Affiliate Disclosure
If you buy through our links, we may get a commission. Read our ethics policy.

US Customs says it can search iPhones, but not cloud services

While U.S. Customs and Border Protection agents can search an American traveler's iPhone, they're not allowed to search any data stored in the cloud, the CBP said recently in response to questions by Oregon Senator Ron Wyden.

In February, Wyden pressed the Department of Homeland Security on the "deeply troubling" practice of border agents asking U.S. travelers to provide passwords and access to social media accounts, according to NBC News. The CBP's response, dated June 20, claimed that with few exceptions, several laws give officers the right to search phones without probable cause when people leave or enter the U.S., and that the practice protects against threats like terrorism and child pornography.

Those searches are supposed to be limited to data saved on-device, said acting CBP commissioner Kevin McAleenan. He noted that in April, his organization issued guidelines reminding agents about the issue — but he has also refused to make the guidelines public, stating that they're "law enforcement sensitive."

McAleenan also omitted some statistics requested by Wyden, which might've shown how many border searches of phones are being conducted on behalf of organizations like the FBI.

"CBP is assessing whether further data collection can assist in administering the careful use of this authority in the future," he said.

He did suggest that searches of phones belonging to U.S. citizens is "exceedingly rare," although the CBP's own data indicates that searches tripled between Oct. 2015 and Oct. 2016, and increased again in March 2017. The agency hasn't said how many international travelers are being stopped, or how many searches are being conducted by other DHS branches, such as Immigration and Customs Enforcement.

Apple has put an increasing emphasis on its cloud services, such as Apple Music and iCloud Drive, and indeed many iPhone users are dependent on third-party platforms like Facebook, Twitter, and Gmail.

The company has taken flak from some in government — including now-President Donald Trump, and former FBI director James Comey — about its use of encryption for both local and cloud data. People like Comey have complained of communications "going dark" to spy and law enforcement agencies, saying it hampers legitimate investigations.



92 Comments

lmac 14 Years · 212 comments

If this comes to pass, I'm writing a big fat check to the ACLU, putting my phone in my checked bag, and disabling the fingerprint activation. And no, I've got nothing to hide.

gatorguy 13 Years · 24627 comments

While U.S. Customs and Border Protection agents can search an American traveler's iPhone, they're not allowed to search any data stored in the cloud, the CBP said recently in response to questions by Oregon Senator Ron Wyden.

Those searches are supposed to be limited to data saved on-device, said acting CBP commissioner Kevin McAleenan. He noted that in April, his organization issued guidelines reminding agents about the issue -- but he has also refused to make the guidelines public, stating that they're "law enforcement sensitive."

Wording in this case becomes important. If data exists on BOTH the device and the cloud then I believe legal authority to access the pertinent cloud data if need be will be claimed too.

curtis hannah 12 Years · 1834 comments

gatorguy said:
While U.S. Customs and Border Protection agents can search an American traveler's iPhone, they're not allowed to search any data stored in the cloud, the CBP said recently in response to questions by Oregon Senator Ron Wyden.

Those searches are supposed to be limited to data saved on-device, said acting CBP commissioner Kevin McAleenan. He noted that in April, his organization issued guidelines reminding agents about the issue -- but he has also refused to make the guidelines public, stating that they're "law enforcement sensitive."
Wording in this case becomes important. If data exists on BOTH the device and the cloud then I believe legal authority to access the pertinent cloud data if need be will be claimed too.

That is where the question lies, a lot if data now can be in either and the only way to tell is when the download comes on(if it does ), and then that raises the question.

gatorguy 13 Years · 24627 comments

lmac said:
If this comes to pass, I'm writing a big fat check to the ACLU, putting my phone in my checked bag, and disabling the fingerprint activation. And no, I've got nothing to hide.

If you are a US citizen coming home you will be allowed re-entry but your smartphone may not be, seized for further inspection if you refuse to unlock it on request. If a foreign resident US Border agents may simply deny entry to you and send you away. Both are of course by your choice. 

longpath 20 Years · 401 comments

So CBP claims that legislators violated their oath of office by drafting and passing legislation that violate a plain reading of the Bill of Rights....again. I suppose I should be shocked; but even Washington didn't leave office before signing off on legislation that defied the supposed protections of the Constitution, so this is hardly a new development.