Power

New York lawmakers want to outlaw geofence warrants as protests grow

A new bill would prohibit police from forcing Google and other companies to hand over data about who was in a certain location at a certain time.

People at a protest holding up a sign with George Floyd's picture on it

Lawmakers in New York want to prohibit police from using reverse location searches to crack down on protesters.

Photo: Ira L. Black/Corbis via Getty Images

As protests against police brutality swell in cities across America, lawmakers in New York state are gaining support — including from some tech giants — for a recently introduced bill that would prohibit police from using so-called geofence warrants, which compel companies like Google to give up reams of data on who was in a certain location at a certain time.

The legislation, introduced by state Sen. Zellnor Myrie and Assemblyman Dan Quart, would be the first in the United States to bar police from seeking these warrants or from obtaining the data through voluntary means, like buying it from a data broker. The bill was introduced in April but is newly relevant as some fear this data could be used to crack down on protesters.

"It's easy to see how reverse search warrants can be used to target protesters and people engaged in legitimate First Amendment activities," Quart said. "I think the current environment is an opportunity to push this legislation."

Since the protests began, several new co-sponsors in both the state Senate and the Assembly have signed onto the bill. The legislation is also receiving some tepid support from Google, one of the tech companies whose compliance with these warrants has earned it notoriety. "We're encouraged to see lawmakers discussing legislation that acknowledges smartphones' crucial role in today's world and the need for rules to govern untargeted access to data by law enforcement," Google's director of law enforcement and information security Richard Salgado told Protocol.

Facebook spokesperson Andy Stone also said the company is "supportive" of the New York bill, adding that Facebook doesn't respond to these warrants.

The introduction of the bill comes as a high-stakes legal fight questioning the legality of these warrants is playing out in Virginia. But lawmakers and privacy advocates say protesters need protection from this type of surveillance quicker than courts can provide it.

"I think it's important for us to get statutes on the books as soon as possible because it's a timely issue," Myrie said. "This is potentially people's liberty at stake."

Geofence warrants are a relatively new but rapidly expanding phenomenon. Rather than issuing a warrant for data on a specific individual, these warrants seek information on all of the devices in a given area at a given time. Between 2017 and 2018, Google saw a 1,500% increase in geofence requests. Between 2018 and 2019, that figure shot up another 500%. That's according to a brief Google filed in Virginia, where a man named Okello Chatrie is currently challenging the use of Google location data to connect him with a bank robbery.

In a New York Times investigation last year, one Google employee said the company received as many as 180 geofence requests in a week. Google wouldn't comment to Protocol on the number of requests it received. The Times' story focused on an Arizona man who was arrested for a murder he didn't commit after police obtained his location data from Google. It drew widespread attention to Google's SensorVault database, which holds location data from hundreds of millions of devices that have Google's location history setting turned on.

When Google receives such a warrant, it supplies law enforcement with anonymized information on devices in the area. Once law enforcement determines which devices it deems relevant, Google will supply more granular information like, say, the Gmail name associated with the device.

"We will only produce Location History data if served with a search warrant," Google spokesperson Aaron Stein said. "We have not complied — and have litigated against — reverse [location history] requests without a search warrant."

Google's SensorVault system has attracted by far the most attention, including from Congress, but it's hardly the only company whose troves of location data police and government agents might like to mine. In at least one case in New York City, an investigator for the Manhattan district attorney testified that he sent location data requests to Uber, Lyft, Snapchat and Apple, too. In that case, the DA's office was seeking to identify four people allegedly associated with the far-left group Antifa who had clashed with members of the far-right group Proud Boys outside an event in October 2018.

According to the investigator, those requests weren't successful. But the fact that the Manhattan DA had undertaken such a search to try to identify protesters alarmed privacy advocates and lawmakers alike.

"It really makes a mockery of the Fourth Amendment," said Albert Fox Cahn, founder and executive director of the Surveillance Technology Oversight Project, which opposes police surveillance. "After seeing the scope of the abuse in that case and researching the practice more broadly, it was clear to us it was necessary to outlaw this type of search."

Cahn's organization began working with Quart, whose district includes the location of the Proud Boys incident. Along with the National Association of Criminal Defense Attorneys's Fourth Amendment Center and Myrie, they began drafting legislation.

In April of this year, they introduced the bill, in part, as a response to the COVID-19 crisis, which was already opening the door to new forms of location tracking to assist in contact-tracing efforts. "I thought it was important to not have this pandemic be the source of data collection that could adversely impact a lot of people in the community," Myrie, who represents a predominantly Black district in Brooklyn, said. The Black Lives Matter protests, he said, have only added to the urgency of the legislation.

In addition to prohibiting geofence warrants, the bill also bars "voluntary reverse location requests," in which police get access to location data from data brokers and other companies without a warrant. "We know there's a huge marketplace for all of our data and so many firms that would be eager to provide this data if they're getting paid for it," Cahn said. Last year, VICE revealed that T-Mobile, Sprint and AT&T were selling real-time location data to bounty hunters and other data brokers.

While data brokers may not love getting cut off from a potential revenue source, it's easy to imagine why tech companies would support a bill like this. Complying with these warrants is not only technically arduous, but it also opens tech companies up to accusations of aiding unjust policing practices at a time when the public is pressuring tech giants to cut ties with police.

Last year, the tech industry association CompTIA opposed a bill in Texas that would have specified that geofence warrants were legal in the state. And in its amicus brief in the Virginia bank robbery case, Google called these warrants "broad and intrusive." But the company spokesperson wouldn't say whether Google has ever fought back against them.

Mark Rumold, a senior staff attorney for the Electronic Frontier Foundation, argues they should. "They can and should contest the validity of the warrant," he said. "If they have done this and lost, they should make that public."

The bill in New York is still relatively new and is likely to face substantial opposition from the law enforcement lobby. It's also competing with a laundry list of other priorities for the legislature, which is still grappling with the devastating toll COVID-19 has taken on the state. But in recent weeks, New York's legislature has passed several substantial policing reforms, including a measure to ban chokeholds and repeal a law that kept police misconduct records secret. Myrie said he's "cautiously optimistic" that momentum could help fast-track this legislation.

"The crowds are not waning. They're growing," Myrie said of the protests. "The pressure legislators are feeling from the people on the ground has shattered what the political norms would be."

Protocol | Workplace

Instacart workers are on strike. How far can it get them?

Instacart activists want a nationwide strike to start today, but many workers are too afraid of the company and feel they can't afford a day off of work.

Gig workers protest in front of an Amazon facility in 2020.

Photo: Michael Nagle/Bloomberg via Getty Images

Starting today, an Instacart organizing group is asking the app's gig workers to go on a nationwide strike to demand better payment structures, benefits and other changes to the way the company treats its workers — but if past strikes are any indication, most Instacart users probably won't even notice.

The majority of Instacart workers on forums like Reddit and Facebook appear either unaware of the planned strike or don't plan to participate because they are skeptical of its power, afraid of retaliation from the company or are too reliant on what they do make from the app to be able to afford to take even one day off of the platform. "Not unless someone is going to pay my bills," "It will never work, you will never be able to get every shopper to organize" and "Last time there was a 'strike' Instacart took away our quality bonus pay," are just a few of the comments Instacart shoppers have left in response to news of the strike.

Keep Reading Show less
Anna Kramer

Anna Kramer is a reporter at Protocol (Twitter: @ anna_c_kramer, email: akramer@protocol.com), where she writes about labor and workplace issues. Prior to joining the team, she covered tech and small business for the San Francisco Chronicle and privacy for Bloomberg Law. She is a recent graduate of Brown University, where she studied International Relations and Arabic and wrote her senior thesis about surveillance tools and technological development in the Middle East.

The way we work has fundamentally changed. COVID-19 upended business dealings and office work processes, putting into hyperdrive a move towards digital collaboration platforms that allow teams to streamline processes and communicate from anywhere. According to the International Data Corporation, the revenue for worldwide collaboration applications increased 32.9 percent from 2019 to 2020, reaching $22.6 billion; it's expected to become a $50.7 billion industry by 2025.

"While consumers and early adopter businesses had widely embraced collaborative applications prior to the pandemic, the market saw five years' worth of new users in the first six months of 2020," said Wayne Kurtzman, research director of social and collaboration at IDC. "This has cemented collaboration, at least to some extent, for every business, large and small."

Keep Reading Show less
Kate Silver

Kate Silver is an award-winning reporter and editor with 15-plus years of journalism experience. Based in Chicago, she specializes in feature and business reporting. Kate's reporting has appeared in the Washington Post, The Chicago Tribune, The Atlantic's CityLab, Atlas Obscura, The Telegraph and many other outlets.

Protocol | China

WeChat promises to stop accessing users’ photo albums amid public outcry

A tech blogger claimed that popular Chinese apps snoop around users' photo libraries, provoking heightened public concerns over privacy.

A survey launched by Sina Tech shows 94% of the some 30,000 responding users said they are not comfortable with apps reading their photo libraries just to allow them to share images faster in chats.

Photo: S3studio via Getty Images

A Chinese tech blogger dropped a bombshell last Friday, claiming on Chinese media that he found that several popular Chinese apps, including the Tencent-owned chat apps WeChat and QQ, as well as the Alibaba-owned ecommerce app Taobao, frequently access iPhone users' photo albums in the background even when those apps are not in use.

The original Weibo post from the tech blogger, using the handle of @Hackl0us, provoked intense debates about user privacy on the Chinese internet and consequently prompted WeChat to announce that it would stop fetching users' photo album data in the background.

Keep Reading Show less
Shen Lu

Shen Lu is a reporter with Protocol | China. Her writing has appeared in Foreign Policy, The New York Times and POLITICO, among other publications. She can be reached at shenlu@protocol.com.

Protocol | Enterprise

As businesses struggle with data, enterprise tech is cleaning up

Enterprise tech's vision of "big data" largely fell flat inside silos. But now, an army of providers think they've figured out the problems. And customers and investors are taking note.

Corporate data tends to settle in silos that makes it harder to understand the bigger picture. Enterprise tech vendors smell a lucrative opportunity.

Photo: Jim Witkowski/Unsplash

Data isn't the new oil; it's the new gold. And in any gold rush, the ones who make the most money in the long run are the tool makers and suppliers.

Enterprise tech vendors have long peddled a vision of corporate America centered around so-called "big data." But there was a big problem: Many of those projects failed to produce a return. An army of new providers think they've finally figured out the problem, and investors and customers are taking note.

Keep Reading Show less
Joe Williams

Joe Williams is a senior reporter at Protocol covering enterprise software, including industry giants like Salesforce, Microsoft, IBM and Oracle. He previously covered emerging technology for Business Insider. Joe can be reached at JWilliams@Protocol.com. To share information confidentially, he can also be contacted on a non-work device via Signal (+1-309-265-6120) or JPW53189@protonmail.com.

Protocol | Policy

What Frances Haugen’s SEC complaint means for the rest of tech

Haugen argues Facebook misled investors by failing to disclose its platforms' harms. If the SEC bites, the rest of tech could be next.

The question is whether the SEC will find the contents of Haugen's complaint relevant to investors' interests.

Photo: Matt McClain-Pool/Getty Images

Whistleblowers like former Facebook staffer Frances Haugen have pretty limited options when it comes to actually seeking redress for the harms they've observed and documented. There's no federal privacy law in the U.S. to speak of, Section 230 protects platforms for online speech and companies like Facebook are under no obligation to share any information with lawmakers, or anyone else, about what's happening on their sites.

But there is one agency that not only governs all publicly-traded companies, including in tech, but also offers whistleblowers like Haugen the opportunity for a payout: the Securities and Exchange Commission.

Keep Reading Show less
Issie Lapowsky

Issie Lapowsky ( @issielapowsky) is Protocol's chief correspondent, covering the intersection of technology, politics, and national affairs. She also oversees Protocol's fellowship program. Previously, she was a senior writer at Wired, where she covered the 2016 election and the Facebook beat in its aftermath. Prior to that, Issie worked as a staff writer for Inc. magazine, writing about small business and entrepreneurship. She has also worked as an on-air contributor for CBS News and taught a graduate-level course at New York University's Center for Publishing on how tech giants have affected publishing.

Latest Stories