for reference, the Fourth Amendment to the Constitution of the United States:
"The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized."
I would like to think that "papers" in the text would also refer to electronic documents, but alas that seems to not be the case.
This is one of those cases where the saying "In Theory, Practice and Theory are the same, but in practice they're not." seems to fit.
The relevant issue is where these documents are located, and whether it's reasonable to have a privacy interest in documents transmitted in plain text over the internet. As an analogy: if you leave your physical papers in someone's garage, you cannot invoke the 4th amendment if the police find those documents otherwise lawfully. It's not reasonable for you to claim a privacy interest in documents over which someone else has unrestricted control.
That's the nature of an electronic document "in the cloud." Countless people have access to that document, at the service provider and also at intermediate routing nodes. If you use Google or Facebook, that information is even routinely scanned for advertising purposes. That's the nature of the internet. It's built on routing plain text information between unrelated nodes. Treating this information that is physically not private as "logically private" is a social fiction based on trusting service providers.
That's the question courts are faced with. Not whether electronic documents enjoy 4th amendment protection (they clearly do), but whether to indulge the fiction that documents which are as a factual matter not private should nonetheless be treated as private for 4th amendment purposes. There might be good reason to do that. There might also be good reason to stop short of fully endorsing the current status quo, and requiring service providers to make certain privacy guarantees in order for documents on their systems to enjoy 4th amendment protections.
We've already established the NSA is not acting within the constraints of law. That's what Snowden revealed. One cannot rely on the law (the constitution or any other) to gain safety from government spying.
What we've established is that the NSA is acting enough within the constraints of the law that different courts disagree as to the legality of its actions.
Acting within the constraint of the law means always acting within the constraint of the law, not just when it's convenient.
Oh, I forgot that I left my [really important item] in
that desk I let you borrow, and your backdoor was unlocked.
Just thought I'd come in and grab it.
What if the person sends their best friend over to retrieve said important item?Could this person ask a police officer to retrieve it (say the person is handicapped)?
So we're borrowing these "cloud desks". Does that mean the stuff I've placed in the desk is also up for grabs?
Under your analogy, not only can they retrieve the item from the desk, but they also get to know all sorts of things about how I personally used the desk.
I'm sorry, but I don't like it when you leave the
drawers of my cloud desk open like that. So, I
took a picture of it so I can keep track of its use.
Now, would you agree to a borrow of a desk if you are expected to not only maintain its quality of state, but also it is that you are expected to record your every interaction with it?They're recording it for you — fair enough, but is the loaner permitted to share those photos with other people? When does it end?
So the loaner isn't a government. But extrapolating from this: The Fourth Amendment gives us a clear answer to this question. Sure, it's not private, but that is beside the point. How I use the desk, technically, is not private, but something stops the loaner from telling the entire neighborhood about how I used the desk. That something is unwritten, often described in terms of "the rules of decorum" or simply: it's not worth it.
Thank Goodness Our Founding Fathers Decided to Write Something Down that Explicitly Answers this Question — When does it end? — in an Explicit Context that Can Be Governed.
Heck, by this Decision, our government can share our metadata with FOREIGN ENEMIES at their whimsy based on international agreements that statistically legislate over terror. This Decision just makes us a metastatistic, ultimately collatoral damage of a digital war.
They're exacerbating this institutionalized equivocation exactly so that they can cultivate our consumerist behavior and behavior as content producers for their own financial gain. They're exploiting exactly the fact that the Founding Fathers could not have foreseen the digital age. They're doing this on purpose:
ooops sry i didn't know what an internat wuz im just too old i guess
They're not doing their due diligence to correctly interpret, adapt, and apply these laws. And the Judicial Branch is folding to monied interest indirectly.
You write: "It's not reasonable for you to claim a privacy interest in documents over which someone else has unrestricted control."
If my wife has access to it, then I am not protected. If I live in an apartment, then the landlord has access. If I rent a VPS on the internet, but the files are not connected to the internet (ssh access only, no other port open), the VPS provider has access.
No, it's not about someone else having access. It's about your expectation of privacy. If you expect something to be private (like my https gmail, or my unshared google drive files, or my unshared dropbox files...) then it should be considered the same as a paper diary in a drawer in your nightstand.
If you are led to believe the information will be kept private from government access (except as outlined in the 4th amendment), then you have a right to expect privacy.
I know very well how the internet works. I know there is more that can be done physically than legally, but the privacy expectation is a legal standing, not a physical standing.
The NSA, however, and the Patriot Act (such a horribly-named law) which seems to allow it, have ignored this legal restriction, and have, because of physical access, obtained data for which US citizens had reasonable expectation of privacy from search by the government.
You write " but whether to indulge the fiction that documents which are as a factual matter not private should nonetheless be treated as private for 4th amendment purposes." Ah, but that's exactly what the 4th amendment addresses. While the government can physically obtain such information, they are prohibited to do so by law. So it's not a fiction, it's the law.
Apartments and safe deposit boxes are actually an excellent example of my point. There are legal and cultural restrictions on how a landlord or bank may access your apartment or safe deposit box. So those are protected by the 4th amendment. There are no such restrictions when it comes to data hosted in the cloud. If your landlord or your bank routinely rifled through your apartment or safe deposit box, as internet companies do with your digital accounts, then they very well might not be protected by the 4th amendment.
> It's about your expectation of privacy. If you expect something to be private
No, it's about "reasonable" expectation of privacy. And it's about whether that expectation is objectively reasonable, not subjectively reasonable. The fact that people have access to your documents is not determinative of whether an expectation of privacy is objectively reasonable, but is a strong factor in the analysis. Your expectation of privacy is a lot more reasonable when you're talking about an apartment, which a landlord may enter without permission only in an emergency, then when you're talking about an online account your service provider routinely rifles through in order to target advertising.
> While the government can physically obtain such information, they are prohibited to do so by law. So it's not a fiction, it's the law.
Sure, the 4th amendment is a fiction in the sense that all law is a fiction. My point is that the boundaries of the law do not need to be coextensive with the social fiction. Just because many people treat Facebook accounts as "private" does not mean that doing so is objectively reasonable in light of how many people at Facebook have access to those accounts, and in light of Facebook's data mining of those accounts. The appropriate legal standard may well be higher. E.g. expectation of privacy is only objectively reasonable when online accounts are end-to-end encrypted and not routinely data-mined.
Should there not be 4th amendment protection in that case? And if so, and if the NSA accessed such data, how could their access possibly have been legal? The Patriot Act is not allowed to contradict the Constitution, and if it does, the Constitution takes precedence.
Also, it matters not if it's encrypted, on the way, because the NSA has the capability to compromise the machines that contain the private keys. (Hackers with keyboards or goons with guns in datacenters).
I'll let you follow the implications from there, but I'm afraid this situation is much more serious than you seem to realize.
The problem isn't that all branches are in on it, it's that they aren't. There isn't communication between the three branches, so when the gory details get revealed ,be it Hoover's FBI antics, Nixon's abuses, or now, the NSA's eagerness, other branches fight back.
If you look at laws regarding privacy historically, there's a general tendency for more, not less. One step back doesn't invalidate a whole system.
If gay marriage and pot legalization can become real, serious issues that the electorate cares passionately about then so can surveillance and the extension of essential liberty onto the internet.