Robbins v. Lower Merion School District: Difference between revisions

Blake J. Robbins v. Lower Merion School District is a federal class action lawsuit (pending certification), brought on behalf of students of the Lower Merion School District (LMSD) in Pennsylvania.^[1]

The suit alleges that, in what has been termed the "WebcamGate" scandal, the school secretly spied on the students while they were in the privacy of their own homes.^[2][3] School authorities allegedly surreptitiously activated webcams remotely, which were installed in school-issued laptops that the students were using at home.^[4] After the suit was brought, the district revealed that it had activated webcams that secretly snapped more than 58,000 images.^[5] The suit charges that the school district therefore infringed on the privacy rights of its students.^[6][7][4]

The lawsuit was filed after 15-year-old high school sophomore Blake Robbins was disciplined at school for his behavior in his home.^[4][8] The evidence for the discipline was a photograph secretly taken by the school via the webcam on his school-issued laptop. The laptops were used by the school to collect pictures of students in their own homes, chat logs, and records of the websites they visited, and the information was sent to servers at the school.^[9] In a widely published photograph, Robbins had been photographed in his bed.^[10] The Federal Bureau of Investigations (FBI), U.S. Attorney's Office, and Montgomery County District Attorney all initiated investigations of the matter, a U.S. Senate subcommittee held hearings on the issues it raised, parents, media, and academicians criticized the school, and it was cited as a cautionary example of how modern technology can be used to infringe on personal privacy.^[11]

In July 2010, a second Lower Merion graduate filed a similar second suit, regarding 1,000+ images that were surreptitiously taken by the school via his computer, including shots of him in his bedroom. The district deactivated its surveillance of the student in February 2010, after the first lawsuit was filed, and informed the student of the existence of the photographs five months later.^[12]

The lawsuit Robbins v. Lower Merion School District was filed on February 11, 2010, in the U.S. District Court for the Eastern District of Pennsylvania, by plaintiffs' lead lawyer, Mark S. Haltzman of Lamm Rubenstone LLC.^[13] The complaint was filed on behalf of Blake Robbins, and other high school students of the school district who were issued computers, by Robbins' parents.^[13][14]

The complaint alleges that school-issued MacBooks with built-in iSight webcams were used by school staff to invade the students' privacy by remotely activating the laptop cameras covertly while the students were off school property.^[13][14] The plaintiffs charged that they had not consented to the spying.^[13] The defendants are the District, its nine-member Board of Directors, and its Superintendent (Christopher McGinley).^[15] Henry E. Hockeimer, Jr., of Ballard Spahr is lead counsel for the defendants.

At the beginning of the 2009–10 school year, LMSD (in Ardmore, Pennsylvania, a suburb of Philadelphia—Lower Merion in the United States) issued Apple MacBook laptops to all of its 2,306 high school students.^[4][12][16] As part of the district's One-to-One initiative, a program piloted in September 2008 at Harriton High School in Rosemont, Pennsylvania, and expanded in September 2009 at Lower Merion High School in Ardmore, each student was provided his or her individual laptop computer for both in-school and at-home use.^[1][17] The program cost $2.6 million, less than a third of which was covered by grants.^[18][16]

The school loaded each student's computer with LANrev's remote activation and tracking software. This included the now-discontinued "TheftTrack".^{[19][20][12][21]} While TheftTrack was not enabled by default on the software, the program allowed the school to elect to activate TheftTrack, and to choose which of the TheftTrack surveillance options the school wanted to activate.^[22]

TheftTrack allowed district employees to secretly and remotely activate a tiny camera webcam embedded in the student's laptop, above the laptop's screen.^{[19][20][12][21]} That allowed school officials to secretly take photos through the student's laptop's built-in webcam, of whatever was in front of it and in its line of sight, and send the photos to the school's server.^[12][22] The system snapped and sent a new photo every 15 minutes when the laptop was on, and TheftTrack was activated, though school employees could could adjust the interval to as low as one-minute intervals.^[23][24][22] The LANrev software disabled the webcams for all other uses (students were unable to use PhotoBooth or video chat), so most students mistakenly believed that their webcams did not work at all.^[25] After sending the photo to the school's server, the laptop was programmed to erase the "sent" file created on the laptop, so that there would not be any trace by which students might realize that they were being watched and photographed.^[26] It is not clear who in the Lower Merion schools had access to the webcam photos.^[26]

In addition to the webcam photos, TheftTrack allowed the school officials to take screenshots, pictures showing a copy of an image of whatever is on the laptop's screen, and send them to the school's server as well.^[12][22] Furthermore, a locating device woud record the laptop's Internet (IP) address, which could allow district technicians to pinpoint the location of the laptop.^[24] The photos, screenshots, and IP addresses weres stored on the school's server until they were purged by a school employee.^[16]

In addition to webcam surveillance, LANrev allowed school officials to take snapshots of instant messages, web browsing, music playlists, and written compositions, all of which can still be monitored and archived via screen capture.^[27][12] Further, LANrev could be programmed to capture webcam pictures and screen captures automatically, and store them on the hard disk for later retrieval in areas of the computer's memory that were not accessible by the student, and which could be deleted remotely.^[28]

Fred Cate, Director of the Center for Applied Cybersecurity Research at Indiana University, said: "This is the classic definition of spyware. It's as bad as you can imagine."^[29] After the suit was filed, Eileen Lake of Wynnewood, whose three children attend district schools, said: "If there's a concern that laptops are misplaced or stolen, they should install a chip to relocate them instead. There shouldn't be a reason to use webcams for that purpose."^[30] Marc Rotenberg, Georgetown University Law School information privacy professor and President and Executive Director of the Electronic Privacy Information Center (EPIC) in Washington, D.C., said: "There are less intrusive ways to track stolen laptops, no question about it.^[31]

Carol Cafiero (district Information Systems Coordinator, and supervisor of 16 technicians and administrative assistants) wrote to her boss Virginia DiMedio (district Director of Technology for a number of years until June 2009, and a member of the district Superintendent’s five-person Cabinet): "[District Network Technician] Mike [Perbix] loves it, and I agree it is a great product."^[26][32] Perbix raved about the spying capabilities of the LANrev TheftTrack software in a May 2008 LANrev promotional webcast, saying he "really, really" liked it.^{[33][29][16][34]}

DiMedio considered Perbix and Cafiero's recommendation that the district purchase the software, including a memo in which Cafiero noted that: "we can mark [a student's laptop as] stolen on the LANrev server, and then the laptop will take screen shots and pictures of the user with the built-in camera and transmit that information back to our server."^[16] DiMedio then approved the purchase and installation of the $156,000 surveillance software.^[35][26]

The district intentionally did not publicize the existence of the technology.^[36][16] The district did not inform students or their parents, in any of their communications with them or guidelines about the laptops, of the fact that the laptops gave the district the ability to secretly snap photos of whatever was in the line of sight of the student-issued laptop webcams and to take screenshots, or that the district would avail itself of those capabilities.^[16] The district also did not adopt policies regarding the use of TheftTrack by district employees.^[16] DiMedio said “the district did not widely publicize the feature ‘for obvious reasons.”^[34] She reportedly declined to tell students about TheftTrack because doing so could “defeat its purpose.”^[34]

On August 11, 2008, weeks before the district handed out the laptops to students, a Harriton High School student interning in the IT department sent an email to DiMedio with the subject line “1:1 concern (Important)”. He said that he had recently learned of the district's purchase of LANrev, and had researched the laptops' software and made the "somewhat startling" discovery that it would allow employees to monitor students' laptops remotely.^[35][37][16] He wrote:

I would not find this a problem if students were informed that this was possible, for privacy’s sake. However, what was appalling was that not only did the District not inform parents and students of this fact ... [W]hile you may feel that you can say that this access will not be abused, I feel that this is not enough to ensure the integrity of students, and that even if it was no one would have any way of knowing (especially end users). I feel it would be best that students and parents are informed of this before they receive their computers.... I could see not informing parents and students of this fact causing a huge uproar.^[16]

DiMedio responded:

there is absolutely no way that the District Tech people are going to monitor students at home.... If we were going to monitor student use at home, we would have stated so. Think about it—why would we do that? There is no purpose. We are not a police state.... There is no way that I would approve or advocate for the monitoring of students at home.

I suggest you take a breath and relax.^[35][37][16]

DiMedio then forwarded the e-mails to District Network Technician Perbix, who suggested a further response to the student intern. With DiMedio’s approval, Perbix e-mailed the student intern, also dismissing the student's concern:

this feature is only used to track equipment ... reported as stolen or missing. The only information that this feature captures is IP and DNS info from the network it is connected to, and occasional screen/camera shots of the computer being operated.... The tracking feature does NOT do things like record web browsing, chatting, email, or any other type of “spyware” features that you might be thinking of.

Being a student intern with us means that you are privy to some things that others rarely get to see, and some things that might even work against us. I assure you that we in no way shape or form employ any Big Brother tactics ESPECIALLY with computers off the network.^[38][37][16]

Two members of the Harriton High School student council twice confronted their principal (Mr. Kline) privately, more than a year prior to the suit, concerned "that the school could covertly photograph students using the laptops' cameras."^[26][1] Students were particularly bothered by the momentary flickering of their webcams' green activation light, which several students reported would periodically turn on when the camera wasn't in use, signaling that the built-in webcam had been turned on.^[18][22][2] Student Katerina Perech said: "It was just really creepy".^[18] Kline says that he said it was true, and the students told him they were worried about privacy rights, and asked whether the school system read saved files on their computers, and that students should be notified, but nothing happened.^[39]

School officials reportedly denied that it was anything other than a technical glitch, and offered to have the laptops examined if students were concerned. In neither the promotion of the laptop program nor the individual contracts that students signed did the school make mention of the computer's remote surveillance activation features.^[19]

Perbix said that when "you're controlling someone's machine, you don't want them to know what you're doing."^{[40][26][39][39][41]} He had previously praised TheftTrack in a YouTube video he produced, saying: "It's ... just a fantastic feature ... especially when you're in a school environment".^[42] Perbix maintains a personal blog in which he discusses computer oversight techniques, including how to cloak remote monitoring so it is invisible to the user.^[43]

While District officials knew Robbins had his laptop, and had taken it home, on October 20, 2009, they decided to start capturing webcam photos and screenshots from his school-issued MacBook by activating its covert camera.^[44] Two hours later, District Network Technician Perbix e-mailed Building-Level Technician Kyle O'Brien to let him know that TheftTrack was running on Robbins' computer.^[44] Perbix wrote: "Now currently online at home."^[44] Over the next 15 days, the District captured at least 210 webcam photos and 218 screenshots, including photos of Robbins sleeping and of him partially undressed, and of his father, inside their home.^[44] The district also sent images of Robbins' instant messages and video chats with friends to its servers.^[44]

On October 26, Perbix brought to the attention of his boss, District director of information services George Frazier, one of the screenshots of Robbins, taken at his home.^[45] In early November, a number of Harriton High administrators incuding Steve Klein, the school's principal, met to discuss the images.^[45]

Robbins, a sophomore at Harriton High School, was called into his Assistant Principal Lindy Matsko's office on November 11, 2009, shown a photograph taken with the webcam embedded in his school-issued laptop in his bedroom in his Penn Valley home as what the Assistant Principal thought was "proof", and disciplined for "improper behavior".^{[4][6][12][8][46][47][48][24]} His parents were contacted and told school officials that they were mistaken, and Blake was not disciplined, but the family decided to sue after a counselor told them that an account of the incident had been placed in Blake's school file.^[49]

Robbins said that Assistant Principal Matsko told him that the district was able at any time to activate the webcam remotely in a student's laptop, and view and capture whatever image was visible without the knowledge or consent of anyone in its line of sight.^[50][51]

The plaintiffs alleged that

many of the images captured and intercepted may consist of images of minors and their parents or friends in compromising or embarrassing positions, incuding ... various stages of dress or undress.^[15]

In a widely published photograph, Robbins was shown sleeping in his bed.^[10] The hundreds of photos taken of the 15-year-old also included him standing shirtless after getting out of the shower, as well as his father and friends.^[23][29] Not included in what was turned over to the family was a week's worth of images that the district says it has not been able to recover.^[29]

The lawsuit claims that the district's use of the webcams violates the Constitution's guarantees of privacy of the students and their families and friends at home, as well as Pennsylvania common law (expectation of privacy) and Section 1983 of the U.S. Civil Rights Act (right to privacy).^[4] It also accused officials of, by spying through "indiscriminate use of an ability to remotely activate the webcams incorporated into each laptop", violating the Fourth Amendment of the U.S. Constitution (right to privacy) and electronic communications laws: the U.S. Electronic Communications Privacy Act (ECPA; relating to intentional intercepts of electronic communications), Computer Fraud and Abuse Act (CFAA; relating to intentional access of a computer that exceeds authorization to obtain information), Stored Communications Act (SCA; relating to unauthorized acquisition of stored electronic communications), and the Pennsylvania Wiretapping and Electronic Surveillance Act (PWESA; relating to intentional intercept of electronic communications).^[4][13][13]

On February 18, 2010, the day the case was made public, the school district posted a reply on its website stating that "The tracking-security feature was limited to taking a still image of the operator and the operator's screen," and that it "has only been used for the limited purpose of locating a lost, stolen, or missing laptop."^[52][22] "[T]his includes tracking down a loaner computer that, against regulations, might be taken off campus."^[53] That same day, the district turned off TheftTrack on tracked laptops, and deleted pictures from LANrev, as discovered by a subsequent forensics review.^[22]

The complaint does not state whether Robbins' laptop had been reported stolen, and district spokesman Doug Young said the district cannot disclose that fact. He said the district never violated its policy of only using the remote-activation software to find missing laptops. "Infer what you want," Young said.^[11]

On February 20, 2010, Haltzman told msnbc Live that the student had been eating "Mike and Ike" candy in front of the laptop assigned to him, in his own home.^[8] The attorney said that the school administrator had accused the student of taking illegal pills, after seeing him eating the candy in a webcam image.^[12] Michael Smerconish, a Philadelphia Inquirer columnist who review the photo, said that it did look the same size and shape as Mike and Ike candy.^[21] Haltzman said that his client's laptop had not been reported stolen or lost. The lawyer raised questions about who is deciding when to activate the webcam, and for what reasons. Henry E. Hockeimer, Jr., and four Ballard Spahr attorneys represent the district.^[54][46]

In a statement to the press on February 24, 2010, Robbins emphasized that the case was about the undisclosed spying capabilities which the district covertly maintained.^[55]

The district denied that the school administrator had ever used a photo taken by a school-issued laptop to discipline a student.^[56] The administrator herself repeated this statement in video distributed to national media on February 24, 2010.^[57]

As of May 2010, the district had not filed an Answer to the plaintiffs' complaint.^[16]

The district later admitted to "serious mistakes" and "misguided actions." It also acknowledged that its monitoring system was flawed and was "not handled appropriately". The district's superintendent admitted that students and parents were not informed of the secret spying feature, and the district said that "notice should have been given" to the students and parents of the feature, and that its failure to do so "was a significant mistake".^{[12][5][58][30][18][59][60]} School Board President David Ebby said: "It's a big, big horrible error in judgment."^[61]

More than 58,000 images had been taken by the district through its secretly activiated webcams from November 2008 to February 2010, the district ultimately revealed in April 2010, confirming Haltzman's assertion that it had snapped thousand of photos.^[62][22] It acknowledged that more than half the images were created after missing laptops were recovered.^[5] While asserting that it did not have any evidence that individual students had been specifically targeted, the district acknowledged that "mistakes were made".^[5] Haltzman said: "I wish the school district [had] come clean earlier, as soon as they had this information ... not waiting until something was filed in court revealing the extent of the spying".^[62] Many students interviewed said they mostly used their laptops in their bedrooms, and rarely turned them off.^[63][64] Christopher Null, technology writer for Yahoo! News, observed: "It's a little difficult to believe that none of the material captured is scandalous".^[65] A computer forensics study commissioned by the defendant recovered 66,053 images produced by LANrev, though it was not able to recover all that had been deleted by district employees.^[22]

The district also admitted in Robbins' case, the remote surveillance was activated and left running for two weeks, even though school officials knew it was at Robbins' home.^[2] It also admitted that its technology staff activated the camera his computer Robbins, and gave images it covertly snapped to two Harriton High principals.^[66]

Six days after the initiation of the lawsuit and after a district review of its privacy policies, the district disabled its ability to activate the webcam remotely.^[4][22] Lillie Coney of the Electronic Privacy Information Center said: "If they thought it was right, they wouldn't have stopped."^[67]

On February 24, the district suspended and put on paid administrative leave its two staffers who were authorized to activate the remote monitoring, district 12-year-veterans Information Systems Coordinator Cafiero and Network Technician Perbix.^{[5][46][47][68][45]} The district indicated that it had done so as a precautionary measure, in light of their roles in activating TheftTrack, and the ensuing investigation.^[16]

In a motion seeking to examine Cafiero's computer, excerpts of emails between her and Amanda Wuest, District Desktop Technician, about the surreptitious webcam were cited in which the technician emailed Cafiero: "This is awesome. It's like a little LMSD soap opera," and Cafiero replied, "I know, I love it".^[69][70][34] Cafiero was interviewed by the FBI in April 2010.^[71][16] Cafiero's lawyer, Charles Mandracchia of the law firm Mandracchia & McWhirk LLC, said she had only turned the webcam system on when requested to do so by school officials.^[69][41]

When Haltzman sought to depose Cafiero, she fought his effort to depose her.^[63][72] However, U.S. District Judge Jan DuBois refused to quash the subpoena, ruling in April 2010 that she may have information relevant to the case.^[63] In her first deposition Cafiero declined to answer questions, citing her Fifth Amendment right against self-incrimination, but—after she was interviewed by the FBI—in a later deposition she answered questions under oath.^[73] Others deposed included Matsko, Perbix, and O'Brien.^[16]

In June and July 2010, dozens of other students were notified that they too had been secretly photographed by school authorities via their webcams.^[47] The District said that more than 58,000 photos had been taken from November 2008 through February 2010, but that the exact number was not known as a number of the photos had been deleted.^{[47][73][45][22]} The students and their parents were invited to privately review the photos that had been taken, and a federal judge is overseeing the review process.^[47][70] In about 15 cases, the school said it had no answer as to who ordered the surreptitious webcam activation, or why.^[23][62]

Tom Halpern, a 15-year-old sophomore who attends the school, told CBS News, "Everybody's pretty disgusted.... I think its pretty despicable."^[74] Karen Gotlieb, whose daughter attends the school, said, "I just received an e-mail from my daughter, who is very upset, saying, 'Mom, I have my laptop open in my room all the time, even when I'm changing."^[74] Savanna Williams, a sophomore at Harriton High, said she always keeps her computer open, its webcam exposed, when she's changing in her bedroom and in the bathroom when she's taking a shower. She said: "I was like, 'Mom, I have this open all the time. … This is disturbing.'"^[74] Her mother said: "the possibility of this being true is a "complete violation of her privacy, of our entire home–not just Savanna. They have the option to watch [me], my husband, my other child. They violated our trust."^[74]

Mother Candace Chacona said she was "flabbergasted" by the allegations: "My first thought was that my daughter has her computer open almost around the clock in her bedroom. Has she been spied on?"^[75] Chuck Barsh, an insurance broker whose son is in high school, called the district's actions a "gross invasion" of student privacy and supported the lawsuit, saying: "These people were able to look at our kids in our house".^[18] Mike Salmonson, father of an elementary school student, said the matter was "part of ... institutional arrogance—a lack of full disclosure and honesty" on the part of district administrators.[3]

John Palfrey, Harvard Law School law professor and Vice Dean, and Co-Director of the Berkman Center for Internet & Society cyberspace research center, said: “If the facts are as they appear to be in the claims by the student, it’s shocking."^[76] David Kairys, a Temple University Law School professor who specializes in civil rights and constitutional law and author of Philadelphia Freedom, Memoir of a Civil Rights Lawyer, described the district's policy as Orwellian. He said that it appeared to be a "very clear civil-rights violation", continuing: "It's pretty outrageous. It's sort of beyond belief that they wouldn't say, 'This is going too far.'"^[77] Susan Friewald, University of San Francisco Law School professor and expert in electronic privacy law, said: "they had to get consent to take photos... [I]f the school districts are going to use [laptops] to spy on students, we should certainly be concerned."^[78]

Witold "Vic" Walczak, the Legal Director of the Pennsylvania chapter of the American Civil Liberties Union (not a party in the lawsuit), commented:

This is an age where kids explore their sexuality, so there's a lot of that going on in the room.
This is fodder for child porn.^[79][80]

Joseph Daly, who retired in 2009 as Lower Merion Police Superintendent, when told about the pictures snapped from students' laptops, said: "That's illegal as hell."^[26]

Lillie Coney, Associate Director of the Electronic Privacy Information Center (a civil liberties public interest research center), said: "This definitively was not a safe or a secure even a rational thing for the school to be engaged in," and called it "an outrageous invasion of individual privacy."^[74][75] Ari Schwartz, Vice President and COO at the Center for Democracy and Technology (a civil liberties public interest organization), said: "What about the (potential) abuse of power from higher ups, trying to find out more information about the head of the PTA? If you don't think about the privacy and security consequences of using this kind of technology, you run into problems."^[80] Kevin Bankston, senior staff attorney specializing in privacy law with the Electronic Freedom Foundation (an international non-profit digital rights advocacy and legal organization), said: "I've never heard of anything this egregious. Nobody would have imagined that schools would peer into students private homes, and even bedrooms, without any kind of justification.^[64]

Dan Tynan, Executive Editor of PC World magazine and author of Computer Privacy Annoyances (2005), said: "This is extremely creepy, and way beyond the purview of the school.... There's really no need to try to take a picture of someone-in fact, how can you prove the person in front of the laptop was the one who stole it?... And to install this stuff on anyone's computer and not notify them about it is just begging for a world of pain."^[81] Robert Richardson, Director of the Computer Security Institute, said: "It's incredible that they didn't realize they were playing with fire."^[29]

LANrev, the manufacturer of the software—acquired by Absolute Software and rebranded as Absolute Manage in February 2010—denounced the use of its software for any illegal purpose, emphasized that theft-recovery should be left to law enforcement professionals, and criticized what it called "vigilantism".^[82][25] The company denied any knowledge of or complicity in either Perbix's or the district's actions. Absolute Software then permanently disabled TheftTrack in its next update of LANrev.^[20][29]

The Philadelphia Inquirer columnist Monica Yant Kinney wrote:

School district techies peering into private homes, even for a moment, under the guise of locating a lost laptop?
Even in this "surveillance society," it's almost beyond comprehension.^[67]

The Philadelphia Inquirer, in an editorial, called the school's decision to use the remote-camera feature "misguided", and wrote "families had every right to be shocked. As an antitheft strategy, the webcam tracking was overkill–and not even as useful as other means. Then failing to disclose the webcam use was a huge gaffe, compounded by a lack of policies safeguarding students' privacy."^[83] Talk radio host and Philadelphia Inquirer columnist Michael Smerconish added: "most shocking were the [images] showing the faces or ... postings of [classmates, friends, family members, and parents] with whom Robbins was communicating. What gave Lower Merion the right to invade the privacy of these people? Their images represent a gross violation of privacy, akin to listening in on a private telephone communication between two individuals, at least one of whom has absolutely no idea of the presence of an interloper. That's the real outrage ... it was inexcusable for the school district to invade the privacy of third parties en route to violating that of Blake Robbins."^[21]

The Pittsburgh Post-Gazette wrote in an editorial: "Schools have no business or jurisdiction in the homes of students. The ... District ... should never have been in the business of surveillance in the first place. Tough laws are needed to prevent Lower Merion or other school districts from going down this path again."^[84] The New York Times, in an editorial, said: "Conducting video surveillance of students in their homes is an enormous invasion of their privacy. If the district was really worried about losing the laptops, it could have used GPS devices to track their whereabouts ... Whatever it did, the school had a responsibility to inform students that if they accepted the laptops, they would also accept monitoring."^[85]

Haltzman filed an emergency motion seeking an injunction to prevent the school from reactivating what he referred to as its "peeping-tom technology".^[77] U.S. District Court Judge Jan DuBois granted Haltzman's request on February 23, 2010, ordering the district to stop remotely activating the web cameras and taking screenshots from the students' school-issued laptops, and to preserve all relevant electronic data.^[14][16] While remote activation of the webcam is currently deactivated pursuant to court order, the LANrev software has not yet been removed.

In support of the motion for injunction, the Pennsylvania chapter of the American Civil Liberties Union (ACLU) sought permission from the plaintiffs to participate in the case, nd submitted an amicus brief on behalf of the plaintiffs.^[86] Citing relevant case law regarding privacy and unconstitutional searches, the ACLU's brief stated: "While the act of placing the camera inside students’ laptops may not implicate the Fourth Amendment, once the camera is used a search has occurred that, absent a warrant or consent, violates the Fourth Amendment" (see United States v. Karo).^[87] Witold "Vic" J. Walczak, the ACLU of Pennsylvania Legal Director, said: "No government official, be it police officer or school principal, can enter a private home, physically or electronically, without an invitation or warrant. In this case, the officials are not just entering the foyer, but a child's bedroom. Assuming the allegations are true, this is an egregious invasion of privacy."^[86][88]

In addition, the court issued a gag order, preventing district officials from discussing the case with students and parents without first clearing its communications with the plaintiffs' attorney.^[89][90][91] If the district wants to update parents on the litigation, it was ordered to submit the text of its proposed communication to Haltzman at least six hours before sending out the information.^[14]

The Robbins class-action lawsuit argues for class status on the grounds that individual compensation may be small, and therefore multiple parties will need to share in covering the legal fees.^[92]

The judge issued an order in April 2010 granting Haltzman's motion requiring Caliero to let Haltzman make copies of the hard drives of her two personal computers, to determine whether Caliero had used the software to spy on students, and transferred images to her own computers.^[45]

Judge DuBois in June 2010 ordered the district to share with a consultant for Robbins some of its computer evidence, gathered in an investigation conducted by lawyers and computer experts hired by the defendants.^[73]

The District and its insurance company, Graphic Arts Mutual Insurance Company, filed lawsuits against each other in federal court in April 2010 over who should pay any settlements by the District and its related bills. The district on Philadelphia's Main Line is one of Pennsylvania's richest school systems, with a $193 million budget and spending $21,600 per student in 2008–09, the most in the Philadelphia region.^[61][93] It had been billed more than $780,000 by May 2010 by Ballard Spahr's four attorneys and its computer consultant (L-3 Communications).^[61]

The insurance company contended that none of Robbins' claims amounted to "personal injury", as defined and covered in the district's $1 million liability policy.^{[94][95][29][96][61]} The District and the insurance company also accused each other of breaching its contract.^[47] The District was also paying the aggregate $200,000 salary of its two employes that it had suspended.^[47]

The district suggested that Robbins had a loaner laptop, because he had not paid a $55 insurance fee which would have permitted him to use one a regular computer. In a 2009 letter to parents, Harriton High School principal Steven Kline said that "no uninsured laptops are permitted off campus," and said that students who had not paid the insurance fee could use one a loaner. Asked if Robbins took a loaner computer home without authorization, Young declined to comment.^[97] Haltzman denied that Robbins was ever notified that his computer use was a problem, and said that Robbins had taken his computer home "every single day" for a month.^[89] He also pointed out that while Robbins was one of about 20 students who had not paid the $55 insurance fee, he was the only one tracked.^[98]

The defendants commissioned a 69-page report, which was prepared by lawyers from Ballard Spahr, the same law firm that the district had hired to defend it in the Robbins lawsuit.^[73] The defendants' counsel nevertheless entitled their May 3, 2010, report: "Independent Investigation".^[73]

The report faulted district administrators and staffers for failing to disclose and mismanaging the surveillance system, and for failing to set up strict policies to protect "unsuspecting" students' privacy.^[73] It also cited the district for inconsistent policies, shoddy recordkeeping, misstep after misstep, and "overzealous" use of technology "without any apparent regard for privacy considerations."^[99][16] The district's top technology administrator since July 2009, George Frazier, told investigators that he considered the department the Wild West "because there were few officials policies, and no manuals of procedures, and personnel were not regularly evaluated."^[73][100] The report also said that school Board members and school administrators who knew that tracking was in place failed to ask the right questions regarding privacy issues, district lawyers didn't probe the legal considerations of handing out computers, and administrators didn't talk about the ramifications.^[73][4]

The report also found that district officials knew that Robbins had taken his laptop home, but still decided to activate the covert surveillance that secretly captured hundreds of webcam photos and screenshots—included pictures of Robbins sleeping and partially undressed, a photo of his father, and images of instant messages and photos of friends with whom Robbins was video-chatting.^[101] After the program was activated on Robbins' computer, one district employee emailed another: "Now currently online at home".^[101]

The report noted that in a number of instances TheftTrack was left on, snapping photos and screenshots, for extended periods of time even when a laptop was not considered missing or stolen.^[16]

The report acknowledged being unable to find explanations for all the tracking activations, or why the district failed to consider privacy implications.^[36] It noted conflicting accounts from district employees, gaps in data, and said evidence was still being gathered.^[102] The report said the covert camera was used both for missing computers and for unknown purposes, and that the district left it activated for long periods in cases "in which there was no longer any possible legitimate reason" for capturing images.^[103]

Looking at the information available to it, the report found evidence of TheftTrack being triggered on 177 laptops in the 2008-10 time period.^[16] Approximately half of the time (57%) the school chose only to activate IP address-tracking feature, and not to activate the feature leading to the capture of secret webcam snapshots and screenshots.^[16] Based on the available evidence, Cafiero activated TheftTrack three times on student laptops and Perbix activated it 161 times.^[16] In addition, there were 13 activations on student laptops for which investigators were unable to determine who activated TheftTrack.^[16]

With regard to those instances in which the school chose to activate the covert webcam snapshot and screenshot feature, the report indicated that among the non-deleted images were 30,564 webcam photos and 27,428 screenshots.^[16] The report indicated that it had not been able to determine how often the images were viewed by school personnel.^[16] A total of 18 members of the district's systems staff had LANrev administrator permissions at times during the 2008-10 school years, and 16 of them during that period had access to data stored on the LANrev server.^[16] The report said that to the extent that district board members, its superintendent (who learned of TheftTrack at a meeting of his Cabinet in 2008), and its principals were aware of TheftTrack's capabilities, they "did not appreciate the potential of that ability to raise serious privacy concerns, and they should have sought more information ... or advice" from the district lawyer.^[16]

The report also criticized the district information systems personnel.^[16] The report said former informations systems Director DiMedio and her staffers "were not forthcoming" about the tracking technology; DiMedio declined to be interviewed unless the district reimbursed her for the cost of her retaining an attorney, which the district declined to do.^[36][16] DiMedio's lawyer criticized the report for faulting DiMedio's role in the district's use of web cameras.^[36] He criticized the cover-page description of the investigators' work as an "independent" probe, saying: "It was not an independent investigation. What flows from that [report] is a clear attempt to insulate and protect the current [district] board at the expense of the IT [information technology] department and employees like Ginny ... to throw her under the bus."^[36] He said DiMedio never hid the software's tracking features from administrators or board members.^[36] He also noted that DiMedio had been gone for months when the assistant principal confronted Robbins with the photo taken by his laptop webcam in his home.^[36]

The report also criticized Perbix for reacting negatively on September 11, 2009, when Frazier told him a teacher had requested that his webcam be disabled, writing: "teachers should not even be allowed to cover the cameras as they do now ... theft track ... does not record video, only a snapshot every 15 minutes. Is someone afraid that we are spying on them?"[5]

Hilliton High School Principal Kline learned about TheftTrack in September 2008, said he asked DiMedio whether the district should advise students and parents about it, and never revisited the subject after she opined that the district should not, because doing so would undermine TheftTrack’s effectiveness.[6]

In May 2010, Judge Jan DuBois ordered the district to make policy changes.^[104] Months after the suit was filed, the district adopted new policies that now require the district to obtain a student's permission before the school activates the monitoring software.^[12][105] The district also now promises never to look at a student's laptop files unless the laptop has been returned to the school, there is "reasonable suspicion" that the student is violating law, school rules, or district policies, or a student has signed a consent form.^[12][105] Following criticism of the district's training requirements and computer responsibility standards, it is considering new written policies in those areas as well.^[106] On July 19, 2010, a proposal was introduced at a district meeting to adopt a new written policy banning all laptop webcam surveillance by school officials.^[8]

In opposition to the lawsuit, some parents formed the Lower Merion Parents committee. The parents on the one hand were angry about the secret use of the webcams to view students and their friends and families in their homes. On the other hand, however, the parents were concerned that they themselves would have to bear a financial cost in paying for the school district's litigation and possible settlement or court-ordered penalty.^[107]

The group was concerned that the Robbins lawsuit will be costly, attract undue attention to the district while harming its civic tone and distracting from its educational mission, and take too long to resolve. Particular attention was given to the fact that any payment for the members of the class in the class action suit would effectively come from the district's taxpayer. Lower Merion Parents did not, however, oppose a full investigation of the district's technological capabilities and of any abuses the district committed.

On March 2, more than 100 parents met in Narberth, Pennsylvania, to discuss the issues.^[108][109] Robbins' attorney Mark Haltzman requested an opportunity to speak to the group to update the parents, but was denied.^[110] A founder of Lower Merion Parents said the meeting focused on whether the parents wanted the Robbins family to represent them, how to lift the court's "gag order" agreement that district officials and school board members not talk about the case without first consulting the Robbinses and their lawyer, and how to learn what actually happened with the laptops and webcams. One option opposing parents have is to file a motion to intervene, which is an agreement to be parties in the case, but with different interests than the plaintiff.^[111] A similar group called Parents in Support of the Lower Merion School District collected over 750 signatures by March 3 in an online petition. Philadelphia Weekly noted that "Paradoxically, this group of Lower Merion parents are going to try to stop the gratuitous litigation by getting more lawyers involved."^[112]

The Federal Bureau of Investigation is investigating whether federal laws, including wiretap, computer-intrusion, and privacy laws, were violated by school administrators and technology staffers as they monitored the webcam images without alerting the students.^[83][77][80] Its Philadelphia office confirmed in July that it was investigating the charges. FBI Special Agent-in-Charge Janice Fedarcyk and U.S. Attorney Michael Levy said in a joint statement: "[The U.S. Attorneys Office] intend[s] to work as a team with the Federal Bureau of Investigation, the Montgomery County District Attorney's Office, Montgomery County detectives, and the Lower Merion Police Department to determine if any crimes were committed".^[86] FBI agents reviewed the district's computers, thousands of images secretly captured from students' computers, interviewed district employees, and reviewed district records as part of the investigation.^[59][70]

The U.S. Attorney's Office in Philadelphia initiated a probe into the matter, and in February 2010 federal prosecutors issued a grand jury subpoena to the district for documents related to the remote-control cameras, asking for a broad range of records related to the webcams and the security system that district officials used to activate them.^[46][30] The Office took the unusual step of commenting on an ongoing FBI and U.S. Justice Department investigation, with the U.S. Department of Justice stating on February 22, 2010, that it would "be involved in the inquiry into allegations that the Lower Merion School District activated webcams on computers issued to students", and quoting U.S. Attorney Michael L. Levy as saying: "The issues raised by these allegations are wide-ranging and involve the meeting of the new world of cyberspace with that of physical space. Our focus will only be on whether anyone committed any crimes."^[31][16] Levy said that he and other agencies involved would not comment further until their investigation was completed.^[41]

The Montgomery County District Attorney and detectives also launched an investigation to see if any criminal laws were broken, including wiretap and privacy laws.^[23][30] District Attorney Risa Vetri Ferman said: "Upon arriving in the office this morning, we were inundated with calls from members of the community asking about this. It became clear to me that we needed to look at this further to see if a criminal investigation is warranted."^[30][77]

As of May 2010, the government criminal investigations were ongoing.^[16]

Senator Arlen Specter (D-PA) held a hearing on March 29, 2010, of the Senate Judiciary Subcommittee on Crime and Drugs, which he chairs, on the use of student-issued computers to allegedly spy on students in their homes.^[113] Specter said: "The issue is one of surreptitious eavesdropping. Unbeknownst to people, their movements and activities were under surveillance."^[114]

Specter said he believes existing wiretap and video-voyeurism statutes do not adequately address concerns in today's era of widespread use of cell-phone, laptop and surveillance cameras.^[115] After hearing testimony at the hearing from Blake Robbins and others, Specter said that the testimony he heard and Lower Merion's use of laptop cameras for surveillance had convinced him that new federal legislation is needed to regulate electronic privacy.^{[115][116][117]}

Specter then introduced legislation in April 2010 to amend the federal Wiretap Act to clarify that is is illegal to capture silent visual images inside another person's home, saying: "This is going to become law. You have a very significant invasion of privacy with these webcams, as more information is coming to light."^[29][118] Speaking on the floor of the Senate, he said:

Many of us expect to be subject to ... video surveillance when we leave our homes and go out each day—at the ATM, at traffic lights, or in stores, for example. What we do not expect is to be under visual surveillance in our homes, in our bedrooms, and, most especially, we do not expect it for our children in our homes.^[24]

An "LMSD is Watching You" Facebook page was started, and within days had hundreds of members.^[77] At the same time, parody T-shirts were already being sold on the net, including one featuring the ominous red camera eye of HAL 9000 from the science fiction movie 2001: A Space Odyssey, inside the district's circular logo.^[77]

Both The Philadelphia Inquirer and The New York Times reported that "With a mop of brown hair and clad in a black T-shirt and jeans, [Blake Robbins] smiled when told the suit had earned him a Wikipedia page."^{[119][120][121]}

The litigation also prompted a "What's Wrong With People?" segment on the Dr. Phil show.^{[29][121][122]}

In July 2010, a second Lower Merion student and his mother filed a civil suit for invasion of privacy against the school district over the school's use of the LANrev software, without the high school student's knowledge or consent.^[10][12] Lower Merion school administrators informed the Hasans by letter that Jalil had been secretly monitored by the webcam on his school-issued laptop for two months while he was a senior at Lower Merion High School.^[10][123] Haltzman is also representing the Hasans.^[5] The letter was one of 40 that the district sent out to comply with a May 2010 court order by U.S. Chief Magistrate Judge Thomas Rueter, who had order the District to send out letters were to indicate the date of Webcam activations, and the number of photographs and screenshots taken by each affected student's computer.^[124][95]

Over 1,000 images were surreptitiously taken by the computer—consisting of 469 webcam photographs, and 543 screen shots, including shots of him in his bedroom in his Ardmore, Pennsylvania, home, and of other family members and friends.^[10][2] A laptop that Jalil had misplaced at the school for three days in December 2009 had the surveillance software covertly activated by the school for nearly two months following its recovery.^{[125][126][10][12]} It was only deactivated in February 2010, after publicity surrounding the Robbins case unfolded.^{[10][12][123]} The school district did not inform Hasan and his family of this until July 8, 2010, when a lawyer for the school district notified them of the existence of the photographs.^[12]

"When I saw these pictures, it really freaked me out," said Jalil Hasan.^[10] His mother said: "Right now I feel very violated... When I'm looking at these pictures, and I'm looking at these snapshots, I'm feeling, 'Where did I send my child?'"^[5][123]

• "Class Action Complaint", Robbins v. Lower Merion School District, U.S. District Court for the Eastern District of Pennsylvania, February 11, 2010
• "Brief of Amicus Curae American Civil Liberties Union of Pennsylvania Supporting Issuance of Injunction", Robbins v. Lower Merion School District, February 22, 2010, friend of the court brief citing privacy caselaw in favor of Robbins
• "Dockets & Filings", Robbins v. Lower Merion School District, Justia.com
• Report Regarding Monitoring of Student Laptop Computers by the Lower Merion School District, Ballard Spahr (LMSD's counsel), May 3, 2010
• "Initial LANrev System Findings", LMSD Redacted Forensic Analysis, L-3 Services – prepared for Ballard Spahr (LMSD's counsel), May 2010
• "The Spy at Harriton High", Stryde Hax, February 21, 2010, detailed technical discussion
• "Laptop Security Updates", LMSD.org
• Michael Perbix of LMSD, discussing the use of LANrev (laptop tracking software)
• Best thing since sliced bread, personal tech blog of Michael Perbix, District Network Technician (administrative leave)
• lmsdparent.org, parents opposed
• "LMSD is Watching You", Facebook page