Congress Cybersecurity & Tech Surveillance & Privacy

Beyond Carpenter - A Legislative Framework for Mobile Location Privacy

Jim Dempsey
Friday, March 6, 2026, 6:00 AM

A new chapter of federal law could bring clarity to the government’s acquisition of mobile location data. 

Location tracking on a phone. (https://www.newmanwebsolutions.com/blog/service-area-pages/; CC BY-NC 4.0, https://creativecommons.org/licenses/by-nc/4.0/).

In Carpenter v. United States, the Supreme Court held that the Fourth Amendment requires a warrant for compelled disclosure of historical cell-site location information. But Carpenter left unresolved critical questions: What about real-time collection? Direct collection by the government? Geofencing and tower dumps? Government purchases from data brokers? Duration thresholds? Emergency exceptions?

This report offers seven principles for updating the Electronic Communications Privacy Act. Applying them to location data, it argues that merely codifying Carpenter would be insufficient. Instead, it proposes a new freestanding chapter of Title 18—Chapter 120—comprehensively regulating government acquisition of mobile location information.

Drawing on the Wiretap Act, the proposed chapter establishes a warrant requirement for all government acquisition of mobile location data, a two-stage judicial process for non-individualized searches like geofencing and tower dumps, emergency exceptions, a statutory suppression rule, minimization requirements, and notice provisions. The report includes proof-of-concept legislative text with a section-by-section analysis.

This paper was published as part of a series marking the 40th anniversary of the Electronic Communications Privacy Act. View the paper series here.

You can read this paper here or below:

 


Jim Dempsey is a lecturer at the UC Berkeley Law School and a senior policy advisor at the Stanford Program on Geopolitics, Technology and Governance. From 2012-2017, he served as a member of the Privacy and Civil Liberties Oversight Board. He is the co-author of Cybersecurity Law Fundamentals (IAPP, 2024).
}

Subscribe to Lawfare