The Modern Digital Safe: Can Police Legally Compel You to Unlock Your Phone?
In our modern society, our smartphones have become far more than just devices for communication. They are, in essence, a comprehensive digital diary of our lives. They store our most private conversations, bank details, medical records, GPS movements, and a timeline of our personal interactions. For many Australians, the thought of a police officer scrolling through this data is a profound intrusion. But as technology has advanced, so too have the powers of law enforcement.
At National Criminal Lawyers®, we are frequently asked: “Do I have to give the police my PIN?” or “Can they force me to put my face in front of my phone to unlock it?”
The answer is increasingly complex. While you generally have a right to silence and a right to privacy, these rights can be overridden by specific court orders. If you find yourself in a situation where you are served with a formal order, the consequences of refusing can be far more severe than the penalties for the crime the police are actually investigating.
The NSW Authority: LEPRA Part 5, Division 4A
The primary authority for police to compel you to unlock a device in NSW is now found in Part 5, Division 4A of the Law Enforcement (Powers and Responsibilities) Act 2002 (NSW), commonly known as ‘LEPRA.’
Under Section 76AF of LEPRA, a police officer can apply for a Digital Evidence Access Order if they are already applying for a search warrant or a crime scene warrant. A Magistrate or an authorised officer can grant this order if they are satisfied there are “reasonable grounds” to suspect that a computer or device at the location contains evidence of an offence.
What Does a DEAO Force You to Do?
If a Magistrate signs a DEAO, you are legally compelled to:
- Provide Passwords and PINs: You must hand over any alphanumeric codes or patterns required to access the device.
- Provide Biometric Access: You can be forced to use your fingerprint (TouchID) or your face (FaceID) to unlock the device.
- Provide Technical Assistance: This goes beyond just unlocking; it can include providing information or assistance to allow the police to copy data from the device or convert it into a form they can understand (like decrypting files).
It is crucial to understand that a DEAO is a formal court order. If a police officer simply asks for your password during a random stop on the street or a police search, that is not an access order. Without a document signed by a Magistrate, you are generally entitled to refuse. But once that order is signed, the rules of the game change entirely.
The Federal Authority: Section 3LA of the Crimes Act 1914
If the police are investigating federal offences, such as large-scale drug importation, terrorism, or child exploitation, they will likely rely on federal laws. The Crimes Act 1914 (Cth) contains a very similar power under Section 3LA.
Section 3LA allows a Magistrate to make an order requiring a person to provide “any information or assistance” that is reasonable and necessary to allow an officer to access data held in, or accessible from, a computer or device.
The federal power is arguably even broader than the state power. Because the law refers to data “accessible from” the device, it can potentially reach into cloud storage services linked to your phone, such as iCloud or Google Drive. How much of your life is stored in the “cloud,” and are you comfortable with the police having the keys to it?
What Happens if You Refuse? The Penalties
The most striking feature of these access orders is the penalty for non-compliance. Refusing to obey a valid Digital Evidence Access Order is a standalone criminal offence. In many instances, the maximum penalty for refusing to unlock the phone is significantly higher than the penalty for the crime the police were investigating in the first place.
- NSW Penalties (Section 76AO LEPRA): A person who fails to comply with a DEAO without a “reasonable excuse” faces a maximum penalty of 5 years imprisonment and/or a fine of $11,000.
- Commonwealth Penalties (Section 3LA Crimes Act): The standard penalty is 5 years imprisonment. However, if the underlying investigation relates to a “serious offence” (like terrorism or serious child abuse), the penalty jumps to 10 years imprisonment.
This creates a “Catch-22” situation for many defendants. If you unlock the phone, you might provide the evidence the police need to convict you of a crime. If you don’t unlock the phone, you could potentially go to prison for up to 5 to 10 years just for the refusal itself!
Can You Use the “Privilege Against Self-Incrimination” as an Excuse?
Usually, in the Australian legal system, you cannot be forced to give evidence that would prove your own guilt. This is known as the “privilege against self-incrimination.” However, the legislatures have explicitly stripped this privilege away in the context of phone unlocking.
Both the NSW and Commonwealth laws state that a person is not excused from complying with an access order on the ground that doing so might incriminate them. The government’s logic is that the public interest in investigating serious crime outweighs your individual right to keep your data encrypted.
By the time a Magistrate signs a DEAO, the court has already decided there is enough suspicion to justify the intrusion. Consequently, “I don’t want to incriminate myself” is not a “reasonable excuse” under the law.
Are People Actually Being Prosecuted for This?
Yes. The police are no longer just using these orders as threats; they are actively prosecuting people who refuse to cooperate.
One recent and notable case is Garcia v Commissioner of Police [2025] QDC 8. In this matter, the defendant refused to provide his PIN during a search warrant related to a drug investigation. He was not even charged with any underlying drug offences at that time. However, for the sole act of refusing to provide his PIN, he was sentenced to 9 months of actual imprisonment. The court noted that the sentence needed to be harsh enough to act as a “general deterrent” so that others wouldn’t think they could block a police investigation simply by withholding a password.
Another landmark case is Commissioner of the Australian Federal Police v Luppino [2021] FCAFC 43, which reached the Full Court of the Federal Court. The defendant tried to argue that the privilege against self-incrimination should still apply to Section 3LA orders. The court rejected this, confirming that the clear words of the law overrode the common law privilege.
These cases show that the courts have very little sympathy for those who attempt to “lock out” the police once a valid order has been issued.
What is a “Reasonable Excuse”?
The law allows for a “reasonable excuse,” but it is an exceptionally narrow window.
- “I forgot my password”: You might think this is an easy way out, but it is a question of fact for the court. If the police can show you were using the phone ten minutes before they arrived, or if they find the password written in a notebook, your excuse will likely be seen as a lie.
- Legal Professional Privilege: If your phone contains messages between you and your lawyer for the purpose of getting legal advice, those messages are “privileged.” In the case of Barbaro v Queensland Police Service [2020] QCA 230, it was held that an order should be framed in a way that respects this privilege. If an order is so broad that it forces you to give up privileged legal advice, you may have a ground to challenge the order.
- Physical Inability: If the device is genuinely broken or encrypted in a way that you truly cannot access, this may be a reasonable excuse.
However, simply wanting to keep your private life private is never a “reasonable excuse” in the eyes of a Magistrate.
Practical Advice: What Should You Do?
If you are ever in a situation where the police are demanding access to your phone, you must immediately distinguish between a request and an order.
1. If it is a Request: If an officer says, “Can you unlock this for me?” or “Help us out and give us your PIN,” you are generally entitled to say no. You should be polite but firm. You can say: “I do not consent to a search of my phone, I will not be providing my password, and I wish to speak with my lawyer.” You do not need to be arrested to exercise this right.
2. If it is an Order: If the officer serves you with a document called a “Digital Evidence Access Order” or a “Section 3LA Order,” you are now under a legal obligation. Do not attempt to guess whether the order is valid. Ask for a copy of the document and tell the police you want to call your lawyer immediately.
At National Criminal Lawyers®, we can review the order to see if it was properly issued. Sometimes these orders are too broad, or the Magistrate didn’t have the proper jurisdiction to sign them. We can help you navigate this high-stakes moment to ensure your rights are protected as much as the law allows.
