Case Study 31-1: Timothy Carpenter and the Digital Footprint

Carpenter v. United States (2018) — The Limits of Third-Party Doctrine

Background

In 2010 and 2011, a series of armed robberies struck Radio Shack and T-Mobile stores in Michigan and Ohio. Robbers entered the stores, threatened employees with guns, and stole hundreds of smartphones. The FBI investigated and eventually arrested four suspects, who identified Timothy Carpenter as the ringleader who planned the robberies and drove the getaway car.

To build their case, federal prosecutors sought Carpenter's cell phone records from his wireless carriers — MetroPCS and Sprint. They obtained the records not with a warrant but with a court order under the Stored Communications Act, which requires only that the government demonstrate "reasonable grounds" to believe the records are relevant to an investigation. "Reasonable grounds" is a lower bar than "probable cause" — the Fourth Amendment standard for warrants.

The records produced were detailed: 12,898 location points covering 127 days of Carpenter's movements. The data placed Carpenter's phone near the robbery sites at the times the robberies occurred.

Carpenter was convicted and sentenced to more than 100 years in prison. He appealed, arguing that obtaining his location records without a warrant violated the Fourth Amendment.

The case turned on whether the third-party doctrine — established in Smith v. Maryland (1979) for phone numbers dialed — extended to cell site location information.

The government's argument was straightforward: Carpenter voluntarily used a cellular network. He knew (or should have known) that cell phones connect to towers and that carriers log those connections for billing and network management. By using the network, he assumed the risk that carriers might share the records with the government. Under Smith, that assumption of risk meant he had no Fourth Amendment protection.

Carpenter's argument was equally straightforward: 127 days of location data is qualitatively different from a list of phone numbers. It reveals a comprehensive picture of where a person goes — their daily routines, their social relationships, their medical visits, their religious practices, their intimate associations. No one voluntarily surrenders that picture to their carrier in any meaningful sense.

The Supreme Court Decision

In a 5-4 decision written by Chief Justice John Roberts, the Supreme Court held that the government violated the Fourth Amendment by obtaining 127 days of CSLI without a warrant.

The majority opinion is notable for its candor about the inadequacy of existing doctrine in the digital age. Roberts wrote:

"The Government's position fails to contend with the seismic shifts in digital technology that made possible the tracking of not only Carpenter's location but also everyone else's, not for a short period but for years and years. Sprint Corporation and its competitors are not your typical witnesses. Unlike the nosy neighbor who keeps an eye on your house, they are ever alert, and their memory is nearly infallible."

Roberts distinguished CSLI from the pen register data in Smith on three grounds: 1. Comprehensiveness: CSLI provides a near-perfect historical record of physical movements — not just one type of record but a "detailed, encyclopedic, effortlessly compiled" chronicle 2. Intimacy: Because location over time reveals patterns of life — where you sleep, worship, receive medical treatment, protest — it discloses "the privacies of life" in a way that phone numbers don't 3. Involuntariness: Cell phones connect to towers automatically; there is no affirmative act by the user each time a location ping is logged

The majority declined to overrule Smith v. Maryland. It described its holding as narrow and addressed only to the specific circumstance of comprehensive, long-term location data.

The Dissents

Four justices dissented, offering different critiques:

Justice Kennedy (joined by Thomas and Alito): The third-party doctrine should apply without modification. Carpenter shared his location data with carriers voluntarily by using their service. The majority had provided no principled limiting principle for when the doctrine does and doesn't apply. Future courts would have no guidance on whether 24 hours of CSLI requires a warrant, whether email records require a warrant, whether Google search data requires a warrant.

Justice Thomas (separate dissent): The entire "reasonable expectation of privacy" test from Katz should be abandoned as untethered from the Fourth Amendment's text and history. Courts should return to a property-based understanding.

Justice Alito (separate dissent): The third-party doctrine reflects a sound principle — the Fourth Amendment was never meant to protect information from the government that private actors can access. The solution to invasive data collection is legislation, not constitutional interpretation.

Justice Gorsuch (separate dissent): He would have protected Carpenter's records but through a different route — property law, specifically the idea that people have property-like interests in records created about them. He was skeptical of the "reasonable expectation" test but agreed the third-party doctrine was inadequate.

What Carpenter Left Open

The majority's carefulness about limiting the holding created enormous uncertainty. Roberts specifically declined to address: - Whether shorter periods of CSLI (fewer than seven days?) require a warrant - Whether real-time CSLI tracking requires a warrant - Whether other types of third-party records (internet browsing history, email metadata, financial records, social media data) require a warrant - Whether CSLI obtained from a voluntary fitness app (rather than an involuntary carrier ping) is different

The decision has been called a "constitutional island" — a protection for one category of data surrounded by an ocean of unresolved questions. Lower courts have applied Carpenter inconsistently, and the Supreme Court has not yet revisited the issues left open.

Analysis Questions

1. Chief Justice Roberts wrote that the government's access to CSLI was "like attaching an ankle monitor to the phone's user." Is this analogy apt? Does it support the majority's conclusion? What are its limits?

2. Justice Kennedy complained that the majority gave no principled way to decide which digital data requires a warrant. Try to articulate a principle that would determine when Carpenter applies. Consider: time period covered? Type of information revealed? Degree of voluntariness? Comprehensiveness?

3. Justice Thomas argued that the Katz "reasonable expectation" test should be replaced with a property-based approach. Justice Gorsuch agreed but reached Carpenter's favor through property law. Whose approach do you find more persuasive, and why?

4. Justice Alito argued that the solution to digital privacy problems should come from Congress, not courts. Evaluate this argument. What are its strengths? What are its weaknesses given the history of congressional inaction on federal privacy legislation?

5. Carpenter has been widely interpreted as a significant victory for privacy. But the majority did not overrule Smith v. Maryland. What does it mean to win a Fourth Amendment case without overruling the doctrine that has been gutting Fourth Amendment protection for forty years?

6. Timothy Carpenter was convicted of serious violent crimes. Does the factual context — guilty or not guilty, serious or minor offense — matter to how we evaluate the legal doctrine? Should Fourth Amendment rights apply differently depending on the seriousness of the suspected crime?

Implications for Jordan Ellis

Jordan thinks about Carpenter in the context of their own daily life. Their phone connects to cell towers constantly. Their carrier logs those connections. Their location data exists in carrier servers going back as long as they've had a phone. Before Carpenter, the government could obtain all of that without a warrant. After Carpenter, it needs a warrant for extended location history.

But Jordan's phone also logs location in Google Maps (if enabled), Apple Health, Instagram geotags, Uber, and dozens of other apps. Those apps are not cellular carriers. The third-party doctrine — still in force — means the government can likely obtain those records without a warrant.

"Carpenter is important," Dr. Osei told the class. "But it's one rock in the middle of a river. You can step on it to get partway across. But there's still a lot of river between you and the other bank."

This case study should be read in conjunction with Chapter 31, Section 31.2 (Fourth Amendment doctrine) and Section 31.3 (third-party doctrine). It connects forward to Chapter 38 (predictive policing and AI) and Chapter 39 (designing for privacy).