The actual requirements start on page 8. Here's my summary:<p>> First, law enforcement officers must make reasonable efforts to minimize the capture of signals emitted from cell phones used by people other than the target of the investigation. [...] Moreover, law enforcement officers must not use a cell-site simulator when, because of the location and time, an inordinate number of innocent third parties’ information will be collected.<p>> Second, law enforcement officers must immediately destroy all data other than the data identifying the cell phone used by the target. The destruction must occur within forty-eight hours after the data is captured. [...] Additionally, the destruction must be evidenced by a verification provided to the Court with the return of the warrant.<p>> Third, law enforcement officers are prohibited from using any data acquired beyond that necessary to determine the cell phone information of the target.
"Cell site simulators" Somehow I don't think they'd call it that if I "simulated a law enforcement officer", presented a "simulated identification document", or enticed someone to pay me for a "simulated service", opening mail addressed to my "simulated persona" but not to me, etc. These devices are fraudulently impersonating users' cell service carriers. They are fake cell towers.
This is the actual link
<a href="http://law.justia.com/cases/federal/district-courts/illinois/ilndce/3:2015mc00021/317964/1/" rel="nofollow">http://law.justia.com/cases/federal/district-courts/illinois...</a>
Silly thought experiment:<p>Police dogs are known for being trained to deliver false positives, i.e. saying "drugs" when the are no drugs. Couldn't STINGRAY et al be used to the same effect? I.e.: "the suspect showed a pattern predictive of child pornography" being used as a pretext for executing a warrant?<p>Where is this wrong? Is there any evidence in favor of this interpretation?
It says the destruction of collected info not pertaining to the target must occur within 48 hours but prior to this it says they frequently need to diff multiple sessions possibly at different locations to pinpoint the target and eliminate others.<p>Does this mean they cannot run sessions separated by > 48 hours, since no diff would be possible afterwards?
I wish I were surprised these provisions weren't originally penned when drafting laws related to cell site simulators, but my faith in the US government actually looking out for the privacy of its citizens has been less than stellar.