Fourth Amendment Protections of Health Information After Carpenter v. United States: The Devil's In The Database

Abstract

Every day, companies collect health information from customers and analyze it for commercial purposes. This poses a significant threat to privacy, particularly as the Fourth Amendment protection of this deeply personal information is limited. Generally, law enforcement officers do not need probable cause and a warrant to access these private health information databases; only a subpoena is required, and sometimes nothing at all. The Fourth Amendment protections for health information may, however, have changed after the Supreme Court's 2018 decision in Carpenter v. United States, which held that the Fourth Amendment protects people from warrantless searches of historical cell-site location information possessed by their cell phone providers. The Court explained that, because of the nature of historical cell-site location information, individuals retain a reasonable expectation of privacy despite the information being in the possession of a third party. In reaching its holding, the Supreme Court considered the type of data, the uniqueness of cell-site location information, the impact of technological advancement on privacy, the voluntariness of the disclosure, and the property rights associated with the records. Many of these factors could support heightened Fourth Amendment protection for health information. This Article argues that Carpenter v. United States provides additional protections for future searches of health information in private databases.