Horowitz. Adam 11 24 2015

EFTA00314991 Dataset 9 35 pages Download original PDF Download as text
Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sere. 2531, 2013 Daily Journal =. 3018 11 -I KeyCite Yellow Flag - Negative Treatment Declined to Extend by United States v. Hassanshahi. December I. 2014 709 F.3d 952 United States Court of Appeals, Ninth Circuit. UNITED STATES of America, Plaintiff —Appellant, v. Howard Wesley COTTERMAN, Defendant —Appellee. No. 09-10139. I Argued and Submitted En Banc June 19, 2012. I Filed March 8, 2013. Synopsis Background: Defendant was charged with production of child pornography, transportation and shipping of child pornography, receipt of child pornography, possession of child pornography, importation of obscene material, transportation of obscene material, and unlawful flight to avoid prosecution. The United States District Court for the District of Arizona, 2009 WL 465028, Raner C. Collins, J., granted defendant's motion to suppress evidence. Government filed interlocutory appeal. The Court of Appeals, 637 F.3d 1068. reversed and remanded. The Court of Appeals granted rehearing en banc. 673 F.3d 1206. Holdings: The Court of Appeals, McKeown, Circuit Judge, held that: [1 ] extended border search doctrine did not apply to seizure and forensic examination of defendant's laptop computer; [2] forensic examination of defendant's computer that comprehensively analyzed its hard drive required showing of reasonable suspicion; and [3] border agents had reasonable suspicion to conduct initial search and subsequent forensic examination of defendant's computer that comprehensively analyzed hard drive. Reversed. Callahan, Circuit Judge, filed opinion concurring in part, dissenting in part, and concurring in the judgment, with whom Clifton, Circuit Judge, joined, and with whom M. Smith, Circuit Judge, joined in part. M. Smith, Circuit Judge, filed dissenting opinion, with whom Clifton and Callahan, Circuit Judges, joined in part. West Headnotes (27) [1] Customs Duties P- Searches and Seizures Searches and Seizures iis• Fourth Amendment and reasonableness in general Border searches constitute a historically recognized exception to the Fourth Amendment's general principle that a warrant be obtained, but reasonableness remains the touchstone for a warrantless search. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [2] Criminal Law Review De Novo The ultimate question of whether a warrantless search was reasonable under the Fourth Amendment is reviewed de novo. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [3] Criminal Law Specification of errors The Court of Appeals may consider an issue that has not been adequately raised on appeal if such a failure will not prejudice the opposing party. Cases that cite this headnote [4] Criminal Law P- Specification of errors WeStlaWNPS © 2015 Thomson Reuters. No claim to original U.S. Government Works. EFTA00314991 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sent 2531, 2013 Daily Journal =. 3018 Government's failure to address issue on appeal of whether there was reasonable suspicion for border search, after addressing issue before district court, did not prejudice defendant, and thus Court of Appeals could consider issue, where Court of Appeals called for, and received, supplemental briefs by both parties. U.S.C.A. Const.Amend. 4. 2 Cases that cite this headnote [5] Customs Duties 4' Searches and Seizures Searches and Seizures Necessity of and preference for warrant, and exceptions in general The broad contours of the scope of searches at international borders are rooted in the long- standing right of the sovereign to protect itself by stopping and examining persons and property crossing into the country; thus, border searches form a narrow exception to the Fourth Amendment prohibition against warrantless searches without probable cause. U.S.C.A. Const.Amend. 4. 4 Cases that cite this headnote [6] Customs Duties P- Searches and Seizures Because the government's interest in preventing the entry of unwanted persons and effects is at its zenith at the international border, border searches are generally deemed reasonable simply by virtue of the fact that they occur at the border. U.S.C.A. Const.Amend. 4. 4 Cases that cite this headnote [7] Customs Duties P- Searches and Seizures Even at the border, individual privacy rights are not abandoned but balanced against the sovereign's interests; that balance is qualitatively different than in the interior and is struck much more favorably to the government. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [8] Searches and Seizures P- Scope, Conduct, and Duration of Warrantless Search The reasonableness of a search or seizure depends on the totality of the circumstances, including the scope and duration of the deprivation. U.S.C.A. Const.Amend. 4. 2 Cases that cite this headnote [9] Customs Duties p- Time and distance factors; checkpoints Extended border search doctrine, which encompassed any search away from border where entry was not apparent, but where dual requirements of reasonable certainty of recent border crossing and reasonable suspicion of criminal activity were satisfied, did not apply to seizure and forensic examination of defendant's laptop computer after defendant had been stopped and searched at border; although device had been transported and subjected to extended and extensive examination beyond border, computer never cleared customs and search would have been every bit as intrusive had it been conducted at border. U.S.C.A. Const.Amend. 4. 10 Cases that cite this headnote [10] Customs Duties 4'- Time and distance factors; checkpoints The key feature of an extended border search is that an individual can be assumed to have cleared the border and thus regained an expectation of privacy in accompanying belongings. U.S.C.A. Const.Amend. 4. 2 Cases that cite this headnote WeStlaWNPS © 2015 Thomson Reuters. No claim to original U.S. Government Works. 2 EFTA00314992 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sew. 2531, 2013 Daily Journal =. 3018 [11] Customs Duties 4— Time and distance factors; checkpoints Customs Duties Airports and airplanes The "functional equivalent" doctrine effectively extends the border search doctrine to all ports of entry, including airports; a routine customs search at the "functional equivalent" of the border is analyzed as a border search and requires neither probable cause nor reasonable suspicion. U.S.C.A. Const.Amend. 4. 2 Cases that cite this headnote [12] Customs Duties Time and distance factors; checkpoints The extended border search doctrine, which encompasses any search away from border where entry was not apparent, but where dual requirements of reasonable certainty of recent border crossing and reasonable suspicion of criminal activity were satisfied, is best confined to cases in which, after an apparent border crossing or functional entry, an attenuation in the time or the location of conducting a search reflects that the subject has regained an expectation of privacy. U.S.C.A. Const.Amend. 4. 3 Cases that cite this headnote [13] Customs Duties Time and distance factors; checkpoints Under the extended border search doctrine, which encompasses any search away from border where entry was not apparent, but where dual requirements of reasonable certainty of recent border crossing and reasonable suspicion of criminal activity were satisfied, time and distance become relevant to determining whether there is an adequate nexus to a recent border crossing only after the subject or items searched have entered. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [14] Customs Duties 46... Scope and Nature; Successive or Secondary , Searches Obscenity P- Computers; electronic transmission After seizure at border, forensic examination of defendant's computer that comprehensively analyzed its hard drive required showing of reasonable suspicion; although government had legitimate concerns about child pornography, such concerns did not justify unfettered crime-fighting searches or unregulated assault on citizens' private information. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [15] Searches and Seizures 6'- Persons, Places and Things Protected The Fourth Amendment's specific guarantee of the people's right to be secure in their "papers" encompasses financial records, confidential business documents, medical records, and private emails on personal electronic devices. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [16] Searches and Seizures fia Persons. Places and Things Protected The express listing of papers under the Fourth Amendment reflects the Founders' deep concern with safeguarding the privacy of thoughts and ideas, what might be called freedom of conscience, from invasion by the government; these records are expected to be kept private and this expectation is one that society is prepared to recognize as reasonable. U.S.C.A. Const.Amend. 4. Cases that cite this headnote WeStlaWNPS © 2015 Thomson Reuters. No claim to original U.S. Government Works. 3 EFTA00314993 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sent 2531, 2013 Daily Journal =. 3018 [17] Searches and Seizures 4. Expectation of privacy The uniquely sensitive nature of data on electronic devices carries with it a significant expectation of privacy and thus renders an exhaustive exploratory search more intrusive than with other forms of property. U.S.C.A. Const.Amend. 4. 4 Cases that cite this headnote [18] Customs Duties 4- Searches and Seizures The government's authority to protect the nation from contraband crossing its borders may be heightened by national crises, such as the smuggling of illicit narcotics, the threat of international terrorism, and future threats yet to take shape, but even in the face of heightened concerns, a court must account for the Fourth Amendments rights of travelers. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [19] Customs Duties Scope and Nature; Successive or Secondary Searches Reasonable suspicion to search personal electronic devices at the border requires that officers make a commonsense differentiation between a manual review of files on the electronic device and application of computer software to analyze a hard drive, and utilize the latter only when they possess a particularized and objective basis for suspecting the person stopped of criminal activity. U.S.C.A. Const.Amend. 4. 10 Cases that cite this headnote [20] Arrest 0. Reasonableness; reason or founded suspicion, etc "Reasonable suspicion" is defined as a particularized and objective basis for suspecting the particular person stopped of criminal activity. U.S.C.A. Const.Amend. 4. 9 Cases that cite this headnote [21] Arrest 0— Collective knowledge The assessment of reasonable suspicion is to be made in light of the totality of the circumstances; even when factors considered in isolation from each other are susceptible to an innocent explanation, they may collectively amount to a reasonable suspicion. U.S.C.A. Const.Amend. 4. 5 Cases that cite this headnote [22] Criminal Law 4— Review De Novo Criminal Law Evidence wrongfully obtained The Court of Appeals reviews reasonable suspicion determinations de novo, reviewing findings of historical fact for clear error and giving due weight to inferences drawn from those facts by resident judges and local law enforcement officers. U.S.C.A. Const.Amend. 4. 2 Cases that cite this headnote [23] Customs Duties Scope and Nature; Successive or Secondary , Searches Obscenity 0. Particular cases Border agents had reasonable suspicion to conduct initial search and subsequent forensic examination of defendant's computer that comprehensively analyzed hard drive after seizing it at border, where defendant had prior conviction for child molestation, he traveled frequently to country associated with sex tourism, and computer contained password- protected files; although defendant had offered to WestlawNexts © 2015 Thomson Reuters. No claim to original U.S. Government Works. 4 EFTA00314994 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sent 2531, 2013 Daily Journal =. 3018 open files, computer contained vacation photos, and initial examination did not turn up anything incriminating, agents appropriately were wary of offer of assistance due to concerns that defendant could tamper with computer and reasonable suspicion otherwise had not been eliminated. U.S.C.A. Const.Amend. 4. 3 Cases that cite this headnote [24] Arrest 4- Reasonableness; reason or founded suspicion, etc Although a prior criminal history cannot alone establish reasonable suspicion, it is permissible to consider such a fact as part of the total calculus of information in that determination. U.S.C.A. Const.Amend. 4. 4 Cases that cite this headnote [25] Customs Duties 4'- Particular Objects or Products Although password protection of files, in isolation, will not give rise to reasonable suspicion justifying border search, where there are other indicia of criminal activity, password protection of files may be considered in the totality of the circumstances; to contribute to reasonable suspicion, encryption or password protection of files must have some relationship to the suspected criminal activity. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [26] Customs Duties P- Particular Objects or Products Password protecting an entire device, as opposed to files within a device, cannot be a factor supporting a reasonable suspicion, such as would justify border search; using a password on a device is a basic means of ensuring that the device cannot be accessed by another in the event it is lost or stolen. U.S.C.A. Const.Amend. 4. Cases that cite this headnote [27] Customs Duties 6*, Scope and Nature; Successive or Secondary Searches Obscenity 4- Scope of search Existence of password•protected files was relevant to assessing reasonableness of scope and duration of search of defendant's computer after its seizure at border; search necessarily had been protracted because of password protection that defendant had employed, and after defendant refused to provide agents with passwords to protected files and fled country, it took agent days to override computer security and open image files of child pornography. U.S.C.A. Const.Amend. 4. Cases that cite this headnote Attorneys and Law Firms •956 Dennis K. Burke, Christina M. Cabanillas, Carmen F. Corbin, John S. Leonardo, John J. Tuchi, United States Attorney's Office for the District of Arizona, Tucson, AZ, for Appellant. William J. Kirchner, Law Office of Nash & Kirchner, M. Tucson, AZ, for Appellee. David M. Porter, Melia N. Brink, National Association of Criminal Defense Lawyers, Washington, Michael Price, Brennan Center for Justice, New York, NY; Hanni M. Fakhoury, Electronic Frontier Foundation, San Francisco, CA, for Amicus Curiae National Association of Criminal Defense Lawyers and Electronic Frontier Foundation. Christopher T. Handman, Mary Helen Wimberly, Hogan Lovells US LLP, Washington, M.; Sharon Bradford Franklin, The Constitution Project, Washington, ■., for Amicus Curiae The Constitution Project. WeStlaWNPA" © 2015 Thomson Reuters. No claim to original U.S. Government Works. 5 EFTA00314995 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sent 2531, 2013 Daily Journal =. 3018 Appeal from the United States District Court for the District of Arizona, Raner C. Collins, District Judge, Presiding. M. No. 4:07-cr-01207-RCC-CRP-I. Before: ALEX KOZINSKI, Chief Judge, SIDNEY R. THOMAS, M. MARGARET McKEOWN, KIM McLANE WARDLAW, RAYMOND C. FISHER, RONALD M. GOULD, RICHARD R. CLIFTON, CONSUELO M. CALLAHAN, MILAN D. SMITH, JR., MARY H. MURGUIA, and MORGAN CHRISTEN, Circuit Judges. I 1 Judge Betty B. Fletcher was a member of the en bane panel but passed away after argument of the case. Judge Wardlaw was drawn as her replacement. Opinion by Judge McKEOWN; Partial Concurrence and Partial Dissent by Judge CALLAHAN; Dissent by Judge MILAN D. SMITH, JR. OPINION McKEOWN, Circuit Judge: Every day more than a million people cross American borders, from the physical borders with Mexico and Canada to functional borders at airports such as Los Angeles (LAX), Honolulu (HNL), New York (JFK, LGA), and Chicago (ORD, MDW). As denizens of a digital world, they carry with them laptop computers, iPhones, iPads, iPods. Kindles, Nooks, Surfaces, tablets, Blackberries, cell phones, digital cameras, and more. These devices often contain private and sensitive information ranging from personal, financial, and medical data to corporate trade secrets. And, in the case of Howard Cotterman, child pornography. Agents seized Cotterrnan's laptop at the U.S.-Mexico border in response to an alert based in part on a fifteen-year- old conviction for child molestation. The initial search at the border turned up no incriminating material. Only after Cotterman's laptop was shipped almost 170 miles away and subjected to a comprehensive forensic examination were images of child pornography discovered. This watershed case implicates both the scope of the narrow border search exception to the Fourth Amendment's warrant requirement and privacy rights in commonly used electronic devices. The question we confront "is what limits there are upon this power of technology to shrink •957 the realm of guaranteed privacy." Kyllo v. United States, 533 U.S. 27, 34, 121 S.Ct. 2038, 150 L.Ed.2d 94 (2001). More specifically, we consider the reasonableness of a computer search that began as a cursory review at the border but transformed into a forensic examination of Cotterman's hard drive. Computer forensic examination is a powerful tool capable of unlocking password -protected files, restoring deleted material, and retrieving images viewed on web sites. But while technology may have changed the expectation of privacy to some degree, it has not eviscerated it, and certainly not with respect to the gigabytes of data regularly maintained as private and confidential on digital devices. Our Founders were indeed prescient in specifically incorporating "papers" within the Fourth Amendment's guarantee of "[Otte right of the people to be secure in their persons, houses, papers, and effects." U.S. Const. amend. IV. The papers we create and maintain not only in physical but also in digital form reflect our most private thoughts and activities. [I] Although courts have long recognized that border searches constitute a "historically recognized exception to the Fourth Amendment's general principle that a warrant be obtained," United States v. Ramsey, 431 U.S. 606, 621, 97 S.Ct. 1972, 52 L.Ed.2d 617 (1977), reasonableness remains the touchstone for a warrantless search. Even at the border, we have rejected an "anything goes" approach. See United States v. Seljan, 547 F.3d 993. 1000 (9th Cir.2008) (en banc). Mindful of the heavy burden on law enforcement to protect our borders juxtaposed with individual privacy interests in data on portable digital devices, we conclude that, under the circumstances here, reasonable suspicion was required for the forensic examination of Cotterman's laptop. Because border agents had such a reasonable suspicion, we reverse the district court's order granting Cotterman's motion to suppress the evidence of child pornography obtained from his laptop. I. FACTUAL BACKGROUND AND PROCEDURAL HISTORY 2 The facts related here are drawn from the record of the evidentiary hearing held before the magistrate judge. WeStlaWNeXt" © 2015 Thomson Reuters. No claim to original U.S. Government Works. 6 EFTA00314996 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sew. 2531, 2013 Daily Journal =. 3018 Howard Cotterman and his wife were driving home to the United States from a vacation in Mexico on Friday morning. April 6, 2007, when they reached the Lukeville, Arizona, Port of Entry. During primary inspection by a border agent, the Treasury Enforcement Communication System ("TECS") 3 returned a hit for Cotterman. The TECS hit indicated that Cotterman was a sex offender—he had a 1992 conviction for two counts of use of a minor in sexual conduct, two counts of lewd and lascivious conduct upon a child, and three counts of child molestation —and that he was potentially involved in child sex tourism. Because of the hit, Cotterman and his wife were referred to secondary inspection, where they were instructed to exit their vehicle and leave all their belongings in the car. The border agents called the contact person listed in the TECS entry and, following that conversation, believed the hit to reflect Cotterman's involvement "in some type of child pornography." The agents searched the vehicle and retrieved two laptop computers and three digital cameras. Officer Antonio Alvarado inspected the electronic devices and found *953 what appeared to be family and other personal photos, along with several password -protected files. 3 The TECS is an investigative tool of the Department of Homeland Security that keeps track of individuals entering and exiting the country and of individuals involved in or suspected to be involved in crimes. Border agents contacted Group Supervisor Craig Brisbine at the Immigration and Customs Enforcement ("ICE') office in Sells, Arizona, and informed him about Cotterman's entry and the fact that he was a sex offender potentially involved in child sex tourism. The Sells Duty Agent, Mina Riley, also spoke with Officer Alvarado and then contacted the ICE Pacific Field Intelligence Unit, the office listed on the TECS hit, to get more information. That unit informed Riley that the alert was part of Operation Angel Watch, which was aimed at combating child sex tourism by identifying registered sex offenders in California, particularly those who travel frequently outside the United States. She was advised to review any media equipment, such as computers, cameras, or other electronic devices, for potential evidence of child pornography. Riley then spoke again to Alvarado, who told her that he had been able to review some of the photographs on the Cottermans' computers but had encountered password - protected files that he was unable to access. Agents Brisbine and Riley departed Sells for Lukeville at about 1:30 and decided en route to detain the Cottermans' laptops for forensic examination. Upon their arrival, they gave Cotterman and his wife Miranda warnings and interviewed them separately. The interviews revealed nothing incriminating. During the interview, Cotterman offered to help the agents access his computer. The agents declined the offer out of concern that Cotterman might be able to delete files surreptitiously or that the laptop might be "booby trapped." The agents allowed the Cottermans to leave the border crossing around 6 E., but retained the Cottermans' laptops and a digital camera. 4 Agent Brisbine drove almost 170 miles from Lukeville to the ICE office in Tucson, Arizona, where he delivered both laptops and one of the three digital cameras to ICE Senior Special Agent & Computer Forensic Examiner John Owen. Agent Owen began his examination on Saturday, the following day. He used a forensic program to copy the hard drives of the electronic devices. He determined that the digital camera did not contain any contraband and released the camera that day to the Cottermans, who had traveled to Tucson from Lukeville and planned to stay there a few days. Agent Owen then used forensic software that often must run for several hours to examine copies of the laptop hard drives. He began his personal examination of the laptops on Sunday. That evening, Agent Owen found seventy-five images of child pornography within the unallocated space of Cotterman's laptop. 5 4 5 The other two cameras were returned to the Cottermans. "Unallocated space is space on a hard drive that contains deleted data, usually emptied from the operating system's trash or recycle bin folder, that cannot be seen or accessed by the user without the use of forensic software. Such space is available to be written over to store new information." United States v. Flyer. 633 F.3d 911. 918 (9th Cir.201 I). Agent Owen contacted the Cottermans on Sunday evening and told them he would need Howard Cotterrnan's assistance to access password -protected files he found on Cotterman's laptop. Cotterman agreed to provide the assistance the following day, but never showed up. When Agent Brisbine called again to request Cotterman's help in accessing the password -protected files, Cotterman responded that the WestlawNext © 2015 Thomson Reuters. No claim to original U.S. Government Works. 7 EFTA00314997 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sent 2531, 2013 Daily Journal =. 3018 computer had multiple users and that he would need to check with individuals at the *959 company from which he had retired in order to get the passwords. The agents had no further contact with Cotterman, who boarded a flight to Mexico from Tucson the next day, April 9, and then flew onward to Sydney, Australia. On April II, Agent Owen finally managed to open twenty-three password -protected files on Cotterman's laptop. The files revealed approximately 378 images of child pornography. The vast majority of the images were of the same girl, approximately 7-10 years of age, taken over a two-to three-year period. In many of the images, Cotterman was sexually molesting the child. Over the next few months, Agent Owen discovered hundreds more pornographic images, stories, and videos depicting children. A grand jury indicted Cotterman for a host of offenses related to child pornography. Cotterman moved to suppress the evidence gathered from his laptop and the fruits of that evidence. The magistrate judge filed a Report and Recommendation finding that the forensic examination was an "extended border search" that required reasonable suspicion. He found that the TECS hit and the existence of password -protected files on Cotterman's laptop were suspicious, but concluded that those facts did not suffice to give rise to reasonable suspicion of criminal activity. The district judge adopted the Report and Recommendation and granted Cotterman's motion to suppress. In its interlocutory appeal of that order, the government characterized the issue as follows: "Whether the authority to search a laptop computer without reasonable suspicion at a border point of entry permits law enforcement to take it to another location to be forensically examined, when it has remained in the continuous custody of the government." A divided panel of this court answered that question in the affirmative and reversed. United States v. Cottertnan. 637 F.3d 1068 (9th Cir.20 I I ). The panel concluded that reasonable suspicion was not required for the search and that "[t]he district court erred in suppressing the evidence lawfully obtained under border search authority." Id. at 1084. In dissent, Judge Betty B. Fletcher wrote that "officers must have some level of particularized suspicion in order to conduct a seizure and search like the one at issue here." M. (B. Fletcher, J., dissenting). By a vote of a majority of nonrecused active judges, rehearing en banc was ordered. 673 F.3d 1206 (9th Cir.2012). Following en banc oral argument, we requested supplemental briefing on the issue of whether reasonable suspicion existed at the time of the search. H. WAIVER The government argued below that the forensic examination was part of a routine border search not requiring heightened suspicion and, alternatively, that reasonable suspicion justified the search. Before the district court, the government maintained "the facts of this case clearly establish that there was reasonable suspicion." However, having failed to obtain a favorable ruling on that ground, the government did not challenge on appeal the conclusion that there was no reasonable suspicion. Rather, it sought a broad ruling that no suspicion of any kind was required. Cotterman thus argued in his answering brief that the government had waived the issue —an assertion that the government did not address in its reply brief. Cotterman contends that the government has abandoned and conceded the issue of reasonable suspicion and that this court may not address that issue. We disagree. [21 [3] [4] We review de novo the ultimate question of whether a warrantless search *960 was reasonable under the Fourth Amendment. United States v. Johnson, 256 F.3d 895, 905 (9th Cir.200 I ) (en banc). Our review necessarily encompasses a determination as to the applicable standard: no suspicion, reasonable suspicion or probable cause. That the government may hope for the lowest standard does not alter our de novo review, particularly when the issue was fully briefed and argued below. Further, we may consider an issue that has not been adequately raised on appeal if such a failure will not prejudice the opposing party. United States v. Ullah. 976 F.2d 509, 514 (9th Cir. 1992). Where, as here, we "called for and received supplemental briefs by both parties,"Alcaraz v. INS, 384 F.3d 1150, 1161 (9th Cir.2004), the government's failure to address the issue does not prejudice Cotterman. See also United States v. Resendiz-Ponce, 549 U.S. 102, 103-04, 127 S.Ct. 782, 166 L.Ed.2d 591 (2007). III. THE BORDER SEARCH [5] [6] The broad contours of the scope of searches at our international borders are rooted in "the long-standing right of the sovereign to protect itself by stopping and examining persons and property crossing into this countly." Ramsey. 431 U.S. at 616, 97 S.Ct. 1972. Thus, border searches form "a narrow exception to the Fourth Amendment prohibition WeStlaWNeff © 2015 Thomson Reuters. No claim to original U.S. Government Works. 8 EFTA00314998 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sent 2531, 2013 Daily Journal =. 3018 against warrantless searches without probable cause." Seljan, 547 F.3d at 999 (internal quotation marks and citation 6 omitted). Because "[t]he Government's interest in preventing the entry of unwanted persons and effects is at its zenith at the international border," United States v. Flores-Montano, 541 U.S. 149, 152, 124 S.Ct. 1582, 158 L.Ed.2d 311 (2004), border searches are generally deemed "reasonable simply by virtue of the fact that they occur at the border." Ramsey, 431 U.S. at 616. 97 S.Ct. 1972. [71 [8] This does not mean, however, that at the border "anything goes." Seljan, 547 F.3d at 1000. Even at the border, individual privacy rights are not abandoned but "[b]alanced against the sovereign's interests." United States t'. Montoya de Hernandez, 473 U.S. 531, 539, 105 S.Ct. 3304, 87 L.Ed.2d 381 (1985). That balance "is qualitatively different ... than in the interior" and is "struck much more favorably to the Government." Id. at 538, 540, 105 S.Ct. 3304. Nonetheless, the touchstone of the Fourth Amendment analysis remains reasonableness. Id. at 538, 105 S.Ct. 3304. The reasonableness of a search or seizure depends on the totality of the circumstances, including the scope and duration of the deprivation. See United States v. Jacobsen, 466 U.S. 109, 124, 104 S.Ct. 1652, 80 L.Ed.2d 85 (1984); see also United States v. Duncan, 693 F.2d 971, 977 (9th Cir.1982). In view of these principles, the legitimacy of the initial search of Cotterman's electronic devices at the border is not in doubt. Officer Alvarado turned on the devices and opened and viewed image files while the Cottermans waited to enter the country. It was, in principle, akin to the search in Seljan, where we concluded that a suspicionless cursory scan of a package in international transit was not unreasonable. 547 F.3d at 1004. Similarly, we have approved a quick look and unintrusive search of laptops. United States v. Arnold. 533 F.3d 1003, 1009 (9th Cir.2008) (holding border search reasonable where "CBP officers simply 'had [traveler] boot [the laptop] up, and looked at what [he] had inside.' ") (second alteration in original). 6 *961 Had the search of Cotterman's laptop ended with Officer Alvarado, we would be inclined to conclude it was reasonable even without particularized suspicion. See id. But the search here transformed into something far different. The difficult question we confront is the reasonableness, without a warrant, of the forensic examination that comprehensively analyzed the hard drive of the computer. Although the Arnold decision expressed its conclusion in broad terms, stating that. "reasonable suspicion is not needed for customs officials to search a laptop or other personal electronic storage devices at the border." Arnold, 533 F.3d at 1008, the facts do not support such an unbounded holding. As an en bane court, we narrow Arnold to approve only the relatively simple search at issue in that case, not to countenance suspicionless forensic examinations. The dissent's extensive reliance on Arnold is misplaced in the en banc environment. A. The Forensic Examination Was Not An Extended Border Search [9] [10] Cotterman urges us to treat the examination as an extended border search that requires particularized suspicion. Although the semantic moniker "extended border search" may at first blush seem applicable here, our jurisprudence does not support such a claim. We have "define[d] an extended border search as any search away from the border where entry is not apparent, but where the dual requirements of reasonable certainty of a recent border crossing and reasonable suspicion of criminal activity am satisfied." United States v. Guzman-Padilla. 573 F.3d 865, 878-79 (9th Cir.2009) (internal quotation marks and citations omitted). The key feature of an extended border search is that an individual can be assumed to have cleared the border and thus regained an expectation of privacy in accompanying belongings. See United States v. Abbouchi, 502 F.3d 850, 855 (9th Cir.2007) ("Because the delayed nature of an extended border search ... necessarily entails a greater level of intrusion on legitimate expectations of privacy than an ordinary border search, the government must justify an extended border search with reasonable suspicion that the search may uncover contraband or evidence of criminal activity.") (internal quotation marks omitted) (emphasis added). Cotterman's case is different. Cotterman was stopped and searched at the border. Although he was allowed to depart the border inspection station after the initial search, some of his belongings, including his laptop, were not. The follow•on forensic examination was not an "extended border search." A border search of a computer is not transformed into an extended border search simply because the device is transported and examined beyond the border. WeStlaWNP5 © 2015 Thomson Reuters. No claim to original U.S. Government Works. EFTA00314999 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sent 2531, 2013 Daily Journal =. 3018 [11] [12] To be sure, our case law has not always border crossing only after the subject or items searched articulated the "extended border search" doctrine with optimal clarity. But the confusion has come in distinguishing between facts describing a functional border search and those describing an extended border search, not in defining the standard for a search at the border. See, e.g., United States v. Cardona, 769 F.2d 625, 628 (9th Cir.1985) ("We have recently recognized the difficulty of making sharp distinctions between searches at the functional equivalent of the border and extended border searches."). The "functional equivalent" doctrine effectively extends the border search doctrine to all ports of entry, including airports. See Ahneida— Sanchez v. United States, 413 U.S. 266, 273, 93 S.Ct. 2535, 37 L.Ed.2d 596 (1973). A routine customs search at the "functional equivalent" of the border is "analyzed as a border search" and requires neither probable cause nor reasonable suspicion. Seljan, 547 F.3d at 999. This case involves a search initiated at the actual border and does not encounter any of the difficulties *962 surrounding identification of a "functional" border. As to the extended border search doctrine, we believe it is best confined to races in which, after an apparent border crossing or functional entry, an attenuation in the time or the location of conducting a search reflects that the subject has regained an expectation of privacy.7 7 This characterization is consistent with how our circuit and others have articulated the doctrine. See, e.g., United States v. Villasenor. 608 F.3d 467. 471-72 (9th Cir.2010); United Stales v. Yang, 286 F.3d 940.945-46 (7th Cir.2002); United States v. Hyde, 37 F.3d 116. 120 n. 2 (3d Cit 1994); United States v. Santiago, 837 F.2d 1545. 1548 (11th Cir.1988); United States V. Gaviria, 805 F.2d 1108, 1112 (2d Cir.1986); United States v. Niver, 689 F.2d 520, 526 (5th Cir.1982); United States V. Mr, 592 F.2d 735, 739-40 (4th Cir.1979). [13] In his dissent, Judge Smith advocates applying the extended border search doctrine because the forensic examination occurred 170 miles from the border and days after Cotterman's entry. Moving the laptop to a specialized lab at a distant location might highlight that the search undertaken there was an extensive one, but it is not the dispositive factor here. Because Cotterman never regained possession of his laptop, the fact that the forensic examination occurred away from the border, in Tucson, did not heighten the interference with his privacy. Time and distance become relevant to determining whether there is an adequate nexus to a recent have entered. See Villasenor, 608 F.3d at 471 (explaining that reasonableness of extended border search depends on "whether the totality of the surrounding circumstances, including the time and distance elapsed" establish that items to be searched have recently entered the country) (internal quotation marks omitted). Cotterman's computer never cleared customs so entry was never effected. In short, the extended border search doctrine does not fit the search here. B. Forensic Examination At The Border Requires Reasonable Suspicion [141 It is the comprehensive and intrusive nature of a forensic examination —not the location of the examination — that is the key factor triggering the requirement of reasonable suspicion here.8 See Cotterman, 637 F.3d at 1086-87 n. 6 (B. Fletcher, J., dissenting) (recognizing that "[al computer search in a forensic lab will always be equivalent to an identical search at the border. The duration of a computer search is not controlled by where the search is conducted. The duration of a computer search is controlled by what one is looking for and how one goes about searching for it.") (emphasis in original). The search would have been every bit as intrusive had Agent Owen traveled to the border with his forensic equipment. Indeed, Agent Owen had a laptop with forensic software that he could have used to conduct an examination at the port of entry itself, although he testified it would have been a more time consuming effort. To carry out the examination of Cotterman's laptop, Agent Owen used computer forensic software to copy the hard drive and then analyze it in its entirety, including data that ostensibly had been deleted. This painstaking analysis is akin to reading a diary line by line looking for mention *963 of criminal activity—plus looking at everything the writer may have erased. 9 8 9 The concurrence goes to great lengths to "refute any such notion" that location and duration contributed to our holding reasonable suspicion required here. Concurrence at 974-75. We see no reason for such an exegesis; our opinion is clear on the point that these factors are not at issue. Agent Owen used a software program called EnCase that exhibited the distinctive features of computer WeStlaWNeXt" © 2015 Thomson Reuters. No claim to original U.S. Government Works. 10 EFTA00315000 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sent 2531, 2013 Daily Journal =. 3018 forensic examination. The program copied. analyzed. and preserved the data stored on the hard drive and gave the examiner access to far more data. including password-protected. hidden or encrypted. and deleted files. than a manual user could access. Notwithstanding a traveler's diminished expectation of privacy at the border, the search is still measured against the Fourth Amendment's reasonableness requirement, which considers the nature and scope of the search. Significantly, the Supreme Court has recognized that the "dignity and privacy interests of the person being searched" at the border will on occasion demand "some level of suspicion in the case of highly intrusive searches of the person." Flores- Montano, 541 U.S. at 152, 124 S.CI. 1582. Likewise, the Court has explained that "some searches of property are so destructive," "particularly offensive," or overly intrusive in the manner in which they are carried out as to require particularized suspicion. Id. at 152, 154 n. 2, 155-56, 124 S.Ct. 1582; Montoya de Hernandez, 473 U.S. at 541. 105 S.Ct. 3304. The Court has never defined the precise dimensions of a reasonable border search, instead pointing to the necessity of a case-by-case analysis. As we have emphasized, "[deasonableness, when used in the context of a border search, is incapable of comprehensive definition or of mechanical application." Duncan, 693 F.2d at 977 (internal quotation marks and citation omitted). Over the past 30-plus years, the Supreme Court has dealt with a handful of border cases in which it reaffirmed the border search exception while, at the same time, leaving open the question of when a "particularly offensive" search might fail the reasonableness test. The trail begins with United States v. Ramsey, where the Court reserved judgment on this question: "We do not decide whether, and under what circumstances, a border search might be deemed 'unreasonable' because of the particularly offensive manner in which it is carried out." 431 U.S. at 618 n. 13, 97 S.Ct. 1972. Of note, the Court cited two cases, albeit non-border cases, as examples: Kremen v. United States, 353 U.S. 346. 347-48, 77 S.Ct. 828, 1 L.Ed.2d 876 (1957) (holding unconstitutional an exhaustive warrantless search of a cabin and seizure of its entire contents that were moved 200 miles away for examination) and Go- Bart Importing Co. v. United States, 282 U.S. 344, 358. 51 S.Ct. 153, 75 L.Ed. 374 (1931) (condemning as "lawless invasion of the premises and a general exploratory search" a warrantless "unlimited search, ransacking the desk, safe, filing cases and other parts of [an] office"). Less than ten years later, in 1985, the Court observed that it had "not previously decided what level of suspicion would justify a seizure of an incoming traveler for purposes other than a routine border search" and then went on to hold in the context of an alimentary canal search that reasonable suspicion was required for "the detention of a traveler at the border, beyond the scope of a routine customs search and inspection." Montoya de Hernandez, 473 U.S. at 540- 41. 105 S.Ct. 3304. The Court's reference to "routine border search" was parsed in a later case, Flores—Montano, where the Court explained that "the reasons that might support a requirement of some level of suspicion in the case of highly intrusive searches of the person—dignity and privacy interests of the person being searched—simply do not carry over to vehicles," and, more specifically, to the gas tank of a car. 541 U.S. at 152, 124 S.CI. 1582. Accordingly, the Court *964 rejected a privacy claim vis-a-vis an automobile gas tank. We are now presented with a case directly implicating substantial personal privacy interests. The private information individuals store on digital devices—their personal -papers" in the words of the Constitution —stands in stark contrast to the generic and impersonal contents of a gas tank. See, e.g., United States v. Jones, — U.S. —, 132 S.Ct. 945, 957, 181 L.Ed.2d 911 (2012) (Sotomayor, J., concurring) (expressing "doubt that people would accept without complaint the warrantless disclosure to the Government of a list of every Web site they had visited in the last week, or month, or year"). We rest our analysis on the reasonableness of this search, paying particular heed to the nature of the electronic devices and the attendant expectation of privacy. The amount of private information carried by international travelers was traditionally circumscribed by the size of the traveler's luggage or automobile. That is no longer the case. Electronic devices are capable of storing warehouses full of information. The average 400—gigabyte laptop hard drive can store over 200 million pages—the equivalent of five floors of a typical academic library. See Orin S. Kerr, Searches and Seizures in a Digital World, 119 Harv. L.Rev. 531, 542 (2005) (explaining that an 80 GB hard drive is equivalent to 40 million pages or one floor of an academic library); see also LexisNexis, How Many Pages in a Gigabyte?. http:/Avww.lexisnexis. corn/applieddiscovery/lawlibrary/ WeSflaWNPS © 2015 Thomson Reuters. No claim to original U.S. Government Works. 11 EFTA00315001 Horowitz. Adam 11 24 2015 For Educational Use Only U.S. v. Cotterman, 709 F.3d 952 (2013) 13 Cal. Daily Op. Sew. 2531, 2013 Daily Journal =. 3018 whitePapers/ADI_FS_PageslnAGigabyte.pdf. Even a car full of packed suitcases with sensitive documents cannot hold a candle to the sheer, and ever-increasing, capacity of digital storage. to 10 We are puzzled by the dissent's speculation about "how many gigabytes of storage [one must! buy to secure the guarantee that reasonable suspicion will be required before one's devices are searched." Dissent at 987. We discuss the typical storage capacity of electronic devices simply to highlight the features that generally distinguish them from traditional baggage. Indeed, we do not and need not determine whether Cotterman's laptop possessed unusually large or simply "average" capacity in order to resolve that the forensic examination of it required reasonable suspicion. [15] [16] The nature of the contents of electronic devices differs from that of luggage as well. Laptop computers, iPads and the like are simultaneously offices and personal diaries. They contain the most intimate details of our lives: financial records, confidential business documents, medical records and private emails. This type of material implicates the Fourth Amendment's specific guarantee of the people's right to be secure in their "papers." U.S. Const. amend. IV. The express listing of papers "reflects the Founders' deep concern with safeguarding the privacy of thoughts and ideas —what we might call freedom of conscience —from invasion by the government." Seljan, 547 F.3d at 1014 (Kozinski, C.J., dissenting); see also New York v. Video, Inc., 475 U.S. 868, 873, 106 S.Ct. 1610, 89 L.Ed.2d 871 (1986). These records are expected to be kept private and this expectation is "one that society is prepared to recognize as `reasonable.' " Katz v. United States, 389 U.S. 347, 361, 88 S.Ct. 507, 19 L.Ed.2d 576 (1967) (Harlan, J., concurring). II 1I The dissent's discussion about Facebook and other platforms where the user voluntarily transmits personal data over the Internet. often oblivious to privacy issues. Dissent at 65-66. is a red herring. Of course. willful disclosure of electronic data. like disclosure of other material, undercuts an individual's expectation of privacy. But there was no such disclosure here. Nor does the border search implicate such an affirmative disclosure. •965 Electronic devices often retain sensitive and confidential information far beyond the perceived point of erasure, notably in the form of browsing histories and records of deleted files. This quality makes it impractical, if not impossible, for individuals to make meaningful decisions regarding what digital content to expose to the scrutiny that accompanies international travel. A person's digital life ought not be hijacked simply by crossing a border. When packing traditional luggage, one is accustomed to deciding what papers to take and what to leave behind. When carrying a laptop, tablet or other device, however, removing files unnecessary to an impending trip is an impractical solution given the volume and often intermingled nature of the files. It is also a time-consuming task that may not even effectively erase the files. The present case

📷 Images in this document (35 detected; 6 largest described)

AI-generated factual descriptions of embedded images (llava:13b). These are searchable across the corpus.

[Image 1] The image shows a page from a document, which appears to be a legal or academic paper. The text is dense and includes references to various laws and regulations, such as the "United States Code," "Title 18," and "Title 28." There are also citations to specific sections within these codes. The document is structured with numbered paragraphs and subsections, suggesting a formal and organized present [Image 2] The image shows a page from a document, which appears to be a legal or academic text. The text is in English and includes headings, subheadings, and paragraphs. The document is structured with numbered sections and references to specific laws or regulations. There are also footnotes and citations to external sources. The text is dense and seems to be discussing legal or policy matters, possibly re [Image 3] The image shows a page from a document, which appears to be a legal or academic paper. The text is in English and includes various paragraphs with headings such as "Introduction," "Background," and "Conclusion." There are also subheadings within the paragraphs. The document contains citations and references to legal cases and statutes, indicating a scholarly or professional context. The text is de [Image 4] The image shows a page from a scientific or academic paper. The text is dense and appears to be discussing a research study or a technical report. There are numbered sections and subsections, which is typical for such documents. The text includes references to figures, tables, and equations, indicating a structured and methodical approach to the subject matter. The page is numbered 12, and there a [Image 5] The image shows a page from a scientific or academic paper. The text is dense and appears to be discussing a research study or a technical report. There are numbered sections, references, and figures that are typical of such documents. The text includes citations, equations, and a list of figures. The page is numbered 12, and the document is from the year 2015. The content is technical and special [Image 6] The image shows a page from a document, which appears to be a legal or academic paper. The text is dense and includes references to legal cases and statutes. There are numbered paragraphs and footnotes, indicating a structured argument or discussion. The document is titled "REPORT OF THE SUPREME COURT OF THE UNITED STATES OF AMERICA," and it mentions a case number and a date. The text is too small