When Best Buy's 'Geek Squad' Meets the FBI: A Data Privacy Tale
Can the FBI pay tech support to look for evidence of misconduct on people's computers?
April 26, 2018 at 06:20 PM
5 minute read
On Friday, the U.S. Department of Justice is scheduled to file a motion for summary judgment in a case that could concern every general counsel, CEO or other corporate executive who has ever taken a personal computer to a technician to be repaired.
The issue behind the case is that most repair shops ask customers to sign repair contracts acknowledging that if a tech finds any evidence of something illegal on the computer, the tech can report it to authorities.
The bigger question is: Is it legal for the FBI to pay techs to look for evidence of misconduct on people's computers?
Yes, said a federal judge in California, in a case involving Richfield, Minnesota-based Best Buy Corp., the world's largest electronics retailer.
No, said Aaron Mackey, a staff attorney for the Electronic Frontier Foundation, which is suing the FBI over a Freedom of Information Act request seeking more information about such practices. EFF is a San Francisco-based nonprofit organization that defends civil liberties in the digital world.
In a statement, Best Buy spokesperson Jeff Shelman said four employees may have received payment after turning over alleged child pornography to the FBI.
“Any decision to accept payment was in very poor judgment and inconsistent with our training and policies,” he said. “Three of these employees are no longer with the company and the fourth has been reprimanded and reassigned.”
The case began over a year ago when a doctor in Southern California took his personal computer to Best Buy so its “Geek Squad” could fix the computer's faults. Best Buy sent the computer to its central repair facility near Louisville, Kentucky, where the techs found child porn on the device.
The techs called the local division of the FBI, and agents obtained a warrant and raided the doctor's home, finding more child porn. They charged the doctor. The case was dismissed last November due to problems with the warrant unrelated to the techs.
But not before U.S. District Judge Cormac Carney in the Central District of California said in his ruling that the doctor “cannot reasonably have expected that the child pornography on his hard drive would remain private through the data-recovery process he authorized. [The doctor's] only reasonable expectation was that once child pornography was found, Geek Squad City would turn around and show it to the FBI.”
Mackey told Corporate Counsel Thursday that the ruling is “problematic.” It's one thing to say there is no expectation of privacy if a technician stumbles across a pornographic photo while repairing the computer, Mackey said.
But it's quite another to say there is no expectation of privacy after a technician does a forensic search of a customer's computer specifically looking for evidence of illegality, he said, while accepting money from the FBI as a paid informant.
“The images were found in unallocated space on the hard drive,” Mackey said. “They would only have been found while doing a forensic search using software to scan the device and see what's on it. The contract doesn't say anything about doing that.”
What if the customer was a general counsel and the computer contained evidence of a possible overseas bribe? Or a CEO and it contained evidence of securities fraud?
“In theory [under the judge's ruling],” Mackey replied, “if they came across the other evidence and knew what they were seeing, they could report it.”
For its part, Best Buy's statement said, “Our Geek Squad repair employees discover what appears to be child pornography on customers' computers nearly 100 times a year. Our employees do not search for this material; they inadvertently discover it when attempting to confirm we have recovered lost customer data.”
It continued, “We have a moral and, in more than 20 states, a legal obligation to report these findings to law enforcement. We share this policy with our customers in writing before we begin any repair.”
But Mackey said, in a blog he wrote, that the FBI's use of techs to search customers' computers without a warrant threatens to circumvent computer owners' Fourth Amendment rights.
Documents show the relationship between the FBI and Best Buy techs had been going on for at least 10 years, Mackey said, and management knew about it.
He detailed other findings of his FOIA request in a recent interview with editor David Hechler of the Legal BlackBook.
Still Mackey said he and EFF want more information, such as whether the FBI had any similar relationships, trainings or guidance with other companies that repair computers. They also want information that was redacted from documents it received.
In its motion for summary judgment, the DOJ is likely to continue its argument that any other information EFF seeks is exempt from disclosure.
Depending on what the government argues, Mackey said his group will probably urge the court to order more disclosure in its cross motion for summary judgment, due by May 30.
Meanwhile Best Buy has taken other steps as well. Its statement said, “Our policies prohibit employees from doing anything other than what is necessary to solve the customer's problem. In the wake of these allegations, we have redoubled our efforts to train employees on what to do—and not do—in these circumstances.”
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllHours After Trump Takes Office, Democratic AGs Target Birthright Citizenship Order
4 minute readSupreme Court Upholds Law Requiring TikTok's Divestiture or Shutdown
Democratic State AGs Revel in Role as Last Line of Defense Against Trump Agenda
7 minute readWhy ACLU's New Legal Director Says It's a 'Good Time to Take the Reins'
Trending Stories
- 1M&A Transactions and AB 1824: Navigating New Privacy Compliance Challenges
- 2Devin Nunes, Former California GOP Congressman, Loses Move to Revive Defamation Suit
- 3Judge Sides With Retail Display Company in Patent Dispute Against Campbell Soup, Grocery Stores
- 4Is It Time for Large UK Law Firms to Begin Taking Private Equity Investment?
- 5Federal Judge Pauses Trump Funding Freeze as Democratic AGs Launch Defensive Measure
Who Got The Work
J. Brugh Lower of Gibbons has entered an appearance for industrial equipment supplier Devco Corporation in a pending trademark infringement lawsuit. The suit, accusing the defendant of selling knock-off Graco products, was filed Dec. 18 in New Jersey District Court by Rivkin Radler on behalf of Graco Inc. and Graco Minnesota. The case, assigned to U.S. District Judge Zahid N. Quraishi, is 3:24-cv-11294, Graco Inc. et al v. Devco Corporation.
Who Got The Work
Rebecca Maller-Stein and Kent A. Yalowitz of Arnold & Porter Kaye Scholer have entered their appearances for Hanaco Venture Capital and its executives, Lior Prosor and David Frankel, in a pending securities lawsuit. The action, filed on Dec. 24 in New York Southern District Court by Zell, Aron & Co. on behalf of Goldeneye Advisors, accuses the defendants of negligently and fraudulently managing the plaintiff's $1 million investment. The case, assigned to U.S. District Judge Vernon S. Broderick, is 1:24-cv-09918, Goldeneye Advisors, LLC v. Hanaco Venture Capital, Ltd. et al.
Who Got The Work
Attorneys from A&O Shearman has stepped in as defense counsel for Toronto-Dominion Bank and other defendants in a pending securities class action. The suit, filed Dec. 11 in New York Southern District Court by Bleichmar Fonti & Auld, accuses the defendants of concealing the bank's 'pervasive' deficiencies in regards to its compliance with the Bank Secrecy Act and the quality of its anti-money laundering controls. The case, assigned to U.S. District Judge Arun Subramanian, is 1:24-cv-09445, Gonzalez v. The Toronto-Dominion Bank et al.
Who Got The Work
Crown Castle International, a Pennsylvania company providing shared communications infrastructure, has turned to Luke D. Wolf of Gordon Rees Scully Mansukhani to fend off a pending breach-of-contract lawsuit. The court action, filed Nov. 25 in Michigan Eastern District Court by Hooper Hathaway PC on behalf of The Town Residences LLC, accuses Crown Castle of failing to transfer approximately $30,000 in utility payments from T-Mobile in breach of a roof-top lease and assignment agreement. The case, assigned to U.S. District Judge Susan K. Declercq, is 2:24-cv-13131, The Town Residences LLC v. T-Mobile US, Inc. et al.
Who Got The Work
Wilfred P. Coronato and Daniel M. Schwartz of McCarter & English have stepped in as defense counsel to Electrolux Home Products Inc. in a pending product liability lawsuit. The court action, filed Nov. 26 in New York Eastern District Court by Poulos Lopiccolo PC and Nagel Rice LLP on behalf of David Stern, alleges that the defendant's refrigerators’ drawers and shelving repeatedly break and fall apart within months after purchase. The case, assigned to U.S. District Judge Joan M. Azrack, is 2:24-cv-08204, Stern v. Electrolux Home Products, Inc.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250