PA Supreme Court Fails to Reach Decision on Whether Search Warrant Required for Google’s Search Records

Criminal Lawyer Zak Goldstein

On December 16, 2025, the Pennsylvania Supreme Court issued a fractured decision in Commonwealth v. Kurtz, addressing a cutting-edge digital privacy question: do you have a reasonable expectation of privacy in the terms you type into a Google search bar?

The Court’s answer was “no”—at least for general, unprotected searches. However, because the decision was reached by a plurality (meaning a majority of justices did not agree on a single legal reasoning), it is not binding, and the ruling leaves significant questions unanswered regarding other types of digital data, particularly Internet Service Provider (ISP) records and IP address subscriber information.

Commonwealth v. Kurtz: The “Reverse Keyword” Warrant

In Kurtz, police were investigating a violent home invasion rape but had no DNA match or suspect. Investigators obtained a “reverse keyword search warrant” compelling Google to identify any IP addresses that had searched for the victim’s home address prior to the crime. Google identified an IP address associated with the defendant, leading to additional investigation, an eventual DNA match, and his conviction for rape in this case and other unsolved cases.

The defendant challenged the warrant, arguing he had a privacy interest in his search history and that the warrant provided no reason to believe that the perpetrator conducted a Google search at all let alone for the victim’s address. The trial court rejected this claim, and the defendant appealed. The Superior Court rejected the claim, too, finding that the defendant did not have a reasonable expectation of privacy in the records maintained by Google and that the police had obtained a legitimate search warrant even if he did. The defendant petitioned the Supreme Court for review, and the Pennsylvania Supreme Court agreed to hear the case. That Court, however, failed to reach a decision - three justices concluded that he had no reasonable expectation of privacy in the search records, three concluded that the warrant was fine and declined to address the REOP decision, and one justice would have granted the motion to suppress.

Accordingly, the Court affirmed the defendant’s conviction as it would have required four justices to vote to overturn it. In support of upholding the conviction, Justice Wecht authored an Opinion Announcing the Judgment of the Court (OAJC) which reasoned that the defendant did not have a reasonable expectation of privacy in the information and that investigators did not have to obtain a warrant at all because:

• Voluntary Disclosure: By typing a query into Google, the user voluntarily discloses that information to a third party, meaning the user does not make an attempt to keep the information private.

• Notice: Google’s privacy policy explicitly warns users that it collects search queries and shares them with law enforcement.

• Lack of Necessity: The Court noted that using Google is a choice, not a necessity; users can use other search engines, libraries, or physical maps. They can also take steps to shield their identities and increase their privacy.

Accordingly, the defendant had no reasonable expectation of privacy in the search results.

Why Kurtz Is Not the Final Word

While Kurtz is a significant ruling for search history and the Superior Court’s ruling stands, it is not a total defeat for digital privacy rights in Pennsylvania for two key reasons:

1. It Is a Plurality Opinion: Crucially, the main opinion in Kurtz was joined by only three of the seven justices. When a court decides a case without a majority opinion, the holding is generally limited to the specific result of that case, and the legal reasoning is not fully binding precedent for future cases. This means the broad language about the third-party doctrine may not apply automatically to different factual scenarios or even similar scenarios.

2. It Is Limited to "Unprotected" Searches: The Court repeatedly stressed that its ruling applied only to “general, unprotected internet searches.” The justices expressly stated they were not deciding the privacy rights of users who utilize Virtual Private Networks (VPNs), private browsing modes, or encrypted browsers. Moreover, the courts have required legitimate search warrants where investigators seek to obtain bank records, phone records, and location data.

The Next Battleground: IP Addresses and ISP Records

The Kurtz decision creates a sharp distinction that defense attorneys can use in cases involving IP addresses and ISP subscriber records (the information “behind” the IP address, such as the customer's name and address).

In Kurtz, the Court emphasized that users have a choice: they can use Google, or they can use a privacy-focused competitor (like DuckDuckGo) or offline resources . However, this logic does not apply to IP addresses. Kurtz dealt with whether the police could obtain a list of IP addresses that had searched for a particular address. It did not address whether the police could obtain the information behind the resulting IP addresses without a search warrant, and in Pennsylvania, police often use administrative subpoenas to obtain that information rather than warrants. Whether they can do that under the Pennsylvania Constitution remains questionable for the following reasons:

• Necessity vs. Convenience: You cannot use the internet without an IP address. It is technologically impossible. Unlike choosing a search engine, assigning an IP address is an involuntary condition of internet access, similar to how bank records or phone numbers are necessary to participate in modern life. Pennsylvania courts have long held that citizens do have privacy rights in bank records (Commonwealth v. DeJohn) and phone records (Commonwealth v. Melilli) because they are essential services.

• The “Information Behind the IP”: Kurtz dealt with the content of a search communicated to Google. ISP inquiries deal with the identity of the user maintained by the internet provider. This information is generated automatically by the ISP, not voluntarily typed out by the user.

The Takeaway

At least for now, Commonwealth v. Kurtz establishes that if you type a search into Google without privacy protections, you cannot expect that search to remain private from police. However, because the decision relies heavily on the “voluntary” nature of using Google and Google’s explicit privacy warnings, it may not extend to the mandatory, automatic records generated by simply connecting to the internet via an ISP.

If you are facing charges based on digital evidence, IP address identification, or administrative subpoenas, the specific technical details of your case matter. The law is evolving rapidly, and a nuanced defense strategy is essential.

Facing criminal charges? We can help.

Goldstein Mehta LLC Criminal Defense

If you are under investigation or facing charges involving digital evidence, search warrants, or administrative subpoenas, we can help. We have successfully defended thousands of clients against criminal charges in courts throughout Pennsylvania and New Jersey. Our award-winning Philadelphia criminal defense lawyers offer a free criminal defense strategy session to any potential client. Call 267-225-2545 to speak with an experienced and understanding defense attorney today.