Ninth Circuit Says NSA's Bulk Phone Records Collection Was Illegal, Most Likely Unconstitutional

from the suck-it,-Clapper dept

The NSA's bulk phone records collection is dead. It died of exposure. And reform. It was Ed Snowden's first leak back in 2013. A few years later, a reform bill prompted by Snowden's leaks revamped the program, forcing the NSA to tailor its requests for phone records from telcos. The NSA used to collect everything and sort through at its leisure. But once the program eliminated the "bulk" from the NSA's bulk collection, the NSA couldn't figure out how to obtain records without getting more than it was legally allowed to take.

This recent courtroom win may have come a bit too late to matter much. But it's still a big win. In a case involving material support for terrorists by Somali citizens living in the United States, the Ninth Circuit Court of Appeals has arrived at the conclusion that the NSA's bulk phone records collection is/was illegal.

Here's the short summary from the court [PDF]:

We conclude that the government may have violated the Fourth Amendment and did violate the Foreign Intelligence Surveillance Act (“FISA”) when it collected the telephony metadata of millions of Americans, including at least one of the defendants…

And here's what follows that ellipsis, which should be read while accompanied by the saddest trombone:

… but suppression is not warranted on the facts of this case.

Also, the court does not make a declaration one way or the other whether the DOJ ignored its duty to inform accused suspects that FISA-authorized surveillance provided some of the evidence being used against them. The DOJ rarely does this so it's safe to assume it didn't do it here either. But the court says even if the DOJ ignored this requirement, it didn't have much of an effect on the case.

The government argued (as it has countless times) that it could get all the phone records it wanted whenever it wanted because they're just "third-party records." Wrong, says the Ninth Circuit. The Smith v. Maryland decision that created the Third Party Doctrine is over 40 years old. Technology and Fourth Amendment jurisprudence have both evolved since that point. Using a pen register to gather one suspect's phone records is not even the same thing as gathering millions of phone records created by millions of non-suspects.

The distinctions between Smith and this case are legion and most probably constitutionally significant. To begin with, the type of information recorded in Smith was “limited” and of a less “revealing nature” than the telephony metadata at issue here. Carpenter, 138 S. Ct. at 2219. The pen register did not disclose the “identities” of the caller or of the recipient of a call, “nor whether the call was even completed.” Smith, 442 U.S. at 741 (quoting United States v. New York Tel. Co., 434 U.S. 159, 167 (1977)). In contrast, the metadata in this case included “comprehensive communications routing information, including but not limited to session identifying information (e.g., originating and terminating telephone number, International Mobile station Equipment Identity (IMEI) number, International Mobile Subscriber Identity (IMSI) number, etc.), trunk identifier, telephone calling card numbers, and time and duration of call.”

[...]

The information collected here was thus substantially more revealing than the telephone numbers recorded in Smith.

Not only was it more revealing, there was also much, much more of it.

The duration of the collection in this case—and so the amount of information collected—also vastly exceeds that in Smith. While the pen register in Smith was used for a few days at most, here the NSA collected Moalin’s (and millions of other Americans’) telephony metadata on an ongoing, daily basis for years.

The court says the discussion about reasonable expectations of privacy has already occurred. The public has disagreed with the government on this topic for at least seven years.

Society may not have recognized as reasonable Smith’s expectation of privacy in a few days’ worth of dialed numbers but is much more likely to perceive as private several years’ worth of telephony metadata collected on an ongoing, daily basis—as demonstrated by the public outcry following the revelation of the metadata collection program.

Even if the government is right -- that the collection of one person's phone records does not violate the Constitution -- stretching that same theory to cover millions of phone records doesn't work. A single set of records only reveals so much. Millions of records allow analysts to tie multiple people together and make some pretty good assumptions about their private lives -- who they talk to, when they're most active, what businesses, churches, etc. they frequent.

But the Appeals Court does not decide the Fourth Amendment question.

For all these reasons, defendants’ Fourth Amendment argument has considerable force. But we do not come to rest as to whether the discontinued metadata program violated the Fourth Amendment because even if it did, suppression would not be warranted on the facts of this case.

If the government chooses to challenge this decision, the Supreme Court may draw that conclusion. Considering this isn't going to cost it any evidence, the government may let this one ride, even if it does draw the line in the Section 215 sand: the bulk collection violated the law that authorized it.

The government more or less argued the ends justify the means. The statute says all data collected must be "relevant to an authorized investigation." Since this involved an investigation, gathering phone records on millions of non-targets was somehow OK. Wrong, says the Ninth:

[W]e do not accept the government’s justification in this case that “the call detail records at issue here—the records that suggested that a particular U.S.-based telephone number may have been associated with a foreign terrorist— were clearly relevant to a counterterrorism investigation.” That argument depends on an after-the-fact determination of relevance: once the government had collected a massive amount of call records, it was able to find one that was relevant to a counterterrorism investigation. The problem, of course, is that FISA required the government to make a showing of relevance to a particular authorized investigation before collecting the records.

That means the bulk records collection was unlawful.

We hold that the telephony metadata collection program exceeded the scope of Congress’s authorization in section 1861 and therefore violated that section of FISA.

It seems unlikely the government will attempt to restart the program the NSA divested itself of after it became apparent the technical issues of complying with the USA Freedom Act weren't worth the effort. The program was almost always useless. But the requirements added by the reforms meant the NSA had to tailor its record collection, which it found difficult to do after years of just getting everything.

At the end of all of this, it's still a loss for the defendants. No evidence is suppressed and the court's review of the classified record has led it to the conclusion the records obtained through Section 215 had little to add to the case built against the four accused terrorist supporters. The wins belong to the public and longtime critics of the NSA's bulk collection program. And if the collection of phone records is unlawful, any other "third party" records the NSA is still collecting in bulk have been illegally obtained. That might bother the government enough to appeal this part of the decision. But it risks losing everything if it does.

Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: 4th amendment, bulk collection, mass surveillance, nsa


Reader Comments

Subscribe: RSS

View by: Time | Thread


  • icon
    Koby (profile), 3 Sep 2020 @ 11:55am

    Appeal Will Tell Alot

    If the bulk collection activity has truly ended, then they won't appeal. But if they still operate a surreptitious collection program, then they will.

    reply to this | link to this | view in chronology ]

  • icon
    Upstream (profile), 3 Sep 2020 @ 1:09pm

    Should we believe the NSA?

    The NSA has long since lost any public trust it may once have had. Should we really believe the NSA when it says it has stopped the bulk collection of phone and other communication data? Particularly after they have spent enormous sums building data-centers and computer systems specifically to hold and process that bulk data that they had been collecting and were clearly planning to continue collecting?

    Or should we think that they are just going to be more covert going forward, and perform evidence laundering, aka "parallel construction," with the data collected (that is, if and when they ever find another possibly criminal needle in that huge evidence haystack)?

    reply to this | link to this | view in chronology ]

  • identicon
    Anonymous Coward, 3 Sep 2020 @ 3:04pm

    • … but suppression is not warranted on the facts of this case.

    • But the court says even if the DOJ ignored this requirement, it didn't have much of an effect on the case.

    • But we do not come to rest as to whether the discontinued metadata program violated the Fourth Amendment because even if it did, suppression would not be warranted on the facts of this case.

    Sounds about right. @@

    reply to this | link to this | view in chronology ]

  • icon
    Uriel-238 (profile), 4 Sep 2020 @ 12:45am

    And Snowden remains a fugitive of the US...

    ...Because embarrassing the regime is a greater crime than exposing government wrongdoing is a public service.

    reply to this | link to this | view in chronology ]

  • identicon
    TRX, 4 Sep 2020 @ 10:46am

    No biggie. The telcos will, per the contracts every customer signs, "share business data with partners," who will happen to be fusion centers who will then pass the data on to the NSA. Everyone will have clean hands.

    Remember Verizon, among others, was giving the NSA data just because they asked for it, no warrant necessary. There's no reason to expect they'll suddenly decide not to cooperate.

    "Nothing to see here, move along."

    reply to this | link to this | view in chronology ]

  • identicon
    none, 8 Sep 2020 @ 4:47pm

    NO WARRANT REQUIRED!

    they have found a loophole to get around the "warrant" requirement, they just BUY it from a data mine! and usually get better data then any old bulk collection with a warrant....
    time for a law that prevents 3rd party collection and sale of data!
    for example when a business collects your data for billing and or other use, they CAN NOT sell it to others for any reason (advertising, marketing, GOV. data whores).

    reply to this | link to this | view in chronology ]

    • icon
      Uriel-238 (profile), 8 Sep 2020 @ 8:39pm

      Data mines

      If the justice system had any respect for the fourth amendment then data from mining services would be inadmissible, as would any information from investigations that prompted from such a service.

      The justice system has no interest in enforcing law but in filling up prisons and scoring convictions, preferably from target demographics of the population.

      It would be difficult to argue the legitimacy of the justice system, except they have guns and are eager to massacre any group that challenges their position. It means all of our convicts are not actual criminals but political prisoners, to the last.

      reply to this | link to this | view in chronology ]

  • icon
    Tanner Andrews (profile), 13 Sep 2020 @ 5:41am

    Any more such victories and we shall be ruined

    The wins belong to the public and longtime critics of the NSA's bulk collection program

    Yes, the public "wins" by having its rights trampled with no remedy to be had and no deterrent to future government misconduct. Many people would call this a loss rather than a win.

    reply to this | link to this | view in chronology ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here



Subscribe to the Techdirt Daily newsletter




Comment Options:

  • Use markdown. Use plain text.
  • Remember name/email/url (set a cookie)

Close

Add A Reply

Have a Techdirt Account? Sign in now. Want one? Register here



Subscribe to the Techdirt Daily newsletter




Comment Options:

  • Use markdown. Use plain text.
  • Remember name/email/url (set a cookie)

Follow Techdirt
Special Affiliate Offer

Essential Reading
Techdirt Insider Chat
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it
Close

Email This

This feature is only available to registered users. Register or sign in to use it.