Fog Reveal: How Some Police Forces Are Tracking People Without a Warrant

by | Oct 19, 2022 | Human Rights & Justice

The Rockingham County Sheriff’s Department in Wentworth, N.C., is among the law enforcement agencies the AP found using the Fog Reveal location tracking tool. AP Photo/Allen G. Breed

Fog Reveal: How Some Police Forces Are Tracking People Without a Warrant

by | Oct 19, 2022 | Human Rights & Justice

The Rockingham County Sheriff’s Department in Wentworth, N.C., is among the law enforcement agencies the AP found using the Fog Reveal location tracking tool. AP Photo/Allen G. Breed
Law enforcement's use of Fog Reveal puts a spotlight on that loophole between U.S. data privacy law and electronic surveillance law. The hole is so large that it is not clear whether law enforcement use of Fog Reveal is unlawful.

Government agencies and private security companies in the U.S. have found a cost-effective way to engage in warrantless surveillance of individuals, groups and places: a pay-for-access web tool called Fog Reveal.

The tool enables law enforcement officers to see “patterns of life”—where and when people work and live, with whom they associate and what places they visit. The tool’s maker, Fog Data Science, claims to have billions of data points from over 250 million U.S. mobile devices.

Fog Reveal came to light when the Electronic Frontier Foundation (EFF), a nonprofit that advocates for online civil liberties, was investigating location data brokers and uncovered the program through a Freedom of Information Act request. EFF’s investigation found that Fog Reveal enables law enforcement and private companies to identify and track people and monitor specific places and events, like rallies, protests, places of worship and health care clinics. The Associated Press found that nearly two dozen government agencies across the country have contracted with Fog Data Science to use the tool.

Government use of Fog Reveal highlights a problematic difference between data privacy law and electronic surveillance law in the U.S. It is a difference that creates a sort of loophole, permitting enormous quantities of personal data to be collected, aggregated and used in ways that are not transparent to most persons. That difference is far more important in the wake of the Supreme Court’s Dobbs v. Jackson Women’s Health Organization decision, which revoked the constitutional right to an abortion. Dobbs puts the privacy of reproductive health information and related data points, including relevant location data, in significant jeopardy.

The trove of personal data Fog Data Science is selling, and government agencies are buying, exists because ever-advancing technologies in smart devices collect increasingly vast amounts of intimate data. Without meaningful choice or control on the user’s part, smart device and app makers collect, use and sell that data. It is a technological and legal dilemma that threatens individual privacy and liberty, and it is a problem I have worked on for years as a practicing lawyer, researcher and law professor.

Government Surveillance

U.S. intelligence agencies have long used technology to engage in surveillance programs like PRISM, collecting data about individuals from tech companies like Google, particularly since 9/11—ostensibly for national security reasons. These programs typically are authorized by and subject to the Foreign Intelligence Surveillance Act and the Patriot Act. While there is critical debate about the merits and abuses of these laws and programs, they operate under a modicum of court and congressional oversight.

Domestic law enforcement agencies also use technology for surveillance, but generally with greater restrictions. The U.S. Supreme Court has ruled that the Constitution’s Fourth Amendment, which protects against unreasonable search and seizure, and federal electronic surveillance law require domestic law enforcement agencies to obtain a warrant before tracking someone’s location using a GPS device or cell site location information.

Fog Reveal is something else entirely. The tool—made possible by smart device technology and that difference between data privacy and electronic surveillance law protections—allows domestic law enforcement and private entities to buy access to compiled data about most U.S. mobile phones, including location data. It enables tracking and monitoring of people on a massive scale without court oversight or public transparency. The company has made few public comments, but details of its technology have come out through the referenced EFF and AP investigations.

Fog Reveal’s Data

Every smartphone has an advertising ID—a series of numbers that uniquely identifies the device. Supposedly, advertising IDs are anonymous and not linked directly to the subscriber’s name. In reality, that may not be the case.

Private companies and apps harness smartphones’ GPS capabilities, which provide detailed location data, and advertising IDs, so that wherever a smartphone goes and any time a user downloads an app or visits a website, it creates a trail. Fog Data Science says it obtains this “commercially available data” from data brokers, permitting the tool to follow devices through their advertising IDs. While these numbers do not contain the name of the phone’s user, they can easily be traced to homes and workplaces to help police identify the user and establish pattern-of-life analyses.

Fog Reveal allows users to see that a specific mobile phone was at a specific place at a specific time. Electronic Frontier Foundation, CC BY

Law enforcement use of Fog Reveal puts a spotlight on that loophole between U.S. data privacy law and electronic surveillance law. The hole is so large that—despite Supreme Court rulings requiring a warrant for law enforcement to use GPS and cell site data to track persons—it is not clear whether law enforcement use of Fog Reveal is unlawful.

Electronic Surveillance vs. Data Privacy

Electronic surveillance law protections and data privacy mean two very different things in the U.S. There are robust federal electronic surveillance laws governing domestic surveillance. The Electronic Communications Privacy Act regulates when and how domestic law enforcement and private entities can “wiretap,” i.e., intercept a person’s communications, or track a person’s location.

Coupled with Fourth Amendment protections, ECPA generally requires law enforcement agencies to get a warrant based on probable cause to intercept someone’s communications or track someone’s location using GPS and cell site location information. Also, ECPA permits an officer to get a warrant only when the officer is investigating certain crimes, so the law limits its own authority to permit surveillance of only serious crimes. Violation of ECPA is a crime.

The vast majority of states have laws that mirror ECPA, although some states, like Maryland, afford citizens more protections from unwanted surveillance.

The Fog Reveal tool raises enormous privacy and civil liberties concerns, yet what it is selling—the ability to track most persons at all times—may be permissible because the U.S. lacks a comprehensive federal data privacy law. ECPA permits interceptions and electronic surveillance when a person consents to that surveillance.

With little in the way of federal data privacy laws, once someone clicks “I agree” on a pop-up box, there are few limitations on private entities’ collection, use and aggregation of user data, including location data. This is the loophole between data privacy and electronic surveillance law protections, and it creates the framework that underpins the massive U.S. data sharing market.

The Need for Data Privacy Law

Without robust federal data privacy safeguards, smart device manufacturers, app makers and data brokers will continue, unfettered, to utilize smart devices’ sophisticated sensing technologies and GPS capabilities to collect and commercially aggregate vast quantities of intimate and revealing data. As it stands, that data trove may not be protected from law enforcement agencies. But the permitted commercial use of advertising IDs to track devices and users without meaningful notice and consent could change if the American Data Privacy Protection Act, approved by the U.S. House of Representatives Committee on Energy and Commerce by a vote of 53-2 on July 20, 2022, passes.

ADPPA’s future is uncertain. The app industry is strongly resisting any curtailment of its data collection practices, and some states are resisting ADPPA’s federal preemption provision, which could minimize the protections afforded via state data privacy laws. For example, Nancy Pelosi, speaker of the U.S. House of Representatives, has said lawmakers will need to address concerns from California that the bill overrides the state’s stronger protections before she will call for a vote on ADPPA.

The stakes are high. Recent law enforcement investigations highlight the real-world consequences that flow from the lack of robust data privacy protection. Given the Dobbs ruling, these situations will proliferate absent congressional action.The Conversation

Republished with permission from The Conversation, by  Anne Toomey McKenna, Visiting Professor of Law, University of Richmond

The Conversation

The Conversation

The Conversation is a nonprofit, independent news organization dedicated to unlocking the knowledge of experts for the public good. We publish trustworthy and informative articles written by academic experts for the general public and edited by our team of journalists.


Submit a Comment

Your email address will not be published. Required fields are marked *

Follow Us

Related Articles

Feb 03 2023

The 5th U.S. Circuit Court Deems Gun Possession More Important Than Family Safety

There is no real doubt that the 5th Circuit’s decision is going to lead to more abusers murdering their wives and girlfriends.
Attendees hold signs as they listen to speakers during a rally calling for an end to corporate money in politics and to mark the fifth anniversary of the Supreme Court's Citizens United decision on January 21, 2015 in Washington, D.C. (Photo: Drew Angerer/Getty Images)
Jan 20 2023

House Democrats Introduce Constitutional Amendment to Overturn Citizens United

The Citizens United decision allowed special interest groups and corporations to create super PACs, to accept unlimited donations—including from “dark money...
Jan 14 2023

California AG Sues Big Pharma Drugmakers Over Insulin Price Gouging

California follows other states in going after insulin companies and pharmaceutical middlemen, but California is taking an aggressive approach by charging the companies...
Dec 26 2022

The Christmas Cruelty of Greg Abbott

Three buses coming from Texas dropped off about 140 recent migrants—including babies and young children—near VP Harris’ residence in Washington, D.C., in historically...
Dec 24 2022

How the January 6th Committee Tackled an Unprecedented Attack With a Time-Tested Inquiry

Despite the unprecedented action by the January 6th committee of the criminal referral of the ex-president for a variety of charges, Congressional committees have a...
Dec 20 2022

A Constitutional Law Expert Explains What the Criminal Referral of Trump Means

A professor of constitutional law helps explain why the recommended charges against Trump are important, where they fall short—and what could come next.
Dec 19 2022

Students With Disabilities—The Illinois School That Routinely Has Students Arrested

An Illinois school for students with disabilities has routinely used the police to handle discipline, resulting in the highest arrest rate of any district in the...
Dec 18 2022

The Danger of the Republican’s Bogus ‘Independent State Legislatures’ Theory

Republicans support the ‘Independent State Legislatures’ theory because they’ve given up on democracy. They seek to make it harder for people to vote and box them into...
Dec 15 2022

What America Can Learn About Medical Debt From Germany’s Coal Miners

Germany’s limits on how much patients pay out-of-pocket at the doctor’s office have been critical to ensuring people get needed care, especially in a mining region...
Dec 10 2022

The Details Behind Brittney Griner’s Long Road Home

Outside of the public eye, pleas, letters and negotiations were in action for months to gain the release of Brittney Griner from her imprisonment in Russia.
Subscribe for Updates!

Subscribe for Updates!

Join our mailing list to receive the latest news and updates from our team.

You have Successfully Subscribed!

Pin It on Pinterest

Share This