet for a gun, and you find a pound of coke, that's admissable, right ? same would apply to child porn on a puter when you're searching it for identity theft.
The idea is that when searching a computer, you have to "look" at everything, no matter what the warrant says. The real world analogy isn't that you search for a gun and find a pound of coke, but that you search for a gun and find a grain of coke, stuck in the carpet.
I think the analogy breaks down because of the sheer mass of information on computers and the fact that the Police were seizing the computers and data and taking them off site.
The Court based its decision on the same reasoning from an earlier case United States v. Tamura, 694 F.2d 591
(9th Cir. 1982). In that case, the police seized the contents of the file cabinet, paper records, and took them offsite for sorting. Back then the 9th said that a non-investigator should do the search and only provide the investigators the information covered by the warrant. The police were then required to return the rest of the files in a reasonable amount of time.
They just extended the same logic to computer searches. I believe they came down particularly hard because of the Governments abuse of the previous procedure.
Here is a case were the Government was searching a 3rd parties files for evidence of wrong doing by 10 specific individuals. The company offered to print out the records of those 10 people, but the Government seized all of their records, looked at the results of hundreds of other people and then claimed "plain view". They weren't plain view. They weren't on someones desk, the files weren't open, they were only in "Plain View" because the Government seized far more records than they needed to have the information that the warrant asked for.
Using the Government logic in this case, it would be easy to imagine a search warrant to Google for the contents of a specific persons email account and having the Government seize all of Googles data, pawing through it because "someone might be trying to hide it from them" and then building cases against thousands of other people that had nothing to do with their original case because the evidence was in "plain view".
There's a surprising number of people who seem to get all bent out of shape at the prospect of police uncovering the pornography stashes of drug dealers or white collar criminals hiding financial records.
The problem with this kind of thinking is that it leads to "hey, why not let the cops search your house without a warrant -- you haven't got anything to hide, have you?"
Searches are intrinsically humiliating. No one wants the cops rifling through their underwear drawer, learning what you take medications for, discovering your taste in (perfectly legal) pornography.
... A particular hazard re: computers is how easy it is for the cops to make illegal copies of your files without your being any the wiser, until they show up on the internet.
If I think Mr. Big is hiding evidence in Google's cloud, and get a warrant to search all google owned computers for evidence against Mr. B, and in the course of that search I find evidence against thousands of people in unrelated cases, is that all admissible?
You can argue that these cases weren't unrelated; the counterargument would be that the search uncovered evidence of others in the same profession committing the same crime. If my warrant alleges an accountant is cooking the books, does that rope in all the other crooked accountants out there in the cloud?
so bring me the probable cause that this particular defendent is using steganography and how your expert is going to uncover that.
If he uncovers the data your warrant asks for, you get it. If he doesn't recover the data your warrant asks for, you get nothing.
I don't have a problem with this rule.
1) I suspect this case has a better than even chance that certiorari will be granted, should the government seek it.
2) In the event cert. is either denied or not sought, unscrupulous federal agents will do "joint investigations" with their state counterparts and get state warrants, since the 9th Circuit has no authority over state courts.
3) If the gambit in my second thought is tried, and the feds seek a federal prosecution based on a state warrant, will this rule then be found applicable to state search warrants as well? As a follow up question, will THAT analysis change if it is primarily a state investigation turned over to the feds for prosecution for one reason or another?
Let's suppose that the police have probable cause and obtain a warrant to search a business, say an insurance company, which has thousands upon thousands of files in it. Physical, old-fashioned filing cabinets with lots of files. It is not at all controversial, in 4th Amendment law, that the police, with a warrant, can look in all of those files to determine whether they contain the particular incriminating document being sought and, if the police stumble upon child porn in the process, they can use that evidence against the individual as well.
Now suppose the same business, but instead of maintaining paper files, they scan documents into the computer and delete the originals. So they have a couple of hard drives full of the same data which would otherwise take up 100 filing cabinets. The folks advocating for a heightened standard for searching a computer are saying that a different rule should apply, just because that business chooses to store its data on computer rather than in paper files. That makes no sense at all.
Look at #5 of the court's "rules." The government must destroy non-responsive data or, if it is not contraband, return it to the owner. In other words, if the government DOES find kiddie porn in the computer, indavertently or otherwise, they must destroy it, and they can't use any of it against the criminal. Why?
If our primary concern is keeping the government from snooping into our lawful affairs, that interest is not going to be protected by some exclusionary rule. If the cops want to just get their jollies looking at the homemade porn of you and your girlfriend or wife last night, they're not going to care about whether it's excluded from evidence or not.
Moreover, plenty of police departments still aren't terribly sophisticated with computer searches. Even those that are usually tend to be quite short-staffed, with the computer techs overworked. This rule will be exceedingly burdensome on them, as they can't just look at the computer, but will have to work with computer techs to design specific search criteria which is broad enough to find the criminal data being sought but not so broad as to pull in whatever files you folks are so quite certain couldn't possibly contain any criminal data at all.
Can the police look in TIFF files? Those are image files, but it's a commonly used format for saving scans of multi-page documents (a bit archaic now, but still used by some programs). How about PDF files? Most people don't keep porn in those, I suspect, but they do keep documents and spreadsheets in that format for sharing with other people. Can the police look in those files?
This is really ridiculous.
(And as Don points out, there is an analogous precedent involving file cabinets.)
Under existing 9th Circuit Tamura procedures, the Police can't search your 100 file cabinets.
They can get a warrant and a non-investigator can go through the file cabinets and provide the investigators the information covered by the warrant. Thereby protecting the privacy of all the other records in your file cabinet.
The decision tries to extend this analogy to computers. Tamura procedures have been in place in the 9th Circuit since 1982. I don't know what the procedures are in other circuits.
In a typical case, I am given the discovery questions, or other instructions as to what is being sought. Then I examine the ENTIRE drive looking for anything responsive. I see all kinds of crap from illegal gambling, porn, embezzlement, tax fraud, insurance fraud...you name it. But if it is not responsive to the discovery, I do not report it to counsel or the court. As strange as it may seem, I take the privacy of the miscreants very seriously. Civil discovery is critical to justice, and if it is improperly exploited, it will be curtailed or evaded in ways that will negatively impact justice and fairness. So I protect privacy, in order to protect the proper use of discovery -- as an aid to justice.
I apologize for the ambiguity, I meant merely to reference the U.S. in my comment in response to the italicized quote. I don't presume to know enough to comment on the law in Britain, except a bit historically - and even then mostly how it has affected the U.S. :) Thanks for the info.
Not really because the technology allows you to search for anything you want instantaneously--like superman looking through walls. Everything's in plain view if you can see through walls.
I think the better way to frame this would be to say the great concern is about governmental overreach and the amount of power and hence potential for abuse that entails. There is plenty of legal information that if accessible can destroy businesses or political candidacies. So I view the 4th amendment as based less on the concern for individual rights, although that's certainly where the rubber hits the road, but more as a protection against overreach that can potentially threaten our fundamental societal structure-(capitalism, democracy). Technology has given the government unprecedented power, and I hope to hell that some of the older judges and legislators understand that. Seems pretty clear that some of the enlightened voices on this thread do not.
Would Nixon ever have lost an election if he could keyword search anybody's info? Should the court be mandating restrictions on the computer technology directly?
In the physical realm, they have to expend effort to do this. And they generally can't keep private information they don't have probable cause to seize on the spot. When the searches turn up nothing, the scope of the search is generally well-known and available to public scrutiny. In the electronic realm, they can trivially seize everything and retain it indefinitely. There is no practical way anyone else can know the scope of the search.
Defending Constitutional Rights is about having something to protect, not having something to hide.
Thanks very much-- that's helpful.
Think about this. Suppose your system used long pass phrases and suppose you used an incriminating one. Could we argue that handing over the phrase amounts to giving testimony? Just a thought.
If you have a comment about spelling, typos, or format errors, please e-mail the poster directly rather than posting a comment.
Comment Policy: We reserve the right to edit or delete comments, and in extreme cases to ban commenters, at our discretion. Comments must be relevant and civil (and, especially, free of name-calling). We think of comment threads like dinner parties at our homes. If you make the party unpleasant for us or for others, we'd rather you went elsewhere. We're happy to see a wide range of viewpoints, but we want all of them to be expressed as politely as possible.
We realize that such a comment policy can never be evenly enforced, because we can't possibly monitor every comment equally well. Hundreds of comments are posted every day here, and we don't read them all. Those we read, we read with different degrees of attention, and in different moods. We try to be fair, but we make no promises.
And remember, it's a big Internet. If you think we were mistaken in removing your post (or, in extreme cases, in removing you) -- or if you prefer a more free-for-all approach -- there are surely plenty of ways you can still get your views out.