Digital Privacy and the Ninth Amendment: Does the Constitution Protect Your Online Life?

Last updated 1 day ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.

Every click, search query, and location ping from our smartphones creates a digital trail. Our most private conversations, financial records, health concerns, and daily movements are no longer stored in a locked file cabinet but on vast, remote servers owned by third-party corporations.

Does the U.S. Constitution, a document conceived in an era of parchment and quills, offer any meaningful protection for this 21st-century reality?

Ratified in 1791 as part of the Bill of Rights, the Ninth Amendment states: “The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.”

For much of American history, it was considered a “forgotten” amendment with little practical effect. Yet in the mid-20th century, it was dramatically awakened and used to help establish the constitutional right to privacy.

In the internet age, the primary legal battle for our digital data has largely shifted to other areas of law, but the Ninth Amendment’s legacy continues to shape our understanding of liberty in an increasingly technological world.

The “Forgotten” Amendment: Origins and Purpose

Before it can be understood in the context of digital privacy, the Ninth Amendment must be understood on its own terms. Its existence resulted from a fundamental debate among the nation’s founders about the very nature of rights and the dangers of a powerful central government.

The Text and Its Promise

The Ninth Amendment is concise and, at first glance, straightforward. It reads in its entirety: “The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.”

The amendment serves as a critical instruction on how to read the Constitution. It clarifies that the list of rights included in the first eight amendments—such as freedom of speech, religion, and the right to a fair trial—is not an exhaustive list.

It acts as a constitutional safeguard, preventing the government from claiming that because a specific right isn’t written down, it doesn’t exist or isn’t protected from government infringement. It affirms that the people possess fundamental rights beyond those explicitly itemized in the constitutional text.

The Founders’ Great Debate

The Ninth Amendment wasn’t an afterthought. It was a necessary compromise to resolve one of the most contentious issues of the nation’s founding: whether the Constitution should contain a bill of rights at all. As originally drafted and ratified, the Constitution didn’t include one.

This omission became a central point of conflict between the country’s first two political factions, the Federalists and the Anti-Federalists.

The Anti-Federalist Position

The Anti-Federalist position was one of deep-seated suspicion toward centralized power. Influential figures like George Mason of Virginia argued forcefully that they couldn’t support a new Constitution that lacked a “Declaration of Rights.”

They feared that without an explicit list of protected liberties, the new federal government would be free to trample on the fundamental rights of the people. For them, the absence of a bill of rights was a fatal flaw that threatened to create a new form of tyranny.

The Federalist Concern

Conversely, the Federalists, the proponents of the new Constitution, argued that a bill of rights was both unnecessary and potentially dangerous. This view was most famously articulated by Alexander Hamilton in The Federalist No. 84.

The Federalist argument had two main prongs:

It was unnecessary: The Federalists contended that the national government was a government of limited and enumerated powers. It could only exercise the powers specifically granted to it in the Constitution. Therefore, there was no need to forbid the government from violating rights it had no power to affect in the first place. As Hamilton rhetorically asked, “Why, for instance, should it be said that the liberty of the press shall not be restrained, when no power is given by which restrictions may be imposed?”

It was dangerous: This was the more profound Federalist concern. They feared that enumerating specific rights would create a dangerous implication. If a list of rights was added, it might be interpreted to mean that any right not on the list wasn’t protected and was therefore surrendered to the government.

This is the problem that Justice Joseph Story would later describe as a “perverse, or ingenious misapplication of the well known maxim, that an affirmation in particular cases implies a negation in all others.” They worried that a list intended to protect liberty could paradoxically be used to constrain it.

Madison’s Brilliant Compromise

James Madison, a key architect of the Constitution and a leading Federalist, was initially skeptical of the need for a bill of rights. However, he recognized the political necessity of adding one to ensure the ratification of the Constitution and to unify a divided nation. Several states had only ratified the Constitution on the condition that a bill of rights would be added later.

When presenting his proposed amendments to the First Congress, Madison directly confronted the Federalists’ most compelling argument. He acknowledged the objection that “by enumerating particular exceptions to the grant of power, it would disparage those rights which were not placed in that enumeration” and called it “one of the most plausible arguments I have ever heard against the admission of a bill of rights.”

The Ninth Amendment was his ingenious solution to this dilemma. It was crafted not to create or grant any new, substantive rights, but to function as a rule of construction—a guide for judges and lawmakers on how to interpret the document.

It directly rebutted the Federalist fear by stating that the list of rights in the first eight amendments couldn’t be used to “deny or disparage” other rights that the people retained. This satisfied the Anti-Federalists by ensuring that fundamental but unlisted rights weren’t left vulnerable, while simultaneously appeasing the Federalists by preventing the Bill of Rights from being read as an exhaustive and therefore limiting list.

This origin reveals a foundational tension in American law that persists to this day: the conflict between a desire for clear, written rules (textualism) and the need for broad principles flexible enough to apply to unforeseen circumstances (the “living constitution”). The Ninth Amendment sits squarely at this fault line.

Its text is clear in its purpose—to state that the list of rights isn’t complete—but it’s intentionally vague about what those “other” rights are. This vagueness makes legal thinkers who favor strict adherence to the constitutional text, such as the late Justice Antonin Scalia, deeply uncomfortable, as they see it as an open invitation for judges to “invent” rights not found in the document.

Conversely, those who view the Constitution as a document of enduring principles, like former Justice Arthur Goldberg, see the amendment as an essential tool for protecting fundamental liberties from modern threats that the Founders couldn’t have imagined.

From Pen and Paper to the Pill: The Ninth Amendment and Privacy

For nearly two centuries, the Ninth Amendment lay dormant, rarely cited by the Supreme Court and largely ignored by legal scholars. That changed dramatically in 1965 with the landmark case of Griswold v. Connecticut, a decision that would breathe life into the “forgotten” amendment and establish one of the most significant and controversial rights in modern American jurisprudence: the constitutional right to privacy.

The “Forgotten” Amendment Awakens

The case centered on a seldom-enforced but still active Connecticut law from 1879 that made it a crime for any person to use “any drug, medicinal article or instrument for the purpose of preventing conception.”

Estelle Griswold, the executive director of the Planned Parenthood League of Connecticut, and Dr. C. Lee Buxton, a physician and professor at Yale Medical School, opened a birth control clinic in New Haven to challenge the law. They were promptly arrested, tried, and convicted as accessories, receiving a fine of $100 each.

Their case eventually reached the U.S. Supreme Court, which, in a 7-2 decision, struck down the Connecticut statute as unconstitutional. The ruling was a pivotal moment, marking the first time the Court explicitly recognized a constitutional right to privacy.

“Penumbras, Formed by Emanations”

Writing for the majority, Justice William O. Douglas crafted an opinion that famously avoided rooting the right to privacy in any single provision of the Constitution. Instead, he argued that various guarantees in the Bill of Rights create “penumbras, formed by emanations from those guarantees that help give them life and substance.”

In essence, he argued that the explicit rights have implicit, radiating protections that together form broader “zones of privacy” into which the government cannot intrude.

Justice Douglas wove together a tapestry of amendments to create this zone of privacy:

The First Amendment’s right of association has a penumbra of privacy.

The Third Amendment’s prohibition against the quartering of soldiers in a private home “in any house” is “another facet of that privacy.”

The Fourth Amendment explicitly affirms the “right of the people to be secure in their persons, houses, papers, and effects.”

The Fifth Amendment’s Self-Incrimination Clause allows a citizen to create a zone of privacy that the government cannot compel them to surrender.

Douglas concluded that the marital relationship, and specifically the sanctity of the marital bedroom, was a space “older than the Bill of Rights” and lay securely within this protected zone of privacy. The Connecticut law, which would allow police “to search the sacred precincts of marital bedrooms for telltale signs of the use of contraceptives,” was therefore a repulsive and unconstitutional intrusion.

The Ninth Amendment’s Moment

While Justice Douglas used the Ninth Amendment as one of several threads in his “penumbra” theory, Justice Arthur Goldberg, joined by two other justices, wrote a powerful concurring opinion that placed the Ninth Amendment at the very center of the argument.

He contended that the Ninth Amendment provided a more direct and robust justification for protecting the right of marital privacy.

Goldberg argued that relying solely on the specific guarantees of the first eight amendments to protect a right as “basic and fundamental and so deep-rooted in our society as the right of privacy in marriage” was “to ignore the Ninth Amendment and to give it no effect whatsoever.” He saw the Ninth Amendment as direct evidence that the Framers believed in the existence of fundamental rights that weren’t explicitly listed in the Constitution.

However, Justice Goldberg didn’t claim the Ninth Amendment was an independent source of rights that the Court could simply enforce on its own. Rather, he viewed it as a rule of construction that affirmed the existence of unenumerated rights and justified the Court’s protection of them, typically by reading them into the broad guarantee of “liberty” protected by the Due Process Clause of the Fourteenth Amendment.

Griswold is the critical link between the Ninth Amendment’s abstract principle and the concrete, legally recognized right to privacy. Without Justice Goldberg’s concurrence, the Ninth Amendment might have remained a purely academic curiosity.

He gave it a practical function: serving as the constitutional justification for courts to look beyond the text when fundamental, deep-rooted liberties are at stake. This established a precedential link between the amendment and the right to privacy, which would later be expanded in cases like Roe v. Wade (1973) and Lawrence v. Texas (2003).

The Dissent and Lasting Debate

The decision wasn’t unanimous, and the dissents by Justices Hugo Black and Potter Stewart laid the groundwork for a debate that continues to this day. They argued that while the Connecticut law was “uncommonly silly,” there was no general “right of privacy” to be found anywhere in the Constitution’s text.

Justice Black was particularly scathing in his criticism of the majority’s “penumbra” logic, which he saw as a dangerous form of judicial invention. He famously wrote: “I like my privacy as well as the next one, but I am nevertheless compelled to admit that government has a right to invade it unless prohibited by some specific constitutional provision.”

He dismissed the use of the Ninth Amendment as an attempt by the Court to “keep the Constitution in tune with the times,” a power he believed it didn’t have.

The very controversy surrounding the Griswold decision—specifically the creative “penumbra” and Ninth Amendment arguments—may have inadvertently pushed later courts toward the more textually-grounded Fourth Amendment when dealing with privacy.

The persistent accusation of “judicial activism” leveled against Griswold created a powerful incentive for the Supreme Court to find more explicit textual hooks for privacy rights, especially as technology made privacy a more tangible, data-focused issue.

When digital privacy cases began to emerge, they involved “electronic effects” and “digital papers,” concepts that map much more cleanly onto the Fourth Amendment’s text (“persons, houses, papers, and effects”) than the abstract “privacy” of Griswold. By grounding digital privacy in the Fourth Amendment, as it would later do in Carpenter v. United States, the Court could protect a modern liberty while appearing to adhere more closely to the constitutional text.

The Fourth Amendment in the Digital Age

While the Ninth Amendment provided the philosophical underpinning for a constitutional right to privacy, the practical legal fight to protect our digital lives has largely moved to a different constitutional battleground: the Fourth Amendment. As our lives have migrated online, so too have our most private “papers and effects,” forcing the courts to grapple with how this 18th-century protection against physical searches applies to the intangible world of data.

A New Battleground: Why the Fourth Amendment?

The text of the Fourth Amendment guarantees “the right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures” and requires that warrants be based on probable cause.

For most of history, “papers and effects” were tangible objects. Today, however, they are emails, text messages, photos, financial records, and vast logs of data about our every move, stored on servers around the world.

Advocacy groups like the American Civil Liberties Union (ACLU) have long argued that the Fourth Amendment’s protections must extend to this “digital property.” This view was powerfully affirmed by Chief Justice John Roberts in the 2014 case Riley v. California, which dealt with cellphone searches during an arrest.

He wrote: “The fact that technology now allows an individual to carry such information in his hand does not make the information any less worthy of the protection for which the Founders fought.” This set the stage for applying the Fourth Amendment’s principles to the unique challenges of the digital age.

The Third-Party Doctrine: A Giant Loophole

A major obstacle to applying the Fourth Amendment to digital data has been a legal principle known as the “third-party doctrine.” For decades, the Supreme Court held that a person has no “reasonable expectation of privacy” in information they voluntarily share with a third party, such as a company.

This doctrine was established in pre-digital era cases like Smith v. Maryland (1979). In that case, the Court ruled that police didn’t need a warrant to obtain a list of the phone numbers a person had dialed from the telephone company. The Court’s reasoning was that by dialing the numbers, the individual had “voluntarily conveyed” them to the phone company to connect the call, thereby giving up any expectation of privacy.

In the internet age, this doctrine created a loophole of enormous proportions. To participate in modern society—to send an email, use a map for directions, search the web, or make a bank transaction—we must constantly and often passively share immense quantities of sensitive personal data with third-party companies like Google, Verizon, Apple, and our banks.

Under a strict application of the third-party doctrine, the government could potentially access this vast trove of information without a warrant, threatening to make the Fourth Amendment’s protections obsolete in the digital world.

The Landmark Shift: Carpenter v. United States

The Supreme Court confronted this problem head-on in the 2018 case of Carpenter v. United States. The case arose from a criminal investigation into a series of armed robberies. Without obtaining a warrant, the FBI used the Stored Communications Act to compel wireless carriers to turn over 127 days of historical cell-site location information (CSLI) for one of the suspects, Timothy Carpenter.

This data provided a detailed and comprehensive log of his movements, placing him near several of the robbery locations.

In a landmark 5-4 decision, the Supreme Court ruled that the government’s warrantless acquisition of such extensive CSLI constituted a Fourth Amendment “search” and therefore generally requires a warrant supported by probable cause.

Writing for the majority, Chief Justice Roberts recognized that CSLI is fundamentally different from the limited data at issue in earlier third-party doctrine cases. He described the location data as “detailed, encyclopedic, and effortlessly compiled,” giving the government the power of “near-perfect surveillance” and a window into nearly every aspect of a person’s life.

The Court also acknowledged that the sharing of this data isn’t truly voluntary in the way dialing a phone number once was; it’s a necessary and often passive consequence of simply owning and carrying a cellphone in modern society.

However, the Court was careful to frame its ruling as a narrow one. The decision applied specifically to the collection of at least seven days of historical CSLI and didn’t overturn the third-party doctrine entirely. The Court explicitly stated it wasn’t expressing a view on other matters, such as real-time location tracking, the collection of data for national security purposes, or other types of digital information.

A Critical Shift in Digital Privacy Law

This decision represents the Supreme Court’s first major acknowledgment that the fundamental assumptions of the pre-digital world are breaking down. It signals a critical shift away from a rigid, all-or-nothing application of the third-party doctrine.

In its place, the Court introduced a more nuanced analysis that considers the sensitivity and comprehensiveness of the digital data in question, not just the mere act of sharing it. This implicitly creates a new balancing test: the more revealing and pervasively collected the data, the more likely it is to be protected by a reasonable expectation of privacy, even if it’s held by a third party.

Carpenter didn’t just carve out an exception for CSLI; it introduced a new, more flexible way of thinking about digital privacy that lower courts are now tasked with applying to a host of other technologies, from the data collected by modern cars to our search histories and smart home devices.

At the same time, the very narrowness of the Carpenter ruling, while a demonstration of judicial caution, creates a massive legal gray area. By refusing to establish a broad new rule for all digital data, the Supreme Court has effectively outsourced the future of digital privacy to lower courts and legislatures.

This has initiated a slow, case-by-case, technology-by-technology process of defining our digital rights, guaranteeing years of legal uncertainty and inconsistent protections across the country. The Court’s caution created a power vacuum, making the actions of state lawmakers, federal agencies like the FTC, and advocacy groups even more critical in the ongoing fight to define and protect privacy in the digital age.

The Patchwork of Protection: Laws, Loopholes, and Inconsistency

In the wake of landmark court decisions and in the face of rapidly evolving technology, the legal framework protecting digital privacy in the United States is best described as a complex and often confusing “patchwork.” It consists of an outdated federal statute, a growing number of aggressive state laws, and a constellation of government agencies and advocacy groups all pulling in different directions.

Outdated Federal Law: The Electronic Communications Privacy Act

The primary federal law governing government access to digital communications is the Electronic Communications Privacy Act (ECPA), passed in 1986. To put its age in perspective, the ECPA was enacted before the World Wide Web was invented and before most Americans had ever heard of the internet.

The ECPA is composed of three main parts: the Wiretap Act, which governs real-time interception of communications; the Pen Register Act, which covers the collection of signaling information like phone numbers dialed; and the Stored Communications Act (SCA), which addresses access to stored electronic data.

The SCA is the most relevant and problematic part for modern privacy. It created a tiered system of protection that grants law enforcement easier access to certain electronic records—such as emails that are more than 180 days old—often with a subpoena or court order that falls short of the probable cause warrant required by the Fourth Amendment.

This is the legal authority the government used to obtain Timothy Carpenter’s location data without a warrant, a practice the Supreme Court ultimately found unconstitutional in that specific context. The law’s distinctions between opened and unopened emails, or new versus old data, make little sense in an era of cloud computing where data is perpetually stored on third-party servers.

States as “Laboratories of Democracy”

With the U.S. Congress failing to pass a comprehensive federal privacy law, states have stepped into the void, acting as what former Supreme Court Justice Louis Brandeis called “laboratories of democracy.” This has resulted in an explosion of state-level privacy legislation, creating a complex and sometimes contradictory legal landscape for both consumers and businesses.

California Leads the Way

California has been the undisputed leader in this movement. Its California Consumer Privacy Act (CCPA) of 2018, and its successor, the California Privacy Rights Act (CPRA) of 2020, grant California residents a suite of powerful rights.

These include the right to know what personal information businesses are collecting about them, the right to delete that information, the right to correct inaccurate information, and the right to opt-out of the “sale” or “sharing” of their personal data. The CPRA also created the California Privacy Protection Agency (CPPA), the first government body in the U.S. dedicated solely to enforcing privacy law.

A Wave of State Laws

Following California’s lead, a wave of other states have passed their own comprehensive privacy laws, including Texas, Virginia, Colorado, Connecticut, Utah, Maryland, and many others. While these laws share common features, they differ in crucial ways, such as:

Scope: The laws have different thresholds for which businesses must comply.

Definitions: The definition of key terms like “sale” of data varies, impacting what activities require consumer consent.

Sensitive Data: States have different rules for “sensitive data” like health information, biometric data, or precise geolocation. Maryland’s law, for example, is stricter than most, prohibiting the sale of sensitive data and requiring opt-in consent for its processing.

Private Right of Action: Most state laws can only be enforced by the State Attorney General. The CCPA/CPRA provides a limited “private right of action,” allowing individuals to sue a company directly, but only in the event of a data breach involving unencrypted personal information.

This state-by-state approach, while advancing consumer rights in many parts of the country, is also creating a “de facto” national standard. Many large, national companies find it operationally simpler and more cost-effective to apply the strictest rules from one state (typically California’s) to all of their U.S. customers rather than trying to manage dozens of different compliance regimes.

In this way, the California legislature is effectively setting a baseline for national privacy policy, a dynamic that puts pressure on both Congress to finally act and on other states to either follow suit or be left behind.

The Enforcers and Advocates

Beyond the courts and legislatures, the day-to-day rules of digital privacy are shaped by a constant push-and-pull between government enforcers and private advocacy groups.

Government Enforcement

At the federal level, the Federal Trade Commission (FTC) serves as the primary privacy regulator. Using its broad authority under the FTC Act to police “unfair or deceptive acts and practices,” the FTC brings enforcement actions against companies for failing to adequately protect personal information or for violating the promises made in their own privacy policies.

At the state level, Attorneys General are becoming increasingly active in enforcing their new privacy laws, launching investigations into the data practices of major tech companies.

Advocacy Groups

Several non-profit organizations play a crucial role in litigating privacy cases and lobbying for stronger protections.

The ACLU focuses on the constitutional dimensions of privacy, primarily fighting government surveillance and advocating for a strong warrant requirement for all law enforcement access to electronic information.

The Electronic Frontier Foundation (EFF) is a leading defender of digital civil liberties, focusing on both privacy and free speech online. The EFF often defends Section 230 of the Communications Decency Act, which shields online platforms from liability for user-generated content, arguing it’s essential for maintaining a free and open internet.

Other groups, like the Electronic Privacy Information Center (EPIC) and Public Citizen, advocate for the creation of a dedicated U.S. Data Protection Agency, similar to those in Europe, and for a strong federal baseline privacy law that would give all Americans robust rights and protections.

The fragmentation of privacy law and advocacy reveals a deeper, unresolved philosophical disagreement in the United States about what “privacy” truly is. Is it primarily a consumer right, centered on commercial transactions and the right to control how businesses use your data, as framed by laws like the CCPA?

Is it a fundamental civil liberty, defined by the right to be free from unreasonable government surveillance, as litigated under the Fourth Amendment? Or is it an essential component of free speech and association, protecting the right to anonymity and secure communication, as often argued by the EFF?

The lack of a unified federal law isn’t just a political failure; it’s a reflection of the fact that, as a society, we haven’t yet agreed on a single answer to this fundamental question.

Table: Comparison of Key Privacy Laws and Frameworks

Is Your Digital Life Protected by the Ninth Amendment?

After journeying from the debates of the Founding Fathers to the data centers of the 21st century, we return to the central question. While the Ninth Amendment played a starring role in establishing a right to privacy, its direct utility in a modern court case about digital data is limited. Its true significance is more foundational—a legacy that continues to shape our understanding of liberty in the face of profound technological change.

The Direct Answer: A Legacy, Not a Shield

In practice, an individual today cannot go to court and successfully argue that a tech company or government agency violated their Ninth Amendment right to digital privacy. Such a claim would almost certainly be re-framed and analyzed by the courts under the more specific text of the Fourth Amendment, following the precedent set in cases like Carpenter.

The Ninth Amendment’s role was catalytic, not functional. It provided the essential philosophical justification for the Supreme Court in Griswold v. Connecticut to recognize an unenumerated right to privacy in the first place. That right to privacy, born with critical assistance from the Ninth Amendment, is the direct constitutional ancestor of the digital privacy rights we debate today.

The journey of the Ninth Amendment in this context illustrates a core adaptive mechanism of the U.S. legal system. A broad, philosophical principle (the Ninth Amendment) was used to establish a new legal concept (the right to privacy in Griswold). Once that concept was established in American law, it was then grafted onto more specific, textually-grounded parts of the Constitution (the Fourth Amendment) to deal with concrete, modern problems (digital data).

The Ninth Amendment acted as the catalyst, not the ongoing chemical reaction. Its historic job was to open a door; other amendments and statutes are now the primary vehicles for walking through it.

The Enduring, Unsettled Legacy

Despite its limited role as a direct legal shield, the Ninth Amendment remains a powerful and relevant constitutional provision. It serves as an enduring reminder that the rights of the American people aren’t a closed set, frozen in 1791.

Its core principle—that the people retain fundamental rights beyond those explicitly listed in the text—is arguably more important than ever. It forces a continuous and necessary national dialogue about the meaning of liberty in an era of transformative technology that the Founders could never have conceived.

The Next Frontier: AI, Neurotechnology, and Future Rights

The Ninth Amendment’s true, forward-looking value may yet be realized. Emerging technologies are already beginning to challenge our existing legal and ethical frameworks in profound ways.

Legal scholars and bioethicists are debating how to protect concepts like “freedom of thought” and “mental privacy” from the potential misuse of neurotechnology, which has shown the ability to decode brain activity and even implant memories in animal test subjects.

These deeply personal concepts don’t fit neatly into the Fourth Amendment’s “search and seizure” model or the First Amendment’s “speech” model. If society comes to view mental autonomy as a fundamental, deep-rooted right, could the Ninth Amendment be revitalized as the constitutional basis for its protection?

This is where the amendment’s ultimate purpose as a constitutional safety net for the unforeseen comes into play. It ensures that as technology continues to redefine what it means to be human, our Constitution retains a mechanism to protect the very core of that humanity.

Our articles make government information more accessible. Please consult a qualified professional for financial, legal, or health advice specific to your circumstances.