ORDER DENYING APPLICATION FOR A SEARCH WARRANT
PAUL S. GREWAL, United States Magistrate Judge
On most days, the undersigned joins the teeming masses of the Bay Area on Highway 101 or 280. Lengthy queues form at each exit in Mountain View, Sunnyvale and Cupertino. Double decker buses pulse with their Wi-Fi as they move past in the diamond lane. On other days, on the ride to the courthouse on Caltrain, passenger after passenger bears the access badges that similarly mark the proliferation of the technology worker. A similar scene plays out as much at the humble downtown San Jose taquería as the overpriced Palo Alto cafe. The Technorati are, in short, everywhere. And yet too few understand, or even suspect, the essential role played by many of these workers and their employers in facilitating most government access to private citizen’s data.
Search warrant applications like the one presently before thfe court bring this role into view.
The tools of modern crime have evolved beyond a ski mask and a burlap sack. Like the rest of society, the modern criminal uses computers and mobile devices to do his “work.” As such, evidence of crime and evidence of daily life unrelated to crime are often intertwined in software files, folders and databases. Even with a warrant issued under Fed.R.Crim.P. 41, this often leaves the government in the unenviable position of having to spend many, many hours of sifting through data by brute force or complex and cumbersome sorting algorithms. Where the computers at issue are at a suspect’s home, courts have recognized the impracticality of reviewing the data on site by approving a “seize first, search second” methodology-1
[1102]*1102But what about those computers that are not at a suspect’s home, but at a third-party cloud provider like Google? Following a standard format used by the Department of Justice, the government draws no distinction and commonly seeks approval for the same seize first, search second methodology whether the data of interest is local or remote. For example, the supporting affidavit here is divided into three sections in which the first section gives background and the reasons sufficient to establish probable cause. In a second section, labeled “Attachment A,” the property to be searched is identified as a particular email account stored on the premises of Google’s headquarters. No date restriction is included. The third section, labeled “Attachment B,” includes two subsections. Subsection I describes particular information within the account to be disclosed by Google.2 Subsection II describes information from within Subsection I which the government may then seize.3 As it often does, the government requests delayed no[1103]*1103tification of the warrant to the account holder, pursuant to 18 U.S.C. § 3103a.4
Three elements of the government’s application warrant discussion.
First, this application and others like it highlight the problem of devising ex ante limits on the execution of a warrant like those set out in Attachment B. In this ex ante, and also ex parte process, magistrate judges are called on to review the reasonableness of execution procedures like seize first, search second in the sterile isolation of their chambers. All that is available for review comes from the government. No defendant or defense counsel is present. Indeed, no defendant yet exists, as no case has yet been filed. There are no hearings, no witnesses, no briefs and no debate. Instead, a magistrate judge is left to predict what would or would not be reasonable in executing the warrant without any hard, ripe facts. This is hardly a recipe for success.5
And yet, despite Rule 41(d)(i )’s mandatory language,6 this court must respect that this Circuit, the Ninth Circuit, has explicitly approved ex ante restrictions in search warrants. In particular, in United States v. Hill, the court mandated that agents looking to seize and then search must secure a magistrate judge’s approval of the reasonableness of the approach in advance:
Although computer technology may in theory justify blanket seizures for the reasons discussed above, the government must still demonstrate to the magistrate factually why such a broad search and seizure authority is reasonable in the case at hand. There may well be situations where the government has no basis for believing that a computer search would involve the kind of technological problems that would make an immediate onsite search and selective removal of relevant evidence impracticable. Thus, there must be some threshold showing before the government may “seize the haystack to look for the needle.”7
And so this court must fulfill its duty to consider whether the restrictions of Attachment B pass muster.
This brings the court to the second element worthy of discussion: the constitutionality of the warrant application. As an initial matter, in many ways, the application is remarkably unremarkable. As it does on most days in this court, the government seeks data in the files of an electronic communications service provider as part of an ongoing investigation. Because this same type of request is regularly made in this district, the particular details of the investigation at issue here are not important for purposes of this discussion. Suffice it to say that the court finds probable cause to believe that the Gmail account at issue holds evidence of the theft of government funds.
But what of all the data associated with the account which supplies no such evidence whatsoever? In the Ninth Circuit anyway, the problem is not with seize first, [1104]*1104search second itself. To understand why, go back to Hill. Hill was undeniably not a third-party provider ease; Mr. Hill possessed all the hardware at issue. But in evaluating the warrant authorizing the seizure and search of Hill’s computers, the Ninth Circuit weighed burdens and practical considerations that, if anything, are more compelling in a cloud computing environment, not less. Take, for example, the court’s concern with facilitating technical accuracy in searching for the data of interest. In the absence of a seize first, •search second approach, presumably Google (or a special master retained by Google) would have to search the account at issue looking for just the evidence to be seized. But even with its search prowess, Google would be left to guess what search terms would be appropriate. Would it be enough to look for “theft” within five words of “government funds”? Can Google rely on its famous search engine, or is human review required? Is it reasonable to impose the cost and, equally important, the distraction of such efforts on a third party to the investigation, especially in light of the number of times a company like Google gets such a request every-month?
Alternatively, consider Hill’s
Free access — add to your briefcase to read the full text and ask questions with AI
ORDER DENYING APPLICATION FOR A SEARCH WARRANT
PAUL S. GREWAL, United States Magistrate Judge
On most days, the undersigned joins the teeming masses of the Bay Area on Highway 101 or 280. Lengthy queues form at each exit in Mountain View, Sunnyvale and Cupertino. Double decker buses pulse with their Wi-Fi as they move past in the diamond lane. On other days, on the ride to the courthouse on Caltrain, passenger after passenger bears the access badges that similarly mark the proliferation of the technology worker. A similar scene plays out as much at the humble downtown San Jose taquería as the overpriced Palo Alto cafe. The Technorati are, in short, everywhere. And yet too few understand, or even suspect, the essential role played by many of these workers and their employers in facilitating most government access to private citizen’s data.
Search warrant applications like the one presently before thfe court bring this role into view.
The tools of modern crime have evolved beyond a ski mask and a burlap sack. Like the rest of society, the modern criminal uses computers and mobile devices to do his “work.” As such, evidence of crime and evidence of daily life unrelated to crime are often intertwined in software files, folders and databases. Even with a warrant issued under Fed.R.Crim.P. 41, this often leaves the government in the unenviable position of having to spend many, many hours of sifting through data by brute force or complex and cumbersome sorting algorithms. Where the computers at issue are at a suspect’s home, courts have recognized the impracticality of reviewing the data on site by approving a “seize first, search second” methodology-1
[1102]*1102But what about those computers that are not at a suspect’s home, but at a third-party cloud provider like Google? Following a standard format used by the Department of Justice, the government draws no distinction and commonly seeks approval for the same seize first, search second methodology whether the data of interest is local or remote. For example, the supporting affidavit here is divided into three sections in which the first section gives background and the reasons sufficient to establish probable cause. In a second section, labeled “Attachment A,” the property to be searched is identified as a particular email account stored on the premises of Google’s headquarters. No date restriction is included. The third section, labeled “Attachment B,” includes two subsections. Subsection I describes particular information within the account to be disclosed by Google.2 Subsection II describes information from within Subsection I which the government may then seize.3 As it often does, the government requests delayed no[1103]*1103tification of the warrant to the account holder, pursuant to 18 U.S.C. § 3103a.4
Three elements of the government’s application warrant discussion.
First, this application and others like it highlight the problem of devising ex ante limits on the execution of a warrant like those set out in Attachment B. In this ex ante, and also ex parte process, magistrate judges are called on to review the reasonableness of execution procedures like seize first, search second in the sterile isolation of their chambers. All that is available for review comes from the government. No defendant or defense counsel is present. Indeed, no defendant yet exists, as no case has yet been filed. There are no hearings, no witnesses, no briefs and no debate. Instead, a magistrate judge is left to predict what would or would not be reasonable in executing the warrant without any hard, ripe facts. This is hardly a recipe for success.5
And yet, despite Rule 41(d)(i )’s mandatory language,6 this court must respect that this Circuit, the Ninth Circuit, has explicitly approved ex ante restrictions in search warrants. In particular, in United States v. Hill, the court mandated that agents looking to seize and then search must secure a magistrate judge’s approval of the reasonableness of the approach in advance:
Although computer technology may in theory justify blanket seizures for the reasons discussed above, the government must still demonstrate to the magistrate factually why such a broad search and seizure authority is reasonable in the case at hand. There may well be situations where the government has no basis for believing that a computer search would involve the kind of technological problems that would make an immediate onsite search and selective removal of relevant evidence impracticable. Thus, there must be some threshold showing before the government may “seize the haystack to look for the needle.”7
And so this court must fulfill its duty to consider whether the restrictions of Attachment B pass muster.
This brings the court to the second element worthy of discussion: the constitutionality of the warrant application. As an initial matter, in many ways, the application is remarkably unremarkable. As it does on most days in this court, the government seeks data in the files of an electronic communications service provider as part of an ongoing investigation. Because this same type of request is regularly made in this district, the particular details of the investigation at issue here are not important for purposes of this discussion. Suffice it to say that the court finds probable cause to believe that the Gmail account at issue holds evidence of the theft of government funds.
But what of all the data associated with the account which supplies no such evidence whatsoever? In the Ninth Circuit anyway, the problem is not with seize first, [1104]*1104search second itself. To understand why, go back to Hill. Hill was undeniably not a third-party provider ease; Mr. Hill possessed all the hardware at issue. But in evaluating the warrant authorizing the seizure and search of Hill’s computers, the Ninth Circuit weighed burdens and practical considerations that, if anything, are more compelling in a cloud computing environment, not less. Take, for example, the court’s concern with facilitating technical accuracy in searching for the data of interest. In the absence of a seize first, •search second approach, presumably Google (or a special master retained by Google) would have to search the account at issue looking for just the evidence to be seized. But even with its search prowess, Google would be left to guess what search terms would be appropriate. Would it be enough to look for “theft” within five words of “government funds”? Can Google rely on its famous search engine, or is human review required? Is it reasonable to impose the cost and, equally important, the distraction of such efforts on a third party to the investigation, especially in light of the number of times a company like Google gets such a request every-month?
Alternatively, consider Hill’s concern with the burden on the suspect, Is the suspect better off with a private firm like Google so intimately involved in a live criminal investigation — or worse? While Google has publicly declared that it challenges overbroad warrants, in three-plus years on the bench in the federal courthouse serving its headquarters, the undersigned has yet to see any such motion. In addition, while not a Ninth Circuit decision, in United States v. Bach,8 the Eighth Circuit held that the Fourth Amendment permitted essentially the same two-step performed by Yahoo! at the behest of government investigators. Other district courts have similarly so held.9
The court is nevertheless unpersuaded that the particular seize first, search second proposed here is reasonable in the Fourth Amendment sense of the word. On past occasions, the government at least submitted a date restriction. Here, there is no date restriction of any kind. The activity described in the application began in 2010; Gmail has been broadly available since 2007 and in beta release since 2004. Nor has the government made any kind of commitment to return or destroy evidence that is not relevant to its investigation.10 This unrestricted right to retain and use every bit Google coughs up undermines the entire effort the application otherwise makes to limit the obvious impact under the plain view doctrine of providing such unfettered government access.
A final point. This' is not the first time that the substance of this application has been before a magistrate judge. On March 26, 2014, United States Magistrate Judge John Facciola denied a previous application for a similar warrant in the United States District Court for the District of Columbia. In his order Judge Facciola cited the “reasons stated in In re Matter of the Search of Information Associated with [REDACTED]@Mac.com That is Stored at Premises Controlled by [1105]*1105Apple, Inc., Mag. Case No. 14-228, 2014 WL 945563 (D.D.C. Mar. 7, 2014).” To the government’s credit, it did not in any way hide its previous unsuccessful effort; in fact it both provided the disclosure in the sworn affidavit itself and attached a copy of the opinion to the application materials. And nothing in Rule 41 specifically prohibits this type of follow-up request in a second district after denial of an application in the first. But there is a long-recognized presumption against duplicating court efforts — what some charitably call judge shopping.11 Even if a denial of an application were non-appealable,12 the obvious alternative recourse available to the government was to seek a writ of mandamus under the All Writs Act or to return to Judge Facciola with a modified request. Under such circumstances, it would appear that what the government has chosen to do instead is nothing less than come west looking for a better result.
The application is DENIED. The clerk shall file a redacted copy of this order on the public docket but seal the search warrant, all documents related to search warrant and an unredacted copy of this order.
IT IS SO ORDERED.