Email Privacy Act
- Sponsor
- Sen. Lee, Mike [R-UT]
- Committees
- Judiciary Committee (primary)
- Last action
- Jun 1, 2026
Bottom line
The Email Privacy Act modernizes federal electronic privacy law by establishing a warrant requirement for accessing stored digital communications and subscriber information, aligning privacy protections with contemporary digital practices and enhancing transparency.
What it actually does
This bill significantly updates the Stored Communications Act (SCA) within Title 18 of the U.S. Code, primarily by requiring governmental entities to obtain a warrant to access the content of electronic communications and certain subscriber records held by third-party service providers. It eliminates the distinction between data stored for less than 180 days and older data, ensuring consistent Fourth Amendment protections. The bill also clarifies rules for voluntary disclosures by service providers and explicitly permits providers to notify customers of data requests, unless a gag order is in place.
Proponents argue
Supporters argue that this bill is a crucial, bipartisan effort to modernize outdated privacy laws that were written before the widespread use of cloud computing and email. They contend it ensures that digital data receives the same Fourth Amendment protections as physical documents, protecting consumer privacy from unwarranted government intrusion and fostering trust in online services. Proponents emphasize that it provides clear, consistent rules for law enforcement while safeguarding civil liberties.
Opponents contend
Some law enforcement groups may express concerns that the bill's expanded warrant requirement could create additional administrative burdens and potential delays in investigations, particularly for accessing non-content subscriber information that was previously obtainable with a subpoena. They might argue that this could impede their ability to respond quickly to time-sensitive cases or gather essential intelligence, potentially impacting public safety.
The bill is concise and can be read and understood quickly by an informed reader, allowing for a timely evaluation of its provisions.
Section 2
Clarifying Voluntary Disclosure of Electronic Communications
This section amends 18 U.S.C. 2702 to update and clarify when providers of electronic communication or remote computing services may voluntarily disclose customer communications and records. It replaces the term "divulge" with "disclose" and broadens the scope to include information "stored, held, or maintained" by the service, not just "in electronic storage." It also refines the categories of individuals who can provide lawful consent for such disclosures, including the originator, addressee, intended recipient, or the subscriber/customer.
Supporters argue
Supporters argue these changes modernize outdated language in the Stored Communications Act (SCA), making the law clearer for both service providers and consumers regarding voluntary data sharing, without creating new loopholes for law enforcement. This ensures legal precision in the digital age.
Critics contend
No specific opposition is typically raised against these technical clarifications, as they primarily update terminology and scope without fundamentally altering the balance of power or creating new avenues for government access.
Tradeoffs
This provision balances the need for clear legal guidelines for service providers to operate within with the privacy expectations of users regarding their stored communications, aiming for greater transparency and consistency.
Section 3(a)(1) and 3(b)(1)
Requiring a Warrant for Electronic Communication Content
This provision mandates that a governmental entity must obtain a warrant issued by a court of competent jurisdiction to compel a provider of electronic communication service or remote computing service to disclose the contents of a wire or electronic communication. Crucially, it strikes the distinction in existing law that allowed access to content stored for more than 180 days with a subpoena or court order, meaning a warrant is now required regardless of how long the data has been stored. It also removes the previous exception that allowed access without a warrant for content stored over 180 days.
Section 3(a)(2)
Requiring a Warrant for Subscriber and Transactional Records
This section amends 18 U.S.C. 2703(c) to require a governmental entity to obtain a warrant for compelling disclosure of non-content records pertaining to a subscriber or customer, such as name, address, local and long distance telephone connection records, session times and durations, and means of payment. Previously, some of this information could be obtained with a subpoena or court order without a warrant. It also clarifies that providers must promptly respond to warrants, and may notify customers of receipt of legal process unless a gag order is in place.
Section 3(a)(4)
Subscriber Notification and Preservation of Congressional Authority
This section adds new subsections to 18 U.S.C. 2703. Subsection (i) explicitly permits service providers to notify subscribers or customers of a warrant, court order, subpoena, or request, unless a gag order (under section 2705) is in place. Subsection (j) clarifies that the bill does not modify authorities for governmental entities to obtain communications where the originator/recipient is an officer, director, employee, or agent of the provider acting in their capacity, or if the communication advertises a public product or service. Subsection (k) explicitly states that the bill does not limit the power of inquiry vested in Congress by Article I of the Constitution.
This provision strikes subparagraph (D) from 18 U.S.C. 2703(c)(1), which previously allowed governmental entities to obtain non-content records (like subscriber information) without a warrant in cases of emergency involving danger of death or serious physical injury. Subparagraph (E) is then redesignated as (D).
Section 3(a)(2)(A)(v) and (vi)
Why it matters:While the method of amendment (striking and redesignating) is standard legislative practice, the removal of an emergency exception for data access is substantively significant and could be easily overlooked by a reader not meticulously comparing the bill text to current law.
Case for: Proponents would argue that even in emergencies, law enforcement should seek a warrant, or that existing exigent circumstances doctrines or other legal avenues are sufficient to address immediate threats. This removal prevents potential abuse of a broad emergency exception for data access without judicial review.
Case against: Opponents, particularly law enforcement, would argue that removing this specific emergency exception could hinder their ability to respond rapidly to life-threatening situations where immediate access to subscriber information is crucial to prevent harm, potentially delaying critical interventions.
Estimated impact: This change could potentially slow down law enforcement's ability to quickly obtain non-content subscriber data in rare, but critical, emergency situations, impacting investigations related to kidnapping, active threats, or other immediate dangers, if other legal avenues are not immediately available or clear.