e-Discovery Insights

Four/Fifths of a Decision by the #SCOTUS

OK; all of my chapters for the California State Bar book are submitted, I've returned from my trip to San Francisco for the Section Leadership Conference, and you all know what that means!

[Somebody, please tell me what it means...]

In theory, what I *think* it means is that I'll be able to resume posting relevant content two to three times per week.  In practice?  Stay tuned...

If you're a follower of the Supreme Court, and you're also someone who is very interested in rulings that affect privacy, and depending on which side you're on, then this week, you are either:

• Happy that the 4th Amendment was protected, but angry that the 5th Amendment wasn't, or,
• Angry that the 4th Amendment was protected, but happy that the 5th Amendment wasn't, or,
• Happy about both, or angry about both.

It all depends on the facts.  In the Jones case, aka, the "GPS" case, the court decided that a physical intrusion onto private property to attach a GPS tracking device to a vehicle was a search as defined under the 4th Amendment.  Note the word, "physical".  If only it were that simple...

What about tracking a GPS-enabled device?  That issue wasn't addressed, here (except for comments on it in concurring opinions).  If one enables GPS to drive to a location, is that a voluntary disclosure?  That'll be the next frontier.

In a lower-court decision, a federal judge in Colorado ordered a defendant in a criminal case to decrypt her laptop, stating that she was not afforded 5th Amendment protection against self-incrimination, setting off another round of debate - and an examination of conflicting rulings - that will likely meander its way to the Supreme Court.

The logic is of the kind that only law afficionados may appreciate; defendant doesn't technically have to give up her password because she only has to enter it into the system without divulging it to anyone.

In other words, "Don't give up your password...just give us access to everything the password protects."  That, along with the "All Writs Act" of 1789, should afford you some interesting reading on the case.

An interesting week for the Bill of Rights and privacy, indeed...

License to Pry

Back to the future.  All-of-a-sudden, the term "1984" has become quite popular in the news, on TV and on a certain blog & Twitter feed you may be reading at the moment.  It started with the U.S. v. Jones case regarding warrantless GPS tracking.

But 'Jones' is child's play compared to what the District of Columbia is doing on a daily basis.  At least in Jones, the issue revolves around the government tracking specific vehicles for specific purposes.  In DC, they track the license plates of all of the vehicles, all of the time.  Not only that, they retain the database, sometimes for years.

I don't know whether to be in awe or appalled!  As a techno-weenie, I can't help but be fascinated by technology that can accomplish this; but that doesn't mean I lose sight of the obvious risks to privacy.  Examples?

The Good:  A crime is committed, a witness jots down a license plate and the authorities are able to input said plate into the database and locate the perpetrator.

The Bad:  A husband calls police to report his wife missing.  They input her license plate into the database, locate her vehicle in front of an apartment building - and discover she's having an affair.

The Ugly:  Talk amongst yourselves...

As has been the case so many times before, this capability may be used for good, evil, or with good intent that becomes inherently evil.

Of course, the same could be said of chocolate cake.  In moderation, it's great; but eat too much and you can make yourself sick.  The question is, who's going to be responsible for making sure we don't overindulge?

...After the Horse has Escaped. #PDA and the #5thAmendment

 

I closed my last post with this line; "Now comes the more difficult argument; explaining how a password is exactly the same as a key..."

In my view, the law is a password.  For example, right or wrong, a police officer may perform a search because he or she believes the law permits it.  A judge is another interface who decides whether to grant or deny access to information.  There's one major difference between a police officer, a judge and a computer, of course.  An officer or judge will make decisions based on several factors, whereas a computer - in proper working order - will decide based on pass/fail.  Nevertheless, like our friend, Maxwell Smart, the law is just another door in a series that parties must pass through.

So, what if we have a person under arrest who has password-protected their PDA and refuses to divulge it to the government?  Do they have 5th Amendment protection?  For starters, here's an excellent, big-picture view of the issue and emerging case law (I linked to this on Twitter a few days ago).

I think I get a bad rap sometimes.  My views may appear to be pro-defense versus pro-government.  However, if you've read my bio, you know that I've worked with the District Attorneys office.  I've also served as criminal defense counsel (this is not an unusual situation, by any means).  For me, the issues are simple.  Individuals on either side of the law have rights and responsibilities and it's important to know what they are (assuming any one of us can keep up with the rapid changes).

Also, the game has changed in another major way.  I understand that a lot of criminals use cellular devices to facilitate their behavior, but a majority of law-abiding citizens do not.  If one such citizen is arrested for, say, disturbing the peace, should the government have a right to search through all of the data on that person's Blackberry?  What if he or she is the Vice President of a major corporation and the device is issued by said corporation - and contains privileged communications?

Do I have the answer?  At the moment, it depends on what jurisdiction I happen to be standing in when you ask me. 

Which do you think is a better scenario from an individual-rights standpoint: 1) Spending time and funds (possibly while defendant is incarcerated) arguing that a search was illegal, or 2) Preventing the search from occurring in the first place?

I tweeted another story that produced this quote from a University criminal law professor:

"We're seeing a whole generation for whom privacy is not important."

I can't say that I agree with that assessment.  In most cases, people still don't grasp the concept that what they post online can be seen by anyone.  They only figure it out when their privacy has already been breached and it's too late to do anything about it.

You know what they say; nobody likes a cop until they need one...

Closing the Barn Door... #PDA, #GPS & the #4thAmendment

If you've been following my Tweets lately (I made it easier to do last week by adding a Twitter module to the sidebar), you know I've been spending a lot of time linking you to what I feel are some of the best analyses available on the developing area of how 4th Amendment searches & seizures pertain to new technology.

All eyes are on the Supreme Court again, as they prepare to hear arguments this coming Monday in U.S. v. Jones.  Jones pertains to the use of GPS tracking devices and goes directly to the core issues; 1) What is a reasonable expectation of privacy, and 2) When is a warrant required?  For one such analysis, here's a link to Erwin Chemerinsky's view.

We also have the emerging issue with cellphones and PDAs.  This morning, I read a great analogy by Lee Tien, a senior staff attorney at the Electronic Frontier Foundation, who - correctly, in my view - likens PDAs to "...a key to your house. When you have someone's key, you don't just have a physical object, you have a way to investigate his life in ways you otherwise wouldn't have."  [italics/bold added]

You also need a warrant before you enter.

As an IT representative, I had the most trouble explaining this to laymen.  People who are familiar with technology better understand that the information is everywhere and nowhere.  People with less experience tend to think of information in dimensional terms, or not as the string, but as the cans on either end (what we used to refer to as 'guzinta/guzouda').

A good example of this was when I was asked by a representative of the Los Angeles County District Attorney's Office to examine their pilot program for helping parents protect their kids from predators.  One of the suggestions was to make sure that the family PC was in an open area of the house so that parents would always be able to know what their kids were doing.  They visualized the PC as if it were a telephone, e.g. I call your home number and it rings in your home on one of your physical devices.  They couldn't grasp that if the child was up to something they didn't want their parents to know about, they'd likely be doing it at a friend's house, at school or at the library.  In essence, a person could access their information anywhere, not just on the home PC.

Another example was an instruction to parents to demand that their kids provide them with their email accounts.  Again, under 18 or not, if a child is hiding something, they'll set up a free email account - and they won't be telling you about it.

Keep in mind, the above examples are pre-texting and pre-PDA.  Of course, now that we have PDAs, texting, etc., non-tech-savvy-people have a much easier time understanding the transitory nature of information.

Sometimes, though, I envision judges as those same parents.  I guess if I were appearing in front of the Supreme Court, I'd tell them that searching someone's PDA is akin to searching a 4-drawer file cabinet, but with one thing in common between the two; if the owner locked the cabinet (password-protected the PDA), the government would need a warrant. 

Now comes the more difficult argument; explaining how a password is exactly the same as a key...

e-Discovery California: Brown Cancels Leno

Continuing what many privacy advocates will see as a disturbing trend against 4th Amendment protections in the state of California (and elsewhere), Governor Brown has vetoed the 'Leno' bill, SB 914.  The bill would have required the government to obtain a warrant to search a cellular device upon an arrest.  This follows on the heels of the Supreme Court of the United States declining to grant review of the Diaz case.

In another California case, the 2nd District Court of Appeal cited Diaz in upholding the warrantless search of a digital camera.

These days, if you blink, you may miss another decision affecting the concept of privacy in the United States.

Case Got Your Tongue? I Plead the Fourth!

If things continue like this, we're not going to know what the 4th Amendment stands for, anymore.  In my neck of the woods, a three-judge panel from the 6th District Court of Appeals for California extended the authority that SCOTUS granted in Diaz.  In People v. Nottoli (H035902) [warning: link opens 38-page pdf], the Court summoned the previous 'container' argument and ruled that during an inventory search incident to a lawful arrest, a cellular device (in this case, a Blackberry) found in a glove compartment was fair game for a warrantless search.

What result if Nottoli had password-protected his device?

While California appears to be loosening 4th Amendment protections further, other jurisdictions are tightening them.  In United States v. Musgrove, 2011 WL 4356521 (E.D.Wis. 2011) (Joseph, M.J.), the mere movement of a mouse/touching of a keyboard was enough to trigger an illegal search ruling.  How?  Defendant's PC's screen-saver was enabled.  Nothing was visible to officers who responded to D's home to investigate the possibility of criminal behavior.  By either touching the mouse or keyboard, an officer brought the device out of screen-saver mode, revealing a Facebook wall containing incriminating evidence, resulting in D's arrest.

Citing the 'Plain View' exception, the Court reasoned that, had the Facebook wall been visible, no violation would have occurred.  However, once the officer manipulated the mouse or keyboard to reveal the page, this constituted an illegal search.

What result if Musgrove had password-protected his device?

The dichotomy between these two cases is that the former was a search incident to a lawful arrest and the latter was a search resulting in a lawful arrest (according to facts, I'm giving the officers the benefit of the doubt because only the search was ruled unlawful, not the arrest - yet).

Why does this interest me?  Anyone who has used a Blackberry knows that, under normal circumstances, the device goes into sleep mode and one must manipulate a key, the trackball or the trackpad to bring it out of that mode.

I suspect that plenty more fact-specific arguments are on the horizon...

The Truth about Truth as a Defense

You can be held liable for telling the truth.  That's right.  As counter-intuitive as it sounds, it's (for lack of a better word) true.  I mention this because, once again, I'm hearing that someone - a blogger, in this case - was held liable for reporting the truth - and everyone gets into a lather.  How can this be?  It's a travesty of justice!

Well, technically, they're right.  The pure definition of defamation includes a false something.  But this sometimes clashes with other laws, such as the right to privacy, also referred to as "the right to be let alone".  After all, some truths are private.

We could argue all day about a court's right/wrong decisions, but taking the above case as an example, they seemed to be looking at the totality of the conduct of the defendant - and the results of that conduct.

Ultimately, as the post's author explains, this case came down to contract law.  They got the defendant on tortious interference.  We'll see what happens on appeal.

Something to think about prior to that next gossip session at the water cooler.

e-Discovery California: Predictive Policing or e-Profiling?

Please note; I didn't say racial profiling...

I was some kind of Twitter-maniac this weekend.  Normally, I don't tweet a lot of articles because I don't think it's the best use of the discipline, but it seemed like every time I turned around, I was reading interesting pieces about technology, security, evidence, law or the economy (as it pertains to us) that I thought would be of interest.  If you're one of my followers (how creepy-sounding is that?!), I hope you'll check them out.

This article begs further examination, however.  The police force in Santa Cruz, California is experimenting with using mathematics to predict where crime hots spots will occur - then deploying resources to those likely hot spots.

I wrote about this back in January.  It kind of takes on the pathology of the movie, Minority Report.  At the time, I said, "We don’t arrest people for crimes they haven’t committed, yet."  We still don't; but it sure would be convenient to be in the vicinity waiting for them when they do.

In theory, it seems like a great tool - using history of prior crimes to predict future ones; but it was the following comment by a patrol officer that raised my eyebrow (just one, mind you):

"[The program] doesn't give me legal reason to arrest somebody just for being in my hot spot, but it gives me good reason to stop and ask what they are doing,"

My question in response to that statement is, "No, it doesn't give you legal reason to arrest somebody, but does it give you reasonable suspicion?"

It's a rhetorical question because, absent any additional facts, we can't really answer.  However, I know one person who would definitely be asking it; a good defense attorney.

Don't Have a Cow, Man!

Barely a week after I posted about riots, the use of social media and the Brandenburg Standard, we get San Francisco riots (or should I say, "protests"), BART's attempts to prevent the use of social media and an acrimonious debate about the Brandenburg Standard.

But I'm a lawyer and as such, I look at the facts on the ground.  Is social media being used as a vehicle to incite imminent lawless action (not the peaceful variety, after all, one may break the law in a peaceful manner)?  Does the "state" have a compelling interest to protect the public?  Is jamming cell signals within the limited range of the stations a reasonable response to a perceived imminent threat?  Is there a private/public argument to be made?

We argue; judges decide.

Here's one I didn't see discussed; the authorities may have done the rioters a favor - in a backwards capacity.  After all, in the process of preventing communication between potential wrong-doers, they may have prevented themselves from collecting electronic evidence that might have ultimately led to identifying and prosecuting those same wrong-doers.

If only it were that simple.  This assumes, for example, that outgoing text messages timed out.  Depending on the device - and the network it communicates with - if the user reconnected to the network before that happened...

e-Evidence Insights: Social Media Doesn't Distinguish Between Good and Bad Riots

In the "Be careful what you wish for!" category, first we had the Arab Spring, which was considered to be a positive development for the Middle East - in the West, anyway.  Now we have the UK riots - and the reaction is entirely the opposite.

With the Arab Spring, social media was hailed as a catalyst to facilitate needed change.  And with the UK riots?  Social media is being disparaged as - you guessed it - a catalyst to facilitate anarchy.

That's the problem with revolutions; perspective is skewed based on which side of them you're on.

What's more interesting to me is the difference between the vehicles of change.  With the Arab Spring, it was Facebook, Twitter and YouTube.  With the UK riots, it's Blackberry Messenger (as if Blackberry doesn't have enough public-relations issues right now, including losing yours truly as a customer).

What's driving this decision?  Economics, for one (Blackberries are cheaper in that region) and secrecy (BBM is private).  I don't want to belabor the point - people died in both riots - but we should endeavor to understand these issues.

If this were happening in the United States, we'd be arguing whether this was a Constitutional violation of the Brandenburg standard.  And while we argued, the FBI would be accumulating electronic evidence.

You may consider yourself to be on the 'right' side of the revolution, but make no mistake; either way, someone is tracking you.  This will make a big difference if, in the end, you find yourself on the 'wrong' side.