DHS Uses a 96-Year-Old Trade Law to Hunt ICE Critics Online

Multiple surveillance cameras mounted on a pole against a cloudy sky. — Photo via Unsplash

TL;DR: The Department of Homeland Security issued an administrative summons to Google on February 14, 2026, demanding the name, residential address, physical location data, browsing history, and communications records of a Canadian man who posted criticism of ICE on X. The man, identified only as "John Doe," lives in Canada and hasn't entered the United States since 2015. DHS cited Section 1509 of the Tariff Act of 1930 (a customs enforcement statute designed for import-duty investigations) as its authority. The ACLU of D.C. and ACLU of Northern California filed suit on May 4 in the Northern District of California to block the summons ^[1][2]. This is not an isolated case. Since Trump's second term began, Google, Meta, Reddit, and Discord have received hundreds of similar administrative subpoenas targeting people who criticized ICE online ^[3][4].

What Happened

On January 30, 2026, a Canadian man posted a series of messages on X criticizing ICE and Trump's immigration policies. The posts came after federal agents shot and killed two Americans in Minneapolis (Renee Good on January 7 and Alex Pretti on January 24) during Operation Metro Surge, a deportation enforcement operation that drew nationwide protests ^[5][6]. The Canadian's posts received more than 96,000 views combined ^[2].

Two weeks later, on February 14, DHS sent Google a customs summons demanding the man's personal information. Google notified him on February 9 that it had received the demand, despite DHS requesting indefinite secrecy ^[7]. The summons covered his account activity from September 1, 2025 through February 4, 2026, a window that perfectly brackets his period of online criticism.

Here is what DHS demanded from Google:

His full name and residential address
Physical movement and location data: where he went, when
Detailed website browsing records
Online communications records
Account activity linked to his Gmail and associated X account

The man has never imported or exported anything during the period covered by the summons. He has not entered the United States in over a decade. He is not under criminal investigation. He posted criticism of the government on social media, and DHS responded by reaching across an international border to demand the contents of his Google account ^[1][2].

The 96-Year-Old Law They're Using

Section 1509 of the Tariff Act of 1930, codified at 19 U.S.C. § 1509, gives customs officials the power to examine "records, statements, and declarations" in investigations related to "entries, duties, penalties, or customs-law compliance" ^[2][7]. It was built for inspecting shipping manifests. For verifying duty payments on imported goods. For catching smugglers.

DHS is using it to get a man's browsing history because he said mean things about ICE on Twitter.

The ACLU's complaint argues that the summons exceeds Section 1509's authority on two separate grounds. First, the statute only authorizes examination of records related to customs enforcement. Criticizing ICE on X is not a customs matter. Second, even if the summons were issued for a legitimate customs purpose, the scope of what DHS demanded (location data, browsing history, communications) "would still far exceed 1509's limits on what officials can use it to acquire" ^[1][2].

A former CBP assistant chief counsel told WinBuzzer that Section 1509's power was "built for import and duty cases, not a speech-linked records fight" ^[7].

The Pattern: Hundreds of Subpoenas, Zero Judicial Oversight

This is not one rogue summons. It is part of a systematic campaign.

In February 2026, the New York Times reported that Google, Meta, Reddit, and Discord had received hundreds of administrative subpoenas from DHS since Trump's second term began, all seeking to identify anonymous users who criticized ICE or documented immigration enforcement ^[3]. TechCrunch confirmed the scale, reporting that DHS was "trying to force tech companies to hand over data about Trump critics" ^[4].

The key word is "administrative." Unlike a judicial subpoena, which requires a judge to review evidence and approve the demand, an administrative subpoena is issued by the agency itself. No judge signs off. No probable cause is required. No one outside DHS reviews whether the demand has a legitimate purpose ^[4][8].

When a handful of targets challenged these subpoenas in court (with ACLU attorneys in Northern California and Pennsylvania), DHS quietly withdrew them rather than risk a judicial ruling that its authority didn't extend to speech policing ^[1][8]. The pattern is deliberate: issue the subpoenas, bank on most people not having the resources to fight them, and pull back the moment someone does.

The EFF Called This in February

On February 20, 2026, the Electronic Frontier Foundation published an open letter to ten major tech companies (Amazon, Apple, Discord, Google, Meta, Microsoft, Reddit, SNAP, TikTok, and X) demanding they resist DHS subpoenas ^[8]. The letter asked platforms to:

Insist on a court order before complying with any DHS administrative subpoena
Notify users when they are targeted, giving them a chance to challenge the demand
Resist gag orders that prevent companies from telling users about the subpoena

The EFF pointed to a specific case: in 2025, Google handed Amandla Thomas-Johnson's data to ICE without giving him a chance to challenge the subpoena, breaking a nearly decade-long company promise to notify users before complying with law enforcement data demands ^[8].

Google notified this Canadian plaintiff. But notification without resistance is just a courtesy warning that your data is about to be handed to the government.

Why This Case Is Different

The DHS subpoena campaigns against Reddit users, Instagram accounts, and domestic critics are alarming enough. But this case escalates the pattern in three ways.

It crosses an international border. The plaintiff is a Canadian citizen living in Canada. DHS is asserting the authority to demand personal data about a foreign national in a foreign country, from an American company, because he posted criticism that American officials didn't like. If this stands, any person in any country who uses a Google, Meta, or Microsoft account is one critical post away from having their data demanded by DHS ^[1][2].

It uses a trade law to punish speech. Every previous DHS subpoena in this campaign used immigration enforcement authority, at least nominally connected to DHS's mission. A customs summons under the Tariff Act of 1930 is something else entirely. It means DHS is willing to rummage through its statutory toolbox for any authority that lets it skip a judge, regardless of whether that authority has anything to do with the actual purpose of the demand ^[2][7].

It demands location data. The previous subpoenas sought names, emails, phone numbers: account registration data. This summons demands physical location tracking. Where this man went, when, for five months. That is a qualitative leap from "tell us who this person is" to "tell us where this person has been" ^[1].

The First Amendment Problem

"Not satisfied with trying to suppress speech at home, the Trump administration is now targeting dissenters abroad," ACLU-D.C. senior staff attorney Michael Perloff said in a statement ^[1].

"A law designed to enforce customs does not give the government authority to target its critics," Perloff added ^[1].

ACLU NorCal attorney Jake Snow was more direct: "The Trump administration is illegally targeting online critics just because it doesn't like what they're posting" ^[1].

The plaintiff, identified only as John Doe to protect his family, said: "Never in a million years did I think that, after criticizing the U.S. government, I would be targeted" ^[1].

The First Amendment protects anonymous speech. The Supreme Court has repeatedly held that the right to speak anonymously is part of the freedom of speech, from the Federalist Papers to internet commentary. A government demand to unmask an anonymous critic must survive strict scrutiny, which means the government needs a compelling interest and the demand must be narrowly tailored to serve that interest ^[9]. "He said something we didn't like about ICE" does not meet that standard.

What Google Should Do (and What It Probably Won't)

Google has the legal resources to challenge every one of these subpoenas. It has a legal team larger than most law firms. It has standing Supreme Court precedent protecting anonymous speech. And it has a stated policy of notifying users when the government demands their data.

But Google has also quietly complied with at least one DHS subpoena without notifying the user. The EFF's open letter exists because the tech industry's default response to government data demands has historically been compliance, not resistance ^[8].

The ACLU's lawsuit asks the Northern District of California to rule that DHS exceeded its statutory authority. If the court agrees, it could set a precedent that customs enforcement tools cannot be repurposed for speech surveillance. If DHS withdraws the summons before a ruling, as it has done in every previous challenged case, the legal question stays unresolved, and the subpoena machine keeps running.

The Bigger Picture

This case fits into a pattern we have been tracking for months. DHS is using every administrative tool it can find to identify and track people who criticize immigration enforcement online:

February 2026: EFF sues DHS and ICE under FOIA for records on the subpoena campaign after the agencies refuse to release information about the scope and legal basis of the demands ^[10].
March 2026: A federal grand jury in Pennsylvania subpoenas Reddit for the identity of an anonymous user who criticized ICE, raising questions about whether DHS is routing demands through criminal proceedings to avoid administrative-subpoena challenges ^[11].
April 2026: Reports emerge that DHS sent administrative subpoenas to Instagram seeking account data for users who posted anti-ICE content, including protest photos and commentary ^[12].
May 2026: The Canadian customs summons case reveals DHS has now expanded beyond immigration enforcement authority to customs enforcement authority: a new legal tool for the same speech-chilling purpose ^[1][2].

Each escalation tests a new boundary. Each withdrawn subpoena avoids the judicial ruling that would set a limit. And each compliant tech company confirms that the strategy works.

What You Can Do

Assume your social media posts are being monitored. If you use a US-based platform (Google, Meta, X, Reddit, Discord), DHS can and does issue administrative subpoenas for user data without a judge's approval. This applies regardless of your nationality or location.
Separate your identities. Don't link your real-name Gmail account to your pseudonymous social media accounts. The Canadian plaintiff's Gmail was linked to his X account, which gave DHS a single subpoena target for both platforms.
Use a VPN. Location data was part of this summons. A VPN won't stop a determined government from tracking you, but it prevents your Google account from logging your physical movements through IP-based location tracking.
Support the ACLU's challenge. The ACLU-D.C. and ACLU NorCal are the organizations fighting these subpoenas in court. Every case they take costs money. Every withdrawn subpoena that avoids a ruling means the next case has to start from scratch.
Check your Google account. Google's security settings show recent security events, including government data requests. Review your notification settings and ensure Google can reach you if your account is targeted.

Sources

Published: May 9, 2026