Review Federal ECPA
Extra Protection from CalECPA
What can the Govt get & how?
What can I get & how?
Brainstorms
SB 178: CalECPA
- BUT Beware PC § 1546.2(b)(1): Govt may request to delay notice by sworn affidavit
- Court shall grant only if there's reason to believe notice "may have an adverse result" AND delay cannot exceed 90 days
- Unless PC § 1546.2(b)(2): court may grant extensions of up to 90 days - renewable
- PC § 1546.2(b)(3): upon exp of delay, Govt shall serve target with notice & copy or summary of info obtained
CalECPA
What can the Govt get & how?
SB 178: CalECPA
Exceptions:
- If device is seized from CDCR inmate in a restricted area of a correctional facility
- Device considered to be abandoned, lost or stolen; BUT police can only access info to identify, verify or contact owner
- Emergency involving danger of death or serious physical injury
- Subpoena issued in connection with a non-criminal investigation
- ECI from 3rdPP with warrant or wiretap
- EDI (including CSLI!) with warrant if by means of a physical interaction or electronic communication with the electronic device
- subscriber info with subpoena (no warrant needed )
After AB 929
Suppression
- PC § 638.55(a): MTS @ any stage for viol. of 4th Am or "of this chapter"
- See People v. Jackson (2005) 129 Cal.App.4th 129, 152-53
- PC § 638.55(b): Suppression teeth - AG may commence civil action to compel any government entity to comply
- Survives Truth in Evidence because passed w/ 2/3 in both houses! Senate: 34-4-2 (85%) Assembly: 57-13-10 (71%)
Stephanie Lacambra & Lee Tien
Electronic Frontier Foundation
- Use procedures in PC § 1538.5
After AB 929
- PC § 638.55(c): Any individual who is the target or any service provider may petition the court to void or modify or order the destruction of any info obtained in violation
PC § 1546.4(a): Can move to suppress “any electronic information obtained or retained” in violation of 4th Am. or "of this chapter…”
SB 178: CalECPA Overview
- New Mechanism for CA law enforcement to obtain PR (outgoing) /TT (incoming)
Suppression
SB 178: CalECPA
- PC 1546.1-.2: Requires warrant and notice before cops obtain:
- PC § 638.51(a) requires court order for PR/TT
- “electronic communication info” from a 3rd party service provider
- PC § 638.52(b) requires probable cause that PR/TT will lead to evidence
- “electronic device info" by means of physical interaction or electronic communication w/electronic device
- PC § 638.52(c) mandates cops can't collect location information beyond phone number
PC § 1546.4(a) - Statutory suppression!!
- PC § 638.55: suppression remedy!!
Extra Protection from CALECPA
- Under Federal law (SCA) - Courts can authorize installation of Pen Register/Trap Trace if “relevant to an ongoing criminal investigation” per 18 U.S.C. § 3122(b)(2)
- CA law enforcement cannot rely on federal law to obtain PR/TT but can use search warrant per:
- 86 Ops. Cal. Atty. Gen. 198 (2003)
- 69 Ops. Cal. Atty. Gen. 55 (1986)
Review Federal ECPA
Effective Jan 1, 2016:
- AB 929: Adds PC §§ 638.50-638.53
- SB 178: California Electronic Communications Privacy Act (CalECPA) - Adds PC §§ 1546-1546.2, & 1546.4
- Electronic Communication Service (ECS) v. Remote Computing Service (RCS)
- Content v. Non-content
- Govt can get non-content from ECS or RCS
Non-Content
Understanding Privacy in the Digital Age
- For ECS & RCS, Govt may use:
- PC warrant
- 2703(d) order
- subpoena (admin or Grand Jury)
What is at stake?
How does ECPA work v. CALECPA?
How does CALECPA help me in my cases?
Defense Access:
FB v. Sup Ct.
- SFPD officer testified about “Cyber banging” before grand jury
- Defense issued pretrial subpoena to Facebook, , and Instagram for social media postings to show defendant was threatened by key prosecution witness
What can I get & how?
- content records with account holder’s express consent (18 USC § 2702(c)(2); Negro v. Superior Court (2014) 230 Cal.App.4th 879 (COA 6th Dist))
BRAINSTORM
- non-content, subscriber records by subpoena (18 USC § 2702(c)(6); PC §1326)
- content records with consent compelled by court (Juror Number One v. Superior Court (2012) 206 Cal.App.4th 854 (COA 3rd Dist); 1546.1(f))
ELEMENTS
- Defense cannot get content without consent (18 U.S.C. § 2702(a); O’Grady v. Superior Court (2006) 139 Cal.App.4th 1423 (COA 6th Dist))
1. Companies moved to quash the subpoena under the SCA pre-trial
2. Trial Ct (Judge Chan) denied MTQ and ordered pre-trial prod. for in camera review
3. COA reversed: SCA doesn't viol. DP, CPC, or Confrontation Clause pre-trial
4. CA Sup Ct. granted review 12/16/15
5. Amicus by SF Pub Def filed 2/6/17
Defense Access:
FB v. Sup Ct. imeline
copy and paste as needed and take advantage of an infinite canvas!
Includes Historical cell site records & info obtained via Stingray or IMSI catcher!
PC § 1546(g): “Electronic device information”
is “any information stored on or generated through the operation of an electronic device, including the current and
prior locations of the device.”
SB 178: CalECPA
SB 178: CalECPA
Notice Requirement
- For warrant or emergency cases, notice must be served to “the identified targets of the warrant or emergency request.”
- Notice must indicate info about recipient is being sought and must state “with reasonable specificity the nature of the government investigation.”
SB 178: CalECPA
Notice Requirement
- Notice must include a copy of the warrant or, in emergency cases, shall provide a written statement with facts to support the declaration of an emergency situation.
- This notice must be provided to the recipient at the same time as the warrant’s execution, or 3 days after the data is collected when it’s an emergency case.
SB 178: CalECPA
When a service provider voluntarily shares ECI or subscriber info, govt must destroy the data within 90 days, unless
- there’s specific consent from the sender or recipient of the electronic communications,
- a court order is obtained, or
- if govt reasonably believes info is related to child pornography and retains it within a “multiagency database” on child pornography or related investigations
Notable pts: no case has addressed whether a defendant may ask the court to issue a “trial subpoena” under § 2703(b)(1)(B)(i) of SCA. The statute limits production to a subpoena issued by “a governmental entity” & PD is not GE.
Notable quote: "Although the issue is not now before us, we question whether such a limitation would be constitutional in light of the requirements of Davis and Hammon."
FB @ 460, FN 17
Defense Access:
FB v. Sup Ct.
(1) Did COA properly conclude defense is not entitled to pretrial access to records in the possession of 3PP [FB, Instagram, and Twitter] under SCA (18 U.S.C. § 2701, et seq.) and Hammon (1997) 15 Cal.4th 1117?
(2) Does an order barring pretrial access to the requested records violate defendants' right to compulsory process and confrontation under 6th Amend or their DP right to a fair trial?
(3) Should court limit or overrule People v. Hammon? (Held: no 6th Am rt to pre-trial disclosure of priv. info)
Defense Access:
FB v. Sup Ct. Pending issues
Defendant Derrick Hunter argues:
1. DP & 6th Am requires defense access to Social Media records before trial
2. Denying Pretrial Access to Defense, but not Prosecution, Violates DP under Wardius v. Oregon
3. CPC Compels Pretrial Production by SDT
4. Denying Pretrial Production denies Defendant Effective Assistance of Counsel in Plea Negotiations
5. This Court Should Overrule Hammon
Defense Access:
FB v. Sup Ct.
Defense Access:
FB v. Sup Ct.
SF Pub Def Supp Amicus argues:
1. Public postings not covered by SCA
2. Social media communication is not “private”
3. SCA restrictions on disclosure must yield to Defendant's 6th Am & DP rights to obtain relevant information for defense, subject to trial court oversight of privacy interests
Summary Review ECPA v CalECPA
Brainstorms
- what kinds of digital search issues are you encountering in your cases?
- Are cops requiring clients to divulge passwords and login info?
- Is probation/parole requiring digital search as a term of supervision?
- Are police executing digital searches without a warrant?
- How do we get social media recs now?
- Defense is not a governmental entity covered by SCA (US v. Amawi, 552 F. Supp. 2d 679 (N.D. Ohio 2008))
- Worried about “anomalous result” of DA needing warrant to get records but defense could get with ex-parte SDT (Facebook, 240 Cal.App.4th at 224)
- FB COA reasoned: defense has other ways to access:
- Get from DA who got records w/ search warrant
- Subpoena witness directly to produce materials
- Wait for TRIAL - trial court far better equipped to balance Defendant’s rt to effective cross-exam and witness privacy (FB @ 225)
Defense Dilemma
But beware: Leon's Good Faith Exception
- No exclusion when police rely on good faith in warrant/order later found invalid US v. Leon, 468 U.S. 897 (1984)
- However, cops can't rely on “facially deficient” order:
- 47 U.S.C. § 1002(a) (1994): Can't use PR to get CSLI
- People v. Blair (1979) 25 Cal. 3d 640: State police cannot obtain electronic records without a warrant
SB 178: CalECPA
PC § 1546(f): “Electronic device” is
“a device that stores, generates or transmits information in electronic form” (Ex. Cell phone, computer, tablet, USB drives, digital camera, etc.)
SB 178: CalECPA
SB 178: CalECPA
PC § 1546.1(e): Issuing court may
- Appoint special master to supervise the search
- Require irrelevant information be destroyed ASAP
Content
- ECS content < 180 days old: Govt must get PC warrant for content
- ECS > 180 days & RCS: Govt may:
- PC warrant
- 2703(d) order
- subpoena (admin or Grand Jury)
CA PC § 1546(l): ECI excludes “subscriber information”, which is
limited to name, address, phone number, email address and other contact information, account number, length of service and types of service
SB 178: CalECPA
PC § 1546.1 (b), (c): Police need warrant or wiretap to compel production or access to:
- ECI from service provider
- Electronic device information from any person or entity other than the authorized possessor
Warrant Requirement
SB 178: CalECPA
Compare to 18 U.S.C. § 2703(c)(2)
SB 178: CalECPA
PC § 1546(d): “Electronic communication info” (ECI) includes:
- “any information about an electronic communication or the use of an electronic communication service…”
- metadata, IP address information, cell site location records, etc.
PC § 1546.1(d): Warrant must
- Describe with “particularity” information to be seized by specifying time periods covered and target individuals or accounts
- Seal irrelevant information from review without further court order
Warrant Requirement
SB 178: CalECPA