is what he was charged with (a)
see also: https://en.wikipedia.org/wiki/Border_search_exception
I think the issue will fall on whether the encrypted data on the device (or its decrypted counterpart) counts as property. The rest looks pretty clear-cut to me.
Are you sure about that?
The google search required to find the answer ("federal statute for destruction of evidence") is shorter than your question here.
"Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry..."[0]
If so, on that assumption, should no one ever be able to erase data on their hardware? Is it schrodingers guilt, that you're simply not guilty until someone looks, and then you are?
And if not, you haven't answered GP's question.
Legal cases are adjudicated by human judges who have been dealing with scenarios like this for thousands of years, since long before the invention of software and laptops, and who are not the least bit challenged when presented with strawman scenarios like the one you called out.
Did he know he was suspected of something? Was he suspected of something?
Edit: 18 U.S.C. § 1519 doesn't seem to cover this (unless it covers the act of setting up the duress PIN in the first place as "altering"). § 2232(a) covers actually knowingly providing the duress PIN.
> Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record, document, or tangible object with the intent to impede, obstruct, or influence the investigation or proper administration of any matter within the jurisdiction of any department or agency of the United States or any case filed under title 11, or in relation to or contemplation of any such matter or case, shall be fined under this title, imprisoned not more than 20 years, or both.
That covers the first part of my comment. As for the second part, there is 18 U.S.C. § 2232(a) (destruction or removal of property to prevent seizure)
> Whoever, before, during, or after any search for or seizure of property by any person authorized to make such search or seizure, knowingly destroys, damages, wastes, disposes of, transfers, or otherwise takes any action, or knowingly attempts to destroy, damage, waste, dispose of, transfer, or otherwise take any action, for the purpose of preventing or impairing the Government's lawful authority to take such property into its custody or control or to continue holding such property under its lawful custody and control, shall be fined under this title or imprisoned not more than 5 years, or both.
IANAL, but the encrypted data on the device could be considered property, and the act of providing the duress PIN in place of the real one could be considered a knowing action for the purpose of preventing the government either from continuing to hold that data under its control, or from seizing the data into its control in the first place (since the data was never decrypted).
There was a federal investigation going on?