The Volokh Conspiracy
Mostly law professors | Sometimes contrarian | Often libertarian | Always independent
New Draft Article: "Terms of Service and Fourth Amendment Rights"
Just posted.
I have just posted to SSRN a new draft article, Terms of Service and Fourth Amendment Rights. Here's the abstract:
Almost everything you do on the Internet is governed by Terms of Service. The language in Terms of Service typically gives Internet providers broad rights to address potential account misuse. But do these terms alter Fourth Amendment rights, either diminishing or even eliminating constitutional rights in Internet accounts? In the last five years, many courts have ruled that they do. These courts treat Terms of Service like a rights contract: By agreeing to use an Internet account subject to broad Terms of Service, you give up your Fourth Amendment rights.
This Article argues that the courts are wrong. Terms of Service have little or no effect on Fourth Amendment rights. Fourth Amendment rights are rights against the government, not private parties. Terms of Service can define relationships between private parties, but private contracts cannot define Fourth Amendment rights. This is true across the range of Fourth Amendment doctrines, including the "reasonable expectation of privacy" test, consent, abandonment, third-party consent, and the private search doctrine. Courts that have linked Terms of Service and Fourth Amendment rights are mistaken, and their reasoning should be rejected.
And here's the first two pages of the Introduction:
When you use the Internet, you are using computer networks that belong to others. You are visiting computers around the country, and sometimes around the world, that are typically owned by large companies. Those companies have lawyers. And those lawyers want to make sure you can't sue them for how you use their services. So they do what lawyers do best: They put it in writing. As a condition of use, the services require users to agree to contractual language giving the company broad rights over your use of their machines. Those contractual terms, usually called Terms of Service, appear to users like an endless CVS-receipt of legalese that they click through on the way to setting up an account.
This essay considers the effect of Terms of Service on Fourth Amendment rights. In particular, it asks whether language in Terms of Service can limit or even eliminate user Fourth Amendment rights. If Terms of Service say you have no rights, or only limited or conditional rights, do those terms control? In Carpenter v. United States and Riley v. California, the Supreme Court has suggested that the Fourth Amendment applies broadly to computers and the Internet. The Fourth Amendment requires a warrant if the government wants to obtain the contents of your messages, or even certain non-content records. But Terms of Service threaten that conclusion. If such Terms can narrow or eliminate Fourth Amendment rights online, then those rights may be an illusion. What the Supreme Court has given, Terms of Service might take away.
This is a genuine and pressing problem. In the last five years, the effect of Terms of Service on Fourth Amendment rights has been frequently litigated in lower courts. Judges have divided sharply. A few opinions say the Terms make little difference. But a majority of courts have treated Terms of Service like a rights contract: By agreeing to use the service, they reason, you agree to whatever narrowing or elimination of rights that the contract implies. Using the service becomes a waiver of Fourth Amendment rights that gives up a reasonable expectation of privacy or consents to any future search. The caselaw is recent, and existing legal scholarship has not yet addressed, or even recognized, the problem. But the decisions suggest a troubling reality: Our Fourth Amendment rights online hinge on the effect of Terms of Service.
This Article argues that Terms of Service have little or no impact on Fourth Amendment rights. With limited exceptions, Terms of Service cannot reduce or eliminate Fourth Amendment protections. The courts that have held to the contrary are wrong, and their reasoning should be rejected. The explanation rests on the under-appreciated role of private contracts in Fourth Amendment law. The Fourth Amendment provides rights against the government, and agreements between private parties and the government can relinquish Fourth Amendment rights. But Terms of Service play a different role. They define legal relationships between private parties, between private network provider and private network user. Agreements among private parties do not relinquish rights. As private agreements, Terms of Service might help clarify relationships relevant to some Fourth Amendment doctrines. But it is the relationships, not the language found in Terms of Service, that matter.
This wasn't an Article that I was planning to write, but it seemed important to take on this topic as more and more cases have adopted the view that Terms of Service control Fourth Amendment rights. Anyway, it's new draft, and comments are very welcome at orin [at] berkeley.edu. No need to send on corrections to typos or stuff like that, but any reactions to the substance would be appreciated.
Editor's Note: We invite comments and request that they be civil and on-topic. We do not moderate or assume any responsibility for comments, which are owned by the readers who post them. Comments do not represent the views of Reason.com or Reason Foundation. We reserve the right to delete any comment for any reason at any time. Comments may only be edited within 5 minutes of posting. Report abuses.
Please
to post comments
Prof. Kerr, I am surprised at your expressed (via twitter) inability to use section to avoid having Microsoft Word exclude your title page and table of contents from the page count. And I’m not sure how to avoid that coloring my opinion of your takes on computer law.
I don't think spontaneous recall of an obscure behavior of a single desktop productivity application is a good indicator of how familiar one is with the law and/or computers generally.
Read the twitter thread. It’s not just that he didn’t remember how to do it: he says that after following online guides, YouTube videos, and the (accurate) instructions people tweeted at him, he still couldn’t do it.
https://mobile.twitter.com/OrinKerr/status/1619500849834917889
Professor Kerr, from a legal perspective I don't have standing to offer you anything more than layman's congratulations. But I can tell you from a historical perspective that Samuel Adams would have said you are on the right track.*
*Note that I used the normally-proscribed-for-historians construction in the general form of, "historical figure would have." Doesn't matter this time. No historian would disagree. And anyway, I am not a historian, just someone who is reading a fascinating biography of Samuel Adams—The Revolutionary, by Stacy Schiff, for anyone interested.
Isn't the real problem here third party doctrine? That if you store information with somebody else, the courts assume you've lost your right to privacy in it, and don't treat that somebody else as having any privacy rights in it, either?
I mean, sure, totally over the top TOS are "a" problem. But mostly not a 4th amendment problem.
It's like Prof. Kerr is arguing against himself!
"In other words, a person cannot have a reasonable expectation of privacy in information disclosed to a third party. The Fourth Amendment simply does not apply."
https://web.archive.org/web/20091007084048/http://www.michiganlawreview.org/assets/pdfs/107/4/kerr.pdf
Yeah, I'm not defending him, here.
Brett, the article explains why they are consistent: Indeed, I think this is a natural corollary of the third-party doctrine. See, among other places, the conclusion, which is about this.
They're consistent... but is the waiver-like TOS language an important factor i.e., can't the goverment do the search whether or not the TOS contains it?
aped, I noted that too. Made me wonder if he is having second thoughts about the third party doctrine. I figure encouraging him in a new line of thought can't hurt.
No second thoughts about the third-party doctrine, but your note of encouragement does give me a certain amount of pause about this new paper. (I kid. At least I know which side you're on....)
There’s no need for courts to assume anything. Terms of use tend to be explicit about the service provider’s rights. And if there’s any ambiguity, they have no problem changing the terms to close it.
(Pg 6)
"On their face, then, Terms of Service seem to define exactly what the Fourth Amendment law cares most about. We can express the argument as a syllogism: Fourth Amendment protection requires rights; Terms of Service define rights in online accounts; and therefore Terms of Service define Fourth Amendment protection in online accounts."
"Terms of Service define rights in online accounts. . . ."
That's a bad logical jump and directly contrasts with your statement that, "[t]his Article argues that Terms of Service have little or no impact on Fourth Amendment rights. With limited exceptions, Terms of Service cannot reduce or eliminate Fourth Amendment protections."
The quotation isn’t Prof. Kerr’s view: it’s the view of some courts, which he is arguing against.
unless one thinks many internet providers are monopolies and common carriers.
The question isn’t what one thinks. The question is what the law says. Common carrier status is a creature of statute. Congress made railroads, telegraph companies, telephone companies, etc. common carriers. They were not common carriers before Congress passed a law saying so. The same is true here. Congress can pass a law making latge internet social media companies common carriers. States can pass their own laws if Congress doesn’t occupy the field and preempt them. But in the absence of positive law saying so, modern electronic communications technologies do not have common carrier status.
Just remember the difference between Internet Service Providers (ISPs, which Prof. Kerr specifically addresses here), and social media companies (or any web site).
I can see the case for ISPs becoming common carriers; not so much individual companies' web sites.
No, it can't.
(Well, I mean, it can; it can also pass a law saying that Lutheran is the official religion of the United States. The law would be equally valid.)
If companies are large enough and monopolies they become de factor common carriers. Its not obvious Congress needs to act.
How do you define "large enough" and "monopoly" here? People are saying Apple has a monopoly on the iPhone platform and app store, for example. Is Apple a de facto common carrier?
Then one would think incorrectly, and also irrelevantly, as that has nothing to do with the issue.
The fundamental question is, who owns the account’s contents? That’s a property question.
Under laissez-faire, service providers have created contracts saying they own the content. As consideration for using their service, you give them title to everything you create on or upload to it. And as the content owners, they are the ones to decide whether or not to consent to 4th Amendment searches. Why should non-owners have any say in searchers of other people’s property? The people who built your house stopped having a say in whether it can be searched the minute they sold if to you. Why should uou have any say in the service provider’s content just because you happen to be that content’s creator? It’s their property, not yours. The 4th Amendment fully recognizes transfers of ownership as valid. This shouldn’t be any different.
It seems to me that if people don’t like laissez-faire, the solution is legislative, laws limiting or prohibiting transfers of content ownership as a condition of using an internet service or social media site.
Requiring social media companies to act as common carriers certainly does this, as carriers are not regarded as the owners of what they carry. It also does a lot else. You could unbundle the package, and clarify that users retain title to their content without extinguishing providers rights to e.g. refuse carriage.
But the law doesn’t have to do anything. And in the absence of law, laissez-faire prevails, and service companies are entitled to impose whatever terms they want, however onerous their customers may find them.
I don’t think it’s the business of the 4th Amendment to act as a kind of federal property law. The 4th Amendment has to look to other sources of law to determine who owns the property and hence who is entitled to consent to a search of it. That means the question simply isn’t a 4th Amendment question.
So I think Professor Kerr’a s approach of looking to the 4th Amendment to decide the question is fundamentally flawed.
" And as the content owners, they are the ones to decide whether or not to consent to 4th Amendment searches."
Bzzzt! Under third party doctrine, the government typically doesn't need to respect the 4th amendment in searches for that data. It isn't treated as the platform's property, it's treated as nobody's property.
"Under laissez-faire, service providers have created contracts saying they own the content. "
And just how does that comport with Federal law, particularly "17 U.S. Code § 201 - Ownership of copyright" particulrly section (e): The Copyright Act gives the copyright to the actual author, and nullifies such attempts as those by these service providers:
" ...no action by any governmental body or other official or organization purporting to seize, expropriate, transfer, or exercise rights of ownership with respect to the copyright, or any of the exclusive rights under a copyright, shall be given effect under this title, except as provided under title 11."
In the matter you describe, I think service providers should be held to a strict interpretation of copyright law.
On the other (ISP and Third Party Doctrine) issue: I think the Third Party Doctrine is a despicable mis-interpretation of the Constitution; iut is, something, as the saying goes, "that only a Jesuit could like."
” …no action by any governmental body or other official or organization purporting to seize, expropriate, transfer, or exercise rights of ownership with respect to the copyright, or any of the exclusive rights under a copyright, shall be given effect under this title, except as provided under title 11.”
Tangential I realize, but wouldn't that preclude a state university (a "governmental body") exercising rights of ownership to student dissertations?
Yes.
“Work for hire” requires either “in the normal course of employment” or else a specific written assigment of the work.
And being a student is not “normal employment” — the student is hiring the university, not vice versa.
IMNHO. IANAL but I am a very prolific software-and-documentation author.
And what recourse does the now former-student have?
I did NOT want my dissertation available for sale on the internet -- and I was told that if I submitted the required two copies (under the old rules) then those would be in the library but it would not be sold on line, and that's the paperwork I signed.
Yet I later found that it *was* being sold on line by the university's vendor. What recourse(s) do I have?
FWIW -- I have nothing to hide, I just don't want the university (which I despise) selling my property without my permission.
cjcoats's ellipsis omits a pretty important part of the statute:
In other words, it prohibits governments from forcibly seizing copyrights from an author: it doesn't prevent a government or government-controlled entity owning copyrights that have been voluntarily assigned to it.
A significant amount of the information at issue isn’t eligible for copyright protection, and terms of service frequently grant the provider an unlimited license to use anything the user might create.
"isn’t eligible for copyright protection..."
Oh, really? Do you know what the Berne Copyright Treaty (and the US law to conform to it) really says?
Yes.
Take a look at the first two cases Prof. Kerr discusses, on pages 7 and 8 of the article. One involved the identity of an account signed into a wifi network, and one involved cell phone location information. In neither case could the evidence be copyrighted, because they are not "original works of authorship fixed in [a] tangible medium of expression". 17 U.S.C. § 102(a).
You've said this before, and I've pointed out before that this was wrong, and yet you keep saying it. That is not what the terms of service of any site says.
Also, your understanding of the operation of the 14th amendment is incorrect. Ownership is a relevant consideration, but it is not the sole factor. Right of control — which based on the comment I quoted in the paragraph above you don't seem to grasp is different than ownership — is.
To avoid the uh-huh, nuh-uh type argument, here's an exemplar: the Facebook TOS:
How about a sign on a store door, or any other place open to the general public, saying "no guns allowed'?
How about "whites only"?
Try to stretch this logic across the rest of the constitution and the rest of commerce.
"Whites only" was allowable until Congress passed a law prohibiting it.
How about it?
Pruneyard Shopping Center v. Robins, 447 U.S. 74 (1980)
I realize this is the California constitution and not the US (a point the professor who taught ConLaw neglected to mention) but instead of the common carrier arguments, why wouldn't this be a better route to go. It's been recently upheld: https://www.aclu-sdic.org/en/news/supreme-court-upholds-free-speech-mall and is based on the concept of the traditional village center forum.
And then to ownership of speech in a public forum, I point to the fact that Dr MLK2 copyrighted all of his speeches (under the old law) and hence even though it was speech in a very public forum, his estate retains ownership of it. (Now as to how copyright affects search & seizure, IANAA....)
Again, IANAA but as I understand it, under *current* copyright law, you own it even if you don't register a copyright. QED....
As to MLK2, see: https://copyrightlately.com/martin-luther-king-copyright/
>an endless CVS-receipt of legalese
Just a style suggestion... CVS stores are kinda an east-coast-of-US urban phenomona. I'd try to pick a more universal metaphore.
Thanks, I was wondering about that. The site below suggests they're pretty much everywhere, but if some don't get the reference, I'll remove it. (Site: https://www.scrapehero.com/location-reports/CVS%20Pharmacy-USA/)
It seems about as safe a reference as you can get. It's the largest drugstore chain in the country according to KnowYourMeme.
As far as I know, there isn't a standalone CVS store within 150 miles of me (there are several pharmacy counters embedded in Target stores ... but for any non-RX stuff, I'd get Target receipt).
It actually was a problem for several years, as my employer made CVS-Caremark the exclusive in-network provider, and the Target-counter option didn't exist then.
That sort of thing was the first hint we got at the plant I used to work at that they were planning on shutting us down in a few years. Just saying.
There is a CVS in my midwest town on the Mississippi River. And many many more cities of less than 50k around here. I wouldn't be worried about it. The receipts are notorious for being ridiculously long. So I say good metaphor.
CVS Caremart is a national prescription management company.
See: https://en.wikipedia.org/wiki/CVS_Caremark
But it's the CVS stores that truly kill trees with their register receipts.
That's a surprise me, given the number of CVS's that dot the California landscape.
Looks like there is at least one CVS in every state in the Union, plus WashDC and Puerto Rico:
https://www.cvs.com/store-locator/cvs-pharmacy-locations
Since you gave the doctor permission to turn your head and cough, or take his finger deep, government should be able to access those body parts under the 3rd party doctrine. Your person, your papers, no real difference.