DOJ Takes Necessary, But Not Yet Sufficient, Steps to Safeguard People from Warrantless Use of Cell-Site Simulator Technology
Last month, The U.S. Department of Justice announced that it was implementing a new policy to govern the use of cell-site simulator technology, known also as “stingrays,” by federal law enforcement. The policy, available here, is intended to better protect suspects in criminal investigations and bystanders from intrusive, warrantless searches of data collected from their cellular phones.
A stingray is a small device—easily transportable in a car or even on someone’s person—that operates as a portable cell tower. Its signal reaches cell phones and other electronic devices in the area, which in turn transmit information through the stingray instead of through a proper cellular tower. The stingray can obtain information from all devices in the area, even those that are not in use. The problem is that the stingray is not owned or operated by a phone company. It’s owned and operated by the government, and law enforcement will collect and retain location and other identifying information from devices in range of the stingray. A police car that contains a stingray can drive down a road, or stop at a busy intersection, and collect data from electronic devices, without the owners of those devices having any idea that it is happening. The stingray works through walls, which means it can collect data from inside businesses and homes, and can accurately and precisely determine someone’s location. Even when the aim is to collect data from a specific person’s phone, it will also pick up data from bystanders who happen to be in the wrong place at the wrong time: that is, being in the vicinity of a law enforcement officer with a stingray. A stingray has other nasty side effects, too, including by draining device batteries by forcing them to transmit data even when they are not in use, and by disrupting cellular service to the area.