Academic

: CYB3RCRIM3

"Fruit of the Poisonous Tree"

As Wikipedia explains, the ?fruit of the poisonous tree? is ?a legal metaphor in the United States used to describe evidence gathered with the aid of information obtained illegally. The logic of the terminology is that if the source of the evidence (the `tree?) is tainted, then anything gained from it (the `fruit) is as well.?

The principle dates back at least to the U.S. Supreme Court?s decision in Silverthorne Lumber Co. v. U.S., 251 U.S. 385 (1920), in which the Court said that the ?essence of a provision forbidding the acquisition of evidence in a certain way is that not merely evidence so acquired shall not be used before the Court but that it shall not be used at all.?

In other words, if the government violates the 4^th Amendment in obtaining evidence, it cannot use that evidence directly (in court) or derivatively, i.e., by obtaining information it then uses to pursue charges against the person whose were violated. The Supreme Court first used the phrase ?fruit of the poisonous tree? to refer to this principle in 1939, in Nardone v. United States, 308 U.S. 338. It has used the phrase ever since.

That brings us to U.S. v. Miranda, 325 Fed. Appx. 858 (U.S. Court of Appeals for the Eleventh Circuit 2009). David Miranda was convicted of possessing child pornography in violation of 18 U.S. Code § 2252A(a)(5)(B) and appealed. On appeal, he argued that ?the police violated the Fourth Amendment . . . by searching his computer for information outside the scope of the warrant, which was limited to searching for evidence of counterfeit software.? U.S. v. Miranda, supra.

The opinion gives very few facts, so all I know about what happened is this:

[T]he searching officer was searching Miranda's hard drives pursuant to a warrant. In doing so, the officer had a lawful right to view each file to determine whether or not it was evidence of counterfeiting crimes. . . . The child pornography files were intermingled with counterfeiting files, so they were in plain view. Once the officer saw child pornography on Miranda's hard drives, its incriminating character was immediately apparent, so the officer could seize the files. . . . This is distinguishable from the child pornography found on Miranda's computer tower, which the district court suppressed because it was found during a search conducted solely for the purpose of finding child pornography, outside the scope of the counterfeiting warrant. For these reasons, the district court did not err in denying Miranda's motion to suppress the child pornography found on his laptop computer, external hard drive, and uninstalled hard drive.

U.S. v. Miranda, supra.

As I explained in an earlier post, the plain view doctrine is a 4^th Amendment rule that lets an officer seize evidence he runs across while he?s executing a warrant to search for evidence of a different crime. For the plain view doctrine to apply, the item the officer sees that?s outside the warrant must be in ?plain view? (he can?t be searching for it) and its ?incriminating character? must be apparent to him when he sees it. The latter requirement simply means that when the officer looks at the item in question, he immediately has probable cause to believe it?s evidence of a crime. For more on that, please see my prior post.

So here, the court says, the officer was executing a warrant that let him search for child pornography and, while staying within the scope of that warrant, he saw what he knew immediately was child pornography. The plain view lets the officer him seize the files; it doesn?t let him embark on a new search for child pornography, which is what his officer seems to have done. He seems to have found child pornography on Miranda?s laptop and hard drives while he was executing the warrant for the counterfeit software; as long as he was looking for counterfeit software (not child pornography) when he found the child pornography, the plain view doctrine justifies the seizure of the files he found.

It looks like that?s what happened ? the officer found child pornography on the laptop and hard drives while he was looking for counterfeit software but then started looking for child pornography on the computer tower. If that?s what the officer did, then the court was correct in suppressing the evidence found on the tower; what the officer should have done at that point is to go get a warrant to search for child pornography, using the child pornography he?d already found to establish probable cause for the issuance of such a warrant.

We, though, aren?t concerned about the child pornography they found. Miranda also argued, on appeal, that

the district court erred in refusing to exclude time-stamp evidence obtained from the external hard drive and uninstalled hard drive. Specifically, he argues this evidence was `fruit of the poisonous tree? because the information originated from the computer tower's internal timing mechanism, and evidence pertaining to the computer tower was suppressed by the district court.

U.S. v. Miranda, supra. As I understand it, Miranda is claiming the officer searched the computer tower because he was looking for child pornography, which made that an illegal search in violation of the 4^th Amendment. He seems to be extrapolating from that; Miranda seems to be saying that since the search of the computer tower violated the 4^th Amendment because it was not authorized by the officer?s warrant or by any exception to the warrant requirement, the government shouldn?t be allowed to use any evidence obtained from or derived from the tower.

The Court of Appeals began its analysis of Miranda?s argument by outlining the applicable law:

In addition to the illegally obtained evidence, a court may suppress incriminating evidence that was derived from that primary evidence as `fruit of the poisonous tree.? . . . When determining whether evidence is `fruit of the poisonous tree? and therefore must be excluded, the relevant question is `whether, granting establishment of the primary illegality, the evidence to which instant objection is made has been come at by exploitation of that illegality or instead by means sufficiently distinguishable to be purged of the primary taint.? Wong Sun v. United States, 371 U.S. 471 (1963). The government can establish that evidence has been `purged of the primary taint? by showing that the evidence was discovered from an independent source, would have been discovered inevitably by lawful means, or was so attenuated from the illegality `as to dissipate the taint? of the unlawful conduct. . . . Under the `independent source? doctrine, the challenged evidence is admissible if it was obtained from a lawful source, independent of the illegal conduct.

U.S. v. Miranda, supra.

The Court of Appeals then upheld the federal district court judge?s refusal to suppress the time-stamp evidence:

[T]he district court granted Miranda's motion to suppress child pornography found on his computer tower but declined to suppress the actual computer tower, as it was lawfully seized pursuant to a search warrant. The time-stamp evidence was unrelated to the suppressed child pornography because it was derived from the internal timing mechanism in the computer tower, a lawful source. For these reasons, the district court did not err by denying Miranda's motion to suppress the time-stamp evidence.

U.S. v. Miranda, supra.

That sounds like it makes sense, but not being an expert on computer technology, I can?t really assess whether it?s the correct result or not. And this is the only reported case I can find in which a motion to suppress time-stamp evidence comes up, so I can?t put this decision in context by comparing it to how other courts dealt with the same issue.

Full post as published by CYB3RCRIM3 on November 02, 2009 (boomark / email).