Security

US border cops must get warrants to search phones, devices – EFF

Privacy warriors' legal battle to play out before appeals court


The controversial topic of electronic device searches at the US border, and whether customs agents should be required to get warrants before sucking data off them, is heading to the Fifth Circuit Court of Appeals.

For several years the legal issues surrounding what border agents are entitled to do with your electronic devices has been under scrutiny, but a sudden uptick in cases in 2017 where people had their devices taken away has spun a spotlight on the issue.

In a legal filing this week, the Electronic Frontier Foundation (EFF) argues that customs officers should be required to get warrants before searching people's mobile phones (and iPads, laptops etc) in the same way they are typically required to do in the rest of the country.

"Our cell phones and laptops provide access to an unprecedented amount of detailed, private information, often going back many months or years, from emails to our coworkers to photos of our loved ones and lists of our closest contacts," notes EFF attorney Sophia Cope. "This is light years beyond the minimal information generally contained in other kinds of personal items we might carry in our suitcases."

She argues that it is "time for courts and the government to acknowledge that examining the contents of a digital device is highly intrusive, and Fourth Amendment protections should be strong, even at the border."

And there is some evidence that the US government is doing exactly that. Proposed legislation put forward in April in Congress – the Protecting Data at the Border Act – would require a warrant signed by a judge for border agents to go through digital devices and would introduce a four-hour time limit for detaining Americans at the border.

No cloud, you hear?

That legislation has not progressed very far, but it did spark a letter from the Acting Commissioner of the US Customs and Border Protection Agency, Kevin McAleenan, who assured Congress that border searches do not extend to data stored on remote servers.

However that approach is under question in the very case going forward at the Fifth Circuit – that of Maria Isabel Molina-Isidoro.

Molina-Isidoro had her mobile phone seized and manually searched at the Texas border, and the data that the customs agent found then resulted in her being prosecuted for attempting to smuggle methamphetamine into the country.

But, the EFF notes, the information used to prosecute her was not held on the device itself. It was instead contained in two apps – Uber and WhatsApp – whose data was held in the cloud.

"There is no indication that border agents put her phone in airplane mode or otherwise disconnected it from the Internet when they accessed these apps," the filing notes.

This is obviously an area of law that has been massively complicated by modern technology.

It is widely acknowledged internationally that different laws apply at a country's borders – for pretty obvious reasons. So while people may be very unhappy about border agents going through their luggage, everyone pretty much agrees that it is a necessary right.

Electronic devices are very different from suitcases however – they contain enormous amounts of personal data that a government agent would simply never be able to discern from a physical suitcase.

Fourth Amendment

The Supreme Court has already recognized the difference and decided that the police are required to obtain a warrant to search the contents of the phone of someone who has been arrested – because of the Fourth Amendment about unreasonable searches. Although the issue of location data is still up in the air. The EFF wants that same rule applied to phones (and laptops) at the border.

But again, the border comes with different rules. The idea of only searching a device with the internet turned off may sound like a compromise. But it would end up being procedurally very specific and create the obvious problem that people would simply pass all their files onto cloud services and then download them once inside the country.

Of course, the counter-argument is that if border agents have reason to suspect someone was up to no good, they could apply for a warrant to connect the phone to the internet and then look at the resulting data.

The US government – which brought the case against Molina-Isidoro – is almost certain to aggressively defend its right to look at people's possessions at the border, leaving the Fifth Circuit in a difficult position to try to answer yet another complicated legal issue deriving from our love of extremely powerful smartphones.

Whatever it decides, it will almost certainly be appealed to the Supreme Court. Whether the Supreme Court would take the case on or choose to bat it back down until another case and another Appeals Court takes a different approach, as it has with other similar cases – only time with tell.

But the Fifth Circuit's decision could well set the scene for a critical question of digital privacy and the government's rights to dig into it. For US citizens of course. Everyone else is screwed. We have written a handy guide to data security at the US border. ®

Send us news
46 Comments

Academics probe Apple's privacy settings and get lost and confused

Just disabling Siri requires visits to five submenus

Google will delete data collected from 'private' browsing

Declares victory in settlement of class action lawsuit, but individual claims remain possible

Ex-White House CIO tells The Reg: TikTok ban may be diplomatic disaster

Theresa Payton on why US needs a national privacy law

Majority of Americans now use ad blockers

We're dreaming of a white list, because we're just like the ones you used to know

Lawsuit claims Meta hobbled Facebook Watch to help Netflix

Advertiser antitrust lawsuit says claimed deal with Netflix is anticompetitive

AT&T admits massive 70M+ mid-March customer data dump is real though old

Still claims the personal info wasn't stolen from its systems

Meta accused of snarfing people's Snapchat data via traffic decryption

I ain't afraid of no ghosts, but in this case...

Uncle Sam wants to know how big airlines use passenger data

'Problematic' carriers can look forward to scrutiny, fines, and new rules

Congress votes unanimously to ban brokers selling American data to enemies

At least we can all agree on something

Google gooses Safe Browsing with real-time protection that doesn't leak to ad giant

Rare occasion when you do want Big Tech to make a hash of it

We talk to W3C board vice-chair Robin Berjon about the InterPlanetary File System

The decentralized web is alive and well despite Web3 financial scheming

Microsoft calls AI privacy complaint 'doomsday hyperbole'

Plaintiffs seek termination of permissionless and unpaid AI data harvesting