What's unconstitutional about Google keyword search warrants? Nothing, says Colorado Supreme Court
(2023/10/19)
- Reference: 1697670007
- News link: https://www.theregister.co.uk/2023/10/18/google_keyword_search_warrants/
- Source link:
The Colorado Supreme Court has ruled that police can use Google search histories to identify suspects in criminal investigations, leading digital rights orgs to warn the ruling has broad privacy implications for anyone using search engines.
The case, People v. Seymour, involved a 2020 act of arson that killed five people in a Denver home. When the Denver Police Department couldn't identify suspects, investigators sent Google a search warrant requesting information about any and all users who searched for nine variations of the home's address over a two-week period prior to the fire.
Police can start prosecuting us based on our thoughts and our idle curiosities
Google refused to hand over the data on the grounds that the warrant didn't comply with its privacy policy
Google and the police argued that point for some time. The Department eventually asked Google to turn over user data and the search giant refused, but eventually produced details of 61 searches made by eight accounts, including the IP addresses used. Five of these were based in Colorado, and in a subsequent warrant, Google gave the Denver PD basic subscriber information for the five accounts.
Using this data, police identified two suspects, aged 15 and 16 at the time of the incident. One of the suspects, Gavin Seymour, asked the court to throw out the evidence against him because it came from a reverse-keyword warrant. This, according to his attorneys, was unconstitutional because it violated the Fourth Amendment ban on unreasonable searches and seizures.
[2]
On Monday, the Colorado court Supreme Court upheld the warrant and ruled that law enforcement acted in good faith
[4]
[5]
The court also recognized that users have a reasonable expectation of privacy in their search results, and that such expectation applies even to results that do not include identifying information about the user.
In the four-justice majority opinion, the court stated the decision should not be interpreted as a "broad proclamation about the propriety of reverse-keyword warrants."
[6]
"Our finding of good faith today neither condones nor condemns all such warrants in the future," the justices said. "If dystopian problems emerge, as some fear, the courts stand ready to hear argument regarding how we should rein in law enforcement's use of rapidly advancing technology. Today, we proceed incrementally based on the facts before us."
[7]Should Google location data be a tool for cops?
[8]One year after Roe v Wade overturned and 'uterus surveillance' looks grim
[9]Mozilla calls cars from 25 automakers 'data privacy nightmares on wheels'
[10]California's Governor Newsom signs laws on right to repair and data deletion
Digital dragnet tool
The Electronic Frontier Foundation (EFF), which filed [11]two amicus briefs in support of Seymour's appeal, warned that the Colorado Supreme Court's decision is worrisome for several reasons.
EFF has long argued that keyword warrants are unconstitutional because they represent a digital dragnet for law enforcement to scoop up massive amounts of data — in this case queries by one billion Google users — with no real evidence against them.
Further, the court "also did not provide any direction for lower courts that are going to have to address these warrants going forward," EFF General Counsel Jennifer Lynch told The Register , adding that this will likely result in a "piecemeal approach" to keyword warrants.
Our finding neither condones nor condemns all such warrants in the future
Lynch added her fears that innocent people may be caught in the dragnet.
"All of us perform thousands of searches using search engines every day," Lynch said. "And if the police can ask Google for information on everybody who's searched for any term, they can start prosecuting us based on our thoughts and our idle curiosities."
The stakes are especially high in US States that have [12]outlawed abortions or restrict gender-affirming care for trans-kids, according to Lynch.
[13]
"People who are searching for an abortion, searching for [hormone-blocking drug] [14]mifepristone , or gender-affirming care for the children — they're going to do that using a search engine," she said. "And if the police can just get access to this information, I think we'll start to see a lot more very questionable prosecutions."
Google's role?
Google bears some responsibility to its users, too, Lynch said. "Google could not store this data in a way that it is accessible for the police," she said.
"The only keyword search warrants that we have heard of that have been successful for the police have been to Google. People do use other search engines. But the police are not asking for information from those search engines, because they're not storing the data in a way that can be identified and released to the police. So, I think Google shares a lot of responsibility in this case, because they make it easy for the police to get access to our private search information."
Google has long maintained that it has no problem [15]denying overly broad or unlawful law enforcement demands for data, especially those concerning sensitive [16]health information .
When asked about the Colorado court's opinion, a Google spokesperson told The Register : "It's important that the Colorado Supreme Court recognized the significant privacy and First Amendment interests implicated by keyword searches. With all law enforcement demands, including reverse warrants, we have a rigorous process designed to protect the privacy of our users while supporting the important work of law enforcement." ®
Get our [17]Tech Resources
[1] https://regmedia.co.uk/2023/10/18/google_declaration_people_v_seymour.pdf
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.courts.state.co.us/userfiles/file/Court_Probation/Supreme_Court/Opinions/2023/23SA12.pdf
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2023/02/02/google_geofence_warrant/
[8] https://www.theregister.com/2023/06/27/post_dobbs_uterus_surveillance/
[9] https://www.theregister.com/2023/09/06/mozilla_vehicle_data_privacy/
[10] https://www.theregister.com/2023/10/11/newsom_repair_delete_laws/
[11] https://www.eff.org/deeplinks/2023/10/colorado-supreme-court-upholds-keyword-search-warrant
[12] https://www.theregister.com/2023/06/27/post_dobbs_uterus_surveillance/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[14] https://www.theregister.com/2023/01/20/online_pharmacies_data_sharing/
[15] https://policies.google.com/terms/information-requests?hl=en-US
[16] https://blog.google/technology/safety-security/protecting-peoples-privacy-on-health-topics/
[17] https://whitepapers.theregister.com/
The case, People v. Seymour, involved a 2020 act of arson that killed five people in a Denver home. When the Denver Police Department couldn't identify suspects, investigators sent Google a search warrant requesting information about any and all users who searched for nine variations of the home's address over a two-week period prior to the fire.
Police can start prosecuting us based on our thoughts and our idle curiosities
Google refused to hand over the data on the grounds that the warrant didn't comply with its privacy policy
[1]PDF
, court documents show.Google and the police argued that point for some time. The Department eventually asked Google to turn over user data and the search giant refused, but eventually produced details of 61 searches made by eight accounts, including the IP addresses used. Five of these were based in Colorado, and in a subsequent warrant, Google gave the Denver PD basic subscriber information for the five accounts.
Using this data, police identified two suspects, aged 15 and 16 at the time of the incident. One of the suspects, Gavin Seymour, asked the court to throw out the evidence against him because it came from a reverse-keyword warrant. This, according to his attorneys, was unconstitutional because it violated the Fourth Amendment ban on unreasonable searches and seizures.
[2]
On Monday, the Colorado court Supreme Court upheld the warrant and ruled that law enforcement acted in good faith
[3]PDF
.[4]
[5]
The court also recognized that users have a reasonable expectation of privacy in their search results, and that such expectation applies even to results that do not include identifying information about the user.
In the four-justice majority opinion, the court stated the decision should not be interpreted as a "broad proclamation about the propriety of reverse-keyword warrants."
[6]
"Our finding of good faith today neither condones nor condemns all such warrants in the future," the justices said. "If dystopian problems emerge, as some fear, the courts stand ready to hear argument regarding how we should rein in law enforcement's use of rapidly advancing technology. Today, we proceed incrementally based on the facts before us."
[7]Should Google location data be a tool for cops?
[8]One year after Roe v Wade overturned and 'uterus surveillance' looks grim
[9]Mozilla calls cars from 25 automakers 'data privacy nightmares on wheels'
[10]California's Governor Newsom signs laws on right to repair and data deletion
Digital dragnet tool
The Electronic Frontier Foundation (EFF), which filed [11]two amicus briefs in support of Seymour's appeal, warned that the Colorado Supreme Court's decision is worrisome for several reasons.
EFF has long argued that keyword warrants are unconstitutional because they represent a digital dragnet for law enforcement to scoop up massive amounts of data — in this case queries by one billion Google users — with no real evidence against them.
Further, the court "also did not provide any direction for lower courts that are going to have to address these warrants going forward," EFF General Counsel Jennifer Lynch told The Register , adding that this will likely result in a "piecemeal approach" to keyword warrants.
Our finding neither condones nor condemns all such warrants in the future
Lynch added her fears that innocent people may be caught in the dragnet.
"All of us perform thousands of searches using search engines every day," Lynch said. "And if the police can ask Google for information on everybody who's searched for any term, they can start prosecuting us based on our thoughts and our idle curiosities."
The stakes are especially high in US States that have [12]outlawed abortions or restrict gender-affirming care for trans-kids, according to Lynch.
[13]
"People who are searching for an abortion, searching for [hormone-blocking drug] [14]mifepristone , or gender-affirming care for the children — they're going to do that using a search engine," she said. "And if the police can just get access to this information, I think we'll start to see a lot more very questionable prosecutions."
Google's role?
Google bears some responsibility to its users, too, Lynch said. "Google could not store this data in a way that it is accessible for the police," she said.
"The only keyword search warrants that we have heard of that have been successful for the police have been to Google. People do use other search engines. But the police are not asking for information from those search engines, because they're not storing the data in a way that can be identified and released to the police. So, I think Google shares a lot of responsibility in this case, because they make it easy for the police to get access to our private search information."
Google has long maintained that it has no problem [15]denying overly broad or unlawful law enforcement demands for data, especially those concerning sensitive [16]health information .
When asked about the Colorado court's opinion, a Google spokesperson told The Register : "It's important that the Colorado Supreme Court recognized the significant privacy and First Amendment interests implicated by keyword searches. With all law enforcement demands, including reverse warrants, we have a rigorous process designed to protect the privacy of our users while supporting the important work of law enforcement." ®
Get our [17]Tech Resources
[1] https://regmedia.co.uk/2023/10/18/google_declaration_people_v_seymour.pdf
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.courts.state.co.us/userfiles/file/Court_Probation/Supreme_Court/Opinions/2023/23SA12.pdf
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2023/02/02/google_geofence_warrant/
[8] https://www.theregister.com/2023/06/27/post_dobbs_uterus_surveillance/
[9] https://www.theregister.com/2023/09/06/mozilla_vehicle_data_privacy/
[10] https://www.theregister.com/2023/10/11/newsom_repair_delete_laws/
[11] https://www.eff.org/deeplinks/2023/10/colorado-supreme-court-upholds-keyword-search-warrant
[12] https://www.theregister.com/2023/06/27/post_dobbs_uterus_surveillance/
[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/personaltech&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZTCp5r8yYb4b2ftM-K@6zgAAAlA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[14] https://www.theregister.com/2023/01/20/online_pharmacies_data_sharing/
[15] https://policies.google.com/terms/information-requests?hl=en-US
[16] https://blog.google/technology/safety-security/protecting-peoples-privacy-on-health-topics/
[17] https://whitepapers.theregister.com/
Ideasource
I can see this as a use for AI.
Don't store the data instead feed it to an AI. Good enough for market statistics, but not submissible in court because AI doesn't know anything it just puts things together that sound good to it it's algorithm that may or may not prove to be true or false.
Privacy
Dimmer
I recently was asked to speak to a high school class about careers.
I told them that they will never know privacy and I apologize to them.
Seeing the perplexing look, I explained.
Holding up my phone, I told them that my generation created the technology used by their parents generation to create it. We are the reason that you will never know what privacy is.
My parents gen sent someone to the moon. My generation went from tubes to phones the size of watches.
Now, What the hell is your generation going build?
Plausible deniability
You can't find anything useful using Google search apart from corporate news feeds, propaganda and malware.
So now you can just claim you typed in nonsense hoping to get lucky.