Author: marcia

EFF has posted documents shedding light on how law enforcement agencies use social networking sites to gather information in investigations. The records, obtained from the Internal Revenue Service and Department of Justice Criminal Division, are the first in a series of documents that will be released through a Freedom of Information Act (FOIA) case that EFF filed with the help of the UC Berkeley Samuelson Clinic.

One of the most interesting files is a 2009 training course that describes how IRS employees may use various Internet tools — including social networking sites and Google Street View — to investigate taxpayers.

The IRS should be commended for its detailed training that clearly prohibits employees from using deception or fake social networking accounts to obtain information. Its policies generally limit employees to using publicly available information. The good example set by the IRS is in stark contrast to the U.S. Marshalls and the Bureau of Alcohol, Tobacco, Firearms and Explosives. Neither organization found any documents on social networking sites in response to EFF’s request suggesting they do not have any written policies or restrictions upon the use of these websites.

The documents released by the IRS also include excerpts from the Internal Revenue Manual explaining that employees aren’t allowed to use government computers to access social networking sites for personal communication, and cautioning them to be careful to avoid any appearance that they’re speaking on behalf of the IRS when making personal use of social media.

The Justice Department released a presentation entitled “Obtaining and Using Evidence from Social Networking Sites.” The slides, which were prepared by two lawyers from the agency’s Computer Crime and Intellectual Property Section, detail several social media companies’ data retention practices and responses to law enforcement requests. The presentation notes that Facebook was “often cooperative with emergency requests” while complaining about Twitter’s short data retention policies and refusal to preserve data without legal process. The presentation also touches on use of social media for undercover operations.

Over the next few months, EFF will be getting more documents from several law enforcement and intelligence agencies concerning their use of social networking sites for investigative purposes. We’ll post those files here as they arrive.

Our cell phones aren’t just for calls anymore. They hold our address books, our calendars, our emails, and our grocery lists. They may even include things like a list of questions to ask your doctor, pictures of your girlfriend, or URLs of web sites you’ve visited. When can police search your phone and look at all this information?

That’s the question that EFF is asking a court in California to consider. In People v. Taylor, police in Daly City, California seized a suspect’s iPhone during his arrest. Hours later, investigators bypassed the password and searched through the data on the device without a search warrant. After the officers realized that the information was too extensive to write down, they finally obtained a warrant to search the phone.

EFF has urged the court to suppress evidence gathered by police from the suspect’s phone during the warrantless search, including contacts, called phone numbers, emails, text messages, Internet search history, and photos. EFF has also asked the judge to quash the warrant that was eventually issued in part based on the information illegally accessed on the phone.

Of course, criminal suspects will have a lot of information on their cell phones that might be of interest to police, and when investigators have enough evidence to get a warrant, they should be able to search these devices. But if the police can search anyone’s cell phone at any time, then everyone’s privacy is at risk.

The court will hear the motion on February 18 at 9:00 a.m. in Redwood City, California.