Key Points
- ATF has canceled its Webloc contract.
- The dispute centers on warrantless location data.
- Lawmakers said ATF conducted more than 300 searches.
- Data boundaries in nicotine-product enforcement may face scrutiny.
2Firsts
June 29, 2026
According to The Associated Press, the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has canceled its contract for Webloc, a phone-tracking tool, after lawmakers, a prosecutor and a judge raised legal and privacy concerns over warrantless use of commercial location data in criminal investigations.
ATF Cancels Location-Data Tool
AP reported that Webloc, operated by Penlink, sources mobile-device location data from consumer apps and advertising networks. Such information is often described as ad-tech data, generated when users download apps or browse the web.
The controversy is that law enforcement agencies can buy commercial data to identify mobile devices present at specific locations and times without first obtaining a traditional warrant. AP noted that the U.S. Supreme Court ruled in 2018 that police need a warrant to obtain historical cellphone movement data from carriers in criminal investigations, but the court has not directly addressed the government’s purchase of commercially acquired data.
ATF told AP that its use of Webloc was a pilot program intended to test whether the tool could improve investigative capability. The agency said it determined that Webloc “does not meet our needs” and said it is not using other ad-tech-sourced services.
Rep. Michael Cloud and Sen. Ron Wyden had raised concerns over ATF’s use of bulk commercial location data. The two lawmakers said that, after an ATF briefing, they learned the agency had conducted more than 300 warrantless searches using Webloc, including more than 200 tied to active ATF cases.
AP reported that, in a suspected arson case involving a facility belonging to a U.S. defense contractor, both a prosecutor and a judge expressed concerns over the use of Webloc ad-tech data. Cloud and Wyden said ATF ultimately had to return to traditional procedures and obtain a court order for bulk cellphone tower data from carriers.
Commercial Data Use Continues Elsewhere
ATF’s decision does not mean the broader U.S. law enforcement system has stopped buying commercial location data. AP reported that other agencies, including the FBI and the Department of Homeland Security (DHS), continue to buy commercial geolocation data.
DHS issued a request for information to private industry in January on how commercially available advertising data could be used for deportation and law enforcement missions. FBI Director Kash Patel also told the Senate that the FBI purchases commercially available information consistent with the Constitution and the Electronic Communications Privacy Act, and that such information has produced valuable intelligence.
A bipartisan group of lawmakers has introduced legislation that would ban the government from buying such data without a judicial order. The issue has therefore expanded from a dispute over a single enforcement tool into a broader debate over whether government agencies can use data brokers to bypass Fourth Amendment warrant requirements.
For law enforcement agencies, commercial location data is attractive because of its broad coverage, speed and potential use in mapping movements, gathering places, storage sites and criminal networks. For courts and lawmakers, the key question is whether the government can buy information that it would otherwise need a warrant to obtain.
Impact on the Novel Tobacco Market
The impact on the U.S. novel tobacco product market is not a direct product-regulatory change, but a shift in enforcement tools and evidentiary boundaries. ATF’s tobacco enforcement role focuses mainly on contraband cigarettes, smokeless tobacco, smuggling, tax issues and illegal distribution. Market authorization, import compliance and sales enforcement for e-cigarettes and nicotine pouches are mainly handled by FDA, CBP and the Department of Justice.
U.S. enforcement against illegal e-cigarettes remains active. FDA, CBP and the Justice Department have conducted multiple operations targeting unauthorized e-cigarette products through import seizures, warehouse inspections and distributor-level enforcement. Current priorities include products without FDA marketing authorization, youth-appealing flavored products, import declaration issues, distribution networks and retail sales.
Against that backdrop, ATF’s Webloc decision sends three signals.
First, law enforcement use of commercial data in tobacco and nicotine supply-chain investigations may require clearer legal authorization. Illegal e-cigarette and nicotine pouch distribution can involve importers, warehouses, wholesalers, retailers and online channels. If agencies use ad-tech location data to track those networks, such use may face stricter procedural review.
Second, evidence admissibility and investigative durability will matter more. Even if commercial location data helps identify leads, prosecutors and courts may still require agencies to use traditional subpoenas, warrants, court orders, customs inspections and field checks to secure evidence if the data source, authorization basis or privacy risk is challenged.
Third, data compliance risk is rising on the industry side. E-cigarette, nicotine pouch and traditional tobacco companies in the U.S. market often rely on retail location data, membership systems, advertising technology, logistics tracking and third-party data services. If government use of commercial data faces more scrutiny, companies may also need to reassess governance around consumer location data, marketing data and channel data to avoid additional risks in enforcement, litigation or regulatory investigations.
Overall, ATF’s Webloc decision does not indicate a loosening of novel tobacco regulation. It shows that U.S. enforcement data tools are entering a phase of stronger legal review. For the industry, compliance is no longer limited to whether a product is authorized, whether labels meet requirements or whether channels are legal. It also includes how companies and third-party vendors collect, store, share and use consumer and channel data.
Follow 2Firsts for the latest updates on global tobacco harm reduction, nicotine products and regulatory developments.
Cover image:AP
Disclaimer
This article is provided solely for professional research, industry discussion, and informational purposes. Any references to brands, companies, products, technologies, or policies are made for factual reporting and analytical purposes only, and do not constitute endorsement, recommendation, promotion, or advertising by 2Firsts.
Nicotine-containing products, including but not limited to cigarettes, e-cigarettes, heated tobacco products, and nicotine pouches, carry significant health risks. Readers are responsible for complying with all applicable laws and regulations in their respective jurisdictions, including age restrictions and access limitations.
The information contained in this article should not be regarded as investment, legal, medical, regulatory, or commercial advice. While 2Firsts strives to ensure the accuracy and reliability of its content, it does not assume liability for any direct or indirect loss arising from errors, omissions, inaccuracies, or reliance on the information contained herein.
This article is not intended for individuals below the legal age for accessing tobacco or nicotine-related information in their jurisdiction.
Copyright Notice
This article is either original content produced by 2Firsts or content reproduced, translated, summarized, or adapted from third-party sources with attribution where applicable. The intellectual property rights of the original content remain with 2Firsts or the respective original rights holders.
No individual or organization may copy, reproduce, distribute, republish, modify, translate, or otherwise use this content without prior authorization. Any unauthorized use may result in legal action.
For copyright-related inquiries, corrections, or removal requests, please contact: info@2firsts.com.
AI-Assisted Translation and Editing Notice
Portions of this article may have been translated, edited, or reviewed with the assistance of artificial intelligence tools to improve efficiency and readability. Due to the limitations of AI-assisted translation and editing, discrepancies, omissions, or inaccuracies may exist when compared with the original source.
Where applicable, readers are advised to refer to the original source for the most complete and accurate information. If you identify any errors or believe that any content infringes upon your rights, please contact us at info@2firsts.com, and we will review and address the matter promptly.
