Geofence Ruling Raises Data Holding Stakes: What Chatrie v. United States Means for Companies

A July newsletter blurb circulating among cybersecurity and privacy practitioners described a Supreme Court ruling requiring the government to show probable cause before it could obtain geofence location data from Google.¹ That description captures part of what happened this summer in Chatrie v. United States, but not all of it, and the part it leaves out is where much of the practical significance for businesses actually lies.

On June 29, 2026, the Supreme Court issued its decision in Chatrie v. United States, holding 6-3 that police conduct a Fourth Amendment “search” when they obtain a person’s Google Location History data through a geofence warrant, even though the data is held by a third party and even though the request covers only a limited window of time.² What the Court did not do is resolve whether the particular warrant in Chatrie’s case, or geofence warrants generally, satisfies the Fourth Amendment’s probable cause and particularity requirements. That question, along with the ultimate fate of the evidence used to charge Chatrie, was sent back to the Fourth Circuit Court of Appeals.³ For companies that collect, store, or receive government demands for location and other sensitive behavioral data, the distinction matters. Chatrie confirms that this category of data is constitutionally sensitive; it does not yet tell companies, or the lower courts, exactly what process is now required to obtain it.

The Case Behind the Ruling

Chatrie traces back to a May 2019 armed robbery of a credit union in Midlothian, Virginia.⁴ Investigators had surveillance footage showing the robber near the credit union appearing to talk on a cell phone, but no suspect. Weeks later, police obtained a geofence warrant directing Google to search its Location History database, a service that logs a user’s location roughly every two minutes using GPS, Wi-Fi, Bluetooth, and cell-site signals, for devices within a 150-meter radius of the credit union around the time of the robbery.⁵ The warrant authorized a three-step process: Google first produced anonymized location data for every device inside the geofence; officers then narrowed the list and Google produced additional data, including movement outside the fence, for a two-hour window; and Google finally disclosed identifying account information for the remaining users. That process identified three individuals, including Okello Chatrie, who was later charged with the robbery.⁵

Chatrie moved to suppress the Google data, arguing that the geofence warrant violated the Fourth Amendment. The district court agreed that the warrant “plainly violates” the Fourth Amendment but declined to suppress the evidence under the good-faith exception to the exclusionary rule.⁶ A Fourth Circuit panel affirmed on different grounds, holding that no search had occurred at all because Chatrie had voluntarily exposed his location data to Google.⁷ The full Fourth Circuit then reheard the case en banc and split evenly, affirming in a one-sentence order without resolving whether a search had occurred. The Supreme Court granted certiorari on the question whether the warrant’s execution violated the Fourth Amendment, but the Court’s eventual decision addressed only that threshold search question, leaving the warrant’s particularity and probable cause for remand.⁸

What the Court Actually Decided

Writing for the majority, Justice Elena Kagan grounded the decision in Carpenter v. United States, the Court’s 2018 ruling that accessing historical cell-site location information is a Fourth Amendment search because people have a reasonable expectation of privacy in the whole of their physical movements.⁹ The Court found that everything Carpenter relied on applies with equal or greater force to Google’s Location History: it is more precise than cell-site data, can reveal what floor of a building a phone is on, and functions as a kind of personal record that users treat as their own even though Google stores it on remote servers.²

The Court also rejected two arguments the government pressed to distinguish this case from Carpenter. First, it rejected the position that a short time window, roughly two hours here compared to the seven days at issue in Carpenter, falls outside Fourth Amendment protection, reasoning that even short-term location monitoring can reveal deeply sensitive information and that no workable line separates a search from a non-search based on duration alone.¹⁰ Second, the Court rejected the argument that Chatrie forfeited his privacy interest by opting in to Location History, noting that Google’s prompts to enable the service, including warnings that a device would not “work correctly” otherwise, make that choice far less than a clear-eyed waiver, and that treating app-by-app opt-ins as forfeiting Fourth Amendment protection misunderstands how modern smartphone use actually works.¹¹ In doing so, the majority declined to extend the third-party doctrine, under which sharing information with a business, such as a bank or a phone company, has traditionally been treated as surrendering any reasonable expectation of privacy in it.¹¹

What that leaves unresolved is significant. The Court expressly did not decide whether the Chatrie warrant, or geofence warrants generally, are supported by probable cause or described with sufficient particularity, the questions that determine whether a warrant is valid rather than merely whether one is required. Justice Jackson, joined by Justice Sotomayor, wrote separately to argue that the Court should have gone further and invalidated the second and third steps of the warrant outright. Justice Gorsuch concurred in the judgment on property-law grounds rather than the reasonable-expectation framework, while Justices Alito, Thomas, and Barrett dissented.¹²

A Circuit Split That Remains Unresolved

Chatrie does not resolve a split among the federal appeals courts over geofence warrants more broadly. In United States v. Smith, the Fifth Circuit, reviewing a geofence warrant obtained after a mail carrier robbery in Mississippi, held in 2024 that geofence warrants of the kind at issue in both Smith and Chatrie are unconstitutional “general warrants” because they require the government to search through the accounts of a large number of innocent Google users to find its suspects, though the court allowed the evidence in under the good-faith exception.¹³ That categorical position is considerably more aggressive than anything the Supreme Court adopted in Chatrie, and the Court’s opinion leaves it standing for now. Companies and counsel operating across both the Fourth Circuit (Virginia, Maryland, the Carolinas, and West Virginia) and the Fifth Circuit (Texas, Louisiana, and Mississippi) should expect continued divergence in how law enforcement demands for location and comparable data are evaluated, at least until the Fourth Circuit rules on remand or the Supreme Court revisits the question.

Why the Ruling Reaches Beyond Criminal Law

Chatrie is a criminal Fourth Amendment case, and its direct holding binds only the government’s conduct in obtaining evidence for prosecution. But the reasoning the Court used to get there has already drawn attention from commentators well outside the criminal defense bar, for at least three reasons relevant to companies handling consumer data.

First, the Court’s sensitivity analysis is a template that other courts and regulators are likely to borrow. Justice Kagan illustrated the privacy stakes of location data by pointing to what even a short trip can reveal, including a visit to a psychiatrist, an abortion clinic, an AIDS treatment center, or a criminal defense attorney’s office, and she noted that even two hours of data could let officers target one-off events such as a political rally.¹⁴ That framing echoes, and extends, language state privacy regulators and plaintiffs’ counsel already use to characterize sensitive categories of data under state comprehensive privacy laws and health-data statutes. A company that treats location data as low-risk because it is aggregated, short in duration, or collected through a click-through consent should expect that reasoning to face the same skepticism the Court applied to the government’s comparable arguments.

Second, the Court’s treatment of the third-party doctrine, while narrow, chips further at an idea companies have long relied on: that data voluntarily shared with a service provider carries reduced privacy protection. Chatrie does not eliminate the third-party doctrine, and the Court tied its holding to the particular sensitivity of location history. But the opinion’s skepticism about how voluntary app permissions really are, given how services are designed and marketed, is the kind of reasoning that civil plaintiffs, state attorneys general, and regulators can and will cite outside the Fourth Amendment context, including in data broker litigation and consumer protection enforcement.

Third, Chatrie will influence how companies think about civil discovery exposure. Location data, geofencing analytics, and comparable granular behavioral records are already common targets in civil litigation; employment disputes, personal injury cases, and consumer class actions increasingly seek this kind of data through subpoenas to platforms or discovery requests to defendant companies themselves. Chatrie does not change the civil discovery rules, which are governed by the Federal Rules of Civil Procedure and their state analogues rather than the Fourth Amendment. But a company’s internal characterization of location data as routine business records, for purposes of retention schedules and litigation-hold decisions, now sits uneasily next to a Supreme Court opinion describing that same category of information as an intimate window into a person’s life. Courts resolving discovery disputes over proportionality and burden are not writing on a blank slate; they read Supreme Court privacy opinions too.

Practical Considerations for Data Retention and Governance

Companies that collect location data, or any data with comparable behavioral granularity, should treat Chatrie as a prompt to revisit how that data is classified, retained, and disclosed, both to the government and in civil litigation.

First, companies should reassess data classification frameworks to determine whether location history, geofencing data, and similar granular behavioral records are tagged with the sensitivity they now clearly warrant under Chatrie’s reasoning, rather than treated as ordinary analytics or operational data. A classification framework built around regulatory categories from several years ago may not reflect how a court would now view this data.

Second, companies should revisit retention schedules with an eye toward minimization. The most effective way to reduce both law enforcement disclosure obligations and civil discovery exposure is not to have the data in the first place. Google’s own response to this litigation, moving Location History storage onto individual user devices rather than company servers, a change that by the company’s own account has curtailed its ability to respond to geofence warrants at all, illustrates how architecture choices can reduce legal exposure as effectively as policy choices.¹⁶

Third, legal, privacy, and engineering teams should coordinate on how the company responds to law enforcement demands for location or similarly sensitive data, given that Chatrie confirms such demands implicate Fourth Amendment interests even when they are narrow in scope or short in duration. Companies that have historically treated requests for short-term or aggregated location data as routine, low-friction disclosures should build in heightened review, consistent with how they already treat requests for content data such as emails or messages.

Fourth, companies should evaluate vendor and processor contracts governing location and behavioral data to confirm that obligations around law enforcement demands, breach notification, and litigation holds are aligned with this heightened sensitivity, particularly where a vendor rather than the company itself is the entity most likely to receive a warrant or subpoena.

Fifth, in-house and outside counsel handling civil discovery disputes should be prepared to invoke Chatrie’s sensitivity analysis affirmatively rather than only defensively. A company resisting an overbroad discovery request for location data, or a company facing scrutiny over how long it retained such data, now has Supreme Court language describing exactly why that category of information deserves heightened protection and proportionality review.

Looking Ahead

Chatrie leaves considerable work for the lower courts. The Fourth Circuit must now decide, for the first time, whether the specific multi-step warrant used against Chatrie satisfies the probable cause and particularity requirements the Court says now apply. The Fifth Circuit’s more categorical position in Smith remains on the books, creating a live circuit split that the Supreme Court may eventually need to resolve. And Google’s shift toward on-device location storage means the precise warrant mechanics at issue in Chatrie may already be less common than they were in 2019, even as other companies and other categories of granular behavioral data raise the same underlying questions.¹⁵

For companies operating at the intersection of data collection, government requests, and civil litigation, the lesson of Chatrie is not that a single new compliance requirement has arrived. It is that the sensitivity analysis courts apply to consumer data, how granular it is, how revealing it is, and how genuinely voluntary its collection really was, is becoming more exacting across criminal, civil, and regulatory contexts alike. Data retention, vendor management, and discovery strategies built on the assumption that location and behavioral data carry only modest legal risk should be reexamined in light of it.