Introduction: The Constitutional Foundation of Privacy

The Constitution of the United States, as originally ratified, limited the powers of the federal government and, through the Bill of Rights, guaranteed certain fundamental liberties. Yet for most of American history, those guarantees did not automatically constrain state and local governments. A citizen in Virginia could be subjected to an unreasonable search by state police without any recourse under the Fourth Amendment, because the Bill of Rights was understood to bind only the national government. That changed through a slow, case-by-case process known as selective incorporation—a doctrine that uses the Fourteenth Amendment's Due Process Clause to apply nearly all of the protections in the Bill of Rights to the states. In the digital era, selective incorporation has taken on new urgency, as courts must decide whether traditional privacy rights extend to data, devices, and communications that the Framers could never have imagined.

This article explores how selective incorporation interacts with privacy rights in the modern digital landscape. It begins with an overview of the doctrine itself, then examines landmark Supreme Court decisions that have shaped digital privacy, and concludes by considering future challenges posed by emerging technologies. By understanding the interplay between constitutional incorporation and digital-age realities, readers can better appreciate how American law continues to evolve to protect individual liberty against both governmental and technological overreach.

Understanding Selective Incorporation

The Historical Context

The Bill of Rights, ratified in 1791, was designed to restrain the newly created federal government. The Supreme Court confirmed this limited scope in Barron v. Baltimore (1833), holding that the Bill of Rights did not apply to the states. For decades thereafter, states were free to abridge rights such as free speech, religious exercise, or protection against warrantless searches—so long as their own state constitutions did not forbid it.

The ratification of the Fourteenth Amendment in 1868 introduced the Due Process and Equal Protection Clauses as constraints on state action. However, it took nearly another century before the Court began to interpret the Due Process Clause as incorporating specific provisions of the Bill of Rights against the states. The turning point came in Gitlow v. New York (1925), where the Court assumed—without explicitly holding—that the First Amendment's free speech guarantee applied to the states. Over the following decades, the Court selectively incorporated one right after another: the Fourth Amendment's protection against unreasonable searches and seizures (Wolf v. Colorado, 1949; later strengthened by Mapp v. Ohio, 1961), the Fifth Amendment's privilege against self-incrimination (Malloy v. Hogan, 1964), and the Sixth Amendment's right to counsel (Gideon v. Wainwright, 1963), among many others.

Selective incorporation is not a single event but an ongoing judicial process. The Court examines each right to determine whether it is "fundamental to the American scheme of justice" and thus essential to due process. Once a right is deemed fundamental, it applies equally to the federal government and the states. This case-by-case method differs from total incorporation, which would apply the entire Bill of Rights at once—an approach the Court has consistently rejected.

The Role of the Fourth Amendment

Privacy rights in the United States derive heavily from the Fourth Amendment, which protects "the right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures." The amendment was incorporated against the states in Wolf v. Colorado, but the exclusionary rule—the remedy that excludes illegally obtained evidence—was not applied to state courts until Mapp v. Ohio. Since Mapp, the Fourth Amendment has provided a baseline of privacy protection in all states, though courts have continuously grappled with its application to new technologies.

The Supreme Court's approach to Fourth Amendment privacy has evolved significantly. In Katz v. United States (1967), the Court replaced the old property-based test with a "reasonable expectation of privacy" standard. Under Katz, the Fourth Amendment protects people, not places, opening the door for privacy claims in public spaces and communications. This standard has become the analytical foundation for digital privacy cases.

Privacy Rights in the Digital Age

Technology Outruns the Law

The digital revolution has created unprecedented challenges for privacy. Personal information—emails, text messages, social media posts, location data, browsing history, health records—is collected, stored, and often shared by private companies and governments alike. The volume and sensitivity of this data far exceed anything the Framers could have anticipated.

For decades, courts applied the Katz reasonable-expectation test to digital information with mixed results. Early cases held that individuals voluntarily turned over data to third parties (such as phone companies or internet service providers) and therefore had no reasonable expectation of privacy in that data—a principle known as the third-party doctrine. This doctrine, established in Smith v. Maryland (1979) and United States v. Miller (1976), meant that the government could obtain phone records, bank records, and other metadata without a warrant, simply by issuing a subpoena.

The third-party doctrine became increasingly problematic as digital services expanded. People routinely entrust vast amounts of intimate information to third parties—search engines, social media platforms, cloud storage providers—often without any realistic alternative. Critics argued that the doctrine failed to account for the qualitative difference between a phone number written on a piece of paper and a detailed digital dossier of one's life constructed by metadata.

Landmark Digital Privacy Decisions

The Supreme Court began to recalibrate in the early 2010s. In United States v. Jones (2012), the Court held that attaching a GPS tracker to a vehicle constituted a search under the Fourth Amendment because it physically trespassed on private property. But a concurring opinion by Justice Sotomayor, joined by Justice Alito, suggested that continuous long-term GPS monitoring might violate a reasonable expectation of privacy even without a physical trespass, hinting at a more flexible approach to digital data.

Two years later, in Riley v. California (2014), the Court unanimously ruled that police generally need a warrant to search the digital contents of a cell phone seized incident to arrest. Chief Justice Roberts wrote that modern cell phones "hold for many Americans 'the privacies of life'" and are not comparable to physical items like a wallet or a packet of cigarettes. Riley was a landmark because it recognized the unique privacy interests in digital devices, even though the Fourth Amendment text had not changed.

The most significant decision for digital privacy and selective incorporation came in Carpenter v. United States (2018). The government had obtained months of cell-site location information (CSLI) from wireless carriers without a warrant, relying on the third-party doctrine. The Court, in a 5–4 opinion by Chief Justice Roberts, held that accessing historical CSLI constitutes a search under the Fourth Amendment and requires a warrant based on probable cause. The Court distinguished Smith v. Maryland and Miller on the ground that cell phone location data provides "an exhaustive chronicle of a person's physical movements" that implicates deeply personal privacy interests. Importantly, the Court explicitly noted that it was not addressing other categories of business records, but the reasoning opened the door for further expansion of digital privacy protections.

In Carpenter, the Supreme Court applied the Fourth Amendment, which had already been incorporated against the states via Mapp, to a modern technological context. The decision thus exemplifies how selective incorporation continues to work: the fundamental right against unreasonable searches and seizures, long applied to the states, now extends to new forms of digital evidence.

How Selective Incorporation Shapes Digital Privacy

From Federal Precedent to State Standards

Because the Fourth Amendment is fully incorporated, any ruling by the Supreme Court that establishes a new privacy protection under the Fourth Amendment automatically binds all state and local law enforcement. For example, after Carpenter, state police in California, Texas, or any other state must obtain a warrant before accessing historical cell-site location data, unless an exception applies. This uniformity prevents a patchwork of privacy protections across the country, ensuring that a citizen's fundamental rights do not depend on their state of residence.

Selective incorporation also means that state courts and legislatures are free to provide greater privacy protections under their own state constitutions or statutes, but they cannot provide less. Some states, such as California with its Electronic Communications Privacy Act (CalECPA), and Washington with its Privacy Act, have already enacted laws that exceed the Fourth Amendment baseline. These state-level innovations can then influence federal courts, which may look to state experiments as evidence of evolving societal norms regarding privacy.

The Role of the Due Process Clause

Beyond the Fourth Amendment, selective incorporation of other Bill of Rights provisions also affects digital privacy. The First Amendment, incorporated in Gitlow, protects online speech and association. The Fifth Amendment's protection against compelled self-incrimination, incorporated in Malloy, raises questions about whether an individual can be forced to decrypt a device or provide a password. The Court has not fully resolved these issues, but lower courts increasingly grapple with the intersection of digital evidence and the privilege against self-incrimination.

The Due Process Clause itself, which is the vehicle for incorporation, also has independent force. It guarantees fundamental fairness in legal proceedings, which can include the right to confront digital evidence or to challenge the accuracy of algorithms used in criminal investigations. For example, in Brady v. Maryland (1963) due process requires prosecutors to disclose exculpatory evidence, and that obligation now extends to digital evidence such as police body-camera footage and digital forensic reports.

Challenges and Unresolved Questions

Despite the progress made in Carpenter and Riley, many digital privacy issues remain unresolved. The third-party doctrine, while narrowed, still applies to many forms of data, such as bank records, email metadata, and social media information shared with a platform. The Court has expressly reserved judgment on whether individuals have a reasonable expectation of privacy in data held by cloud computing services, internet service providers, or social media companies.

Artificial intelligence and machine learning present new challenges. Government use of facial recognition technology, predictive policing algorithms, and automated license plate readers can generate vast amounts of data without traditional "searches." The Fourth Amendment may require a warrant or at least reasonable suspicion for these surveillance tools, but the Court has not yet ruled on the issue. Similarly, the collection of DNA from arrestees, once limited to violent felonies, has expanded to include more minor offenses, raising Fourth Amendment concerns under the incorporated protections.

International data flows also complicate matters. The Fourth Amendment generally applies only to searches conducted by U.S. officials or at the border. Data stored overseas may be subject to different rules, as seen in the dispute between the U.S. government and Microsoft over emails stored in Ireland (United States v. Microsoft Corp., 2018). Congress eventually passed the CLOUD Act to resolve cross-border data access issues, but questions about the reach of incorporated Fourth Amendment protections across borders remain.

Future Directions: Selective Incorporation and Emerging Technologies

The Internet of Things and Smart Homes

Smart devices—from thermostats to doorbells to voice assistants—continuously gather data inside people's homes. The Fourth Amendment generally protects the home as a "castle," but when that home is filled with sensors that transmit data to companies and potentially to the government, the traditional framework creaks. In Kyllo v. United States (2001), the Court held that using thermal imaging to detect heat lamps inside a home without a warrant was a search, because the technology was "not in general public use" and could reveal intimate details. As smart home devices become ubiquitous, courts will need to decide whether accessing the data they generate constitutes a search under the incorporated Fourth Amendment.

Biometric Data and Identification

Fingerprints, facial scans, iris patterns, and even gait recognition are increasingly used for identification and surveillance. The Fifth Amendment's incorporated protection against self-incrimination may not apply to biometrics because they are considered "physical characteristics." However, the Fourth Amendment's requirement of reasonableness may limit warrantless collection and comparison of biometric data. The Supreme Court's decision in Maryland v. King (2013) upheld warrantless DNA collection from arrestees for identification purposes, but the reasoning was narrow. Future cases will test whether DNA collection from individuals never charged with a crime, or from crowds at protests, violates incorporated privacy rights.

State Initiatives and Federal Legislation

Because selective incorporation only provides a constitutional floor, states are increasingly filling gaps with their own privacy laws. The California Consumer Privacy Act (CCPA) and the Virginia Consumer Data Protection Act (VCDPA) grant residents rights over their personal data held by private companies. These laws do not directly address government surveillance, but they create a culture of privacy that may influence judicial interpretation of Fourth Amendment standards. For instance, if a state legislature declares that individuals have a reasonable expectation of privacy in their internet browsing history, a court may be more willing to find a Fourth Amendment violation if the government obtains that history without a warrant.

At the federal level, Congress has considered comprehensive privacy legislation, such as the American Data Privacy and Protection Act, but has not yet passed it. Until Congress acts, selective incorporation remains the primary mechanism for ensuring constitutional privacy protections against state government overreach.

The Silver Lining of a Slow Process

Selective incorporation is often criticized for being slow and piecemeal. Yet its incremental nature allows the Court to consider the practical implications of each new technology. By deciding cases one at a time, the Court can build a coherent body of law that balances privacy, law enforcement needs, and technological reality. The approach also respects federalism: states can experiment with broader protections, and national standards emerge only when a consensus develops that a right is fundamental.

Conclusion: Privacy as a Living Right

Selective incorporation has proven remarkably adaptable over two centuries. From free speech to gun rights to the right to counsel, the Due Process Clause has gradually extended the Bill of Rights to protect all Americans, regardless of which state they call home. In the digital era, that same process is playing out for privacy rights. The Supreme Court's decisions in Riley and Carpenter show that a constitutional framework drafted in 1791 can still respond to the challenges of a world where our most intimate information is stored on pocket-sized supercomputers.

Yet the work is far from over. The third-party doctrine remains a significant barrier for many forms of data. Emerging technologies like AI, biometrics, and the Internet of Things will test the limits of the Katz reasonable-expectation test. Lawmakers, scholars, and judges must continue to engage with the core question: what does it mean to be secure in one's "person, house, papers, and effects" in the twenty-first century?

For those studying this dynamic area of law, understanding selective incorporation is essential. It provides the framework through which traditional constitutional rights are applied to new circumstances. As the digital landscape evolves, so too will the meaning of fundamental privacy rights—but the Due Process Clause will remain the vehicle through which those rights are extended to every state.

To learn more about the cases discussed in this article, readers can explore resources from Cornell Legal Information Institute on Carpenter v. United States, the ACLU's work on digital privacy, and Wikipedia's overview of selective incorporation. For a deeper dive into the Fourth Amendment in the digital age, the SCOTUSblog analysis of Carpenter offers valuable context.