Tag: solid state qubit memories single photon

A new Treasury Department watchdog report warns that law-enforcement agencies may not be on firm legal footing when they use cellphone GPS data drawn from mobile apps without obtaining a warrant first.

In a review of the Internal Revenue Service’s use of a commercial platform that allowed the agency to track cellphones, the Treasury Department inspector general for tax administration said that a landmark 2018 Supreme Court case might preclude the warrantless tracking of criminal suspects through location data generated by weather, game and other apps. The report encouraged stricter controls on use of the data.

Many government lawyers have concluded that the decision in Carpenter v. United States doesn’t apply because it addresses data held by cellphone carriers that contain a subscriber’s personally identifying information, rather than GPS location data drawn from apps, which doesn’t.

The watchdog’s report is only a recommendation, and its interpretation of the law hasn’t been blessed by any court. Yet it is the first known government analysis to raise serious doubt about the legality of law-enforcement and intelligence agencies purchasing highly revealing information generated by U.S. cellphones and other digital services.

The audit, requested by Sens. Ron Wyden (D., Ore.) and Elizabeth Warren (D., Mass.), examined the IRS Criminal Investigation division’s use of a commercial software platform provided by Venntel, a company that sells to the government access to GPS data gathered from apps. Venntel’s parent company, Gravy Analytics, caters to corporate clients. The IRS experimented with Venntel’s platform as an investigative tool in 2017 and 2018 but stopped using the software.

Mr. Wyden’s office provided a copy of the inspector-general report to The Wall Street Journal.

“I’m troubled agency lawyers were so cavalier about American’s privacy rights that they green-lit the warrantless purchase of location data with such minimal legal analysis. This shows again that Americans need strong new laws protecting our 4th Amendment rights to ensure government credit cards don’t replace court orders,” Mr. Wyden said in a statement. He has been working on legislation to address the issue.

In approving the agency’s project, IRS lawyers had maintained “that data obtained from marketers of information like Venntel is not subject to a warrant because the data is collected by apps loaded on cellphones to which the phone users voluntarily granted access,” the inspector general found.

But in the Carpenter case, the court rejected a similar argument about location data collected by cellphone carriers.

Cellphone-location records are an “exhaustive chronicle of location information casually collected by wireless carriers,” the Supreme Court said, and therefore law enforcement must get a warrant to access the data.

“The court’s rationale was that phone users do not truly voluntarily agree to share the information given the necessity of phones in our society,” the IRS inspector general concluded. “Courts may apply similar logic to GPS data sold by marketers.”

The IRS didn’t immediately respond to a request for comment. A spokesman for the IRS’s Criminal Investigation division previously said it “takes the privacy of citizens very seriously and follows all laws and regulations surrounding that privacy while administering the very important law-enforcement mission of protecting our nation’s tax system.” After a year of experimenting with Venntel, the spokesman added, “it was determined that this tool did not benefit CI investigations and its use was discontinued.”

The president of Venntel didn’t respond to a request for comment.

Harvesting cellphone-location data from apps accessed by customers—used to understand consumer behavior, make investment and real-estate decisions, target advertising and more—is a multibillion-dollar industry. Unlike cell-tower data kept by carriers, these data sets identify individual users only by an alphanumeric code, which the marketing industry says cloaks the identities of phone users. However, in practice, users’ identities can be gleaned based on things like the address where the device is usually located in the evening. This data also pinpoints a phone’s location more precisely than the data held by carriers…

[…]