R v Spencer

R v Spencer[1] is a Canadian constitutional law decision of the Supreme Court of Canada, concerning search and seizure law under section 8 of the Canadian Charter of Rights and Freedoms. At issue was whether the police could request subscriber information associated with an IP address from an Internet service provider, on a voluntary basis under the Personal Information Protection and Electronic Documents Act,[2] and without prior judicial authorisation. The Supreme Court unanimously ruled that the request for internet subscriber information infringed the Charter's guarantee against unreasonable search and seizure.

R v Spencer
Supreme Court of Canada
Hearing: 9 December 2013 Judgment: 13 June 2014
Full case name	Matthew David Spencer v Her Majesty The Queen
Citations	2014 SCC 43, [2014] 2 SCR 212.
Docket No.	34644
Prior history	APPEAL from R v. Spencer, 2011 SKCA 144 (25 November 2011), affirming in part and setting aside in part R v. Spencer, 2009 SKQB 341 (31 August 2009). Leave to appeal granted, Matthew David Spencer v. Her Majesty The Queen, 2013 CanLII 2395 (24 January 2013), Supreme Court (Canada)
Ruling	Appeal dismissed.
Holding
Users have a reasonable expectation of privacy in their Internet service provider subscriber information, as its disclosure will often identify users with intimate or sensitive activities carried out online with the expectation of anonymity.
Court membership
Chief Justice: Beverley McLachlin Puisne Justices: Louis LeBel, Rosalie Abella, Marshall Rothstein, Thomas Cromwell, Michael Moldaver, Andromache Karakatsanis, Richard Wagner
Reasons given
Unanimous reasons by	Cromwell J

Background

The appellant, Matthew David Spencer, used LimeWire to download child pornography onto a computer belonging to his sister, with whom he lived, and inadvertently shared it publicly. A member of the Saskatoon Police Service, using software to track worldwide child pornography file sharing, found Spencer's IP address among the results. Police investigators suspected the IP address to belong to a Shaw Communications customer in Saskatoon, although they did not know the identity or precise location of the customer to whom the IP address belonged. Without a production order or judicial authorization, police investigators made a written request to Shaw for the subscriber information linked to the IP address in question. Shaw voluntarily complied, turning over records including the name and address of the user associated with the IP address. The police used this information to lawfully obtain a search warrant for Spencer's sister's house, where they found several child pornography photos and videos. Spencer was arrested and charged with two criminal offences: possession of child pornography, contrary to section 163.1(4) of the Criminal Code, and distribution of child pornography, contrary to section 163.1(3) of the Criminal Code.[3]

The courts below

Saskatchewan Court of Queen's Bench

Spencer was tried before the Court of Queen's Bench for Saskatchewan. At a pre-trial application, he argued that the way the police obtained his subscriber information was an unconstitutional search, violating section 8 of the Canadian Charter of Rights and Freedoms. On the merits of the charges, he argued that he did not knowingly share the child pornography because he did not know how LimeWire sharing worked. Spencer moved for the evidence to be excluded under section 24(2) of the Charter.

In response, the Crown argued that Shaw's voluntary disclosure of Spencer's subscriber information was authorized by section 7(3)(c.1)(ii) of PIPEDA, which allows an organization to disclose personal information to a government institution that has "identified its lawful authority to obtain the information and indicated that the disclosure is requested for the purpose of... carrying out an investigation relating to the enforcement of any... law or gathering intelligence for the purpose of enforcing any... law".[2]

The trial judge dismissed Spencer's Charter application, finding that the police's request for Spencer's subscriber information was not a search for the purposes of section 8.[4]

At trial, the trial judge convicted Spencer of possession of child pornography. However, he acquitted Spencer of distribution of child pornography, holding that offence required some "positive step or action" to distribute the materials[5] and that the mens rea had not been established.

Saskatchewan Court of Appeal

Spencer appealed the conviction on the possession charge to the Saskatchewan Court of Appeal, while the Crown appealed the acquittal on the distribution charge. The Court of Appeal unanimously upheld the possession conviction, agreeing with the trial judge that the way the police obtained the IP information was not an unreasonable search and did not violate the Charter.[6] The Court therefore dismissed Spencer's appeal on this charge.

On the second issue, the acquittal on the charge of distributing child pornography, the Court allowed the Crown appeal. The Court of Appeal held that the trial judge had erred by holding that the offence required proof of a "positive step" to distribute the child pornography. The Court therefore set aside the acquittal and ordered a new trial on the distribution charge.[7]

Spencer then appealed to the Supreme Court of Canada.

Judgment of the SCC

The Supreme Court dismissed Spencer's appeal. However, the Supreme Court's decision varied from the Court of Appeal's on several counts. Cromwell J, writing for a unanimous Court, held that law enforcement's obtainment of Spencer's subscriber information was a search for the purposes of section 8. Spencer was found to have a reasonable expectation of privacy in his subscriber information, a decision reached by weighing the Tessling factors. First, the Court took a "broad and functional approach"[8] by determining the subject matter of the search to be not merely Spencer's name and address but the identity of an Internet user. Second, the Court found that the nature of Spencer's privacy interest in subscriber information relating to a computer used privately was primarily an informational one, and set out three key elements of informational privacy: privacy as secrecy, privacy as control, and privacy as anonymity.[9] The Court found anonymity to be particularly important in an online context, where subscriber information "may implicate privacy interests relating not simply to the person’s name or address but to his or her identity as the source, possessor or user of that information".[10] Although the Court stopped short of recognizing an absolute constitutional right to anonymity,[11] it held nonetheless that Spencer had a high degree of informational privacy in his subscriber information. Third, the Court held that Spencer's expectation of privacy in his subscriber information was a reasonable one. The Court dismissed the Crown's argument that the request for subscriber information was authorized by section 7(3)(c.1)(ii) of PIPEDA, which provision requires lawful authority for any disclosure. However, the existence of lawful authority itself depends on the existence of a reasonable expectation of privacy in subscriber information. Thus PIPEDA was not determinative of the issue at hand.

The Court held further that the police's search was not authorized by law, interpreting lawful authority as more than a "bare request by law enforcement".[12] The Court thus found the search unreasonable on the basis of the Collins test. Since the search warrant that led to Spencer's arrest was predicated entirely on the unreasonable search of Spencer's subscriber information, there would not have been grounds to issue the warrant had the police acted lawfully. Thus the search of Spencer's sister's house was unconstitutional, violating section 8 of the Charter.

However, the Court held that the evidence obtained during the search of Spencer's sister's house should not be excluded, on the basis of the Grant test. The state's conduct was deemed not to constitute "wilful or flagrant disregard of the Charter"[13] because the Saskatoon Police Service reasonably believed that the subscriber information request to Shaw was authorized by law. The impact of the Charter-infringing conduct on Spencer was serious, unmasking his anonymity and exposing his online choices. However, society's interest in the adjudication of the case, one involving serious offences with mandatory minimum prison sentences, on its merits outweighed any privacy infringement.[14]

The Court agreed with the Saskatchewan Court of Appeal that the trial judge had erred by holding that the offence of distribution of child pornography required proof of a positive step.[15]

Impact

The Supreme Court's decision was hailed as a landmark victory for privacy and anonymity, sending a "strong message on Internet privacy"[16] and holding definitively that law enforcement cannot use the section 7(3)(c.1)(ii) PIPEDA disclosure provision or the section 487.014 Criminal Code investigative power alone to compel ISPs to disclose a customer's subscriber information.

References

1. R v Spencer, 2014 SCC 43, [2014] 2 SCR 212.
2. Personal Information Protection and Electronic Documents Act, SC 2000, c 5.
3. Criminal Code, RSC 1985, c C-46, s 163.1.
4. R v Spencer, 2009 SKQB 341, paras 17, 18, 19.
5. R v Spencer, 2011 SKCA 144, paras 49–50.
6. R v Spencer, 2011 SKCA 144, para 47.
7. R v Spencer, 2011 SKCA 144, paras 81, 95.
8. SCC, par. 26
9. SCC, par. 38
10. SCC, par. 47
11. SCC, par. 49
12. SCC, par. 71
13. R v Grant, par. 75
14. SCC, par. 76–81
15. SCC, par. 86
16. Watkiss, Roger; Shung, Kaitlin (June 2014). "Canada's Supreme Court sends strong message on Internet privacy in R v Spencer". Norton Rose Fulbright. Retrieved January 24, 2015.

External links