Background of the Case
In July 2016, a woman in rural Northumberland County was kidnapped from her home, sexually assaulted, and later released. The victim was unable to identify her attacker, and DNA evidence initially produced no match, leaving investigators without a suspect after traditional leads were exhausted.
Investigators then sought a reverse keyword search warrant directed to Google, requiring the company to identify anyone who searched the victim’s name or home address in the week before the attack. Google returned fourteen IP addresses, one of which was traced to John Edward Kurtz, a correctional officer who worked with the victim’s husband. Subsequent surveillance, DNA evidence, and confessions led to Kurtz’s conviction and a sentence of 59 to 280 years. Kurtz challenged the Google warrant as unconstitutional, bringing the case before the Pennsylvania Supreme Court.
This set the stage for a constitutional question with sweeping implications: whether Article I, Section 8 of the Pennsylvania Constitution protects ordinary internet searches from warrant-based government scrutiny when no individual suspect has been identified.
Introduction
In Commonwealth v. Kurtz, 98, 99, 100 MAP 2023, the Pennsylvania Supreme Court has just recently issued one of the most consequential privacy decisions in decades. While the case arose from horrific criminal acts, the Court’s ruling reaches far beyond the facts before it. They held that Pennsylvanians have no reasonable expectation of privacy in general, unprotected Google search queries or associated IP-address data. In doing so, the Court significantly narrowed the scope of privacy protections under Article I, Section 8 of the Pennsylvania Constitution and opened the door to expansive new surveillance practices.
This decision represents a sharp departure from Pennsylvania’s long-standing tradition of providing stronger privacy protections than those recognized under the federal Fourth Amendment.
What the Court Decided
The Opinion Announcing the Judgement of the Court, written by Justice Wecht, concluded that when a person conducts an ordinary Google search—typing words into a search bar and pressing enter—they voluntarily expose that information to a third party. Because the data is shared with Google, the Court reasoned, the user relinquishes any reasonable expectation of privacy in the resulting records.
This holding allowed the Court to avoid addressing a critical second question: whether police may constitutionally obtain a reverse keyword search warrant., a warrant that identifies suspects by sweeping up data about everyone who searched certain terms, rather than targeting a known individual based on particularized suspicion. Since the Court found no privacy interest at stake, it ruled that no constitutional analysis of probable cause was required.
The result: the conviction was affirmed, and the investigative technique was effectively validated.
Reverse Keyword Warrants: Digital Dragnets
Reverse keyword warrants are fundamentally different from traditional warrants. Rather than identifying a suspect and seeking evidence related to that person, these warrants require a company like Google to search its massive databases for all users who entered certain terms within a specified timeframe.
In Kurtz, police had no suspect and no evidence that Google was used in planning the crime. Nevertheless, they obtained a warrant compelling Google to identify every user who searched the victim’s name or address. Fourteen users were initially flagged. One of them became the suspect.
By treating internet searches as unprotected activity, the Court has effectively authorized this kind of digital dragnet policing.
A Break from Pennsylvania’s Privacy Tradition
For decades, Pennsylvania courts have recognized that Article I, Section 8 provides broader privacy protections than the federal Constitution. In landmark cases such as Commonwealth v. DeJohn (bank records) and Commonwealth v. Melilli (pen registers), the Court rejected the federal “third-party doctrine,” which holds that information loses constitutional protection once shared with another entity.
Those cases emphasized two core principles:
- Participation in modern society often requires sharing information with third parties, making such disclosure not truly voluntary.
- Aggregated records can create a detailed “virtual biography” of a person’s life, deserving constitutional protection.
The Kurtz majority recharacterized these precedents as narrow exceptions rather than expressions of a broader constitutional philosophy. In practice, the decision revives the very third-party doctrine that Pennsylvania courts long viewed as incompatible with the Commonwealth’s robust privacy guarantees.
The Dissent’s Warning
Justice Donohue’s dissent forcefully argued that the majority abandoned Pennsylvania’s constitutional values. The dissent recognized that internet searches are no longer optional conveniences but essential tools for participating in modern life—used to research health concerns, legal rights, employment, housing, education, and personal relationships.
Search histories, the dissent explained, reveal a person’s thoughts, fears, beliefs, and vulnerabilities. Allowing government access to this information without meaningful limits invites precisely the kind of generalized surveillance that Article I, Section 8 was designed to prevent.
The dissent warned that the Court’s decision opens the door to abuses of power that earlier Pennsylvania courts explicitly sought to foreclose.
What This Means Going Forward
The implications of Kurtz are profound:
- Suspicionless investigations: Police may now begin investigations by searching everyone’s digital activity, rather than developing individualized suspicion first.
- Erosion of probable cause: If no privacy interest exists, courts need not closely examine whether warrants are supported by sufficient evidence.
- Two-tier privacy system: Privacy protections may depend on technical sophistication, rewarding those who use privacy-enhancing tools while exposing ordinary users who rely on default settings.
- Chilling lawful behavior: Knowing that searches can be monitored may deter people from seeking information about sensitive or controversial topics.
Why This Matters Beyond One Case
Although Kurtz involves extreme criminal conduct, constitutional law is not shaped by easy cases. The rules announced today will apply to everyone tomorrow—victims, journalists, advocates, political dissidents, and ordinary citizens seeking information.
Pennsylvania’s Constitution has long stood as a bulwark against overbroad government surveillance. By narrowing its protections in the digital age, the Court risks rendering those safeguards obsolete precisely when they are most needed.
Commonwealth v. Kurtz marks a pivotal moment in Pennsylvania privacy law. By denying constitutional protection to internet search data, the Court has shifted the balance of power decisively toward the state and away from individual liberty.
Whether through future court decisions or legislative action, this ruling deserves close scrutiny. The question now facing Pennsylvanians is not whether law enforcement should investigate crime—it must—but whether the tools used to do so will respect the fundamental right to be let alone in a digital society.
