Email Privacy Act
- Referred to the House Committee on the Judiciary.
- Introduced in House
- Introduced in House
The provisions, in plain language.
Expands the federal ban on unauthorized disclosure of stored communications to cover data that is 'stored, held, or maintained' by an email or cloud provider — not just data 'while in electronic storage' — so that older messages and cloud-held files get the same legal protection as newly received messages.
Requires government agencies to obtain a search warrant from a court before compelling any email or cloud storage provider to hand over the contents of stored wire or electronic communications, regardless of how long the messages have been stored — eliminating the prior rule that allowed agencies to use an administrative subpoena for messages older than 180 days.
Extends the warrant requirement to remote computing services (cloud platforms) as well as traditional electronic communication services, so all cloud-held content must be obtained through a court-issued warrant.
Allows a warrant to specify a deadline by which the provider must respond; if no deadline is stated, the provider must respond promptly.
Preserves lawful consent of the account holder (subscriber or customer) as a valid basis for a provider to disclose communications without a warrant.
Who it helps · who it burdens.
Who it helps
- Email and cloud storage usersAll people who store messages or files with email or cloud providers gain stronger privacy protection: government agencies must now obtain a court warrant — not just an administrative subpoena — before accessing stored communications, regardless of age. Provisions 1 and 2 directly extend this protection.
- Email and cloud service providersProviders gain a clearer legal framework: they may lawfully refuse government requests that lack a warrant, reducing their exposure to disclosure demands that lack judicial oversight. Provisions 2 and 3 establish the warrant standard they may invoke.
Who it burdens
- Government law-enforcement and investigative agenciesAgencies must now obtain a court-issued search warrant — rather than an administrative subpoena or court order — to compel disclosure of stored email and cloud content, adding a judicial authorization step to investigations. Provisions 2 and 3 impose this requirement.