⚖️ Lawsuit says CBP seized phone holding patient data
⚖️ Lawsuit says CBP seized phone holding patient data
A new lawsuit says U.S. Customs and Border Protection seized a psychiatric nurse practitioner’s phone and laptop at Washington Dulles, despite warnings that the devices contained confidential patient information, leaving him unable to prescribe some psychiatric medications because federal phone verification rules require access to that device. The suit against CBP could become a key test of how far border-search authority extends when protected clinical data and continuity of care are on the line.
The Move
Psychiatric nurse practitioner Muhammad Numaan Imam alleges CBP detained his family for about four hours after their return to Dulles and seized their electronics after he declined to unlock his phone without speaking to a lawyer.
According to the complaint, Imam told agents the phone contained patient communications and case-management information protected under HIPAA.
The American-Arab Anti-Discrimination Committee filed the case, arguing CBP threatened to take the devices “the easy way or the hard way,” then revoked Imam’s Global Entry status the next day.
The lawsuit seeks return of the devices and data under Rule 41(g), arguing there is no warrant, contraband, or active criminal basis for continued seizure.
Why It Matters for Care
The most immediate bedside implication: Imam says he cannot prescribe certain psychiatric medications because federal rules require phone-based identity verification.
For clinicians who use personal devices for EHR access, messaging, prescribing, or care coordination, a border seizure can abruptly disrupt medication management, patient communication, and follow-up.
The case highlights a practical compliance collision: clinicians may be expected to protect PHI under HIPAA while also facing pressure from border agents to unlock devices.
Even if data are not ultimately searched, loss of hardware alone can interrupt access to schedules, refill requests, documentation, and two-factor authentication tied to clinical systems.
Between the Lines
CBP is relying on the broad border-search exception, an area where courts have issued conflicting rulings on electronic-device searches.
ADC says the bigger issue is coercion: using seizure authority to force access to phones and cloud-linked data even when no clear border-related investigative purpose is apparent.
For health care workers, the second-order risk is that personal-device dependence in modern practice creates a new vulnerability at ports of entry.
CBP says electronic inspections are integral to safety, but its own policy only vaguely addresses sensitive information such as medical records and says devices ordinarily should be held less than five days.
What To Watch
Whether a court orders rapid return of the devices and sets clearer limits on retaining clinicians’ electronics that may contain PHI.
Whether discovery shows how CBP handled, filtered, copied, or accessed any protected medical information while the devices were in custody.
An upcoming Supreme Court-related fight over CBP electronic searches, where parallel cases backed by ADC could shape the legal framework.
Whether health systems, specialty societies, or compliance teams respond with updated travel guidance on separating personal and clinical data before international trips.
Source: Reason