Slashdot Log In
Court Refuses To Rule On ECPA Warrantless E-mail Searches
Posted by
Soulskill
on Fri Jul 11, 2008 05:58 PM
from the not-yet-ripe dept.
from the not-yet-ripe dept.
utkalum writes "After Steven Warshak's indictment and conviction on charges of mail and wire fraud, money laundering and other federal charges, he learned that key evidence in the case was obtained by the government under a 1986 law permitting no-warrant searches of email communications stored for longer than 180 days. He also learned that, despite the Electronic Communication Privacy Act's requirement that such searches be disclosed to the suspect no more than 90 days after they were commenced, the Government simply couldn't be bothered to comply. Now, the US Court of Appeals for the Sixth Circuit has refused (9-5) to hear Warshak's constitutional challenge to the Act (PDF), claiming that the question raised is 'not yet ripe' for adjudication.
It's worth noting that the court also vacated an earlier injunction against using that act to read the e-mail of other people in Warshak's district. Read on for an excerpt from the ruling.
'Not only do "we have no idea whether or when" such a search will occur but we also "have
no idea" what e-mail accounts, or what types of e-mail accounts, the government might investigate ... That uncertainty looms large in a debate about the expectations of privacy in e-mail accounts. The underlying merits issue in the case
is this: In permitting the government to search e-mails based on "reasonable grounds," is 2703(d)
consistent with the Fourth Amendment, which generally requires "probable cause" and a warrant
in the context of searches of individuals, homes and, perhaps most analogously, posted mail? The
answer to that question will turn in part on the expectations of privacy that computer users have in
their e-mails — an inquiry that may well shift over time, that assuredly shifts from internet-service
agreement to internet-service agreement and that requires considerable knowledge about everevolving
technologies.'
Related Stories
[+]
Expectation of Privacy Extended to Email 161 comments
An anonymous reader writes "In a 6th circuit court decision [PDF] today 4th amendment expectation of privacy rights were extended to email. 'The ruling by the Sixth U.S. Circuit Court of Appeals in Ohio upholds a lower court ruling that placed a temporary injunction on e-mail searches in a fraud investigation against Steven Warshak, who runs a supplements company best known for a male enhancement product called Enzyte. Warshak hawks Enzyte using "Smiling Bob" ads that have gained some notoriety.'"
[+]
US Wants Courts to OK Warrantless Email Snooping 476 comments
Erris writes "The Register is reporting that the US government is seeking unprecedented access to private communications between citizens. 'On October 8, 2007, the United States Court of Appeals for the Sixth Circuit in Cincinnati granted the government's request for a full-panel hearing in United States v. Warshak case centering on the right of privacy for stored electronic communications. ... the position that the United States government is taking if accepted, may mean that the government can read anybody's email at any time without a warrant. The most distressing argument the government makes in the Warshak case is that the government need not follow the Fourth Amendment in reading emails sent by or through most commercial ISPs. The terms of service (TOS) of many ISPs permit those ISPs to monitor user activities to prevent fraud, enforce the TOS, or protect the ISP or others, or to comply with legal process. If you use an ISP and the ISP may monitor what you do, then you have waived any and all constitutional privacy rights in any communications or other use of the ISP.'"
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Bush told me... (Score:5, Funny)
Its ok to break the law as long as your catching a bad guy right?
Re:Bush told me... (Score:5, Insightful)
Parent
Time for me to point out why they're wrong (Score:3, Interesting)
Here it is:
http://fyngyrz.wordpress.com/2008/06/16/on-privacy/ [wordpress.com]
Re: (Score:2)
Not only that but if they cannot find the more than 180 day email to prove their case, they can make some email files up. Not like a judge or jury knows the difference between real email and faked email or real documents and faked documents. I used to work for a law firm that had a program that allowed them to make documents or email say whatever they wanted them to say as evidence and nobody ever was the wiser. That is how they got out of that 1998 FBI investigation of them for fraud as they pinned it all
Re:Bush told me... (Score:5, Insightful)
Goddamnit, that's not funny. That's depressing.
Parent
Re: (Score:3, Funny)
Sorry, no +1, Depressing moderation available that I know of.
Re: (Score:2, Insightful)
Fortunately, I'm the only person capable of coming up with such bullshit.
You seem to have yourself confused with this guy [wikipedia.org].
Re: (Score:2, Troll)
Yeah you and all of the other 911 conspiracy theorists. The only thing you forgot to mention was that the government did 911, and Bush and others are all members of the New World Order that made the Constitution and all other laws null and void. Also that McCain or Obama will gladly serve as Bush's third term in office because they are secretly controlled by the NWO as well.
Don't give yourself too much credit, the Internet is full of people who really are capable of coming up with such bullshit. Just that b
Bush told me.... (Score:5, Insightful)
This doesn't apply at the White House, apparently they don't archive their email.....or at least you can't prove that they may or may not......
Re: (Score:2)
That was the same way the Clinton administration ran things. All email was deleted and record retention got rid of memos and documents.
Does the name Sandy Berger [worldnetdaily.com] ring a bell?
Re: (Score:2)
except there is a "go to jail" law for NOT archiving their email. By not having provable record trails they are in violation of the law as much as if they hid evidence after the fact.
Possession is 9 points of the law (Score:5, Insightful)
Unless we own our personal information, we will have no privacy and no freedom. If I know *EVERYTHING* about you and have a few henchmen, then I can surely control you and eliminate your freedom. No one is perfect. You must have some weakness that can be approached. Some way to be bribed? Or surely you've made some embarrassing mistakes that could be leveraged against you? What's your hook? Gambling? Booze? Whatever it is, if I know enough about you, then I can eventually make you do whatever I want.
Is there a solution? Yes. We must own our personal data. It cannot belong to the companies to buy and sell like oil futures and shares in gold mines. The strongest form of ownership is possession--the famous 9 points of the law. Once you have possession, then it is up to the other side to show they have some claim on your personal property (in the form of information in this case).
If any company wants to store some information about me, they should be required to store it on *MY* computer. They can sign it so that I can't tamper with it. That's a trivial aspect. However, whenever they want to *USE* my information, they should be required to tell me why. This can mostly be automated in the form of my personal privacy preferences, and for most queries there is no reason I should stop them--but I should always be free to change my mind.
(I only see one other alternative that preserves any personal freedom. That would be the total exposure of everyone's personal information. It would be a kind of war, but at least all of us could be on a kind of equal footing. Yet however much I would like to know the full truth about Dubya Bush, I don't think that's going to happen.)
Re: (Score:3, Insightful)
OK, you keep your info on *YOUR* computer. I ask for it politely and you say, "OK" - I get some.
Now, it's on *MY* computer. And the computer of anyone I give the information to.
So, once the information is out there, it's out there. The only thing you can do is enforce laws that deal with information breaches and enforce them quickly and routinely. Unfortunately, that's exactly what's not
Re: (Score:2, Insightful)
Gambling? Booze? (Score:2)
I like gambling, I like booze. I vote, often doing all three at once!
But if I tell people the truth about my multifaceted personality, they wouldn't vote for me (because I would tell them things they don't want to hear).
So you get "politicians" instead. They get to decide what the rules are, and they are all pandering to "the people". Almost by definition you get liars to "represent" you. The actions of liars and idiots are almost indistinguishable, so I guess there is some ju
Re: (Score:2)
What's your hook? Gambling? Booze? Whatever it is, if I know enough about you, then I can eventually make you do whatever I want.
I have no hook. I'm a devout Christian living in the US Midwest, who has a husband, 2 children (born after wedlock), and a couple of SUVs. I go to church every Sunday, think only clean thoughts, and have missionary-style sex only. I never looked at porn, and decry all the evil criminals and porno people out there. I'm a loyal Republican voter, and a proud US citizen. Our wars
'ripeness' is valid (Score:5, Informative)
Anyone who is going to tartly respond to this inflammatory statement would do well to read the link contained in the statement... 'ripeness' is an important legal concept, and it is clear that the matter is, as yet, unripe.
In order for the 'ripeness' qualification to be met, decision on the claim must affect the outcome. It's clear from reading the link that the outcome would not be affected, since the government is unlikely to perform another ex parte search; and even if they did, it wouldn't matter, since the guy who was indicted knows full well that he is under indictment, and would be even more of a fool to leave any more emails hanging around for the government to search.
As for the other issues, I'll not comment, since I don't think my words would bear the fruit.
Re:'ripeness' is valid (Score:4, Informative)
This guy can't sue to prevent this from happening to other people?
Could someone who hasn't been caught by this snooping sue?
So, people who have been affect can't sue because it wouldn't happen again, and people who haven't been affected can't sue either?
Or is my thinking just wrong? (IANAL, so that is easy)
Parent
Re: (Score:3, Insightful)
I am not sure I agree about "ripe". I am concerned about warrantless searches. I think there has to be a position on that, and an absolute one. The government absolutely cannot conduct any search in meat-space or cyberspace without a warrant from a Judge, who is a member of the Judicial branch of government.
The fact that the government did not feel it had to comply with its own 90 day rule just shows how arrogant and "above the law" they feel that they are.
In any case, if this was any more "ripe" we coul
Re:'ripeness' is valid (Score:5, Informative)
In the same spirit of respect, I have to disagree with what you posted.
If you read the entire opinion, the following was mentioned:
- The government sought permission twice from a magistrate judge to gain access to the guy's email records. (So it's not a warrant, but it WAS an official court order)
- The government had to demonstrate to the magistrate that the records they sought contained information "relevant and material to an ongoing criminal investigation" (So it wasn't a blind or frivolous fishing expedition)
- The government was ordered by the magistrate to delay giving notice since the judge felt there was a credible chance of the guy tampering with evidence
- The judge sealed the court orders related to the searches
My point is, unlike other abuses of government warrantless work, at least this one had some measure of judicial review involved. That makes this case different, IMHO, than other warrantless wiretapping and such, and care should be taken to not draw conclusions about either with a broad stroke here.
The court also felt that not only was the case "not ripe" for ruling (which has a very clear and painstakingly discussed meaning in the opinion), but that the guy partially argued on the wrong grounds. They almost suggest he MIGHT have had a shot of having his case heard if he'd argued 1st Amendment rather than 4th Amendment (since he alluded to the idea of a "chilling effect" when it comes to emails) - but he didn't, he argued 4th Amendment.
In fact, from reading the opinion, it seems as though this guy completely "screwed up" his entire arguments. It sounds as though he sued on the grounds of future, potential searches, rather than on particular admissability of the emails that were gained during the prior 2 searches. It definitely was an issue that the guy sought to overturn ALL of 2703(d), for everyone, rather than just his particular case. The court makes great pains to state how they refuse to make a potential constitutional ruling for a general class situation where each person's particulars may be widely different.
I'd say the court did a reasonable thing with this decision, all things considered. The guy clearly should have known from his Yahoo TOS that his emails weren't going to be fully private in the first case - and in fact it was pointed out in his own TOS that "emails will be provided to the government upon request." (That argues, possibly, that the government may have been able to get the emails from Yahoo without any court involvement at all - depending on how Yahoo wants to proceed)
All in all, seems like nothing more to see here to me. Let's focus on FISA, where the real problems are, not on this non-case.
Parent
Re: (Score:2)
this is why we need to get away from the adversarial system to something else that determines "truthfulness" and can meet binding punishments to BOTH sides if rules are broken. When the prosecution breaks the rules, the investigation of that rule breaking should also be under that trial's jurisdiction, not dependent on those same offices to file new charges. In cases like this on sentencing day both the defendant and possible officers will be going to jail at the same time!
In a famous case like the OJ case
Re:'ripeness' is valid (Score:4, Informative)
I think you just described "mootness", not "ripeness."
Ripeness is a prudential rule (i.e. court-created) that the court uses to basically say that not enough is understood about the pros and cons of a particular ruling for stare decisis at the appellate level.
Sometimes the court invokes Ripeness when the counsel (or facts) are judged to be not adequate for a good decision. e.g. defense counsel sucks, or the facts suck, or whatever.
I'm not saying either is the case here; it's just a dodge for the court.
I think the prudential standing rules should be unconstitutional, but given that deciding constitutionality is the courts domain, I don't see them giving this power up.
Parent
Re:'ripeness' is valid (Score:4, Informative)
It appears that Warshak asked for two things:
-an injunction against future searches under 2703(d) without notice
-a ruling on the constitutionality of 2703(d) on the grounds that it allows the violation of a citizen's reasonable expectation of privacy without a warrant
On the first matter, the court's ripeness argument strikes the nail on the head. Warshak knows that he is under investigation now (indeed, he is convicted) so there's no need for judicially-delayed notification.
On the second matter, the court points out that a citizen's reasonable expectation of privacy (REP) when using an electronic mail/data storage service will vary with the terms of service agreed upon between the citizen and the service provider. Thus, whether a citizen has a REP should be decided on a case by case basis.
Warshak should be arguing that he had a REP and that the statute as applied to him was a violation of his 4th amendment rights. I don't think that's a winner, as 2703(d) appears to require probable cause or something like it.
Probable cause:
2703(d):
2703(d) is slightly more broad than probable cause, as there is no need for the records or other information sought to be useful as evidence of a crime. They need merely be relevant and material. For example, a contact list from Warshak's email service provider may give investigators an idea of who to contact to discover more victims of his wire fraud scheme without itself being evidence of said scheme. In this case, though, I suspect that investigators would have had sufficient probable cause had they sought a warrant. As with a warrant, investigators had to prove to an impartial magistrate their reasonable belief that Warshak's service provider had evidence relevant to a specific criminal investigation. The principle advantage gained by using 2703(d) in this case appears to be the delayed notice provision.
Parent
Re: (Score:2)
That's one way to put it. The other way to look at ripeness is the appeals judge can choose to ignore some crime by saying the current case just isn't ripe enough. It's basically a subjective call, but I'd love to see the statistics on the 'ripeness' decisions of the current Supreme Court so-called Justices.
The American legal system might do well to consider some judicial reforms based on international standards. In many countries, the courts can actually look at laws for Constitutional questions before any
Re: (Score:2)
it is very ripe because prosecution did not perform the defense of ALL the evidence gathering options as required under the law and court procedures. On one hand it may not change the outcome of the case because the evidence was legally obtained. On the other hand, they cheated at the rules.. the defensed didn't get the proper, equal time to consider defense against the evidence.
There MUST be some sanction or we don't have the rule of law. That is the problem with so much of what's going on under the Bush
Sorry dude (Score:3, Insightful)
You're guilty and there is no way out of it on a technicality.
The only concern for the rest of us is that we have so many damn laws on the books that many of them are starting to conflict.
Re:Sorry dude (Score:5, Insightful)
the other side BROKE THE LAW. How are THEY getting punished? The only remedy a defendant has is to try to get the case thrown out. The court has no remedy to sit the lawyers that chose to break the rules in jail next to him. The prosecution obviously won't arrest it's own people for breaking the law and this is where the legal system has broken down in the last 40 years or so. There is no court remedy for abuses unless the "prosecution" chooses to file the charges... that's highly unfair and not "justice".
I'm not saying this guy shouldn't go to jail, but according to the facts of the case there should be a lawyer in jail next to him.
Parent
When courts refuse to enforce laws against govt (Score:3, Insightful)
this will further erode citizen respect for the rule of law
Not to mention respect for the courts and gubmint
-which I imagine is already pretty low given the current slide towards a fascist corporate oligarchy (I know that's a little redundant)
-I'm just sayin'
Can our government do any wrong? (Score:2, Interesting)
Another sad day for America.
How will it all end?
life's not fair (Score:2)
Life is not fair. We hope for fairness and justice and are really let down when it doesn't happen.
Fairness and justice are a promise we've been given as children.
After a number of years of being told how fair things should be, we are then taught that we shouldn't quite expect that.
How will it end? It won't be all that different than it is now. People in power will give a hard time to those they don't like, undue favour to those they do like and most everyone else will be ignored. They will just have a whole
Re: (Score:2, Insightful)
The Constitution is very plain on our rights and who exactly is the boss in this country. The trumped up (or even real issues) that members of the government are using to generate fear and exceptions to our true law will come home to roost. They do us all harm in that they are succeeding in taking freedoms that Bin-Laden could not. Our current misadventure in Iraq, although certainly driven more by pandering to corporate greed, is being justified by hyping fear with religious overtones that to outsider
hmm (Score:3, Informative)
While some of its aspects are kind of on the border of due process, it is not a generic "no warrant needed" law.
i'm going to take a radical position (Score:4, Insightful)
my position is: why does anyone expect communications going out on an open wire to be safe from snooping eyes? or even more absurd: why does anyone trust the government to ensure this illusion of privacy?
if you have anything of secrecy, encrypt it, or keep it off the net
i'm not excusing the governments behavior, but what i am saying is that the entire subject matter of privacy on the internet is absurd. at every node someone can snoop, not just the government. isps, criminal interests, corporate interests, just plain random goofballs
its NOT like the government coming into your home and ramsacking your stuff behind a locked door. its you piling your stuff out in the middle of main street and expecting the local police to ensure no one looks at it or takes it, and then crying bloody murder when a cop looks at it. you put it out there, why do you expect privacy? i don't get it, i never understood why this subject matter works people up into such a lather
to me, as soon as i hit send in my email box, if i haven't encrypted it, i EXPECT it to be seen by someone else
its not like i've cynically given up on government, its rather that i recognize the technology is not securable, regardless of whether the government ensists on absolute privacy in electronic communications or is a fascist state who insists on looking at your every word. either way, i don't see how the technology of the internet confirms a position of privacy. its just better to assume someone else is going to see it, right?
so i'm either totally crazy or way ahead of the curve, i don't know
everyone gets so emotional about this issue, and i just don't understand the panic and hysteria over losing a protection that never existed in the first place, or ever could possibly exist, regardless of the law being ultrafascist or ultraprotectionist
Re: (Score:2)
legal protection is not actual protection (Score:2)
i'm going to dress up like a transexual and walk across town. however, as soon as i go into the privacy of my own home, no one is allowed to know i dress up like a transexual anymore
that's what you are trying to tell me
once it gets out there, its out there. it can't be taken back. sure, the law can hem and haw about what you should or shouldn't do with information that is not legally yours, but why do you think that actually protects you? if you put it out there, you've exposed yourself. beginning and endin
Game over. Move on. (Score:2, Insightful)
I freely admit to being a Constitutional junkie, but it seems to me that Steven Warshak's lawyers are grasping at shrinking straws. Their client is eminently, if not braggardly guilty of the crimes he was charged with. There was no statutory misconduct on the part of police or prosecutors in this case. No amount of legal Enzyte will raise (erect?) any reasonable doubt about his guilt. I say send him to jail, confiscate his ill-gotten gains, redistribute them to his victims, and move on.
There are far more om
E-mail Privacy (Score:2)
I should have a reasonable expectation of privacy in my e-mails so far as my service providers and others involved in transporting it.
There is always the chance of some sort of "man-in-the-middle" attack, or misdirection of e-mail or even of the technoids trying to chase down a problem seeing random e-mails on occasion.
BUT, without probably cause and a warrant I should have a complete expectation of privacy in my e-mails in reference to the US federal and local governments.
Unless it is addressed to them, th
What? (Score:2)
Now, the US Court of Appeals for the Sixth Circuit has refused (9-5) to hear Warshak's constitutional challenge to the Act (PDF), claiming that the question raised is 'not yet ripe' for adjudication.
Fuck you, I have a right to challenge this law.
See you in the SUPREME COURT. Yes, if they refuse to hear this in appeals you CAN bypass them.
Why were his messages even available? (Score:3, Interesting)
From the ruling:
"The government sought permission from a magistrate judge to require Warshak's internet service
providers--NuVox Communications and Yahoo!--to turn over Warshak's account information,
"[a]ll [l]og files and backup tapes" and the contents of e-mails that had been "accessed, viewed, or
downloaded" or that were more than 181 days old."
Why were his emails still available to government in the first place? Does this mean that Yahoo maintains copies of every email sent through its system for time immemorial? Looking at both Yahoo's Privacy Policy [yahoo.com], and its policies concerning email [yahoo.com] in particular, I see nothing about archiving emails or the length of time the archives are maintained. Should I infer from this case that any email anyone ever sent to anyone on Yahoo is archived somewhere and available for government perusal at any time?
I know there is an ongoing controversy between ISPs and the Justice Department concerning the archiving of logs containing login information, but how many Yahoo users do you think might be surprised to hear that all their email is archived, too? Why isn't Yahoo required to tell its users about these policies, which seem to raise much bigger privacy concerns than whether they might send me an "Alert" once in a while?
Re: (Score:2, Insightful)
I use yahoo and windows. And yes I expect them to keep MY mail.
MY MAIL.
Of course I think my mail should be private.
Sadly,
Re: (Score:2)
Yes, of course, but for how long? What are their retention policies? Is there any plausible reason that they'd need to maintain backups for longer than, say, six months (which is the time period at issue in this case)? For a service as large and as busy as Yahoo's, I could see an argument that backups more than a month old are too out of date to be useful.
What if I were using a provider offering a POP3 service? Once I download my mail (assuming I don't enable the "leave mail on server" switch), it should b
Re:Contact the court here: (Score:4, Informative)
Should read:
Court of Appeals
540 Potter Stewart U.S. Courthouse
100 East Fifth Street
Cincinnati, Ohio 45202
Phone: 513-564-7000
Parent
Re: (Score:2)
well, a flurry of letters politely explaining why the 9 judges are breathtakingly incompetent, dangerous morons, not fit to breath the same air as the rest of us has a 1% chance of getting something changed, and a 100% of making the person who sent them feel like they've got something changed.
Re: (Score:2)
I don't want a judiciary that would knuckle under to those kinds of letters. They made a legal decision, and I think a wrong one, but reading the opinion they weren't so wrong as to constitute "morons."
Re: (Score:2)
I haven't read it, I was just answering the question.
I don't know if I'd want a judiciary which knuckles under to abusive letters either, (though I would like one which won't wave a piece of paper about shouting 'we must do X because the paper says so' when X is clearly wrong), that's why I gave a low percentage chance of something being done. You can replace it with 0.0000001% if you want.
Re: (Score:2)
Doubtful, since the opinion was produced by the 6th Circuit.
Re: (Score:2)
If I leave my door unlocked it is still a crime to enter without permission, and it is still unconstitutional to do a search without cause.
Also, email is just as secure as traditional, envelope contained, mail, more so even, since intercepting email requires skill, intercepting mail just requires a working pair of hands. The difference is that with snail mail the law protects privacy instead of stripping it away.
Re:Everevolving technologies? (Score:4, Insightful)
Who are you to decide that? Like I said in a post on a similar topic [slashdot.org]:
... It's not like mailing a postcard, it's like sending an electrically encoded text message over a packet-switched data network where the only expected viewing point is at the intended recipient's terminal; this is how the e-mail protocol was designed to work. Sure, a malicious party can read it because it's not encrypted, but someone can easily slice open a postal mail envelope and read the contents of that, too.
"...the canonical user interface icon for e-mail is... a sealed envelope. Even ISPs will present their e-mail services with such an image.
In other words, the snagging point is the definition of "expectation of privacy" -- but the situation is really quite simple: The average user simply expects privacy, but the government is trying to force them to abandon that expectation, so they can then go and install ubiquitous e-mail surveillance without violating the letter of the US Constitution. The government is trying to win by arguing semantics, so what I find hardest to believe is that anyone is taking all this blatant skullduggery seriously.
The bottom line is, since a non-trivial effort has to be made to read the contents, and since the service has always been presented as a "sealed letter", the average user is not unreasonable in expecting privacy."
Parent
Re: (Score:2)
it's just like sending a letter in the mail... you don't expect to "encrypt" it, just send it in a normal envelope and ask nicely not to read it. But you don't expect the post office to start a "letter reading" department either.
Re: (Score:2)
how about "ripened as in a dead skunk under the front porch in July"?