Would I be risking being guilty of destruction of evidence any time I clear data off my computer? where are the limits? I've heard it claimed everyone is guilty of a crime, whether or not they realize it. As such my computer likely possesses all kind of evidence against me, even if it's mostly trivial things. Maybe I have messages with a friend where I admitted to speeding to get somewhere when I was late, or I watched something copyrighted online when I shouldn't have (or possibly didn't even realize I was circumventing copyright when I watched it), or my hypothetical child just hit puberty and waited until I went to bed to visit some of those sites a child in the throes of puberty is likely very interested in and is not legally allowed to visit. The point is that likely there is some kind of evidence of crime on my, or anyone's, hard drive at some point in time, I may not even realize that the data was evidence or even that my actions were technically a crime. That means there is a non-trivial chance any time I choose to clean up my computer, delete unused data, clear my browser history, or otherwise remove what I consider to be unimportant data I may actually be destroying evidence. So when can I delete stuff from my computer without risking a crime? To give a few examples of increasingly questionable theoretical actions: Assuming there was some sort of potential evidence I was unaware of is there ever a point I could have deleted it without it being criminal? Do I have to be aware the data may be evidence first? If my hypothetical child clears the browser history to keep me from discovering the sort of sites the visited while I was asleep are they guilty since they knew they were destroying evidence, even though their intent was not to prevent criminal prosecution but instead to avoid revocation of internet access by me? What if I know my friend visited a website that is illegal, say one for viewing copyrighted shows illegally, and I've chosen to not report him. Am I now never allowed to delete my browser history or clear its cache ever again since that would destroy something I know is evidence of my friend's crime? What if my computer has major software issues and the only viable solution is delete everything and reinstall from scratch; am I stuck with a worthless broken computer because reinstalling things from scratch would delete evidence of a crime? I'm interested in the USA perspective. My home state is MD, but I would be willing to accept answers referencing any states' laws if answerer is more familiar with their own. I'm just trying to figure out where the USA generally draws the line between intentional destruction of evidence and every day digital activities.
The relevant Maryland statute is MD. Criminal Law Code Ann. § 9-307 (2021), subsection (a): A person may not destroy, alter, conceal, or remove physical evidence that the person believes may be used in a pending or future official proceeding with the intent to impair the verity or availability of the physical evidence in the official proceeding. Note &quot;that the person believes&quot; and &quot;with the intent to.&quot; If you have no reason to think it might be necessary in an official proceeding, you aren't violating this section. If you delete the data unintentionally or for some other reason, then you also probably are not violating the section. (I say &quot;probably&quot; because I'm sure there's some sort of provision for negligence or willful disregard for the evidential value of something you should know has evidential value.) As a practical matter, no copyright lawsuit or criminal trial (and criminal trials over copyright infringement are very rare) is going to depend on the browser history of the defendant's friend. What if my computer has major software issues and the only viable solution is delete everything and reinstall from scratch; am I stuck with a worthless broken computer because reinstalling things from scratch would delete evidence of a crime? If you know of evidence on the hard drive that would be destroyed, you can copy it somewhere else before deleting and reinstalling. Federal law is similar: it requires knowledge and intent. 18 USC 1519: Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record, document, or tangible object with the intent to impede, obstruct, or influence the investigation or proper administration of any matter within the jurisdiction of any department or agency of the United States or any case filed under title 11, or in relation to or contemplation of any such matter or case, shall be fined under this title, imprisoned not more than 20 years, or both.
Unless there is enough evidence to convict one or more of the suspects, none will be convicted. In general the argument: We know it must be one of you, but we don't know whch, so we find you all guilty. is not allowed in any non-dictatorial jurisdiction. Just how much evidence is needed for a conviction varies by jurisdiction in theory, and by judge or jury in practice. Also, it would be possible to charge several of the residents with having acted jointly in the crime, but there would still need to be sufficient evidence against each defendant to obtain a conviction.
The purpose of the button is not to put liability on you, but to shield the website from liability. The website does not want you looking up information about drugs, deciding that a particular drug is right for you, causing yourself harm and then blaming the website. You may have acted unlawfully but you would have no liability because no injury (financial or otherwise) has been caused to the website. Clicking the button is an assertion that one is a medical professional. This is a false statement, so the website could sue you for the tort of deceit, but there is no injury, which is one of the elements of deceit. The website would not even get nominal damages. The button may also constitute a contract. In exchange for access to a website, you warrant that you are a medical professional. You are not, which is a breach of the contract. However, the damages are nil. Conceivably, if you passed the information on to someone else who misused it, there may be some injury to the website, and then you would have to compensate the website for that injury under one or both of the heads of liability described above. In terms of criminal liability, it is rarely an offence to make a false statement to a private body without some other aggravating element. For example, in Australia, it is an offence to make a false statement for financial gain, or to make a false statement to a government official (regardless of whether there is financial gain etc). But simply making a false statement is not by itself a crime. You may breach a computer law. The United States Computer Fraud and Abuse Act is pretty broad. Obtaining information from a computer without authority is an offence: 18 USC s 1030(a)(2)(C). The only exception is if the web server is in the same state as you and somehow nobody from outside the state can access it: see definition of 'protected computer' in 18 USC s 1030(e)(2).
The courts are never in such a broad position to rule on generic wikileaks evidence. Theoretically, a court could have to rule on the admissibility of a specific document, so in that sense the matter is always dealt with on a case by case basis. There is a &quot;document&quot; that purports to be somehow from Amazon, reporting that a certain grey building with no architectural charm in a nearby village is an Amazon data center. Legally speaking, nobody cares, but let's say that there is some legal reason why it matters whether the claim is true (I stipulate that the document passes the relevance test). The publicly-posted document has no probative value, because anyone can create a file containing the word &quot;Amazon&quot;. It looks like a cleaned-up OCR scan of a printout (hence the complete failure at non-English characters), and lacks any clear indicia of Amazon origin. Thus the party would have to establish that the document is authentic, and there must be a provable chain of custody from the author to the submitted document. Federal Rules of Evidence cover questions of authenticity and contents of admissible evidence in art IX, X. Nothing in rule 901 suggests that such a document would be admissible. Very theoretically, if they happened to also have the original paper document, there might be sufficient forensic evidence to prove that the document is traceably come from the purported source. The wikileaks document per se would still be inadmissible, but the (more) original document could be admissible.
Think of a website that has gives no option for the users to delete what they have posted -but still the users can delete their account completely. That's easy - this is exactly how all StackExchange sites (including this one) work :-). See for example: How does deleting work? on meta.SE. Is it against the right to erasure mentioned here as a part of GDPR? No, it is not (otherwise StackExchange would be in rather big trouble). The "right to be forgotten" is subject to limitations. Most importantly, it only applies to personal data. Personal data is defined as (GDPR, art.4): any information relating to an identified or identifiable natural person (‘data subject’) If what you posted contains no personal information about you, it is not "relating to" you. The details are complicated (as usual, see e.g. The GDPR: What exactly is personal data?), but "personal data" is things about you (your name, your address, your sexual history, maybe even your IP address). On the other hand, if someone asks how to solve a programming problem, and you write an answer explaining what API to call, that answer is not personal data. In addition to that, even personal data may be retained if the data controller has a need to retain that information. This is also covered in article 4. For example, the controller may retain information "for the establishment, exercise or defence of legal claims" - otherwise you could buy something online without paying, and then ask the seller to forget about your purchases so they cannot collect the outstanding payment. So, in summary: A website will need to allow users to delete or hide personal data that they posted - such as their user profile information, or personal information in their posts. That does not mean they are allowed to delete entire posts - it is enough if personal information is redacted or anonymized. The website may be allowed to retain that information (hidden) if they can show legitimate interest - for example billing information, or posts that are the subject of a lawsuit. The StackExchange network, for example, covers this by allowing users to: disassociate posts from their account delete their account entirely (thus effectively disassociating all posts from personal information) asking a moderator for redaction of personal data
Per your comment responses, Maryland is a two party consent state which means that the other party must consent to your recording IF there is a reasonable expectation of privacy. In one's own home is generally considered a place where one has this expectation and thus these recordings are problematic. Depending what you intend to do with them, I would first contact a lawyer to get legal advice as to how to handle this before you publish them. If you are looking to file a criminal complaint (and assuming statute of limitations hasn't run out) the prosecutor may be willing to not prosecute you for violating 2 party consent law because you were trying to gather evidence of someone else's crime, but it's not a guarantee (though this will look bad on the prosecutor come election season). If you are suing your parents it might not be admissible as evidence but I can't specifically say that either. If you are using it to show other people in the same situation what to look for it's probably best to find another set of recordings as these ones carry a lot of legal issues that will come back to bite you if you release them. Finally, while not legal, your parents may not want to pursue the criminal recording side of this matter if they are aware of the &quot;Barbra Streisand effect,&quot; wherein actions taken to ensure something isn't viewed by the public cause that something to gain wider viewership than if they never bothered trying to censor it.
No. Art. 17(1) GDPR lists conditions when erasure can be requested. None of the listed grounds would apply in this case. However, you might have to explain why you process the data (for moderation purposes as you explained above), and why that is lawfully. In particular Art. 5 and Art. 6 need to be taken into account. In your case, processing will be based on Art. 6(1)(f): (f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. Even if the data subject would be a 9 year old child, the legitimate interests of you and other forum users outweigh the objection of the data subject. Based on Art. 5, there will be a moment when the data has to be deleted. For example 1 year after the last login attempt.
If there's a reason to believe that your machine has data that would be relevant to a lawsuit, then yes, it is subject to inspection under Fed. R. Civ. P. 34: A party may serve on any other party a request ... to produce and permit the requesting party or its representative to inspect, copy, test, or sample the following items in the responding party's possession, custody, or control: ... any designated documents or electronically stored information—including writings, drawings, graphs, charts, photographs, sound recordings, images, and other data or data compilations—stored in any medium from which information can be obtained either directly or, if necessary, after translation by the responding party into a reasonably usable form. So if there's a lawsuit where there becomes a question about what you downloaded from the network, then it's quite plausible that your device could be demanded or subpoenaed. But that's not the same thing as &quot;forfeiting&quot; your device. The normal procedure in such a case would be that the agency's lawyers would notify you of the demand, and you would take your device to an ESI expert, who would make a digital image of the device's hard drive. The parties would then fight about what portions of that image they are allowed to access, but you would have your device again while that was going on.