Should Google location data be a tool for cops?
(2023/02/02)
- Reference: 1675303274
- News link: https://www.theregister.co.uk/2023/02/02/google_geofence_warrant/
- Source link:
Updated Evidence collected in a Google geofence dragnet warrant that's being used to prosecute a Virginia man accused of robbing a bank is unconstitutional and should be thrown out of court, according to the American Civil Liberties Union (ACLU) and eight federal public defenders.
The groups filed an amicus brief in [1]United States v. Chatrie , the first-ever geofence search case to reach a federal court of appeals, urging the judge to suppress this evidence, which they argue is illegal.
They've also asked the court to address the larger issue of whether geofence warrants violate the Fourth Amendment, which protects against unreasonable searches and seizures by the government.
[2]
"This will provide law enforcement officers and magistrate judges with much-needed guidance, and guard against future unconstitutional searches," according to the [3]court documents filed on Friday.
[4]
[5]
Google did not respond to The Register 's request to comment for this story.
While we don't know how many geofence warrants Google services on a regular basis, we do know that it received more than [6]87,000 subpoenas and search warrants in 2021 (it hasn't yet published info for 2022).
To catch a thief
In 2019, someone robbed a Virginia credit union at gunpoint and left with $195,000 from a bank safe. To help find the suspect, police served Google with a geofence warrant
The cops eventually returned to Google and asked for specific information about three users including names, subscriber information, email addresses, electronic devices, and phone numbers associated with the accounts.
A geofence in an urban area that has a diameter longer than three football fields will sweep in an overwhelming number of people and devices for which there is no probable cause to search
A few months later, police arrested 27-year-old Okello Chatrie, who was [8]charged with armed robbery.
In March, a federal judge ruled that the geofence warrant was too broad, and therefore violated Chatrie's constitutional protections
[10]
However, the judge refused to toss the evidence citing the " [11]good-faith exception " to the Fourth Amendment. This essentially says if the police believed in good faith that they were acting according to legal authority, then the evidence seized is admissible in court.
Good faith? Or illegal search?
And this is where the amicus brief comes into play. The ACLU and public defenders, in their court documents, challenge the judge's conclusion. They argue that "obvious" defects in the warrant, including its effect on the privacy of people with no connection to the crime, make it an illegal "general warrant," and as such, the good-faith exception does not apply.
"Geofence warrants like this one purport to authorize sweeping searches of an unidentified number of devices without particularized probable cause and without sufficient judicial oversight," the brief says.
"Moreover, any officer would logically understand that where, as here, a geofence in an urban area has a diameter longer than three football fields, it will sweep in an overwhelming number of people and devices for which there is no probable cause to search," it adds.
Despite becoming more common — police used a [12]geofence warrant in Minneapolis around the time of the George Floyd protests and, more recently, to identify people who [13]stormed the US Capitol on January 6, 2021 — the use of these types of location-data dragnets are increasingly worrisome to data privacy advocates and some lawmakers alike.
[14]To catch a thief, go to Google with a geofence warrant – and it will give you all the details
[15]NSA asks Congress to let it get on with that warrantless data harvesting, again
[16]Hey, online pharmacies: Quit spreading around everyone's data already
[17]Here's US Homeland Security collaring a suspected arsonist after asking Google for the IP addresses of folks who made a specific search
EFF has also filed an [18]amicus brief in the Chatrie case, and New York lawmakers last year [19]proposed a bill to ban geofence reverse keyword search warrants. Tech giants including Google, Amazon, Microsoft and Meta have said they [20]support a ban on these types of data-trawling techniques.
There's also a concern that these types of reverse location searches will be used to build criminal cases against women seeking abortions in states where the procedure is no longer legal.
[21]
Washington state lawmakers have taken up this cause, and bills introduced in both the House and Senate would, among other things, make it illegal to utilize a geofence around a facility that provides health care services
The proposed Washington law would also [23]make it illegal for period-tracking apps or any other website to sell consumers' health data while also making it harder for them to collect and share this personal information. ®
Updated to add
A Google spokesperson sent us the following statement:
"As with all law enforcement demands, we have a rigorous process that is designed to protect the privacy of our users, including by pushing back on overly broad requests, while supporting the important work of law enforcement."
The company declined to clarify if it supported the ban on geofence warrants. Make of that what you will.
Get our [24]Tech Resources
[1] https://www.nacdl.org/Content/United-States-v-Chatrie,-No-3-19-cr-130-(E-D-Va-)
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.aclu.org/legal-document/brief-amici-curiae-aclu-aclu-virginia-and-eight-federal-public-defender-offices
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://transparencyreport.google.com/user-data/overview?hl=en_US&user_requests_report_period=series:requests,accounts;authority:US;time:&lu=user_requests_report_period
[7] https://www.nacdl.org/getattachment/fc0182fd-fe6c-452f-b31f-d7a63acc135a/edva-geofence-warrant.pdf
[8] https://www.justice.gov/usao-edva/pr/man-indicted-armed-robbery-credit-union
[9] https://s3.documentcloud.org/documents/21338805/2022-3-3-opinion.pdf
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://www.law.cornell.edu/wex/good_faith_exception_to_exclusionary_rule
[12] https://techcrunch.com/2021/02/06/minneapolis-protests-geofence-warrant/
[13] https://www.wired.com/story/capitol-riot-google-geofence-warrant/
[14] https://www.theregister.com/2020/01/18/google_geofence_warrant/
[15] https://www.theregister.com/2023/01/14/in_brief_security/
[16] https://www.theregister.com/2023/01/20/online_pharmacies_data_sharing/
[17] https://www.theregister.com/2020/10/09/google_search_arrest/
[18] https://www.eff.org/document/us-v-chatrie-nyueff-amicus-brief-support-appellant-fourth-circuit
[19] https://www.nysenate.gov/legislation/bills/2021/a84/amendment/a
[20] https://www.reformgovernmentsurveillance.com/rgs-urges-adoption-of-new-yorks-reverse-location-search-prohibition-act/
[21] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[22] https://lawfilesext.leg.wa.gov/biennium/2023-24/Pdf/Bills/House%20Bills/1155.pdf?q=20230117124001
[23] https://www.theregister.com/2023/01/18/washington_period_tracking_apps/
[24] https://whitepapers.theregister.com/
The groups filed an amicus brief in [1]United States v. Chatrie , the first-ever geofence search case to reach a federal court of appeals, urging the judge to suppress this evidence, which they argue is illegal.
They've also asked the court to address the larger issue of whether geofence warrants violate the Fourth Amendment, which protects against unreasonable searches and seizures by the government.
[2]
"This will provide law enforcement officers and magistrate judges with much-needed guidance, and guard against future unconstitutional searches," according to the [3]court documents filed on Friday.
[4]
[5]
Google did not respond to The Register 's request to comment for this story.
While we don't know how many geofence warrants Google services on a regular basis, we do know that it received more than [6]87,000 subpoenas and search warrants in 2021 (it hasn't yet published info for 2022).
To catch a thief
In 2019, someone robbed a Virginia credit union at gunpoint and left with $195,000 from a bank safe. To help find the suspect, police served Google with a geofence warrant
[7]PDF
requesting location data for every Google device user within 150 meters of the bank an hour before and after the robbery.The cops eventually returned to Google and asked for specific information about three users including names, subscriber information, email addresses, electronic devices, and phone numbers associated with the accounts.
A geofence in an urban area that has a diameter longer than three football fields will sweep in an overwhelming number of people and devices for which there is no probable cause to search
A few months later, police arrested 27-year-old Okello Chatrie, who was [8]charged with armed robbery.
In March, a federal judge ruled that the geofence warrant was too broad, and therefore violated Chatrie's constitutional protections
[9]PDF
.[10]
However, the judge refused to toss the evidence citing the " [11]good-faith exception " to the Fourth Amendment. This essentially says if the police believed in good faith that they were acting according to legal authority, then the evidence seized is admissible in court.
Good faith? Or illegal search?
And this is where the amicus brief comes into play. The ACLU and public defenders, in their court documents, challenge the judge's conclusion. They argue that "obvious" defects in the warrant, including its effect on the privacy of people with no connection to the crime, make it an illegal "general warrant," and as such, the good-faith exception does not apply.
"Geofence warrants like this one purport to authorize sweeping searches of an unidentified number of devices without particularized probable cause and without sufficient judicial oversight," the brief says.
"Moreover, any officer would logically understand that where, as here, a geofence in an urban area has a diameter longer than three football fields, it will sweep in an overwhelming number of people and devices for which there is no probable cause to search," it adds.
Despite becoming more common — police used a [12]geofence warrant in Minneapolis around the time of the George Floyd protests and, more recently, to identify people who [13]stormed the US Capitol on January 6, 2021 — the use of these types of location-data dragnets are increasingly worrisome to data privacy advocates and some lawmakers alike.
[14]To catch a thief, go to Google with a geofence warrant – and it will give you all the details
[15]NSA asks Congress to let it get on with that warrantless data harvesting, again
[16]Hey, online pharmacies: Quit spreading around everyone's data already
[17]Here's US Homeland Security collaring a suspected arsonist after asking Google for the IP addresses of folks who made a specific search
EFF has also filed an [18]amicus brief in the Chatrie case, and New York lawmakers last year [19]proposed a bill to ban geofence reverse keyword search warrants. Tech giants including Google, Amazon, Microsoft and Meta have said they [20]support a ban on these types of data-trawling techniques.
There's also a concern that these types of reverse location searches will be used to build criminal cases against women seeking abortions in states where the procedure is no longer legal.
[21]
Washington state lawmakers have taken up this cause, and bills introduced in both the House and Senate would, among other things, make it illegal to utilize a geofence around a facility that provides health care services
[22]PDF
.The proposed Washington law would also [23]make it illegal for period-tracking apps or any other website to sell consumers' health data while also making it harder for them to collect and share this personal information. ®
Updated to add
A Google spokesperson sent us the following statement:
"As with all law enforcement demands, we have a rigorous process that is designed to protect the privacy of our users, including by pushing back on overly broad requests, while supporting the important work of law enforcement."
The company declined to clarify if it supported the ban on geofence warrants. Make of that what you will.
Get our [24]Tech Resources
[1] https://www.nacdl.org/Content/United-States-v-Chatrie,-No-3-19-cr-130-(E-D-Va-)
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.aclu.org/legal-document/brief-amici-curiae-aclu-aclu-virginia-and-eight-federal-public-defender-offices
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://transparencyreport.google.com/user-data/overview?hl=en_US&user_requests_report_period=series:requests,accounts;authority:US;time:&lu=user_requests_report_period
[7] https://www.nacdl.org/getattachment/fc0182fd-fe6c-452f-b31f-d7a63acc135a/edva-geofence-warrant.pdf
[8] https://www.justice.gov/usao-edva/pr/man-indicted-armed-robbery-credit-union
[9] https://s3.documentcloud.org/documents/21338805/2022-3-3-opinion.pdf
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[11] https://www.law.cornell.edu/wex/good_faith_exception_to_exclusionary_rule
[12] https://techcrunch.com/2021/02/06/minneapolis-protests-geofence-warrant/
[13] https://www.wired.com/story/capitol-riot-google-geofence-warrant/
[14] https://www.theregister.com/2020/01/18/google_geofence_warrant/
[15] https://www.theregister.com/2023/01/14/in_brief_security/
[16] https://www.theregister.com/2023/01/20/online_pharmacies_data_sharing/
[17] https://www.theregister.com/2020/10/09/google_search_arrest/
[18] https://www.eff.org/document/us-v-chatrie-nyueff-amicus-brief-support-appellant-fourth-circuit
[19] https://www.nysenate.gov/legislation/bills/2021/a84/amendment/a
[20] https://www.reformgovernmentsurveillance.com/rgs-urges-adoption-of-new-yorks-reverse-location-search-prohibition-act/
[21] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Y9tDdND6s08-J3y6GuDbKQAAAI8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[22] https://lawfilesext.leg.wa.gov/biennium/2023-24/Pdf/Bills/House%20Bills/1155.pdf?q=20230117124001
[23] https://www.theregister.com/2023/01/18/washington_period_tracking_apps/
[24] https://whitepapers.theregister.com/
Probable Cause
martinusher
Just being in an area is not usually probable cause (unless its something like a January 6th riot). So its really knowing that such and such a device was in this area, was used by so and so and combined with other evidence makes a case. Just because you're a random piece in a evidence puzzle doesn't mean that you're relevant to an investigation -- investigators discard numerous apparent leads before they hit on the right one. (Things only go wrong when they start with a suspect, a piece of flimsy or non existent evidence and then work back from there. But then you don't need technology to fit someone up, in fact its a positive impediment should it prove your fit wasn't involved in the crime.)
Re: Probable Cause
Yet Another Anonymous coward
But you don't have to convince a logical el'reg reader but just a jury - These are people of the land. The common clay of the new West. You know… morons.
And "Dur Computer says he was there" goes a long way to convincing somebody
Why Google?
That only works if it's an Android phone with location services on.
If they ask the phone company they will have cell location which can't be disabled, assuming you want your phone to be a phone, and the cell phone companies happily hand over location data with no warrant