EPIC v. ICE (Mobile Forensics)
- EPIC Sues ICE Over Technology Used to Conduct Warrantless Searches of Mobile Devices: EPIC has filed a Freedom of Information Act lawsuit against Immigration and Customs Enforcement for details of the agency's use of mobile forensic technology to conduct warrantless searches of mobile devices. ICE has contracts with a company called Cellebrite for techniques to unlock, decrypt, and extract data from mobile devices, including personal data stored in cloud-based accounts. Privacy complaints regarding the search of mobile devices at the border continue to increase. In a statement to Congress last year, EPIC warned that enhanced surveillance at the border will impact the rights of U.S. citizens. Senator Patrick Leahy (D-VT) and Senator Steve Daines (R-MT) have introduced legislation to place restrictions on searches and seizures of electronic devices at the border. (Apr. 9, 2018)
- EPIC, Coalition Oppose Government's 'Extreme Vetting' Proposal: EPIC and a coalition of civil rights organizations have sent a letter to the Acting Secretary of Homeland Security strongly opposing the Extreme Vetting Initiative. A similar letter was sent by technical experts. The government's 'Extreme Vetting' initiative uses opaque procedures, secret profiles, and obscure data including social media post, to review visa applicants and make final determinations. EPIC has warned against both the government's use of social media data and secret algorithms to profile individuals for decision making purposes. EPIC is also pursuing a FOIA request for details on the relationship between the Immigration and Customs Enforcement agency and Palantir, a company that provides software to analyze large amounts of data. (Nov. 16, 2017)
- CBP Plans to Exempt Social Media Data from Legal Protections + (Sep. 22, 2017)
- EPIC FOIA: EPIC Seeks Details of ICE, Palantir Deal + (Aug. 15, 2017)
- EPIC to Congress: Ask ICE About FOIA Compliance + (Jun. 12, 2017)
More top news
Immigration and Customs Enforcement (“ICE”) searches mobile devices while carrying out law enforcement activities, potentially subjecting millions to searches inside its claimed enforcement authority 100 miles from the border into the interior. Over the last few years, ICE tested devices made by multiple providers of mobile forensic technology. Contracts between ICE and Cellebrite Mobile Synchronization (“Cellebrite”) in the last 10 years value at over $10.7 million, and from April through July 2018, ICE contracted with Cellebrite for over $1.6 million in “Computer Storage Device Manufacturing.” Cellebrite offers a suite of products in its Universal Forensic Extraction Devices (UFED) line, which allow users to “bypass pattern, password or PIN locks,” decrypt, extract, and analyze “live, hidden and even deleted data from smartphones, feature phones, tablets, players, GPS devices, SIM cards, smart watches, mass storage devices, drones and more.” These tools include Cellebrite’s UFED Cloud Analyzer, which can extract private information - even without assistance from the owner - from users cloud-based accounts, such as Facebook, Gmail, iCloud, Dropbox, and WhatsApp.
United States Customs and Border Patrol (“CBP”) also conducts cell phone searches. Border agents inspected 30,200 devices in FY 2017, increasing of nearly 60 percent from 2016.
Little is known about ICE’s use of mobile forensics technology, including the types of data searchable, the frequency of searches, or the procedures in place to determine whether or how a search should be conducted.
There are significant privacy and civil liberties implications of the federal government’s use of mobile forensic software at the border and in the interior. Mobile forensic technology has the ability to access and analyze the vast amounts of data that are kept on mobile devices. Although millions of dollars in government funds have been spent by ICE to obtain this technology, the substance of the contracts, the training required to access the technology, policies and procedures regulating its use, and privacy and civil liberties assessments have not been released to the public. With the use of this technology by other border control agencies dramatically increasing, the public has a right to know what data is accessible, as well as, how and to what extent it is protected.
- EPIC's FOIA Request (June 13, 2017)
- ICE's Response to EPIC's Request for Expedited Processing (June 20, 2017)
- EPIC's Appeal (July 17, 2017)
- First Interim Production (August 3, 2018)
- Second Interim Production (October 3, 2018)
- Third Interim Production (November 2, 2018)
- Fourth Production (November 13, 2018)
- Supplemental Production (November 15, 2018)
- DHS Production (March 19, 2019)
U.S. District Court for the District of Columbia (No. 18-797)
Share this page:
Subscribe to the EPIC Alert
The EPIC Alert is a biweekly newsletter highlighting emerging privacy issues.