Device and data privacy · U.S. · 2018
Carpenter v. United States
585 U.S. 296 (2018)
The Supreme Court held that acquiring historical cell-site location information from a wireless carrier is a Fourth Amendment search, refusing to extend the third-party doctrine to a comprehensive record of a person's movements. The government generally needs a warrant, not a subpoena, for this data.
“Whether the Government employs its own surveillance technology as in Jones or leverages the technology of a wireless carrier, we hold that an individual maintains a legitimate expectation of privacy in the record of his physical movements as captured through CSLI.”
Issue
Investigating a string of robberies, the government obtained months of Carpenter's historical cell-site location information from his wireless carriers under a Stored Communications Act order — a showing well short of probable cause. Under Smith and Miller, records voluntarily conveyed to a third party carry no Fourth Amendment protection. The question was whether that third-party doctrine covers a time-stamped log of everywhere a phone, and so its owner, has been.
Rule
The third-party doctrine does not extend mechanically to every class of record a business holds. Given the unique nature of cell-site records — their depth, breadth, comprehensive reach, and the inescapable and automatic character of their collection — the fact that a carrier holds them does not by itself overcome the user's claim to protection. Acquiring such records is a search, and the government must generally obtain a warrant supported by probable cause before compelling their production.
Application
The Court stressed what made CSLI different from the bank records and dialed numbers of the older cases: carrying a phone is indispensable to modern life, the logging happens without any affirmative act by the user, and the resulting record is retrospective, effectively giving the government a time machine over years of movements. The decision was expressly narrow — it did not disturb conventional surveillance, business records generally, or techniques involving foreign affairs or national security — but within its lane it rejected the mechanical application of precedent to a technology those precedents never imagined.
Conclusion
Reversed and remanded: the Stored Communications Act order was not enough, and a warrant is generally required for historical CSLI of this scope. Carpenter is now the pivot for every argument that a new category of aggregated digital records — location, telemetry, health, or platform data — deserves protection the third-party doctrine would once have denied it.
What this means in practice
Carrier location data remains obtainable in civil matters — by subpoena, consent, or from the device itself — but Carpenter defines the sensitivity tier it occupies, and tribunals increasingly expect location evidence to be handled with protective orders and scoped protocols. Forensically, the richer source is usually the phone: its own location artifacts often exceed what carriers retain, and a documented extraction with chain of custody is what makes the timeline usable in court.
Related services: Mobile Device Forensics · Litigation Support & Evidence Preservation · Privacy
From our work
Need this looked at properly?
Our examiners and testifying experts work these questions for a living. Tell us what you're facing.
Reviewed by Law & Forensics. See our editorial standards.
This summary is provided for general information and is not legal advice. The linked opinion is the authoritative source; citation and quotation verified against the CourtListener record (cluster 4510032).
