FBI Confirms Buying Citizens' Location Data Without Warrants
Washington, Wednesday, 18 March 2026.
FBI Director Kash Patel confirmed the agency bypasses warrants by purchasing Americans’ commercial location data. This controversial surveillance tactic has triggered bipartisan legislative pushes to protect consumer privacy.
The Loophole in the Fourth Amendment
During a congressional hearing on Wednesday, March 18, 2026, Federal Bureau of Investigation (FBI) Director Kash Patel provided the first official confirmation since 2023 that the agency is actively purchasing the personal data and location histories of American citizens [1][2]. This practice represents a significant operational shift from the stance of former FBI Director Christopher Wray, who previously indicated to senators that the agency had bought access to such data but was not actively purchasing it [1]. The legal foundation for this ongoing data collection hinges on a modern technological loophole. In 2018—8 years ago—the U.S. Supreme Court’s landmark Carpenter decision ruled that law enforcement agencies must obtain a warrant to acquire historical cell-site location records directly from telecommunications providers [2][3]. However, by purchasing this information directly from third-party data brokers, the FBI bypasses the traditional judicial warrant process, effectively utilizing a commercial workaround to gather intelligence for federal investigations [1][2][3].
Legal Gray Areas and Agency Defenses
Director Patel defended the agency’s actions as both lawful and essential for national security. Testifying before lawmakers, Patel stated, “We do purchase commercially available information that is consistent with the Constitution and the laws under the Electronic Communications Privacy Act — and it has led to some valuable intelligence for us” [1][4]. The FBI maintains that it does not require a warrant to utilize purchased location data, a legal theory that has yet to be rigorously tested in federal court [1]. Because the courts have not definitively ruled on whether government purchases of commercial location data violate the Constitution, legal experts note that the FBI can currently acquire as much data as its budget allows while asserting its actions are entirely legal [4].
Bipartisan Push for Legislative Reform
The revelation has catalyzed immediate, bipartisan backlash from lawmakers concerned about privacy rights. Senator Ron Wyden (D-Ore.) sharply criticized the practice, calling it an “outrageous end run around the Fourth Amendment” and emphasizing the unique dangers posed when artificial intelligence is used to sift through massive troves of private data [2][4]. On his social media platforms, Wyden stated that Patel’s refusal to explicitly deny the purchasing of Americans’ location data highlights exactly why immediate privacy reforms are necessary [5]. In response, a bipartisan coalition introduced the Government Surveillance Reform Act in mid-March 2026 [alert! ‘Sources provide conflicting dates for the bill introduction: March 10, March 13, and March 17.’][1][2][3]. The bicameral legislation, spearheaded by Senators Wyden and Mike Lee (R-Utah) alongside Representatives Zoe Lofgren (D-Calif.) and Warren Davidson (R-Ohio), seeks to legally close this commercial loophole [2].
The Future of Corporate Data Compliance
For the technology sector and the broader data brokerage industry, the FBI’s admission signals a looming paradigm shift. The Office of the Director of National Intelligence has already warned that commercially available information can be highly revealing and easily reidentified, stripping away the illusion of consumer anonymity [3]. Furthermore, regulatory bodies are beginning to crack down on the private sector’s role in this ecosystem; the Federal Trade Commission (FTC) recently sued data broker Kochava for allegedly selling precise geolocation data tied to sensitive physical locations [3]. As legislative scrutiny intensifies, tech executives must prepare for a future where corporate data monetization practices are tightly regulated, fundamentally altering how consumer privacy is managed in the digital age [GPT].