Kudos to the New Jersey Supreme Court.  Last week, the court ruled that ISPs can’t release personal information about their New Jersey users without a valid subpoena.  The court, in a unanimous 7-0 ruling, found that the New Jersey Constitution gives its residents greater protection against unreasonable searches than the U.S. Constitution does.  In the case before the court, the court ruled that the police were required to first obtain a grand jury subpoena before learning a woman’s identity from an ISP.  Her ISP apparently released this information at the request of the police. 

This is an important decision.  First, the New Jersey Supreme Court is one of the more highly regarded state courts in the United States.  Other state courts wrestling with these types of issues will undoubtedly look to see how the New Jersey court decided this case.  Second, it illustrates the continued rise of “state constitutionalism.”  People typically don’t realize that the federal constitution sets a “floor” on a person’s constitutional rights, not a “ceiling.”  In other words, a state court can’t rule that its state’s constitution gives less protection than the federal one does, but can find that the state constitution gives more—at least to its own residents.

Given the perception that the U.S. Supreme Court is less friendly (and somewhat hostile) to privacy rights—especially when it comes to the rights of law enforcement to obtain personal data in these post-9/11 times—combined with the continued paralysis in Congress over individual privacy rights, a ruling from a state’s highest court on issues such as this serves as an implicit rebuke at the lack of leadership at the federal level.  While it’s only one state so far that has now recognized a reasonable expectation of privacy for internet users, it’s got to start somewhere.  Let’s hope other states follow suit.