"In cases where there is an expectation of privacy, the agency must also obtain a search warrant." . . . . .