Data Law Update: If Police Seize Your iPhone, Can They Keep It for 37 Years?
A recent federal court decision from New York, United States v. Morgan, explores Fed. R. Crim. P. 41(g) and the 37 years it can take to crack an iPhone if one selects the six-digit password option.
March 23, 2020 at 07:00 AM
7 minute read
Police seize evidence all the time, making search and seizure an important part of the law. There is a great deal of jurisprudence about the limits placed on law enforcement as it attempts to seize evidence.
But what about the law of getting your stuff back after the police take it?
Part of the answer can be found in a recent federal court decision from New York, United States v. Morgan. It's a tale of Fed. R. Crim. P. 41(g) and the 37 years it can take to crack an iPhone if one selects the six-digit password option.
|37-year-old iPhone?
In May 2019, federal prosecutors indicted Robert Morgan for wire fraud, bank fraud, money laundering, and conspiracy. Prior to Morgan's indictment, on May 14, 2018, the government seized his iPhone as part of their investigation.
However, prosecutors had a problem: Morgan had protected his iPhone with a passcode, and, not surprisingly, he declined prosecutors' invitation to hand over the password.
Throwing another wrench into prosecutors' pursuit of data, not only had Morgan protected the iPhone with a passcode, he had used Apple's option to create a six-digit passcode instead of the traditional four-digit passcode.
The government then turned to GrayKey, a product of the U.S. company, Grayshift, in order to crack Morgan's passcode and get the data off his iPhone.
However, there was another curveball facing the federales. As a security measure, iPhones lock themselves for an hour after three unsuccessful login attempts. GrayKey used "brute force" to crack passwords, a process in which the application enters potential passcodes continually until it gets the right one.
The challenge here is that the application can enter only three passcodes before it has to wait an hour to enter the next three. After over a year of attempted cracking of Morgan's iPhone, GrayKey had reduced the possible passcodes only from one million to a mere 960,526.
At this pace, it would take the government 37 years to crack Morgan's iPhone.
|I Want My iPhone Back
After enduring what many in 21st Century America would consider a ghastly disaster—going over a year and a half without his phone—on January 2, 2020, Morgan filed a motion for return of property under Fed. R. Crim. P. 41(g). In a move that surprised absolutely no one, the government opposed the motion.
Rule 41(g) provides that those "aggrieved by an unlawful search and seizure of property or by the deprivation of property [to] move for the property's return." (Emphasis added.)
Citing Ferreira v. United States, the Morgan court noted that the Second Circuit has developed a three-part test a moving party must pass in order to prevail on a Rule 41(g) motion:
- The party is entitled to lawful possession of the seized property,
- The property is not contraband, and
- Either the seizure was illegal or the government's need for the property as evidence has ended.
In a matter with a fact pattern similar to Morgan, law enforcement seized an iPhone in United States v. Pinto-Thomaz. Pinto-Thomaz moved for return of his iPhone after the government had it for approximately five months, arguing the time for executing the warrant had passed.
The court rejected Pinto-Thomaz's argument, holding that, for warrants seeking electronically stored information, [t]he time for executing the warrant in Rule 41(e)(2)(A) and (f)(1)(A) refers to the seizure or on-site copying of the media or information, and not to any later off-site copying or review.' "
Knowing that "clock running out on the warrant" argument didn't work in Pinto-Thomaz, Morgan took a different approach. He asked the court for a balancing test, arguing his interest in his iPhone and the information contained in it exceeded the government's interest in the device, and thus, the court should order its return.
Morgan argued that the Second Circuit's three-pronged test was invalid because it failed to consider 1989 amendments to Rule 41(g), which provided that property can be returned even where the government has a legitimate interest in the property. Thus, Morgan argued that, regardless of the government's stated need for the property, it was unreasonable for the government to continue its retention of the iPhone.
The Morgan court conceded that there was a weakness in the Second Circuit test articulated in Ferreira and Pinto-Thomaz in that the courts failed to consider the moving party's interest in the seized property. Thus, the Morgan court advised against strict adherence to the three-part test.
Nevertheless, the court held that—even if one were to use Morgan's requested balancing test—his motion fails because the government's evidentiary interest in the iPhone—established by the issuance of the warrant—outweighed Morgan's interest in its return. However, the court's holding was not absolute.
The court noted that the government does not get to keep the iPhone for the full 37 years it would take to crack the passcode.
"The Court agrees that anywhere close to 37 years is an unreasonable time to retain the iPhone. This does not mean, though, that the government should be compelled to return it now…There may very well come a point where the government's retention of the iPhone is unreasonable—and that may be a time when the government continues to maintain that it needs the iPhone as evidence—but that date has not yet occurred," U.S. District Judge Elizabeth Wolford wrote.
|Why Morgan Matters
Police love to seize stuff. In Morgan, law enforcement seizes property as an investigatory method, but the government seizes data in other ways.
Criminal seizure, where the government seizes assets that are products of a criminal activity from those who have been convicted, and civil forfeiture, where the government seizes assets suspected of being part of criminal activity even without a conviction, are popular tools for prosecutors, with civil forfeiture often being highly controversial.
In Morgan, law enforcement wasn't seeking forfeiture—but they might as well have been. The average life expectancy for a smartphone is only a few years, and the prosecutors in Morgan already had the phone for a year and a half, pretty much making it a de facto forfeiture.
Smartphones are different than other property law enforcement seizes. As Chief Justice John Roberts wrote in U.S. Supreme Court's unanimous decision, Riley v. California, our phones have become "such a pervasive and insistent part of daily life that the proverbial visitor from Mars might conclude they were an important feature of human anatomy."
Riley represented an important sea change in search and seizure law, but Morgan really chips away at the important rights granted by Riley. Sure, it's apples and oranges to a certain extent because the main issue in Riley was whether law enforcement had to get a warrant before seizing a phone, and in Morgan, law enforcement had already obtained the warrant.
Nevertheless, the de facto forfeiture we see in Morgan illustrates that, if police do satisfy Riley and get a warrant—although they can't keep your phone for 37 years—you may not see your iPhone for a long, long time.
David Horrigan is discovery counsel and legal education director at Relativity. A former reporter and assistant editor at The National Law Journal and analyst and counsel at 451 Research, he was First Runner-Up for Best Legal Analysis in the 2019 LexBlog Excellence Awards.
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllTrending Stories
- 1Justices Will Weigh Constitutionality of Law Allowing Terror Victims to Sue PLO
- 2Nevada Supreme Court to Decide Fate of Groundbreaking Contingency Cap Ballot Measure
- 3OpenAI Tells Court It Will Seek to Consolidate Copyright Suits Under MDL
- 44th Circuit Allows State Felon Voting Ban Challenge to Go Forward
- 5Class Actions Claim Progressive Undervalues Totaled Cars
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250