Obviously there should be limits but what should they be?

I actually don’t think asking for phone ids for 30min before and after an event within a limited distance IS overly broad. The fact it only returned 19 initial IDs kind of shows that no?

Equally, knowing someone has been in or near a bank is not particularly intrusive. It’s not like searching who visited a lawyers office or a sexual health clinic etc.

So would a 5 min window have been ok? Or a 10minute window?

When does a warrant become “sprawling”?