Commonwealth of Virginia v. Baust

Citation and Court

No. CR14-1439 (Va. Circuit Ct., City of Virginia Beach, Oct. 28, 2014)

Facts

David Baust was charged with strangling his girlfriend, and police believed his bedroom security camera may have recorded the assault. The Commonwealth sought to compel Baust to produce either his passcode to unlock his phone (which would decrypt the recording) or his fingerprint to biometrically unlock the device.

Issue

Whether the Fifth Amendment permits the government to compel a defendant to provide (1) a passcode to unlock an encrypted smartphone, or (2) a fingerprint to biometrically unlock the same device.

Holding

The defendant may not be compelled to provide his passcode because doing so is a testimonial act protected by the Fifth Amendment, but the defendant may be compelled to provide his fingerprint to unlock the device because a fingerprint is a non-testimonial physical act.

Rule / Doctrine

The Fifth Amendment protects against compelled testimonial self-incrimination. Providing a passcode is testimonial because it requires the defendant to disclose the contents of his mind — knowledge of the password. By contrast, providing a fingerprint is a non-testimonial physical act, like providing a handwriting exemplar or DNA sample, because it does not require the defendant to convey any knowledge or belief. The distinction tracks the “foregone conclusion” doctrine and the testimonial/non-testimonial divide from Fisher v. United States and United States v. Doe.

Significance

Commonwealth v. Baust is among the first judicial opinions to squarely address the fingerprint-vs.-passcode distinction in the context of smartphone encryption, and it is widely cited in the growing body of case law on compelled decryption. It illustrates how the act-of-production doctrine applies in the digital age and the doctrinal tension between biometric access and password-protected encryption.

Courses