by Anne Toomey McKenna, University of Richmond [This article first appeared in The Conversation, republished with permission]
Government agencies and private security companies in the U.S. have found a cost-effective way to engage in warrantless surveillance of individuals, groups and places: a pay-for-access web tool called Fog Reveal.
The tool enables law enforcement officers to see patterns of life where and when people work and live, with whom they associate and what places they visit. The tools maker, Fog Data Science, claims to have billions of data points from over 250 million U.S. mobile devices.
Fog Reveal came to light when the Electronic Frontier Foundation (EFF), a nonprofit that advocates for online civil liberties, was investigating location data brokers and uncovered the program through a Freedom of Information Act request. EFFs investigation found that Fog Reveal enables law enforcement and private companies to identify and track people and monitor specific places and events, like rallies, protests, places of worship and health care clinics. The Associated Press found that nearly two dozen government agencies across the country have contracted with Fog Data Science to use the tool.
Government use of Fog Reveal highlights a problematic difference between data privacy law and electronic surveillance law in the U.S. It is a difference that creates a sort of loophole, permitting enormous quantities of personal data to be collected, aggregated and used in ways that are not transparent to most persons. That difference is far more important in the wake of the Supreme Courts Dobbs v. Jackson Womens Health Organization decision, which revoked the constitutional right to an abortion. Dobbs puts the privacy of reproductive health information and related data points, including relevant location data, in significant jeopardy.
The trove of personal data Fog Data Science is selling, and government agencies are buying, exists because ever-advancing technologies in smart devices collect increasingly vast amounts of intimate data. Without meaningful choice or control on the users part, smart device and app makers collect, use and sell that data. It is a technological and legal dilemma that threatens individual privacy and liberty, and it is a problem I have worked on for years as a practicing lawyer, researcher and law professor.
U.S. intelligence agencies have long used technology to engage in surveillance programs like PRISM, collecting data about individuals from tech companies like Google, particularly since 9/11 ostensibly for national security reasons. These programs typically are authorized by and subject to the Foreign Intelligence Surveillance Act and the Patriot Act. While there is critical debate about the merits and abuses of these laws and programs, they operate under a modicum of court and congressional oversight.
Domestic law enforcement agencies also use technology for surveillance, but generally with greater restrictions. The U.S. Supreme Court has ruled that the Constitutions Fourth Amendment, which protects against unreasonable search and seizure, and federal electronic surveillance law require domestic law enforcement agencies to obtain a warrant before tracking someones location using a GPS device or cell site location information.
Fog Reveal is something else entirely. The tool made possible by smart device technology and that difference between data privacy and electronic surveillance law protections allows domestic law enforcement and private entities to buy access to compiled data about most U.S. mobile phones, including location data. It enables tracking and monitoring of people on a massive scale without court oversight or public transparency. The company has made few public comments, but details of its technology have come out through the referenced EFF and AP investigations.
Every smartphone has an advertising ID a series of numbers that uniquely identifies the device. Supposedly, advertising IDs are anonymous and not linked directly to the subscribers name. In reality, that may not be the case.
Private companies and apps harness smartphones GPS capabilities, which provide detailed location data, and advertising IDs, so that wherever a smartphone goes and any time a user downloads an app or visits a website, it creates a trail. Fog Data Science says it obtains this commercially available data from data brokers, permitting the tool to follow devices through their advertising IDs. While these numbers do not contain the name of the phones user, they can easily be traced to homes and workplaces to help police identify the user and establish pattern-of-life analyses.
Law enforcement use of Fog Reveal puts a spotlight on that loophole between U.S. data privacy law and electronic surveillance law. The hole is so large that despite Supreme Court rulings requiring a warrant for law enforcement to use GPS and cell site data to track persons it is not clear whether law enforcement use of Fog Reveal is unlawful.
Electronic surveillance law protections and data privacy mean two very different things in the U.S. There are robust federal electronic surveillance laws governing domestic surveillance. The Electronic Communications Privacy Act regulates when and how domestic law enforcement and private entities can wiretap, i.e., intercept a persons communications, or track a persons location.
Coupled with Fourth Amendment protections, ECPA generally requires law enforcement agencies to get a warrant based on probable cause to intercept someones communications or track someones location using GPS and cell site location information. Also, ECPA permits an officer to get a warrant only when the officer is investigating certain crimes, so the law limits its own authority to permit surveillance of only serious crimes. Violation of ECPA is a crime.
The vast majority of states have laws that mirror ECPA, although some states, like Maryland, afford citizens more protections from unwanted surveillance.
The Fog Reveal tool raises enormous privacy and civil liberties concerns, yet what it is selling the ability to track most persons at all times may be permissible because the U.S. lacks a comprehensive federal data privacy law. ECPA permits interceptions and electronic surveillance when a person consents to that surveillance.
With little in the way of federal data privacy laws, once someone clicks I agree on a pop-up box, there are few limitations on private entities collection, use and aggregation of user data, including location data. This is the loophole between data privacy and electronic surveillance law protections, and it creates the framework that underpins the massive U.S. data sharing market.
AP investigative journalist Garance Burke explains how she and her colleagues uncovered law enforcement use of Fog Reveal.
Without robust federal data privacy safeguards, smart device manufacturers, app makers and data brokers will continue, unfettered, to utilize smart devices sophisticated sensing technologies and GPS capabilities to collect and commercially aggregate vast quantities of intimate and revealing data. As it stands, that data trove may not be protected from law enforcement agencies. But the permitted commercial use of advertising IDs to track devices and users without meaningful notice and consent could change if the American Data Privacy Protection Act, approved by the U.S. House of Representatives Committee on Energy and Commerce by a vote of 53-2 on July 20, 2022, passes.
ADPPAs future is uncertain. The app industry is strongly resisting any curtailment of its data collection practices, and some states are resisting ADPPAs federal preemption provision, which could minimize the protections afforded via state data privacy laws. For example, Nancy Pelosi, speaker of the U.S. House of Representatives, has said lawmakers will need to address concerns from California that the bill overrides the states stronger protections before she will call for a vote on ADPPA.
The stakes are high. Recent law enforcement investigations highlight the real-world consequences that flow from the lack of robust data privacy protection. Given the Dobbs ruling, these situations will proliferate absent congressional action.
Anne Toomey McKenna, Visiting Professor of Law, University of Richmond
This article is republished from The Conversation under a Creative Commons license. Read the original article.
View original post here:
- Quinn: Supreme Court should clarify Fourth Amendment rights in the digital age - April 26th, 2014 [April 26th, 2014]
- Fourth amendment | Wex Legal Dictionary / Encyclopedia ... - April 26th, 2014 [April 26th, 2014]
- The Fourth Amendment is destroyed by the Roberts led Supreme Court. - Video - April 26th, 2014 [April 26th, 2014]
- Protections for e-data clear Senate committee - April 27th, 2014 [April 27th, 2014]
- Weighing The Risks Of Warrantless Phone Searches During Arrests - April 29th, 2014 [April 29th, 2014]
- Court may let cops search smartphones - April 29th, 2014 [April 29th, 2014]
- Supreme Court to hear case on police searches of cellphones - April 29th, 2014 [April 29th, 2014]
- Fourth Amendment in the digital age: Supreme Court to decide if police can search cellphones without a warrant - April 30th, 2014 [April 30th, 2014]
- What Scalia knows about illegal searches - April 30th, 2014 [April 30th, 2014]
- Should police be allowed to search your smartphone - Video - April 30th, 2014 [April 30th, 2014]
- The Shaky Legal Foundation of NSA Surveillance on Americans - May 1st, 2014 [May 1st, 2014]
- Pennsylvania Supreme Court rules police don't need warrants to search cars - May 3rd, 2014 [May 3rd, 2014]
- Local police: Updated vehicle-search law still requires probable cause - May 3rd, 2014 [May 3rd, 2014]
- Liberal Supreme Court Justice Comes To The Defense Of Scalia - May 3rd, 2014 [May 3rd, 2014]
- Smartphones and the Fourth Amendment - Video - May 4th, 2014 [May 4th, 2014]
- Fourth Amendment Defined & Explained - Law - May 6th, 2014 [May 6th, 2014]
- I-Team: Do police seek search warrant friendly judges? - May 8th, 2014 [May 8th, 2014]
- Is Big Brother Listening? Applying the Fourth Amendment in an Electronic Age - Video - May 9th, 2014 [May 9th, 2014]
- Magistrate waxes poetic while rejecting Gmail search request - May 10th, 2014 [May 10th, 2014]
- The Fourth Amendment - Video - May 10th, 2014 [May 10th, 2014]
- License reader lawsuit can be heard, appeals court rules - May 15th, 2014 [May 15th, 2014]
- Seize the Rojo - Video - May 16th, 2014 [May 16th, 2014]
- NSA Spying Has a Disproportionate Effect on Immigrants - May 16th, 2014 [May 16th, 2014]
- Motorists sue Aurora, police in 2012 traffic stop after bank robbery - May 18th, 2014 [May 18th, 2014]
- Judge Says NSA Phone Surveillance Likely Unconstitutional - Video - May 21st, 2014 [May 21st, 2014]
- New York Attorney Heath D. Harte Releases a Statement on Fourth Amendment Rights - May 22nd, 2014 [May 22nd, 2014]
- The Fourth Amendment Rights - Video - May 23rd, 2014 [May 23rd, 2014]
- Bangor Area School District teachers vote no to random drug - May 24th, 2014 [May 24th, 2014]
- I Don't Care About The Contitution, Take Your Fourth Amendment And Shove It The Hills Hotel - Video - May 27th, 2014 [May 27th, 2014]
- Lonestar1776 at Illegal Checkpoint 80 Miles Inside Border - Standing UP & Pushing Back! pt 2/2 - Video - August 31st, 2014 [August 31st, 2014]
- Suit charges Daytona Beach's rental inspection program violates civil rights - September 3rd, 2014 [September 3rd, 2014]
- 4th Amendment - Laws.com - September 4th, 2014 [September 4th, 2014]
- YOU CAN ARREST ME NOW (cops refuse, steal phone) - Video - September 7th, 2014 [September 7th, 2014]
- The Feds Explain How They Seized The Silk Road Servers - September 8th, 2014 [September 8th, 2014]
- Volokh Conspiracy: Does obtaining leaked data from a misconfigured website violate the CFAA? - September 9th, 2014 [September 9th, 2014]
- Defence asks judge in NYC to toss out bulk of evidence in Silk Road case as illegally obtained - September 10th, 2014 [September 10th, 2014]
- Family of a mentally ill woman files lawsuit against San Mateo Co. after deadly shooting - September 10th, 2014 [September 10th, 2014]
- Minnesota Supreme Court upholds airport drug case decision - September 12th, 2014 [September 12th, 2014]
- Law Talk - Obamacare Rollout; Fourth Amendment, NSA Spying Stop & Frisk DUI Check Points lta041 - Video - September 12th, 2014 [September 12th, 2014]
- Volokh Conspiracy: The posse comitatus case and changing views of the exclusionary rule - September 15th, 2014 [September 15th, 2014]
- Guest: Why the privacy of a public employees cellphone matters - September 16th, 2014 [September 16th, 2014]
- Volokh Conspiracy: Apples dangerous game - September 19th, 2014 [September 19th, 2014]
- Judge expounds on privacy rights - September 20th, 2014 [September 20th, 2014]
- Great privacy essay: Fourth Amendment Doctrine in the Era of Total Surveillance - September 20th, 2014 [September 20th, 2014]
- The Fourth Amendment By Maison Erdman - Video - September 20th, 2014 [September 20th, 2014]
- Volokh Conspiracy: When administrative inspections of businesses turn into massive armed police raids - September 22nd, 2014 [September 22nd, 2014]
- The chilling loophole that lets police stop, question and search you for no good reason - September 23rd, 2014 [September 23rd, 2014]
- Pet Owners Look to Muzzle Police Who Shoot Dogs - September 27th, 2014 [September 27th, 2014]
- Volokh Conspiracy: A few thoughts on Heien v. North Carolina - September 29th, 2014 [September 29th, 2014]
- Volokh Conspiracy: Third Circuit on the mosaic theory and Smith v. Maryland - October 1st, 2014 [October 1st, 2014]
- Volokh Conspiracy: Third Circuit gives narrow reading to exclusionary rule - October 2nd, 2014 [October 2nd, 2014]
- Volokh Conspiracy: Supreme Court takes case on duration of traffic stops - October 3rd, 2014 [October 3rd, 2014]
- Search & Seizure, Racial Bias: The American Law Journal on the Philadelphia CNN-News Affiliate WFMZ Monday, October 6 ... - October 3rd, 2014 [October 3rd, 2014]
- Argument preview: How many brake lights need to be working on your car? - October 3rd, 2014 [October 3rd, 2014]
- The 'Barney Fife Loophole' to the Fourth Amendment - October 3rd, 2014 [October 3rd, 2014]
- Search & Seizure: A New Fourth Amendment for a New Generation? - Promo - Video - October 4th, 2014 [October 4th, 2014]
- Ap Government Fourth Amendment Project - Video - October 4th, 2014 [October 4th, 2014]
- Lubbock Liberty Workshop With Arnold Loewy On The Fourth Amendment - Video - October 5th, 2014 [October 5th, 2014]
- Feds Hacked Silk Road Without A Warrant? Perfectly Legal, Prosecutors Argue - October 7th, 2014 [October 7th, 2014]
- Supreme Court Starts Term with Fourth Amendment Case - October 7th, 2014 [October 7th, 2014]
- Argument analysis: A simple answer to a deceptively simple Fourth Amendment question? - October 9th, 2014 [October 9th, 2014]
- Feds Say That Even If FBI Hacked The Silk Road, Ulbricht's Rights Weren't Violated - October 9th, 2014 [October 9th, 2014]
- Mass Collection of U.S. Phone Records Violates the Fourth Amendment - Video - October 9th, 2014 [October 9th, 2014]
- Leggett sides with civil liberties supporters - October 10th, 2014 [October 10th, 2014]
- Search & Seizure / Car Stops: A 'New' Fourth Amendment for a New Generation? - Video - October 10th, 2014 [October 10th, 2014]
- The Fourth Amendment- The Maininator Period 4 - Video - October 10th, 2014 [October 10th, 2014]
- Judge nukes Ulbricht's complaint about WARRANTLESS FBI Silk Road server raid - October 11th, 2014 [October 11th, 2014]
- Montgomery County will not hold immigrants without probable cause -- Gazette.Net - October 13th, 2014 [October 13th, 2014]
- Debate: Does Mass Phone Data Collection Violate The 4th Amendment? - October 14th, 2014 [October 14th, 2014]
- Does the mass collection of phone records violate the Fourth Amendment? - October 19th, 2014 [October 19th, 2014]
- When Can the Police Search Your Phone and Computer? - October 21st, 2014 [October 21st, 2014]
- Supreme Court to decide if cops can access hotel registries without warrants - October 22nd, 2014 [October 22nd, 2014]
- Third Circuit Allows Evidence from Warrantless GPS Device - October 22nd, 2014 [October 22nd, 2014]
- US court rules in favor of providing officials access to entire email account - October 24th, 2014 [October 24th, 2014]
- EL MONTE POLICE OFFICER VIOLATES ARMY VETERAN'S FOURTH AMENDMENT RIGHT - Video - October 25th, 2014 [October 25th, 2014]
- FBI demands new powers to hack into computers and carry out surveillance - October 30th, 2014 [October 30th, 2014]
- Fourth Amendment (United States Constitution ... - November 4th, 2014 [November 4th, 2014]
- Fourth Amendment - Video - November 4th, 2014 [November 4th, 2014]
- Call Yourself a Hacker and Lose Fourth Amendment Rights - Video - November 5th, 2014 [November 5th, 2014]
- Volokh Conspiracy: Magistrate issues arrest warrants for 17 years but is new to probable cause - November 7th, 2014 [November 7th, 2014]