Excluding cloud data obtained under an apartment search warrant
During a drug investigation in Shymkent, an investigator obtained a court warrant to search suspect T.'s apartment for 'narcotic substances and related items.' While searching, officers opened T.'s laptop and, using saved credentials, accessed his personal cloud account. They found a folder with photos of pills and chat messages about sales. No separate warrant authorized access to the cloud account. T. has been in pre-trial detention for 70 days on suspicion of a particularly serious crime. The prosecutor seeks extension to 90 days, citing the need to examine the cloud data and identify buyers. T.'s lawyer moves to exclude the cloud evidence as obtained in violation of the right to privacy and invokes the poison-fruit doctrine. The judge must rule on admissibility and on the extension. The case file shows that T. did not consent and was not present during the cloud access; the laptop was not password-protected at the moment of search but the cloud account required a password that was saved.
1. Is the cloud data admissible? Apply the scope of the search warrant and the right to privacy.
Read the worked answer
The cloud data should be excluded. The warrant authorized a search of the apartment for narcotic substances and related items. That warrant covers physical spaces and items within the apartment, but it does not automatically cover a remote cloud account, which may be hosted outside the apartment and contain a much broader set of private communications and files. Access to cloud content is a separate intrusion into privacy and requires separate legal authority, typically a court sanction based on specific grounds. The fact that the laptop was open and the password was saved does not create consent; T. was not present and did not authorize access. The officers used saved credentials to enter a protected account, which is functionally a search of digital data, not a plain-view observation. Under the Criminal Procedure Code, evidence obtained in violation of the right to privacy is inadmissible. The poison-fruit doctrine supports exclusion because the violation is not a technical formality; it concerns the scope of judicial authorization. The chat messages and photos should be excluded, and any derivative evidence-such as buyer identities learned only from those messages-should be treated as tainted unless the prosecution proves an independent source.
2. Should the judge grant the extension of pre-trial detention from 70 to 90 days? Consider the excluded evidence and the statutory grounds.
Read the worked answer
The extension should not be granted on the current record. Detention is an exceptional measure, and extension requires specific grounds: risk of absconding, reoffending, interfering with witnesses, or the complexity of the case. The prosecutor's main reason is the need to examine cloud data and identify buyers. If that evidence is excluded, the investigation's need for more time is partly self-inflicted: the prosecution created the defect by obtaining the data without authorization. A court should not reward an unlawful search with additional detention time. The judge should also assess whether less restrictive measures-such as electronic monitoring, bail, or travel restrictions-would suffice. The fact that T. faces a particularly serious charge is relevant but not sufficient by itself. The judge should require the prosecutor to show concrete investigative steps that can be completed within 20 days and that do not depend on the excluded evidence. If the only plan is to analyze tainted data, extension should be refused. The judge should also consider the length already served and the speed of the investigation.
3. How should the judge structure the ruling to avoid the appearance of condoning the unlawful search while still protecting the integrity of the investigation?
Read the worked answer
The judge should separate the admissibility ruling from the detention ruling, but explain their connection. First, the judge should issue a reasoned ruling excluding the cloud evidence, identifying the warrant's scope, the absence of consent, and the privacy interest in cloud communications. The ruling should state that the exclusion is not a finding that T. is innocent, but a remedy for a procedural violation. Second, the judge should address the extension in a separate ruling or a distinct part of the same decision. The judge should list the statutory grounds, the prosecutor's evidence, and the alternatives to detention. If the extension is refused, the judge should set conditions for release or a less restrictive measure. The reasoning should not disclose the excluded evidence in detail; it should describe it generically to avoid compounding the privacy violation. The judge should also note that the prosecution may seek a new warrant for the cloud data if it can show specific, articulable grounds. This preserves the investigation's ability to proceed lawfully while making clear that the prior conduct was unacceptable.