Commonwealth v. Davis, J., Aplt., 220 A.3d 534

OAG agents traced eMule peer-to-peer transfers of child pornography to an IP address tied to Joseph J. Davis and executed search warrants at his residence in 2014 and 2015.
Agents seized an HP Envy desktop whose entire hard drive was encrypted with TrueCrypt; agents could only confirm the OS and TrueCrypt volume.
Davis admitted he was the sole user, said only he knew the computer password, and repeatedly refused to disclose it to agents.
The Commonwealth moved to compel Davis to divulge the memorized password; the trial court granted the motion under the "foregone conclusion" doctrine and ordered disclosure.
The Superior Court affirmed; the Pennsylvania Supreme Court granted review to decide whether compelling a memorized password violates the Fifth Amendment.

Issue	Plaintiff's Argument	Defendant's Argument	Held
Whether the Commonwealth can compel Davis to disclose his memorized computer password.	Commonwealth: producing the password is non-testimonial under the foregone conclusion doctrine because the government already knows the computer exists, Davis controls it, and the password will be self-authenticating.	Davis: disclosure is testimonial (reveals contents of his mind), so compelled disclosure violates the Fifth Amendment; foregone conclusion does not apply because the government lacks sufficient independent knowledge of specific files or the password's authenticity.	Held: Compelling recall/disclosure of a memorized password is testimonial and protected by the Fifth Amendment; the foregone conclusion exception is narrow and does not apply here.
Whether the foregone conclusion doctrine transforms password disclosure into a non-testimonial act.	Commonwealth: foregone conclusion applies even to passwords; unlocking the device merely verifies existence/control/authenticity which government can establish.	Davis: foregone conclusion is limited to certain documentary contexts; the government must independently establish existence, possession, and authenticity before compulsion; it failed to do so here.	Held: Foregone conclusion is narrowly construed (historically limited to documentary subpoenas) and cannot be applied to compel a password in this case; the Commonwealth did not meet its burden.

Fisher v. United States, 425 U.S. 391 (1976) (articulated "foregone conclusion" exception to testimonial act-of-production privilege)
Doe v. United States, 487 U.S. 201 (1988) (expression of the contents of the mind is testimonial)
United States v. Doe, 465 U.S. 605 (1984) (act of producing business records can be testimonial where existence/possession/authenticity are not independently known)
Hubbell v. United States, 530 U.S. 27 (2000) (foregone conclusion narrow; production may be testimonial when government lacks prior knowledge and production requires use of the defendant’s mind)
Pennsylvania v. Muniz, 496 U.S. 582 (1990) (distinguishes testimonial answers from physical characteristics; expression of mind protected)
Holt v. United States, 218 U.S. 245 (1910) (physical evidence/acts are not testimonial)
In re Grand Jury Subpoena Duces Tecum Dated March 25, 2011, 670 F.3d 1335 (11th Cir. 2012) (decryption compulsion requires use of the mind and is testimonial)
United States v. Kirschner, 823 F. Supp. 2d 665 (E.D. Mich. 2010) (compelling defendant to reveal password is testimonial)