Geolocation Privacy and Surveillance (“GPS”) Act
While technology – like cell phones, smart phones, lap tops and navigation devices – continues to make it increasingly easy to track and log the location of nearly every American, federal laws have failed to keep pace, meaning there are no clear rules governing how law enforcement, commercial entities and private citizens can access, use and sell that data. With this in mind, a bipartisan coalition led by Senator Ron Wyden (D-Ore.), Rep. Jason Chaffetz (R-Utah) and Senator Mark Kirk (R-Ill.) have reintroduced the Geolocation Privacy and Surveillance Act (GPS Act) in the House and Senate which will require law-enforcement to obtain a warrant before acquiring geolocation information of an American.
The bipartisan legislation creates a legal framework designed to give government agencies, commercial entities and private citizens clear guidelines for when and how geolocation information can be accessed and used.
- Retro Tech Fair & Kirk Co-Sponsorship Press Release
- Bill Introduction Press Release
- Frequently Asked Questions
- Text of Bill (52 KB)
- Section-by-Section Summary
- Statements of Support
- Wyden and Chaffetz Introduce GPS Act at Press Conference
- List of Co-Sponsors
- Retro Tech Fair & Press Conference with Senator Kirk
- What is geolocation information? Geolocation data is information generated by electronic devices – including cell phones, Wi-Fi equipped laptops, and GPS navigation units – that can be used to determine the location of these devices and the devices’ owners.
- Who uses geolocation information and how? Geolocation information is used by a variety of companies for legitimate commercial reasons. Cell phone service providers use it to route calls to their customers, GPS navigation services use it to help their customers avoid getting lost, and a variety of technology companies use it to provide assorted online services.
- What laws govern how geolocation data is accessed and used? Laws pertaining to geolocation have not kept pace with technology. Judges in different jurisdictions have issued conflicting rulings about what procedures law enforcement must follow – and how much evidence is necessary – to obtain individuals’ geolocation data from private companies. This lack of clarity creates problems for law enforcement agencies and private companies, as well as uncertainty for customers.
- What does the GPS Act do? The GPS Act establishes a clear, uniform standard for government access to geolocation data. This will give prosecutors and law enforcement officers clarity about how much evidence they need to remotely track individuals’ movements. It will also give private companies clarity about when they can respond to legitimate law enforcement requests, and what obligations they have to protect their customers’ information. And it will give ordinary citizens confidence that both public safety and their privacy rights are being appropriately protected.
- How does the GPS Act work? The GPS Act is modeled primarily after federal wiretapping statutes. This approach is based on the view that surreptitiously turning an individual’s cell phone into a tracking device without their knowledge has a substantial privacy impact, just like tapping that person’s phone or searching that person’s house. So the GPS Act creates a process whereby government agencies can get a probable cause warrant to obtain geolocation information in the same way that they currently get warrants for wiretaps or other types of electronic surveillance.
- How will the GPS Act impact law enforcement? The current lack of legal clarity regarding geolocation makes it harder for law enforcement officers to do their jobs. Because the law is being interpreted differently in different jurisdictions, government agencies have to spend significant time and resources figuring out which rules apply in which situations. And government attorneys can be put in the position of having to request a court order without knowing what standards or procedures the judge expects them to follow. The GPS Act would end this confusion by providing strong, clear rules that law enforcement can confidently adhere to.
- When would law enforcement have to get a warrant to access geolocation data? The GPS Act would require law enforcement agencies to get a warrant when they want to acquire an individual’s geolocation information from a private company. It would also require warrants when law enforcement agencies want to monitor individuals’ movements directly, using covertly installed tracking devices or similar means. In emergency situations it would allow law enforcement officers to obtain the information that they need immediately and then get a warrant for their actions later.
- When wouldn’t law enforcement have to get a warrant to access geolocation data? The legislation includes several exceptions to the warrant requirement. Warrants would not be required in cases where the individual being tracked is reasonably believed to be in danger or has requested assistance, cases where an individual’s geolocation information is publicly available, cases where a mobile electronic device has been stolen, and cases where an individual (or their parent/guardian in the case of minors) has consented to being monitored.
- Law enforcement agencies do not need a warrant to watch someone walk down the street, so why should they get a warrant to track individuals’ movements electronically? Tracking an individual’s movements on twenty-four hour basis for an extended period of time is qualitatively different than visually observing that person during a single trip, and can reveal significantly more information about their activities and pattern of life. Additionally, tracking an individual with a GPS device or by tracking their cell phone is much cheaper and easier than tracking them with a surveillance team, so the resource barriers that act as a check against abuse of visual surveillance techniques do not always apply to geolocation tracking and other electronic surveillance methods.
- Will the GPS Act impact intelligence agencies’ authorities? Existing intelligence surveillance laws do not directly address geolocation, but the GPS Act does not modify intelligence agencies’ authorities to conduct electronic surveillance.
- How will the GPS Act impact private companies? The various commercial service providers that hold information on their customers’ locations are often caught in the untenable position of having unclear and potentially conflicting obligations to both their customers and law enforcement agencies. Creating a strong legal framework to govern access to geolocation will give these companies the clarity they need to both comply with legitimate government requests and uphold their commitments to protect customers’ privacy.
- Will the GPS Act allow cell phone companies to store and sell their customers’ location data? The GPS Act permits service providers to collect geolocation information in the normal course of business, but makes it clear that these companies are only allowed to share or sell customers’ data with the consent of individual customers.
- Will smart phone apps still be allowed to access a user’s location? Yes, if the customer has given consent for his or her geolocation information to be shared for these purposes.
- Will the GPS Act apply to anyone besides government agencies and service providers? Yes. The GPS Act creates criminal penalties for surreptitiously using an electronic device to track a person’s movements that parallel the penalties that exist for illegal wiretapping. As an example, if a woman’s ex-husband taps her phone he is breaking the law. This legislation would treat hacking her GPS navigation unit to track her movements as a similar offense.
- How will the GPS Act protect average Americans? The GPS Act will protect average Americans’ safety by giving law enforcement agencies more clarity about when they can obtain geolocation information. And it will protect their privacy rights by requiring law enforcement agencies and private companies to either get a warrant or get consent before covertly monitoring their movements on a 24/7 basis.
- How is the GPS Act different from other legislation that has been proposed to address these issues? There have been other worthwhile legislative solutions proposed to address the lack of legal clarity regarding geolocation, but the GPS Act is distinctive for its comprehensive approach to the problem. The GPS Act establishes clear rules for both law enforcement agencies and private entities that have access to geolocation information -- rather than only covering one or the other -- and it covers both real-time tracking and access to records of individuals’ past movements in the same way.
- Section 1 Short Titles – “Geolocational Privacy and Surveillance” or “GPS” Act.
- Section 2Protection of Geolocation Information – This section creates a new chapter 120 of Title 18 of the US Code. This chapter is modeled after existing sections of Title 18 that govern wiretapping and other types of electronic surveillance. This new chapter would have five subsections, numbered 2601-2605.
- Section 2601 – Includes several definitions that are included in the criminal wiretapping statute (18 USC 2510). Also defines the terms ‘geolocation information’, ‘geolocation information service’ and ‘wireless communication device’. Specifies that in this context ‘geolocation information’ refers only to information generated by or derived from wireless devices and tracking devices, and not to other types of information (such as area codes) that could potentially be used to help determine an individual’s location.
- Section 2602 – Creates rules to govern the interception and disclosure of geolocation information. These rules are modeled after the federal wiretapping statute (18 USC 2511). They would specifically require a warrant for the acquisition of geolocation information, subject to a list of exceptions. (Most of these exceptions track the exceptions in the wiretapping statute. A few are new, including the exception for theft of the device, or the exception for circumstances where the safety of the device’s owner is threatened.)
- Section 2603 – Prohibits unlawfully intercepted geolocation information from being used as evidence. Modeled after the prohibition on the use of unlawfully intercepted phone calls in the federal wiretapping statute (18 USC 2515).
- Section 2604 – Creates an emergency-situations exception to the warrant requirement. Modeled after the emergency-situations section of the federal wiretapping statute (18 USC 2518(7))
- Section 2605 – Permits individuals who have been unlawfully wiretapped to recover damages in civil court. Modeled after the civil damages section of the wiretapping statute (18 USC 2520).
- Section 3 Requirement for Search Warrants to Acquire Geolocation Information – Modifies the Federal Rules of Criminal Procedure to make it possible to obtain a warrant for geolocation information.
- Section 4 Fraud and Related Activity in Connection with Obtaining Geolocation Information – Makes it illegal to obtain an individual’s geolocation information by making fraudulent statements to a telecommunications carrier, or by accessing the carrier’s customer account records without permission. This modifies an existing statute covering fraudulent access to phone records.
- Section 5 Statement of Exclusive Means of Acquiring Geolocation Information – States that this legislation and the Foreign Intelligence Surveillance Act (which governs intelligence investigations) are the only means by which geolocation information may be lawfully acquired.
- ACLU (American Civil Liberties Union)
"Cell phones are also portable tracking devices, and the law needs to catch up with technology to protect Americans from the indiscriminant use of this type of invasive surveillance. Police routinely get people’s location information with little judicial oversight because Congress has never defined the appropriate checks and balances. Under the GPS Act, all that would change. Police would need to convince a judge that a person is likely engaging in criminal activity before accessing and monitoring someone’s location data. Innocent people shouldn’t have to sacrifice their privacy in order to have a cell phone.”
- CCIA (Computer & Communications Industry Association)
“The GPS Act is vital to protect the privacy and civil liberties of Americans and to set standards that give businesses certainty. Resolving these critical privacy policies will have a positive impact on stakeholders from customers to investors and help boost a booming sector of our economy.”
Jim Sensenbrenner (R-WI)
Jon Conyers (D-MI)
Steve Chabot (R-OH)
Ted Poe (R-TX)
Zoe Lofgren (D-CA)
Jared Polis (D-CO)
Peter Defazio (D-OR)
Jim Moran (D-VA)
Chellie Pingree (D-ME)
Peter Welch (D-VT)
Sen. Kirk, Mark (R-IL)
- Posted on 03/21/13
Amendments being offered by Wyden to the Cybersecurity Act of 2012…
Amendments being offered by Wyden to the Cybersecurity Act of 2012… Posted on 07/30/12
...Read MorePosted on 06/25/12
Posted on 01/31/12
- Posted on 01/23/12
- Posted on 12/16/11
- Posted on 10/18/11