Subscriber Benefit
As a subscriber you can listen to articles at work, in the car, or while you work out. Subscribe NowEditor’s note: This story has been updated with comments from Indiana University.
Four students at Indiana University Bloomington who were part of an investigation into allegations of hazing at a fraternity have filed a federal lawsuit and are trying to block the school from accessing the swipe data from students’ ID cards without a warrant.
The plaintiffs – Tyler Cameron Gutterman, Dale Nelson, Hunter Johnson and Brian Hiltunen – filed a complaint Thursday in the U.S. District Court for the Southern District of Indiana. They claim, in part, that IU and IU President Michael McRobbie violated their Fourth and 14th Amendment rights by accessing their swipe data.
According to the complaint, the four plaintiffs were freshman pledges to the Beta Theta Pi fraternity when IU began investigating allegations of a hazing incident in the fall of 2018. The plaintiffs told the university they were in their dorm rooms at the time in question, and IU accessed the swipe data from their student identification cards to verify their testimony as to their whereabouts.
Although IU sanctioned Beta Theta Pi, the plaintiffs were not found guilty of any wrongdoing.
The four plaintiffs are being represented by the Liberty Justice Center, a Chicago-based nonprofit that claims victory in the U.S. Supreme Court decision in Janus v. AFSCME, which prohibited government unions from charging shop fees to nonmembers.
“Students don’t give up their constitutional rights just because they live in public university dormitories,” Jeffrey Schwab, senior attorney at the Liberty Justice Center, said in a Thursday news release. “If state universities are going to collect data on student movements in and out of college buildings and dorm rooms, then they must take steps to protect that data and establish a process to protect their students’ privacy before accessing it.”
In a statement, Indiana University Bloomington acknowledged it had accessed the ID card swipe data but, citing precedent, said it was acting appropriately in balancing privacy rights against student health.
“The law does not support the plaintiffs’ allegation that our pulling three days of data for the purpose of investigating troubling allegations affecting student wellbeing is a violation of privacy nor a breach of contract,” IU said. “That limited data was available to a small number of individuals for the specific purpose of examining facts. In a previous case, Medlock v. IU, the 7th Circuit Court of Appeals agreed with our judgment that student privacy interests must be balanced against the interests of their health and safety.”
Known as a “CrimsonCard,” the ID card is used by students for many activities including getting into campus buildings, checking out library books, purchasing meals from the dining halls and snacks from vending machines, printing class materials on university printers, and doing laundry. In addition, the card can be used at numerous businesses near the university.
The lawsuit asserts that IU retains historical records collected from the use of these ID cards and, in the investigation of the alleged hazing incident, reviewed the data to check the alibis of several students, including the plaintiffs. Moreover, according to the complaint, students have not been given the opportunity to have a neutral decision-maker review the request to access the swipe data.
“The privacy concerns in this sort of data are significant: IU officials could use this kind of swipe-card data to determine who attended the meetings of a disfavored political organization, or who is seeking medical services or even who a student is romantically involved with,” the complaint states. “And since it could potentially be stored indefinitely, investigators need not determine that there is probable cause before tracking it – historical records could be consulted for anyone who falls under suspicion.”
The plaintiffs claim IU violated their Fourth and 14th Amendment rights by subjecting them to an unreasonable search and not providing an opportunity for the students to obtain a pre-compliance review from a neutral third party. Also, the plaintiffs assert the university breached its contract with the students.
They are asking the federal court to enjoin IU from further use of swipe data in investigations unless the school has a warrant or can show exigent circumstances. In addition, the plaintiffs want IU to expunge their permanent records and award them damages of $1.
The case is Tyler Cameron Gutterman, Dale Nelson, Hunter Johnson and Brian Hiltunen v. Indiana University, Bloomington; and Michael McRobbie, in his official capacity as President of Indiana University, 1:20-cv-2801.
Please enable JavaScript to view this content.