BILL ANALYSIS                                                                                                                                                                                                    Ó



          SENATE COMMITTEE ON PUBLIC SAFETY
                             Senator Loni Hancock, Chair
                                2015 - 2016  Regular 

          Bill No:    AB 1924       Hearing Date:    June 28, 2016    
          
           ----------------------------------------------------------------- 
          |Author:    |Low                                                  |
          |-----------+-----------------------------------------------------|
          |Version:   |May 23, 2016                                         |
           ----------------------------------------------------------------- 
           ----------------------------------------------------------------- 
          |Urgency:   |Yes                    |Fiscal:    |Yes              |
           ----------------------------------------------------------------- 
           ----------------------------------------------------------------- 
          |Consultant:|MK                                                   |
          |           |                                                     |
           ----------------------------------------------------------------- 


              Subject:  Pen Registers:  Trap and Trace Devices:  Orders



          HISTORY

          Source:   Los Angeles County Sheriff's Department

          Prior Legislation:AB 929 (Chau) - Ch. 204, Stats. 2015

          Support:  California Civil Liberties Advocacy; California State  
                    Sheriffs' Association; California Police Chiefs  
                    Association; California District Attorneys  
                    Association; San Diego County District Attorney; Los  
                    Angeles District Attorney's Office

          Opposition:

          Assembly Floor Vote:                 72 - 0


          PURPOSE
          
          The purpose of this bill is to provide an exemption from the  
          Electronic Communications Privacy Act (ECPA) for pen registers  
          and trap and trace devices to permit authorization for the  
          devices to be used for 60 days. 
          
          Existing Constitutional law provides that the right of the  







          AB 1924  (Low )                                            Page  
          2 of ?
          
          
          people to be secure in their persons, houses, papers, and  
          effects, against unreasonable searches and seizures, shall not  
          be violated, and no warrants shall issue, but upon probable  
          cause, supported by Oath or affirmation, and particularly  
          describing the place to be searched and the persons or things to  
          be seized. (U.S. Constitution 4th Amend.; California  
          Constitution art. I, § 13.) 


          Existing federal law provides that, except as provided, no  
          person may install or use a pen register or a trap and trace  
          device without first obtaining a court order under section 3123  
          of this title [18 USCS § 3123] or under the Foreign Intelligence  
          Surveillance Act of 1978 (50 U.S.C. 1801 et seq.). (18 USCS §  
          3121.) 

                 The prohibition does not apply with respect to the use  
               of a pen register or a trap and trace device by a provider  
               of electronic or wire communication service relating to the  
               operation, maintenance, and testing of a wire or electronic  
               communication service or to the protection of the rights or  
               property of such provider, or to the protection of users of  
               that service from abuse of service or unlawful use of  
               service; or to record the fact that a wire or electronic  
               communication was initiated or completed in order to  
               protect such provider, another provider furnishing service  
               toward the completion of the wire communication, or a user  
               of that service, from fraudulent, unlawful or abusive use  
               of service; or where the consent of the user of that  
               service has been obtained.
                
                 A government agency authorized to install and use a pen  
               register or trap and trace device under this chapter (18  
               USCS §§ 3121 et seq) or under State law shall use  
               technology reasonably available to it that restricts the  
               recording or decoding of electronic or other impulses to  
               the dialing, routing, addressing, and signaling information  
               utilized in the processing and transmitting of wire or  
               electronic communications so as not to include the contents  
               of any wire or electronic communications. (18 USCS § 3121  
               (c).)

                 Whoever knowingly violates the prohibition shall be  
               fined under this title or imprisoned not more than one  








          AB 1924  (Low )                                            Page  
          3 of ?
          
          
               year, or both. . (18 USCS § 3121 (a) & (b).)

          Existing federal law provides that unless prohibited by state  
          law, a state investigative or law enforcement officer may make  
          application for an order or an extension of an order authorizing  
          or approving the installation and use of a pen register or a  
          trap and trace device under this chapter, in writing under oath  
          or equivalent affirmation, to a court of competent jurisdiction  
          of such state. (18 USCS § 3122.) 

          Existing federal law provides that an attorney for the  
          Government, upon an application, the court shall enter an ex  
          parte order authorizing the installation and use of a pen  
          register or trap and trace device anywhere within the United  
          States, if the court finds that the attorney for the Government  
          has certified to the court that the information likely to be  
          obtained by such installation and use is relevant to an ongoing  
          criminal investigation. The order, upon service of that order,  
          shall apply to any person or entity providing wire or electronic  
          communication service in the United States whose assistance may  
          facilitate the execution of the order. Whenever such an order is  
          served on any person or entity not specifically named in the  
          order, upon request of such person or entity, the attorney for  
          the Government or law enforcement or investigative officer that  
          is serving the order shall provide written or electronic  
          certification that the order applies to the person or entity  
          being served. (18 USCS § 3121 (a)(1).) 


          Existing federal law provides that a state investigative or law  
          enforcement officer, upon an application made as specified, the  
          court shall enter an ex parte order authorizing the installation  
          and use of a pen register or trap and trace device within the  
          jurisdiction of the court, if the court finds that the State law  
          enforcement or investigative officer has certified to the court  
          that the information likely to be obtained by such installation  
          and use is relevant to an ongoing criminal investigation. (18  
          USCS § 3121 (a)(2).) 


          Existing federal law provides that where the law enforcement  
          agency implementing an ex parte order under this subsection  
          seeks to do so by installing and using its own pen register or  
          trap and trace device on a packet-switched data network of a  








          AB 1924  (Low )                                            Page  
          4 of ?
          
          
          provider of electronic communication service to the public, the  
          agency shall ensure that a record will be maintained which will  
          identify: 
                 Any officer or officers who installed the device and any  
               officer or officers who accessed the device to obtain  
               information from the network; 
                 The date and time the device was installed, the date and  
               time the device was uninstalled, and the date, time, and  
               duration of each time the device is accessed to obtain  
               information;
                 The configuration of the device at the time of its  
               installation and any subsequent modification thereof; and 
                 Any information which has been collected by the device.  
               (18 USCS § 3121(a)(3).) 

          Existing federal law provides to the extent that the pen  
          register or trap and trace device can be set automatically to  
          record this information electronically, the record shall be  
          maintained electronically throughout the installation and use of  
          such device. (18 USCS § 3121(a)(3).) 


          Existing federal law states that the record maintained shall be  
          provided ex parte and under seal to the court which entered the  
          ex parte order authorizing the installation and use of the  
          device within 30 days after termination of the order (including  
          any extensions 
          thereof). (18 USCS § 3121(a)(3).) 
           
          Existing federal law provides that an order issued for  
          installation of a pen register or track and trace device shall  
          include:

                 The identity, if known, of the person to whom is leased  
               or in whose name is listed the telephone line or other  
               facility to which the pen register or trap and trace device  
               is to be attached or applied; 
                 The identity, if known, of the person who is the subject  
               of the criminal investigation; 
                 The attributes of the communications to which the order  
               applies, including the number or other identifier and, if  
               known, the location of the telephone line or other facility  
               to which the pen register or trap and trace device is to be  
               attached or applied, and, in the case of an order  








          AB 1924  (Low )                                            Page  
          5 of ?
          
          
               authorizing installation and use of a trap and trace  
               device, the geographic limits of the order; and 
                 A statement of the offense to which the information  
               likely to be obtained by the pen register or trap and trace  
               device relates; and 
                 Shall direct, upon the request of the applicant, the  
               furnishing of information, facilities, and technical  
               assistance necessary to accomplish the installation of the  
               pen register or trap and trace device. : (18 USCS §  
               3121(b).)

          Existing federal law provides that an order issued under this  
          section shall authorize the installation and use of a pen  
          register or a trap and trace device for a period not to exceed  
          sixty days. 

                 Extensions of such an order may be granted, but only  
               upon an application for an order and upon the judicial  
               finding required as specified.  The period of extension  
               shall be for a period not to exceed sixty days. 

                 Nondisclosure of existence of pen register or a trap and  
               trace device.  An order authorizing or approving the  
               installation and use of a pen register or a trap and trace  
               device shall direct that the order be sealed until  
               otherwise ordered by the court; and the person owning or  
               leasing the line or other facility to which the pen  
               register or a trap and trace device is attached, or  
               applied, or who is obligated by the order to provide  
               assistance to the applicant, not disclose the existence of  
               the pen register or trap and trace device or the existence  
               of the investigation to the listed subscriber, or to any  
               other person, unless or until otherwise ordered by the  
               court. (18 USCS § 3121c).) 

          Existing federal law provides that notwithstanding any other  
          provision, any investigative or law enforcement officer,  
          specially designated by the Attorney General, the Deputy  
          Attorney General, the Associate Attorney General, any Assistant  
          Attorney General, any acting Assistant Attorney General, or any  
          Deputy Assistant Attorney General, or by the principal  
          prosecuting attorney of any state or subdivision thereof acting  
          pursuant to a statute of that state, who reasonably determines  
          that: 








          AB 1924  (Low )                                            Page  
          6 of ?
          
          

                 an emergency situation exists that involves immediate  
               danger of death or serious bodily injury to any person; 
                 conspiratorial activities characteristic of organized  
               crime; 
                 an immediate threat to a national security interest; or 
                 an ongoing attack on a protected computer that  
               constitutes a crime punishable by a term of imprisonment  
               greater than one year; (18 USCS § 3125.)

          Existing federal law provides that in the absence of an  
          authorizing order, such use shall immediately terminate when the  
          information sought is obtained, when the application for the  
          order is denied or when forty-eight hours have lapsed since the  
          installation of the pen register or trap and trace device,  
          whichever is earlier. (18 USCS § 3125.) 
          
          Existing law defines a "search warrant" as an order in writing  
          in the name of the People, signed by a magistrate, directed to a  
          peace officer, commanding him or her to search for a person or  
          persons, a thing or things, or personal property, and in the  
          case of a thing or things or personal property, bring the same  
          before the magistrate. (Penal Code § 1523.) 

          Existing law provides that a search warrant may be issued upon  
          any of the following grounds: 

            1)  When the property was stolen or embezzled; 
             2)  When the property or things were used as the means of  
               committing a felony; 
             3)  When the property or things are in the possession of any  
               person with the intent to use them as a means of committing  
               a public offense, or in the possession of another to whom  
               he or she may have delivered them for the purpose of  
               concealing them or preventing them from being discovered; 
             4)  When the property or things to be seized consist of any  
               item or constitute any evidence that tends to show a felony  
               has been committed, or tends to show that a particular  
               person has committed a felony; 
             5)  When the property or things to be seized consist of  
               evidence that tends to show that sexual exploitation of a  
               child, or possession of matter depicting sexual conduct of  
               a person under the age of 18 years, has occurred or is  
               occurring; 








          AB 1924  (Low )                                            Page  
          7 of ?
          
          
             6)  When there is a warrant to arrest a person; 
             7)  When a provider of electronic communication service or  
               remote computing service 
               has records or evidence, showing that property was stolen  
               or embezzled constituting a misdemeanor, or that property  
               or things are in the possession of any person with the  
               intent to use them as a means of committing a misdemeanor  
               public offense, or in the possession of another to whom he  
               or she may have delivered them for the purpose of  
               concealing them or preventing their discovery; 
             8)  When the property to be seized includes evidence of a  
               violation of specified Labor Code sections; 
            9)  When the property to be seized includes a firearm or  
            deadly weapon or any other 
              deadly weapon at the scene of a domestic violence offense; 
            10)  When the property to be seized includes a firearm or  
               deadly weapon owned by a person    apprehended because of  
               his or her mental condition; 
            11)  When the property to be seized is a firearm in possession  
               of a person prohibited under the family code;
             12)  When the information to be received from the use of a  
               tracking device under shows a specified violation of the  
               Fish and Game Code or Public Resources Code; 
            13)  When a sample of blood would show evidence of a DUI; or, 
             14)  Starting January 1, 2016, when the property to be seized  
               is a firearm owned by a person subject to a gun violence  
               restraining order. (Penal Code § 1524(a).)


          Existing law provides that a search warrant cannot be issued but  
          upon probable cause, supported by affidavit, naming or  
          describing the person to be searched or searched for, and  
          particularly describing the property, thing, or things and the  
          place to be searched. (Penal Code, § 1525.) 

          Existing law requires a magistrate to issue a search warrant if  
          he or she is satisfied of the existence of the grounds of the  
          application or that there is probable cause to believe their  
          existence. (Pen. Code, § 1528 (a).) 

          Existing law generally prohibits a person from installing or  
          using a pen register or trap and trace device except by court  
          order or by the provider of electronic or wire communication  
          under specified circumstances. (Penal Code § 638.51))








          AB 1924  (Low )                                            Page  
          8 of ?
          
          

          Existing law provides that a peace officer may make an  
          application to a magistrate for an order authorizing the  
          installation and use of a pen register or a trap and trace  
          device under specified circumstances. The application shall be  
          in writing under oath.  The applicant shall certify that the  
          information likely to be obtained is relevant to an ongoing  
          criminal investigation and shall include a statement of the  
          offense to which the information likely be obtained by the pent  
          register or trap and trace device.  (Penal Code § 638.52)

          Existing law, as part of the Electronic Communications Privacy  
          ACT (ECPA), specifies how and when a government entity may  
          access electronic device information by means of physical  
          interaction or electronic communication with the device. (Penal  
          Code § 1546.1)

          This bill provides a statutory exemption in ECPA for pen  
          registers and trap and trace devices that will ensure that  
          orders for these devices are valid for 60 days rather than 10  
          days provided for in ECPA. 

          This bill ensures that telecommunication providers are  
          compensated for their work when complying with a court order for  
          a pen register or trap and trace device. 

          This bill clarifies that courts may suppress any information  
          illegally obtained from a pen register or trap trace device. 

          This bill provides that a government entity that obtains  
          information from a trap and trace device or a pen register shall  
          provide notice to the targets, as specified. 

                    RECEIVERSHIP/OVERCROWDING CRISIS AGGRAVATION

          For the past several years this Committee has scrutinized  
          legislation referred to its jurisdiction for any potential  
          impact on prison overcrowding.  Mindful of the United States  
          Supreme Court ruling and federal court orders relating to the  
          state's ability to provide a constitutional level of health care  
          to its inmate population and the related issue of prison  
          overcrowding, this Committee has applied its "ROCA" policy as a  
          content-neutral, provisional measure necessary to ensure that  
          the Legislature does not erode progress in reducing prison  








          AB 1924  (Low )                                            Page  
          9 of ?
          
          
          overcrowding.   

          On February 10, 2014, the federal court ordered California to  
          reduce its in-state adult institution population to 137.5% of  
          design capacity by February 28, 2016, as follows:   

                 143% of design bed capacity by June 30, 2014;
                 141.5% of design bed capacity by February 28, 2015; and,
                 137.5% of design bed capacity by February 28, 2016. 

          In December of 2015 the administration reported that as "of  
          December 9, 2015, 112,510 inmates were housed in the State's 34  
          adult institutions, which amounts to 136.0% of design bed  
          capacity, and 5,264 inmates were housed in out-of-state  
          facilities.  The current population is 1,212 inmates below the  
          final court-ordered population benchmark of 137.5% of design bed  
          capacity, and has been under that benchmark since February  
          2015."  (Defendants' December 2015 Status Report in Response to  
          February 10, 2014 Order, 2:90-cv-00520 KJM DAD PC, 3-Judge  
          Court, Coleman v. Brown, Plata v. Brown (fn. omitted).)  One  
          year ago, 115,826 inmates were housed in the State's 34 adult  
          institutions, which amounted to 140.0% of design bed capacity,  
          and 8,864 inmates were housed in out-of-state facilities.   
          (Defendants' December 2014 Status Report in Response to February  
          10, 2014 Order, 2:90-cv-00520 KJM DAD PC, 3-Judge Court, Coleman  
          v. Brown, Plata v. Brown (fn. omitted).)  
           
          While significant gains have been made in reducing the prison  
          population, the state must stabilize these advances and  
          demonstrate to the federal court that California has in place  
          the "durable solution" to prison overcrowding "consistently  
          demanded" by the court.  (Opinion Re: Order Granting in Part and  
          Denying in Part Defendants' Request For Extension of December  
          31, 2013 Deadline, NO. 2:90-cv-0520 LKK DAD (PC), 3-Judge Court,  
          Coleman v. Brown, Plata v. Brown (2-10-14).  The Committee's  
          consideration of bills that may impact the prison population  
          therefore will be informed by the following questions:

              Whether a proposal erodes a measure which has contributed  
               to reducing the prison population;
              Whether a proposal addresses a major area of public safety  
               or criminal activity for which there is no other  
               reasonable, appropriate remedy;
              Whether a proposal addresses a crime which is directly  








          AB 1924  (Low )                                            Page  
          10 of ?
          
          
               dangerous to the physical safety of others for which there  
               is no other reasonably appropriate sanction; 
              Whether a proposal corrects a constitutional problem or  
               legislative drafting error; and
              Whether a proposal proposes penalties which are  
               proportionate, and cannot be achieved through any other  
               reasonably appropriate remedy.


          COMMENTS

          1.  Need for This Bill

          According to the author:

               Federal law allows law enforcement agencies to use pen  
               register and trap and trace devices, but they must  
               obtain a court order from a judge prior to the  
               installation of the device. However, during an  
               emergency situation, they may use these devices  
               without a court order if they obtain the court order  
               within 48 hours of the use of the device. Law  
               enforcement agencies must demonstrate that there is 

               reasonable suspicion that the use of the device is  
               relevant to an ongoing criminal investigation and will  
               lead to obtaining evidence of a crime for a judge to  
               authorize the use. 

               Last year AB 929 (Chau)? authorized California law  
               enforcement officers to apply for the installation of  
               a pen register and trap and trace device as well as an  
               emergency oral pen register and trap and trace device  
               under state, not federal law?

               Last year Governor Brown also signed the Electronic  
               Communication Privacy Act (SB 178) into law on October  
               8, 2015. The ECPA adds Chapter 3.6 to the Penal Code.  
               Absent a statutory exemption, Penal Code section  
               15471(a) will preclude a government entity from  
               compelling the production of our access to electronic  
               communication information from a service provider,  
               compelling the production of or access to electronic  
               device information from any person or entity other  
                                                      







          AB 1924  (Low )                                            Page  
          11 of ?
          
          
               than the authorized possessor of the device, or  
               accessing electronic device information by means of  
               physical interaction or electronic communication with  
               the electronic device.

               A government entity must obtain a search warrant  
               issued pursuant to Chapter 3 (commencing with Penal  
               Code section 1523) and subject to the requirement of  
               Penal Code section 1546.1(d) to compel the production  
               of or access to electronic communication information  
               from a service provider, or compel production of or  
               access to electronic device information from any  
               person or entity other than the authorized possessor  
               of the device.

                ***

               The ECPA was undoubtedly drafted to regulate law  
               enforcement's use of electronic serial number (ESN)  
               identification technology.  However, an unintended  
               consequence of the ECPA is the potential nullification  
               of AB 929.  The ECPA's definitions of electronic  
               communication and electronic communication information  
               include the call detail records that are captured by a  
               pen register/trap and trace device. The ECPA requires  
               the issuance of a search warrant pursuant to Chapter 3  
               (PC 1523 et. Seq.) for electronic information.  The  
               new pen register/trap and trace device statute is in  
               Chapter 1.  The ECPA would therefore require law  
               enforcement to seek a search warrant in order to  
               obtain a pen register.  Search warrants are valid for  
               ten days, whereas pen register/trap and trap device  
               orders are valid for 60 days under federal law and AB  
               929.

               Furthermore, the AB 929 amendment process resulted in  
 
               a drafting error. Language regarding the compensation  
 
               of telecommunication providers by law enforcement for  
 
               reasonable expenses incurred while complying with the  
 
               court's order was inadvertently deleted from section  








          AB 1924  (Low )                                            Page  
          12 of ?
          
          
 
               638.52, which applies to written applications for a  
 
               pen register/trap and trace order. The language was  
 
               only included in section 638.53, which governs an oral  
 
               application for an order in an emergency.



               AB 1924 still requires a court to make a finding that  
 
               there is probable cause to grant an order for a pen  
 
               register or a trap and trace device.  We are working  
 
               with the ACLU to draft amendments that would require  
 
               law enforcement to provide notice to the identified  
 
               targets of a pen register/trap trace order and to add  
 
               suppression language that would statutorily authorize  
 
               the suppression of any electronic information obtained  
 
               from a pen register/trap trace order via a Penal Code  
 
               Section 1538.5 motion.





          2.  Pen Registers and Trap and Trace Devices
















          AB 1924  (Low )                                            Page  
          13 of ?
          
          

          Federal law allows law enforcement agencies to use pen  
 
          register and trap and trace devices, but they must obtain a  
 
          court order from a judge prior to the installation of the  
 
          device. However, during an emergency situation, law  
 
          enforcement agencies may use these devices without a court  
 
          order if they obtain the court order within 48 hours of the  
 
          use of the device. Law enforcement agencies must demonstrate  
 
          that there is reasonable suspicion that the use of the  
 
          device is relevant to an ongoing criminal investigation and  
 
          will lead to obtaining evidence of a crime for a judge to  
 
          authorize the use. 









          Though federal law authorizes states and local law  
 
          enforcement officers to use pen register and trap and trace  
 
          devices by obtaining a court order first, it does not allow  
 
          them to obtain an emergency order unless there is a state  
 
          statute authorizing and creating a process for states and  
 
          local law enforcement officers to do so.  










          AB 1924  (Low )                                            Page  
          14 of ?
          
          







          Pen registers and track and trace devices generally track  
 
          incoming and outgoing telephone calls. They are often  
 
          utilized by law enforcement to track which people in an  
 
          investigation are communicating with one another and at what  
 
          times.  Unlike a wiretap authorization, pen registers and  
 
          track and trace devices do not provide law enforcement with  
 
          the content of the messages which are transmitted.  Wiretap  
 
          authorizations are therefore subject to a much higher  
 
          standard of scrutiny.  Under federal law, these  
 
          authorizations can be granted on a reasonable suspicion  
 
          standard, while search warrants are subject to a higher  
 
          standard of probable cause.









          AB 929 (Chau), Chapter 204, Statutes of 2015 authorized  
 
          state and local law enforcement to use pen register and trap  
 
          and trace devices under state law, and permitted the  








          AB 1924  (Low )                                            Page  
          15 of ?
          
          
 
          issuance of emergency pen registers and trap and trace  
 
          devices.  Under this legislation, the authorization for the  
 
          use of a trap and trace device or a pen register was for 60  
 
          days from the date of issuance, with extensions of up to 60  
 
          days.  However, the governor signed AB 929 prior to signing  
 
          the ECPA and as a result the authorization was chaptered out  
 
          by the ECPA's 10-day authorizations.









          3.  Electronic Communications Privacy Act (ECPA)





          Last year the legislature passed SB 178 (Leno), Chapter 651,  
 
          Statutes of 2015, which prohibited a government entity from  
 
          compelling the production of, or access to,  
 
          electronic-communication information or electronic-device  
 
          information without a search warrant or wiretap order, except  
 
          under specified emergency situations. Specifically, this new  
 
          law prohibits a government entity from: 










          AB 1924  (Low )                                            Page  
          16 of ?
          
          



          a) Compelling the production, of or access to, electronic  
 
          communication information from a service provider; 

          b) Compelling the production of or access to electronic device  
 
          information from any person or entity other than the authorized  
 
          possessor of the device; and, 

          c) Accessing electronic device information by means of physical  
 
          interaction or electronic communication with the device,  
 
          although voluntary disclosure to a government entity is  
 
          permitted. 



          The ECPA also permits a government entity to compel the  
 
          production of, or access to, electronic communication  
 
          information subject from a service provider, or compel the  
 
          production of or access to electronic device information from  
 
          any person or entity other than the authorized possessor of the  
 
          device pursuant to a warrant, wiretap order, order for  
 
          electronic reader records, or subpoena issued pursuant to  
 
          existing state law, as specified.





          4.  Allowance of Pen Registers and Trap Devices








          AB 1924  (Low )                                            Page  
          17 of ?
          
          









          This bill makes an exception to the ECPA, allowing pen  
 
          registers and trap or trace devices to be installed for 60  
 
          days.  It also places notice requirements on the entity that  
 
          obtains the information. 









                                      -- END -