Background
On January 28, 2020, police responded to a 911 call from John Holcomb’s residence in Burlington, Washington. His ex-girlfriend, JJ, alleged that Holcomb had raped her the previous evening, claiming he forced her to perform oral sex by forcibly restraining her head with his hand and non-consensually penetrating her anus with his finger. Officers arrested Holcomb and obtained a search warrant for his computer and cellphone.
Holcomb initially consented to the computer search but later withdrew consent. Police then obtained a second warrant from Skagit County Superior Court authorizing them to search for evidence of rape in the second degree. The warrant contained five categories of searchable evidence, with the first four limited to specific time periods surrounding the alleged rape. However, the fifth category—authorizing search for “dominion and control” evidence—contained no temporal limitation, effectively allowing officers to search any files from any time period.
During execution of the second warrant, Detective Neufeld discovered a video from January 27, 2020 showing Holcomb and JJ engaging in sexual activity. Critically, the video contradicted JJ’s account by showing consensual intercourse without any forcible restraint of her head. After viewing this exculpatory video, the detective’s supervisor told the crime lab to halt all testing, anticipating the rape case would be dismissed. Nevertheless, Detective Neufeld resumed his search of the computer’s lower hard drive, which contained files predating September 2018, and discovered three videos from November 2016 depicting child sexual abuse. Holcomb was subsequently indicted in federal court for producing child pornography.
The Court’s Holding
The Ninth Circuit reversed Holcomb’s conviction and suppressed the child pornography videos, holding that police violated the Fourth Amendment by continuing to execute the warrant after probable cause dissipated. The court affirmed that probable cause existed when the second warrant was issued, based on JJ’s detailed and credible account of the alleged rape. However, the court held that the dominion and control provision was both overbroad and insufficiently particular: it imposed no temporal limit (unlike the other four provisions), authorized unlimited exploration of any files from any era, and lacked any supporting basis in the warrant affidavit for probable cause to search for such evidence. This provision effectively transformed the warrant into an impermissible general warrant.
The panel’s decisive holding addressed probable cause dissipation. Although the court assumed officers initially acted in good faith, probable cause evaporated the moment Detective Neufeld viewed the January 27 video showing consensual—not forced—intercourse. The video directly negated the alleged rape’s core element: forcible restraint during oral sex. Under binding precedent, probable cause must exist at the time a search is executed, not merely at the time the warrant issues. The court held that no reasonable officer could continue searching after witnessing evidence that the alleged crime almost certainly had not occurred. Crucially, when probable cause dissipated, so did any good-faith reliance on the warrant.
The court concluded that suppression was the appropriate remedy. Although the decision required suppressing evidence of heinous crimes against a child, the court emphasized that “respect for the Constitution and the rule of law requires suppression of the evidence.” The deterrent effect of excluding evidence obtained in violation of the Fourth Amendment was significant and outweighed the social cost. The panel reversed the district court’s denial of Holcomb’s motion to suppress, vacated his conviction and 240-month sentence, and remanded for further proceedings.
Key Takeaways
- Computer search warrants must include temporal limitations on all categories of evidence sought; a broad “dominion and control” clause without time-period restrictions renders the warrant overbroad and insufficiently particular.
- Officers have an affirmative duty to reassess probable cause during warrant execution; when facts discovered during the search dissipate probable cause, officers must cease the search and report back to the magistrate.
- No reasonable officer would continue searching after discovering evidence that the underlying alleged crime did not occur; good faith cannot extend to continuing execution of a warrant after probable cause has evaporated.
- Digital searches are subject to heightened Fourth Amendment scrutiny due to the vast quantity of data stored on computers and must be limited to evidence actually responsive to the warrant’s allegations.
Why It Matters
This decision significantly constrains police authority to conduct expansive computer searches and establishes enforceable duties for executing officers that extend beyond the warrant’s face. The ruling creates binding precedent that officers cannot rely on broad “dominion and control” provisions to justify rummaging through decades of computer files, and it imposes an obligation to halt searches when they discover information undermining the warrant’s foundation. For digital forensic practitioners and law enforcement, the decision means that warrant execution requires ongoing assessment of probable cause and immediate cessation of the search once that probable cause is negated.
The decision also highlights the profound constitutional tension in criminal law: suppressing evidence of despicable crimes against a child is deeply troubling from a law-and-order perspective, yet the court held that Fourth Amendment protections cannot be overridden by sympathy for victims or the heinousness of the eventual crime discovered. By strictly enforcing Fourth Amendment limits even where doing so protects someone later found to have committed serious crimes, the court reaffirmed that constitutional protections serve systemic interests in restraining governmental power that transcend individual cases.