"The shackles are off," said Hugh Handeyside, a staff attorney with the ACLU's National Security Project. "We see individual officers and perhaps supervisors as well pushing those limits, exceeding their authority and violating people's rights."
And multiple sources told NBC News that law enforcement and the Intelligence Community are exploiting a loophole to collect intelligence.
Under the Fourth Amendment, law enforcement needs at least reasonable suspicion if they want to search people or their possessions within the United States. But not at border crossings, and not at airport terminals.
"The Fourth Amendment, even for U.S. citizens, doesn't apply at the border," said Callahan. "That's under case law that goes back 150 years."
Customs and Border officers can search travelers without any level of suspicion. They have the legal authority to go through any object crossing the border within 100 miles, including smartphones and laptops. They have the right to take devices away from travelers for five days without providing justification. In the absence of probable cause, however, they have to give the devices back.
CBP also searches people on behalf of other federal law enforcement agencies, sending its findings back to partners in the DEA, FBI, Treasury and the National Counterterrorism Center, among others.
Callahan thinks that CBP's spike in searches means it is exploiting the loophole "in order to get information they otherwise might hot have been able to."
On January 31, an engineer from NASA's Jet Propulsion Laboratory was pulled into additional screening upon his return to the U.S. after a two-week vacation in Chile. Despite being cleared by the Global Entry program, Sidd Bikkannavar received an "X" on his customs form. He is not Muslim, and he is not from any of the seven countries named in President Trump'soriginal "travel ban" executive order. Half his family comes from India but he was born and raised in California.
Bikkannavar was brought into a closed room and told to hand over his phone and passcode. He paid particular notice to the form CBP handed him which explained it had the right to copy the contents of the phone, and that the penalty for refusal was "detention."
"I didn't know if that meant detention of the phone or me and I didn't want to find out," said Bikkannavar. He tried to refuse but the officer repeatedly demanded the PIN. Eventually he acquiesced.
"Once they had that, they had everything," Bikkannavar said. That access allowed CBP officers to review the backend of his social media accounts, work emails, call and text history, photos and other apps. He had expected security might physically search any travelers for potential weapons but accessing his digital data felt different. "Your whole digital life is on your phone."
The officers disappeared with his phone and PIN. They returned 30 minutes later and let him go home.
CBP also regularly searches people leaving the country.
On February 9, Haisam Elsharkawi was stopped by security while trying to board his flight out of Los Angeles International Airport. He said that six Customs officers told him he was randomly selected. They demanded access to his phone and when he refused, Elsharkawi said they handcuffed him, locked him in the airport's lower level and asked questions including how he became a citizen. Elsharkawi thought he knew his rights and demanded access to legal counsel.
"They said if I need a lawyer, then I must be guilty of something," said Elsharkawi, and Egyptian-born Muslim and naturalized U.S. citizen. After four hours of questioning in detention, he unlocked his smartphone and, after a search, was eventually released. Elsharkawi said he intends to sue the Department of Homeland Security.
The current policy has not been updated since 2009. Jayson Ahern, who served in CBP under both Bush and Obama, signed off on the current policy. He said the electronic searches are supposed to be based on specific, articulable facts that raise security concerns. They are not meant to be random or routine or applied liberally to border crossers. "That's reckless and that's how you would lose the authority, never mind the policy."
The Customs & Border Patrol policy manual says that electronic devices fall under the same extended search doctrine that allows them to scan bags in the typical security line.
"As the threat landscape changes, so does CBP," a spokesperson told NBC News.
Since the policy was written in 2009, legal advocates argue, several court cases have set new precedents that could make some CBP electronic searches illegal.
Several former DHS officials pointed to a 2014 Supreme Court ruling in Riley v California that determined law enforcement needed a warrant to search electronic devices when a person is being arrested. The court ruled unanimously, and Chief Justice John Roberts wrote the opinion.
"Modern cellphones are not just another technological convenience. With all they contain and all they may reveal, they hold for many Americans 'the privacies of life,'" wrote Roberts. "The fact that technology now allows an individual to carry such information in his hand does not make the information any less worthy of the protection for which the Founders fought."
Because that case happened outside of the border context, however, CBP lawyers have repeatedly asserted in court that the ruling does not apply to border searches.
For now a Department of Justice internal bulletin has instructed that, unless border officers have a search warrant, they need to take protective measures to limit intrusions, and make sure their searches do not access travelers' digital cloud data. The 'cloud' is all content not directly stored on a device, which includes anything requiring internet to access, like email and social media.
Former DHS officials who helped design and implement the search policy said they agreed with that guidance.
Wyden Pushes to Change the Policy
On February 20, Sen. Wyden wrote to DHS Secretary John Kelly demanding details on electronic search-practices used on U.S. citizens, and referred to the extent of electronic searches as government "overreach". As of publication, he had yet to receive an answer.
Now Sen. Wyden says that as early as next week he plans to propose a bill that would require CBP to at least obtain a warrant to search electronics of U.S. citizens, and explicitly prevent officers from demanding passwords.
"The old rules ... seem to be on the way to being tossed in the garbage can," said Senator Wyden. "I think it is time to update the law."
Asked about the Shibly case, a CBP spokesperson declined to comment, but said the Homeland Security Inspector General is investigating. The spokesperson said the agency can't comment on open investigations or particular travelers, but that it "firmly denies any accusations of racially profiling travelers based on nationality, race, sex, religion, faith, or spiritual beliefs."
Explaining the sharp increase in electronic searches, a department spokesperson told NBC News: "CBP has adapted and adjusted to align with current threat information, which is based on intelligence." A spokesman also noted that searches of citizens leaving the U.S. protect against the theft of American industrial and national security secrets.
After repeated communications, the Department of Homeland Security never responded to NBC News' requests for comments. Nonetheless, the Homeland Security Inspector General is currently auditing CBP's electronic search practices.
The Council on American-Islamic Relations (CAIR) also has filed two dozen complaints against CBP this year for issues profiling Muslim Americans. CAIR and the Electronic Frontier Foundation are considering legal action against the government for what they consider to be unconstitutional searches at the border.