In recent months, real-estate agents disclosed to potential home buyers that some sellers used their home surveillance cameras to remotely spy on buyers during open house tours. However, real-estate agents were not surprised about this practice, given the high value sellers place on their home and the benefit this surveillance could provide. For example, sellers might be able to find out which buyers were truly interested in buying the home using audio surveillance.
Law enforcement officials have an interest in gathering this information as well, with some calling upon homeowners and tech companies to surrender home surveillance recordings to prevent crime. The decision to turn over home surveillance recordings to law enforcement without probable cause or a warrant is an ethical and legal concern.
Given the possible consequences of home surveillance, all individuals should be able to decide whether homeowners can collect surveillance recordings and whether homeowners should offer notice and obtain consent before doing so. This post will focus on whether homeowners should give guests and other authorized individuals the ability to consent to home surveillance before entering the home. Specifically, should homeowners give visitors the ability to consent to home surveillance prior to entering the owner's home? If so, should visiting parents be offered the opportunity to consent for their visiting children? If parents can provide consent, what would that consent look like and how would devices respect informed consent, especially if children are visiting without their parents?
Why are home surveillance devices a growing privacy concern?
Modern home surveillance devices now allow individuals to obtain and retain video and audio recordings of other individuals for long periods of time. Some of the features touted include:
Video recording of individuals within the home
Two-way audio (to hear sounds within the home, record spoken words, and speak audio through the device)
Wi-Fi connectivity for both home and outside access to recordings
Motion sensors and mobile notifications
Cloud storage for recordings
Why should parents care?
Any homeowner could have video or audio recordings of you and/or your children accessible at any time of day on a number of mobile devices for an indefinite amount of time. In addition, many device features, if used improperly, could violate existing state and federal wiretapping and eavesdropping laws. Some individuals may break those laws if they do not pay attention to what conversations they are recording and how they handle storage or sharing of these recordings (see endnote 1).
What is the difference between wiretapping and eavesdropping?
There is a distinction between wiretapping and eavesdropping. Wiretapping often indicates the use of devices to intercept, monitor, and record wire communications, while eavesdropping means to overhear, record, amplify, or transmit any part of private communication without at least one party's consent. Although distinct, the two acts often intersect.
What are the federal laws?
There are two types of laws associated with surveillance: the common law expectation of privacy test and the Federal Wiretap Act.
What are the state laws?
State wiretapping and eavesdropping laws vary; however, there are typically two categories under which a state's laws can fall: one-party consent or two-party consent. One-party consent states, like federal law, only require that one party in the conversation provide prior consent to wiretapping. A whopping 38 states and the District of Columbia fall within this category. In contrast, 12 states, including California, are two-party consent states. This means that both parties to a conversation must provide express or implied consent prior to recording. For the purposes of this discussion, we will focus on California law. For information about each state's wiretapping and eavesdropping laws, click here.
Should parents and/or their children expect some level of privacy in another person's home?
This question is really two-fold: (1) In general, can a person have a reasonable expectation of privacy in someone else's home, and (2) does a conversation in someone else's home fall within the definition of a "confidential communication"?
Can you have a reasonable expectation of privacy in someone else's home?
It depends. Because the expectation of privacy test relies on factual circumstances, your expectation of privacy may or may not be reasonable depending on which area of the person's home you claim to have privacy.
For example, society would likely argue that you have an expectation of privacy in the homeowner's bathroom, but not their living room. In fact, society may even deem conversations as private when they are held in the bathroom but are unknowingly audible outside of the bathroom. On the other hand, society would not likely support an expectation of privacy in the living room, because guests are expected to have conversations with people outside of the home or family. For example, a federal appeals court dismissed a medical lab's lawsuit against ABC Broadcasting Company for filming within the facilities, because parts of the lab were open to the public and none of the conversations recorded were of a personal nature.
Does a conversation in someone else's home fall within the definition of "confidential communication"?
Factual circumstances indicate whether or not the speaker had an intent to keep the conversation confined. If a conversation is not in public, there is likely an intent to keep the conversation private. The line between public and private is often ill-defined. While some guests may consider another's home as a private place, others may consider these guests' expectations as unreasonable. Perhaps, lawmakers and/or courts will answer this question more definitively in the near future.
Should homeowners warn parents of home surveillance devices before those parents or their children enter the home?
There is already a consensus that all homeowners are free to install any home surveillance device they choose, but there is also discomfort in knowing that someone is surreptitiously listening to your conversations. A homeowner must warn people that devices may be recording them in two-party consent states. In one-party consent states, warning efforts are left to courtesy. Verbal warnings are not the only option, however. Warning lights, sounds, posted placards, personal detection apps, and screen readouts are some recommended examples to provide notice to guests in the home that recording devices are present and collecting information.
If you as a homeowner are uncomfortable disclosing this information to guests, then you could turn off any recording devices before guests enter your home, or at a minimum, do not share or otherwise disclose your video or audio recordings of your guests. This is especially important for audio recordings because they trigger wiretapping and eavesdropping laws.
If possible, homeowners can edit recordings to remove all or parts of audio or video when guests do not provide consent. Members of both the Texas Association of School Boards and the Ohio School Boards Association recommend editing as a technique to de-identify students who have not consented to recording but have already been recorded.
Can surveillance warnings apply to nontraditional surveillance devices as well as to traditional home surveillance cameras?
While smart thermostats seem innocuous, they can easily know exactly what their users do every day by logging location and motion sensor data. This data, like the device itself, can be shared with smart home devices like the Amazon Echo and other third parties. Although there is no explicit expectation of privacy for smart thermostats, courts may one day deem that data collected from users through geofencing (regardless of device type) is subject to an objective expectation of privacy, much like cell tower-generated location data as mentioned previously.
How do Wi-Fi-enabled and Bluetooth beacon devices work? First, Wi-Fi routers and Bluetooth beacons send requests for information to nearby devices. Routers are devices that control information flow through different computer networks. Nearby Wi-Fi and Bluetooth devices respond to these requests by sending information back to the router or beacon. The beacon or router then sends information back to the device, making adjustments throughout the process to tailor efficient communication with each connected device. This process also allows a router or beacon to determine a device's proximity to the router or beacon based on its signal strength, which individuals can use to triangulate the device's relative location.
Researchers have successfully used Wi-Fi information from a router to identify people's movements. Because bodies can absorb, disrupt, or otherwise interrupt Wi-Fi signals, researchers can use records of these interruptions to determine different movements. Bluetooth-enabled devices can also record a person's presence relative to another Bluetooth-enabled device; however, the accuracy of this information depends on the devices' signal strength. At times, the signal strength can vary so greatly that it is impractical to accurately determine one's distance or location.
Because these devices have a large wireless range, there may likely be a reasonable expectation of privacy within a Wi-Fi signal range if the range includes an area with an existing reasonable expectation of privacy, such as the bathroom. It is more difficult to argue that one has a reasonable expectation of privacy in a specific Wi-Fi signal range, because this range is not definitive and crosses physical borders. Moreover, because current eavesdropping laws apply to audio recordings, there may not be a default reasonable expectation of privacy in Wi-Fi signal data. In the near future, lawmakers and/or courts may be asked to consider the pervasiveness of data from Wi-Fi-enabled devices in the same vein as cell tower-generated location data.
Are there possible solutions to protect parents and children from home surveillance without consent?
To obtain informed consent, manufacturers could include a common spoken command for all devices that are marketed for home surveillance that could respond to guests. These commands could be either auditory warnings, such as "Stop recording," or mobile phone notifications sent to users when connected to the same Wi-Fi network as the router or same Bluetooth range as the beacon. Manufacturers could also send notices to mobile devices asking for consent from guests by taking advantage of Wi-Fi and Bluetooth signals that are continuously emitting from unrecognized devices. Although guests would have the ability to opt in, this solution would still require manufacturers to collect information about the device and its location prior to obtaining user consent. Manufacturers should understand that information collected for the purpose of obtaining consent should not be retained because this information alone could provide deep insight into the private homes, people, and locations that individuals visit.
As for parents, if home surveillance is present, a fast and feasible solution is to request that you and/or your children meet other individuals in public places, such as parks and restaurants. However, because people cannot have a reasonable expectation of privacy in public, all parties should be aware that undisclosed surveillance could be present, such as outdoor security cameras.
Another option is to ask the homeowner whether or not they have indoor home surveillance cameras and/or smart home audio recording-enabled devices before entering the home. This allows parents to control consent, rather than relying on manufacturers, by allowing parents to ask homeowners to turn these devices off. In communicating privacy choices with informed consent on behalf of yourself and/or your child, you effectively educate the homeowner about how their surveillance devices may affect other people's privacy, and advocate your own expectation of privacy for your children. When it comes to privacy and surveillance, conscious advocacy normalizes consent for the collection of information and increases society's objective reasonable expectation of privacy in the home.
1. See Federal Wiretap Act, 18 U.S.C. § 2511 (2018); California Invasion of Privacy Act, Cal. Penal Code §§ 630-638.55 (2018).
2. See Flanagan v. Flanagan, 27 Cal. 4th 766, 774 (2002) ("So construed, the [California Invasion of Privacy Act] includes within the statutory protection any conversation under circumstances showing that a party desires it not to be overheard or recorded [, . . . ] then excludes a conversation under circumstances where the party reasonably believes it will be overheard or recorded.").