Fourth Amendment Protection from Government Intrusion of E-mail and Internet Communications
William Randall King - Fall 2005 - Constitutional; Technology Law; Privacy Law
Table of Contents
Introduction
Primary Sources
Constitution
Cases
Expectation of Privacy
Electronic Storage
Information Voluntarily Conveyed to 3rd Parties
Content vs. Routing/Addressing Information
Legislative Acts
Statutes
Secondary Sources
American Law Reports
Law Reviews
Other Secondary Sources
Books and Treatises
Online Research
Conclusion
I. Introduction
This website provides a research guide for the analysis of Fourth Amendment protection from governmental intrusion on personal e-mail and Internet communications. The scope of this research guide is limited to protection of the Fourth Amendment provides as to acts of government agencies and law enforcement officials in obtaining e-mail and Internet communication data, either through real-time interception or retrieval from electronic storage. This research guide does not provide a detailed history of the evolution or application of the Fourth Amendment to the Constitution of the United States, nor does it deal with the establishment or violation of rights to privacy from the intrusion by non-governmental agencies such as employers or other private citizens.
As you will find below, there are no authoritative or landmark cases that pass on the reasonable expectation of privacy a person has in their Internet communication. Most analysis of the Fourth Amendment protection in cases and legal articles or publications analogize the nature of an e-mail or web communication to several categories of traditional forms of communication on which the court has already ruled or for which the statutory provisions specifically allow. This often involves whether the communication was intercepted in real-time, which the courts regard like a traditional telephone conversation, or extracted from "electronic storage", which is considered more like personal papers and effects. The level of protection afforded also depends on whether the storage is short term, which the courts have analogized to a safety deposit box, or long term which has been treated like filed business papers.
The amount of information intercepted from an e-mail or Internet communication also plays a major part in the determination of the Fourth Amendment protection, where the courts have found an expectation of privacy in the “content” of a communication, but not in the “dialing, routing, addressing, and signaling” information that accompanies the communication. Thus interception of this adjunct routing information does not constitute a search under the Fourth Amendment at all.
This treatment of the Fourth Amendment application to e-mail and Internet communications does not provide an easy method for determining the level of protection to be afforded a particular intercepted e-mail or Internet communication by the courts. While this research guide does not assume to suggest the proper answer to this question, it does seek to expose the reader to the many facets of analysis required to argue the issue from either side.
About the Author
William R. King is a second-year law student at Georgia State University College of Law and Moot Court board member. William's interests lie in technology related law, including Intellectual Property, e-Commerce, and Internet privacy issues.
II. Primary Sources
Constitution
The Fourth Amendment to the constitution clearly establishes the concept that a "reasonable" search requires a warrant supported by probable cause, and this concept has been vigorously applied by the courts in all but a few exceptional circumstances, e.g. when the immediacy of the search is necessary to protect the life of the officer or others, or when there is the pending danger that evidence may be destroyed. Often, the question turns not on the reasonableness of the search, i.e. the validity of the warrant, but on whether the intrusion constitutes a search under the Fourth Amendment at all.
| U.S. Const. amend. IV. | The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized. |
Cases
Expectation of Privacy
Up until 1967 the courts had treated current day electronic communications, i.e. the telephone, like any other personal papers and effects under the line of cases established by Olmstead v. United States, 277 U.S. 438, and Goldman v. United States, 316 U.S. 12. Specifically, for a violation of Fourth Amendment protection from the interception of a telephone conversation to be established, it was necessary for a trespass to have occurred. By 1967 the Supreme Court recognized the importance that the telephone had acquired in American's daily lives, and sought to establish new boundaries for the protection of the public's use of this now pervasive form of communication.
| Katz v. United States, 389 U.S. 347 (1967). |
| Berger v. New York, 388 U.S. 41 (1967). |
Up to the writing of this research guide, there has been no Federal case law which passes on the reasonable expectation of privacy in e-mail or other personal Internet communication. A few non-federal jurisdiction cases are noteworthy, however.
| United States v. Maxwell, 45 M.J. 406 (1996). |
| Commonwealth v. Proetto, 771 A.2d 823 (Pa. Super. Ct. 2001). |
Electronic Storage
The Electronic Communication Privacy Act (ECPA) in 1986 added statutory provisions to the U.S. Code dealing with electronic communications and transactional records residing in electronic storage. Specifically, the statute provides the methods by which the government may obtain communications and records from electronic communication service providers in 18 U.S.C. § 2703.
While targeted at traditional computer files, this statute becomes applicable to e-mail communications through the technical nature of the transmission of an e-mail. As the e-mail is routed through the various devices and computers that make up the communication channel, it is often stored and then retransmitted. Thus an e-mail exists simultaneously as a live communication deserving of the heightened protection afforded a telephone conversation and as a communication in electronic storage which has traditionally been afforded much less protection.
While many of the following cases deal with civil matters, they reveal the courts' struggle with this duality.
| Steve Jackson Games, Inc. v. United States Secret Service, 36 F.3d 457 (5th Cir. 1994). |
| Konop v. Hawaiian Airlines, 236 F.3d 1035 (9th Cir. 2001). |
| United States v. Councilman, 373 F.3d 197 (1st Cir. 2004). |
Information Voluntarily Conveyed to 3rd Parties
In determining whether certain information intercepted from personal Internet communications was deserving of Fourth Amendment protection, the courts may apply previous holdings that a person has no expectation of privacy in information voluntarily conveyed to a third party . This factor was instrumental in the Court's decision in Smith v. Maryland, 442 U.S. 735 (1979), which established the basis for the use of pen register devices by law enforcement without a warrant supported by probable cause.
This doctrine would be most applicable to e-mail communications received by the intended recipients, thus terminating the senders expectation of privacy. United States v. King, 55 F.3d 1193, 1196 (6th Cir. 1995). Also falling under this doctrine are portions of e-mail or web communications required for the Internet service provider (ISP) to fulfill the desired request, i.e. sending the e-mail or retrieving the requested web document, and may include e-mail addresses, web addresses, etc. from the communication. This doctrine has also been applied to personally identifiable information provided to an ISP in establishing a service account and subsequently obtained by law enforcement officers in relation to a specific communication or set of communications.
| United States v. Miller, 425 U.S. 435 (1976). |
| Smith v. Maryland, 442 U.S. 735 (1979). |
| United States v. Hambrick, 55 F.Supp.2d 504 (4th Cir. 2000). |
| Guest v. Leis, 255 F.3d 325 (6th Cir. 2001). |
| United States v. Butler, 151 F. Supp. 2d 82 (D. Me. 2001). |
Content vs. Routing/Addressing Information
The statutory language promulgated by the legislature in the acts detailed below define a distinction between the "content" of a communication, for which a warrant supported by probable cause is required for interception under the Wiretap Act, and dialing, routing, addressing, and signaling information, which can be intercepted under the Pen Register statute promulgated by the ECPA by simply showing that some information relevant to an ongoing investigation is likely to be revealed. 18 U.S.C. § 3122(b)(2).
The application of this distinction to e-mail and Internet communications becomes problematic, because e-mail addresses and web site URLs, while used to establish communication like a phone number, also relay much more information about the purpose of the communication and the identity of the parties involved in the communication.
The difference in Fourth Amendment protection afforded these two components of a communication and the related policy was established in the following cases.
| United States v. New York Tel. Co., 434 U.S. 159 (1977). |
| Smith v. Maryland, 442 U.S. 735 (1979). |
Legislative Acts
The following legislative acts represent Congress' will to provide protection for the privacy of electronic communications. However, the protection provided in these statutes often criminalizes the intrusion upon personal e-mail or Internet by private citizens while at the same time lowering or circumventing the Fourth Amendment protection against the same intrusion by the Government.
| Title III of the Omnibus Crime Control And Safe Streets Act Of 1968, Pub. L. No. 90-351; 82 Stat. 197 (1968). |
Electronic Communications Privacy Act of 1986, Pub. L. No. 99-508, 100 Stat. 1848 (1986). |
| Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001, Pub. L. No. 107-56, 115 Stat. 272 (2001). |
Statutes
While the operable body of statutory law for the protection of privacy in electronic communications is contained in the entire sequence of statutes promulgated by the legislative acts above, the following excerpts have been provided that are specifically applicable to the protection of personal Internet communications from Governmental intrusion.
| 18 U.S.C. § 2510(8) (2005). | "contents", when used with respect to any wire, oral, or electronic communication, includes any information concerning the substance, purport, or meaning of that communication; |
| 18 U.S.C. § 2518(1) (2005). | (1) Each application for an order authorizing or approving the interception of a wire, oral, or electronic communication under this chapter shall be made in writing upon oath or affirmation to a judge of competent jurisdiction and shall state the applicant's authority to make such application. Each application shall include the following information: (a) the identity of the investigative or law enforcement officer making the application, and the officer authorizing the application; (b) a full and complete statement of the facts and circumstances relied upon by the applicant, to justify his belief that an order should be issued, including (i) details as to the particular offense that has been, is being, or is about to be committed, (ii) except as provided in subsection (11), a particular description of the nature and location of the facilities from which or the place where the communication is to be intercepted, (iii) a particular description of the type of communications sought to be intercepted, (iv) the identity of the person, if known, committing the offense and whose communications are to be intercepted; (c) a full and complete statement as to whether or not other investigative procedures have been tried and failed or why they reasonably appear to be unlikely to succeed if tried or to be too dangerous; (d) a statement of the period of time for which the interception is required to be maintained. If the nature of the investigation is such that the authorization for interception should not automatically terminate when the described type of communication has been first obtained, a particular description of facts establishing probable cause to believe that additional communications of the same type will occur thereafter; (e) a full and complete statement of the facts concerning all previous applications known to the individual authorizing and making the application, made to any judge for authorization to intercept, or for approval of interceptions of, wire, oral, or electronic communications involving any of the same persons, facilities or places specified in the application, and the action taken by the judge on each such application; and (f) where the application is for the extension of an order, a statement setting forth the results thus far obtained from the interception, or a reasonable explanation of the failure to obtain such results. |
| 18 U.S.C. § 2703(a)-(b) (2005). | (a) Contents of wire or electronic communications in electronic storage. A governmental entity may require the disclosure by a provider of electronic communication service of the contents of a wire or electronic communication, that is in electronic storage in an electronic communications system for one hundred and eighty days or less, only pursuant to a warrant issued using the procedures described in the Federal Rules of Criminal Procedure by a court with jurisdiction over the offense under investigation or equivalent State warrant. A governmental entity may require the disclosure by a provider of electronic communications services of the contents of a wire or electronic communication that has been in electronic storage in an electronic communications system for more than one hundred and eighty days by the means available under subsection (b) of this section.
(b) Contents of wire or electronic communications in a remote computing service. (1) A governmental entity may require a provider of remote computing service to disclose the contents of any wire or electronic communication to which this paragraph is made applicable by paragraph (2) of this subsection-- (A) without required notice to the subscriber or customer, if the governmental entity obtains a warrant issued using the procedures described in the Federal Rules of Criminal Procedure by a court with jurisdiction over the offense under investigation or equivalent State warrant; or (B) with prior notice from the governmental entity to the subscriber or customer if the governmental entity-- (i) uses an administrative subpoena authorized by a Federal or State statute or a Federal or State grand jury or trial subpoena; or (ii) obtains a court order for such disclosure under subsection (d) of this section; except that delayed notice may be given pursuant to section 2705 of this title. (2) Paragraph (1) is applicable with respect to any wire or electronic communication that is held or maintained on that service-- (A) on behalf of, and received by means of electronic transmission from (or created by means of computer processing of communications received by means of electronic transmission from), a subscriber or customer of such remote computing service; and (B) solely for the purpose of providing storage or computer processing services to such subscriber or customer, if the provider is not authorized to access the contents of any such communications for purposes of providing any services other than storage or computer processing. |
| 18 U.S.C. § 2703(c) (2005). | (c) Records concerning electronic communication service or remote computing service. (1) A governmental entity may require a provider of electronic communication service or remote computing service to disclose a record or other information pertaining to a subscriber to or customer of such service (not including the contents of communications) only when the governmental entity-- (A) obtains a warrant issued using the procedures described in the Federal Rules of Criminal Procedure by a court with jurisdiction over the offense under investigation or equivalent State warrant; (B) obtains a court order for such disclosure under subsection (d) of this section; (C) has the consent of the subscriber or customer to such disclosure; or (D) submits a formal written request relevant to a law enforcement investigation concerning telemarketing fraud for the name, address, and place of business of a subscriber or customer of such provider, which subscriber or customer is engaged in telemarketing (as such term is defined in section 2325 of this title; or (E) seeks information under paragraph (2). (2) A provider of electronic communication service or remote computing service shall disclose to a governmental entity the-- (A) name; (B) address; (C) local and long distance telephone connection records, or records of session times and durations; (D) length of service (including start date) and types of service utilized; (E) telephone or instrument number or other subscriber number or identity, including any temporarily assigned network address; and (F) means and source of payment for such service (including any credit card or bank account number), of a subscriber to or customer of such service when the governmental entity uses an administrative subpoena authorized by a Federal or State statute or a Federal or State grand jury or trial subpoena or any means available under paragraph (1). (3) A governmental entity receiving records or information under this subsection is not required to provide notice to a subscriber or customer. |
| 18 U.S.C. § 3121(c) (2005). | (c) Limitation. A government agency authorized to install and use a pen register or trap and trace device under this chapter or under State law shall use technology reasonably available to it that restricts the recording or decoding of electronic or other impulses to the dialing, routing, addressing, and signaling information utilized in the processing and transmitting of wire or electronic communications so as not to include the contents of any wire or electronic communications. |
| 18 U.S.C. § 3122 (2005). | Application for an order for a pen register or a trap and trace device
(a) Application. (1) An attorney for the Government may make application for an order or an extension of an order under section 3123 of this title authorizing or approving the installation and use of a pen register or a trap and trace device under this chapter, in writing under oath or equivalent affirmation, to a court of competent jurisdiction. (2) Unless prohibited by State law, a State investigative or law enforcement officer may make application for an order or an extension of an order under section 3123 of this title authorizing or approving the installation and use of a pen register or a trap and trace device under this chapter, in writing under oath or equivalent affirmation, to a court of competent jurisdiction of such State.
(b) Contents of application. An application under subsection (a) of this section shall include-- (1) the identity of the attorney for the Government or the State law enforcement or investigative officer making the application and the identity of the law enforcement agency conducting the investigation; and (2) a certification by the applicant that the information likely to be obtained is relevant to an ongoing criminal investigation being conducted by that agency. |
| 18 U.S.C. § 3127(3)-(4) (2005). | (3) the term "pen register" means a device or process which records or decodes dialing, routing, addressing, or signaling information transmitted by an instrument or facility from which a wire or electronic communication is transmitted, provided, however, that such information shall not include the contents of any communication, but such term does not include any device or process used by a provider or customer of a wire or electronic communication service for billing, or recording as an incident to billing, for communications services provided by such provider or any device or process used by a provider or customer of a wire communication service for cost accounting or other like purposes in the ordinary course of its business;
(4) the term "trap and trace device" means a device or process which captures the incoming electronic or other impulses which identify the originating number or other dialing, routing, addressing, and signaling information reasonably likely to identify the source of a wire or electronic communication, provided, however, that such information shall not include the contents of any communication; |
III. Secondary Sources
American Law Reports
The following American Law Reports annotations provide discussion of the applicable statutes and case law .
| Mitchell Waldman, Expectation of Privacy in Internet Communications, 92 A.L.R.5th 15 (2005). |
Law Reviews
The following law review articles provide detailed analysis of the case law and statutes presented in this research guide and were the source of much of the annotation and comments contained herein.
| Susan Freiwald, Online Surveillance: Remembering the Lessons of the Wiretap Act, 56 Ala. L. Rev. 9 (2004). |
| Robert Ditzion, Electronic Surveillance In The Internet Age: The Strange Case Of Pen Registers, 41 Am. Crim. L. Rev. 1321 (2004). |
| Deirdre K. Mulligan, The Future Of Internet Surveillance Law: A Symposium To Discuss Internet Surveillance, Privacy & The USA Patriot Act: Surveillance, Records & Computers: Reasonable Expectations In Electronic Communications: A Critical Perspective On The Electronic Communications Privacy Act, 72 Geo. Wash. L. Rev. 1557 (2004). |
Other Secondary Sources
These publications represent the attempt of other lawyers, academics, and law enforcement officials to distill the applicable law from the various statutes, case law, and doctrines that have been discussed to this point.
Books and Treatises
The following books and treatises on the subject are available and are quoted or cited in the various law review articles and publications referenced in this research guide.
| Technology and Privacy: The New Landscape (Philip E. Agre & Marc Rotenberg eds., 1997) |
| Daniel J. Solove, The Digital Person: Technology and Privacy in the Information Age (2004). |
Robert O'Harrow, No Place to Hide: Behind the Scenes of Our Emerging Surveillance Society (2005). |
IV. Online Research
The following websites can provide additional resources or search facilities to further research Fourth Amendment Protection from Governmental Intrusion of e-mail and Internet communications.
V. Conclusion
As we have seen, no landmark case nor general consensus exists that a person has a reasonable expectation of privacy in their e-mail and Internet communications.
The level of protection to be afforded a particular communication depends on a variety of facts, such as how the communication was intercepted, i.e. in transmission or from electronic storage, how long the communication was in storage, whether the communication was received at the recipient or voluntarily conveyed to a 3rd party, and the nature of the information intercepted, i.e. content vs. routing/addressing information. In any memo, brief, or argument these specific factors must be established and then the applicable statutes and case law applied.
However, with the Internet growing in influence and pervasiveness day by day, it is likely that the courts will recognize the need for clarity and, just as they did for the telephone in Katz, and unambiguously establish whether society is willing to accept as reasonable an expectation of privacy in e-mail and Internet communications.