Late-Night Infomercials: Guaranteed to Extend the 4th Amendment or Your Money Back

TL;DR: Online accounts may now be afforded greater protection following the Sixth Circuit’s ruling in United States v. Warshak. The court, upholding a temporary injunction on e-mail searches extended the fourth amendment’s warrant requirements to messages stored on third-party servers.
2 minute read

Despite some users’ lax approach to safeguarding their identities, online accounts may now be afforded greater protection following the Sixth Circuit’s ruling in United States v. Warshak. The court, which upheld a temporary injunction on a fraud investigation involving the all-too-familiar late-night “Smilin Bob” infomercials, extended the fourth amendment’s warrant requirements to messages stored on third-party servers. The Sixth Circuit wrote:

“The ISP is the functional equivalent of a post office or a telephone company… The police may not storm the post office and intercept a letter, and they are likewise forbidden from using the phone system to make a clandestine recording of a telephone call—unless they get a warrant, that is.”[^1]

Prior to the ruling, the government could (and regularly did) obtain emails stored on third-party hosts like Gmail, without first needing to obtain a search warrant. In its decision, the district court declared the 1986 Stored Communications Act (SCA)1 unconstitutional on the grounds that it allowed what was tantamount to a traditional search, but without the required showing of probable cause. The court noted, “given the fundamental similarities between email and traditional forms of communication, it would defy common sense to afford emails lesser Fourth Amendment protection.”2

The SCA, written long before GMail’s all-you-can-eat storage was ever dreamed, required a warrant for any message stored on a third-party server for fewer than 180 days, but simply required a subpoena or court order for older messages or messages that had been previously downloaded by the user, thus denying the subject of the investigation both notice and the subsequent opportunity to contest the search itself. 3, 4

For the most part, the decision makes sense. As email moves from download-and-delete POP-based messages stored solely on a user’s computer to the nearly limitless IMAP, Exchange, or Web-based messaging that increasingly lives in the unseen cloud, neither opportunity to download nor time spent on server are very compelling standards to determine the level of privacy that should be afforded to a message or the showing of cause that should be required to compel a host to disclose its contents.

The decision, which tips a circuit split further in favor of extending the fourth amendment, should, at least in theory, lay the groundwork to grant such protections to other forms of information stored in the cloud. Such information may include calendars or contacts on the more obvious end of the spectrum, but may arguable be construed to cover wholesale cloud services like AWS, Salesforce, Rackspace, and Azure, a possibility not to be taken lightly following the WikiLeaks hosting scramble.

Surely the decision does not settle the issue outright, but it is the latest in a long march of much-needed rulings further blurring the legal distinctions between the world online and the world off, and as persuasively written as it is, is likely to prove influential as both law and technology continue to evolve side by side.

  1. 18 U.S.C. 2703(b). ↩

  2. Warshak, 2010 WL 5071766. ↩

  3. United States v. Warshak, 08–3997, 2010 WL 5071766 (6th Cir. Dec. 14, 2010). ↩

  4. See generally Obtaining Electronic Evidence, Federal Law Enforcement Training Center (July 2003) ↩

Originally published December 20, 2010 | View revision history

If you enjoyed this post, you might also enjoy:

benbalter

Ben Balter is the Director of Hubber Enablement within the Office of the COO at GitHub, the world’s largest software development platform, ensuring all Hubbers can do their best (remote) work. Previously, he served as the Director of Technical Business Operations, and as Chief of Staff for Security, he managed the office of the Chief Security Officer, improving overall business effectiveness of the Security organization through portfolio management, strategy, planning, culture, and values. As a Staff Technical Program manager for Enterprise and Compliance, Ben managed GitHub’s on-premises and SaaS enterprise offerings, and as the Senior Product Manager overseeing the platform’s Trust and Safety efforts, Ben shipped more than 500 features in support of community management, privacy, compliance, content moderation, product security, platform health, and open source workflows to ensure the GitHub community and platform remained safe, secure, and welcoming for all software developers. Before joining GitHub’s Product team, Ben served as GitHub’s Government Evangelist, leading the efforts to encourage more than 2,000 government organizations across 75 countries to adopt open source philosophies for code, data, and policy development. More about the author →

This page is open source. Please help improve it.

Edit