Device Seizure at the Port of Entry
At 2140 hours, you are the HSI duty agent at a major international airport. CBP secondary inspection refers a 34-year-old lawful permanent resident returning from Manila. During a baggage exam, a CBP officer opens the traveler's unlocked laptop and sees a thumbnail image that appears to depict a minor in a sexualized pose. The traveler says the laptop is his, refuses to consent to a forensic search, and asks for a lawyer. CBP has held him about 70 minutes. Your supervisor is unreachable, and the AUSA on call says she can review a warrant affidavit but needs a clear factual basis. The laptop and two phones are in CBP custody. The traveler has no prior record, a U.S.-citizen spouse, and a return ticket to a job in 36 hours. You have no forensic examiner on site until 0800.
1. What legal authority, if any, supports retaining and searching the devices, and what immediate steps do you take?
Read the worked answer
The border search exception permits routine searches at a port of entry without a warrant or probable cause, but the analysis changes as the search becomes more intrusive. A forensic examination of a laptop or phone is far more intrusive than a cursory look at an unlocked screen. The observed thumbnail supplies reasonable suspicion that the device may contain evidence of a child exploitation offense, but it does not automatically authorize an unlimited forensic examination at 2140 with no examiner and no legal review.
I would seize the laptop and both phones, preserve them according to agency policy, complete a property receipt, and document exactly who saw what, when, on which device, and what the traveler said. I would not access any further content. I would give the AUSA the specific facts needed for a warrant affidavit and ask whether current policy and circuit law permit a border-search forensic examination or require a warrant. I would request a forensic examiner for 0800 and note that the devices were not searched after the initial observation.
2. How do you handle the traveler's request for counsel and the 36-hour job deadline?
Read the worked answer
A request for counsel does not by itself stop a border search, but it limits custodial interrogation. I would stop questioning him about the images and would not try to elicit statements by casually chatting about the laptop. If he is later placed in custody and questioned, I would honor the request for counsel and not initiate further interrogation without counsel present.
The 36-hour job deadline is a humanitarian and practical factor, not a legal limit on detention. Detention must still be reasonable. I would document the time CBP first held him, the time HSI was notified, and every action taken. If probable cause develops, I would arrest and present him promptly; if it does not, I would release him with the devices seized and a property receipt, and tell him how to contact the office. I would not promise release by 0800 simply because he has a job.
3. What documentation and notifications are required before 0800?
Read the worked answer
Before 0800, I would obtain a written statement from the CBP officer describing the thumbnail, the device, and the time observed; document the traveler's statements and his request for counsel; prepare a property receipt and chain-of-custody record for all three devices; and complete an incident report with a timeline. I would notify my supervisor as soon as reachable, the AUSA, the forensic examiner scheduled for 0800, and any HSI unit responsible for child exploitation investigations.
I would also preserve any relevant airport CCTV or secondary inspection records before they are overwritten, and I would make sure no one powers on or examines the devices except as authorized. The record should distinguish between what was actually seen and what is merely suspected, so the affidavit is accurate.