In response to my recent missive (“Beating Customs Agents With Your Laptop”) about the fourth-amendment-free zone overseen by U.S. Customs and Border Protection, Lawrence Friedman at Customs Law sent an email explaining some of what can really happen when you try to apply technogeek law to the real world:
In response to your encryption-deleted key suggestion, you might think in terms of a lost key to a suitcase. If CBP decides they want to search your locked suitcase, they will ask for the key. If you say you lost the key, they will find the nearest pry bar and open it. Same goes for your laptop. The inspector at the border does not necessarily know or care anything about encryption levels. What he or she knows is that he or she has the authority to take it, turn it over to Immigration and Customs Enforcement, and wait to see what they say. You could be without your laptop for a very long time.
If Customs decides it wants to play hardball, the next thing that will happen is that you will get a summons demanding the release of the encryption key. Even if you don’t know it, the key is in your possession or control (since you left it with someone else). That’s good enough. Fail to turn over the key, and you may find yourself in court with a federal judge threatening to toss you in jail until you come up with the key.
To me, that made no sense, so I explained my thinking:
Hypothetically, they wanted to see what was on my laptop, and it contained 160 gigabytes of ciphertext. They saw that. The decryption key is stored inside the country and is not crossing the border, so it’s none of their business under the fourth amendment, and the plaintext doesn’t even exist unless I decrypt the disk, so how can I be legally required to provide it?
I knew he’d eviscerate my argument, but the way he did it was chilling:
Your response, I think, points out the false premise in your thinking. The law is clear that the fourth amendment protects the interests of people, not property. And, it only applies to people inside the US. At the border, the fourth amendment offers you no protection against an unreasonable search and seizure with the limited exception of the most egregiously personal physical searches. The Supreme Court famously said that border searches are almost always reasonable because they are border searches.
Er, yes…I believe that is technically referred to as the “fuck you and your rights” theory of constitutional interpretation.
The same session of Congress that passed the Bill of Rights (to send to the states for ultimate ratification) had two months earlier passed a plenary customs search statute. Therefore the Fourth Amendment was “obviously” not meant to apply to customs searches — the “legislative intent” is, we are told, unambiguous and not open for debate.
By the way, Lawrence Friedman was a really nice guy to answer my idiot questions, and his blog, Customs Law, is well-written. If you have an urgent desire to keep up with the latest word in enforcement of laws relating to textile imports and preference programs, fumigation of wood packing materials, and denial of special licenses to unlade, it’s the only place to be.
One more thing. In his first message, Friedman also had this advice:
Best thing to do is cooperate with the search, identify any documents that may be privileged or business proprietary, and smile a lot. Whenever possible, leave the laptop at home. You can take some solace in the fact that these searches really are quite rare.
Heck, I’ve never been out of the country. It’s the principle of the thing that pisses me off. I’d like to think that lying back and trying to enjoy it is not the American way.