Background
Stephen Johnson used an encrypted filesharing service to access hundreds of videos depicting the sexual abuse of children, uploaded more than 200 videos to his Google Drive account, and saved files on his computer. Google’s automated hash-matching system flagged files in his account and sent 19 CyberTip reports, including suspect videos, to the National Center for Missing & Exploited Children. The reports ultimately reached D.C. Metropolitan Police Detective Thomas Sullivan, who opened three or four videos without first obtaining a warrant.
After consulting a federal prosecutor, Sullivan applied for a warrant to review the CyberTip videos without relying on what he had already seen. A magistrate judge found probable cause but declined to issue the warrant, concluding that no warrant was required under the private-search doctrine. Relying on that determination, Sullivan reviewed the files and obtained warrants to search Johnson’s Google Drive and residence. A jury convicted Johnson of one possession count and five transportation counts. The district court imposed 90 months’ imprisonment and ten years of supervised release.
The Court’s Holding
The D.C. Circuit affirmed. The majority assumed without deciding that Sullivan’s initial warrantless viewing violated the Fourth Amendment because Google’s technology could flag inexact or partial matches and no Google employee had reviewed Johnson’s particular files. It held, however, that suppression was unwarranted under the independent-source doctrine and good-faith exception. Sullivan later sought judicial authorization using an affidavit independent of his initial viewing, and he reasonably relied on the magistrate judge’s legal determination that no warrant was necessary. That determination dissipated any taint from the assumed initial violation.
The court also held that the residential warrant authorized officers to search the seized digital devices, not merely seize them. Its text permitted seizure of evidence from digital devices and authorized officers to use Johnson’s biometrics to unlock the devices and search their contents. Finally, the court upheld the denial of a two-level reduction under U.S.S.G. § 2G2.2(b)(1): Johnson’s transportation convictions established that his conduct was not limited to receipt or solicitation, and the Guideline commentary treats transportation as distribution.
Senior Circuit Judge RANDOLPH concurred in the judgment and agreed that suppression was unwarranted, but would have resolved the constitutional issue directly. In his view, Johnson lacked a reasonable expectation of privacy because Google’s terms disclosed that it could monitor content, remove child pornography, and report detected material as federal law requires; accordingly, Sullivan’s review caused no Fourth Amendment violation.
Key Takeaways
- The majority left unresolved whether police need a warrant to open user files flagged through automated matching when the provider has not reviewed the specific files and the matches may be inexact.
- A magistrate judge’s independent legal determination, reasonably relied upon by an officer who presented untainted probable cause, can defeat suppression through the independent-source and good-faith doctrines even when the judge declines to issue a warrant as unnecessary.
- A digital-device warrant is read as a whole: language authorizing seizure of evidence from devices and unlocking them to search their contents authorized both seizure and examination.
- A defendant convicted of transporting such material is ineligible for the reduction applicable when conduct is limited to receipt or solicitation and there is no intent to distribute.
Why It Matters
The decision avoids deciding a developing Fourth Amendment question that has divided other circuits: whether automated hash matching constitutes a sufficiently complete private search to permit police review without a warrant. It instead confirms that suppression may be unavailable when investigators later pursue an independent, untainted request for judicial authorization and act in good-faith reliance on the judge’s answer.
Randolph’s concurrence highlights a materially different approach. Rather than assume a violation and address the remedy, he would hold that provider policies and federal reporting requirements eliminate any reasonable expectation of privacy in detected child pornography stored in a Google account.