Analyzing the Competing Interests Between a School and Its Students
For better or worse, the proliferation of technology accessible to minors has fundamentally altered the way they communicate and interact with the world around them. Since the schools they attend maintain an interest in their well-being, it's easy to imagine how this change has complicated the relationship between the two. Whether through proprietary software specifically designed to monitor the social media communiqués of students, or through a casual Facebook search, administrators now have a trove of information at their fingertips. Courts are only now beginning to confront the myriad privacy questions that arise as a result of the increasing interconnectedness between students and school districts.
This article will discuss several prominent cases that confront the issues intrinsic to this relationship, including: whether unauthorized access to the computers or social media accounts of students can violate statutory and constitutional laws governing searches and seizures; at what juncture does a student surrender a right to privacy in the student's online communications; and the circumstances in which a school can discipline a student for online speech without violating the First Amendment.
The 'Robbins' Case
Robbins v. Lower Merion School District, 2010 WL 3421026 (E.D. Pa. Aug. 30, 2010), was a class action suit filed in 2010 on behalf of students who had been spied on at home via a camera installed in laptops provided by the presiding school district. Dubbed "WebcamGate," the lawsuit made considerable waves in the popular press and precipitated multiple criminal investigations, likely as a result of the salacious allegations levied against the school district. For example, a widely circulated photo taken by the webcam and stored on the school district's computers depicted the named plaintiff in his bed.
The plaintiffs alleged that the Lower Merion School District (LMSD) had surreptitiously and "indiscriminately" photographed students without permission of the students or parents via a webcam installed in a personal laptop computer the school district had provided. The webcam was disabled for all other uses, including video chat, so most students believed the webcams did not work at all. In reality, officials at LMSD installed a program on the laptops called "TheftTrack," that permitted district employees to remotely activate the webcam and use it to take clandestine photos that would be subsequently transmitted to the school servers. TheftTrack also allowed school officials the ability to take screenshots and record the IP address of the laptops. The laptops were programmed to erase whatever files were sent from the laptops to the school servers. As LMSD Network Technician Mike Perbix matter-of-factly noted: "[W]hen you're controlling someone's machine, you don't want them to know what you're doing."
The plaintiffs discovered the monitoring after a screenshot taken by TheftTrack of the plaintiff in his bedroom was used by his school to mete out discipline. As a result of this "spying," plaintiffs filed suit alleging violations of the Electronic Communications Privacy Act (ECPA), the Computer Fraud and Abuse Act (CFAA), the Stored Communications Act (SCA) and the Fourth Amendment, among other laws, based on LMSD's "indiscriminate use of an ability to remotely activate the webcams incorporated into each laptop." The suit followed an emergency motion from the same plaintiffs seeking an injunction to prevent LMSD from activating the webcam remotely and taking screenshots. The motion was granted.
Interestingly, as a result of information gleaned from a discovery order from the presiding judge in Robbins, another student commenced a lawsuit against LMSD as a result of pictures it had taken and stored of him. See Complaint at 8-12, Hasan v. Lower Merion School District, No. 2:10-cv-03663-JD (E.D. Pa. July 27, 2010) (alleging violations of the SCA, ECPA and CFAA based on webcam spying).
Both cases settled. LMSD (via its insurer) paid more than $600,000 to the named plaintiffs to settle the various charges against it. Nonetheless, the cases highlighted the increasing clash between privacy interests of students and the interests in maintaining order and discipline of school districts.
Post 'Robbins' Developments
Since Robbins, a number of cases that involve analysis of the legality of student monitoring have been actually litigated. In R.S. ex rel. S.S. v. Minnewaska Area School Dist. No. 2149, 894 F. Supp. 2d 1128 (D. Minn. 2012), a middle school student sued the school district alleging, inter alia, a violation of her Fourth Amendment right to be free from unreasonable search and seizure.
In that case, the school received a message from the parent of another student alleging that the plaintiff was engaged in a "naughty" online conversation about "sexual topics" with the student off school premises. As a result of these allegations, the plaintiff was called out of class on two separate occasions. During the second instance, in which the plaintiff was alone in a room with a uniformed police officer, school officials demanded she provide them with her email and Facebook usernames and passwords. The plaintiff initially refused, only to then be called a "liar" and threatened with detention for a refusal to comply. After acquiring the passwords, the officials logged into plaintiff's Facebook account and spent 15 minutes viewing her public postings along with her private messages. Though no subsequent formal discipline occurred, the plaintiff subsequently missed days of school and alleged that she fell behind in her school work and felt "depressed, angry, scared and embarrassed."
In evaluating the Fourth Amendment claim, the court noted that as a threshold matter, whether the plaintiff possessed a sufficiently "reasonable expectation of privacy" required to sustain a claim depended in large part on "their ability to exclude others from the place searched." See Minnesota v. Carter, 525 U.S. 83 (1998) (Ginsburg, J., dissenting). As such, since the plaintiff's private messages were in her exclusive possession due to being password protected, she had a reasonable expectation of privacy in said messages, "as with a private letter." The court then turned to whether the school interest in preventing a violation of school rules outweighed the plaintiff's reasonable expectation of privacy. It concluded the school's interest did not, largely on the grounds that its purview is the school grounds, and as a result, it had no reason to believe that a conversation occurring entirely outside the school, however "naughty," posed any sort of threat to discipline or order within the classroom. Accordingly, the plaintiff's allegations of a violation of the Fourth Amendment could survive a motion to dismiss.
Another case involving a school monitoring its students online communication illustrates that whether the student possesses a "reasonable expectation of privacy" can be dispositive in adjudicating the merits of a Fourth Amendment claim. In Chaney v. Fayette County Public School Dist., —F. Supp. 2d—, 2013 WL 5486829 (N.D. Ga. 2013), a high school student brought an invasion of privacy claim against the school district after one of its employees used a Facebook photo of her in a bikini in a presentation at a "Community Awareness Seminar." Specifically, the employee used the photo in his presentation as an example of the permanent and potentially embarrassing nature of postings on social media. The employee had found the photo because the plaintiff's profile was customized with the most inclusive privacy setting available to minors on Facebook. This decision by the plaintiff to permit the widest dissemination of her information proved to be dispositive in rejecting her claim. In noting that a person "has no legitimate expectation of privacy in information he voluntarily turns over to third parties," the court held that the plaintiff could not sustain a Fourth Amendment claim since she had voluntarily shared the picture with an audience of potentially hundreds, or even thousands, of people she did not know. Unlike the purportedly salacious messages accessed in Minnewaska, the plaintiff's photo had hardly been excluded from viewing by unauthorized individuals, and therefore did not fall under the penumbra of the Fourth Amendment protections. See also United States v. Meregildo, 883 F. Supp. 2d 523 (S.D.N.Y. 2012) (utilizing one of defendant's Facebook friends to access defendant's Facebook profile to obtain a search warrant did not violate the Fourth Amendment since the postings shared with a friend constituted a surrender of an expectation of privacy).
As detailed below, constitutional protections have been invoked in a separate context by students wishing to avoid monitoring and sanctioning from the schools they attend.