ECPA Modernization Act of 2017
A BILL
To amend title 18, United States Code, to update the privacy protections for electronic communications information that is stored by third-party service providers and for geolocation information in order to protect consumer privacy interests while meeting law enforcement needs, and for other purposes.
Sec. 2 Warrant for stored content and geolocation information
“(1) to an originator, addressee, or intended recipient of such communication, to the subscriber or customer on whose behalf the provider stores, holds, or maintains such communication, or to an agent of such addressee, intended recipient, subscriber, or customer;”
“(3) with the lawful consent of the originator, addressee, or intended recipient of such communication, or of the subscriber or customer on whose behalf the provider stores, holds, or maintains such communication;”
“(7) to a governmental entity as permitted under section 222(d)(4) of the Communications Act of 1934 (47 U.S.C. 222(d)(4)) in order to respond to a call for emergency services by a user of an electronic communications device.”
“(b) Notice—Except as provided in section 2705, not later than 10 business days after a governmental entity receives the contents of a wire or electronic communication of a subscriber or customer from a provider of electronic communication service or remote computing service, the governmental entity shall serve upon, or deliver to by registered or first-class mail, electronic mail, or other means reasonably calculated to be effective as may be specified by the court issuing the warrant, the subscriber or customer—
“(1) a copy of the warrant or emergency request; and
“(2) a notice that includes the information referred to in clauses (i) and (ii) of section 2705(a)(4)(B).”
“(h) Geolocation information
“(1) In general—A governmental entity may require a provider of electronic communication service, geolocation information service, or remote computing service, to disclose stored geolocation information only pursuant to a warrant issued and executed in accordance with the Federal Rules of Criminal Procedure (or, in the case of a State court, issued using State warrant procedures), issued by a court of competent jurisdiction.
“(2) Notice—Except as provided in section 2705, not later than 10 business days after a governmental entity acquires stored geolocation information, the governmental entity shall serve upon, or deliver to by registered or first-class mail, electronic mail, or other means reasonably calculated to be effective as may be specified by the court issuing the warrant, the subscriber or customer—
“(A) a copy of the warrant or emergency request; and
“(B) a notice that includes the information referred to in clauses (i) and (ii) of section 2705(a)(4)(B).
“(i) Rule of construction related to legal process—Nothing in this section or in section 2702 shall limit an otherwise lawful authority of a governmental entity to use an administrative subpoena authorized by Federal or State statute, a grand jury, trial, or civil discovery subpoena, or a warrant issued using the procedures described in the Federal Rules of Criminal Procedure (or, in the case of a State court, issued using State warrant procedures) by a court of competent jurisdiction to—
“(1) require an originator, addressee, or intended recipient of a wire or electronic communication to disclose a wire or electronic communication (including the contents of that communication) to the governmental entity;
“(2) require a person or entity that provides an electronic communication service to the officers, directors, employees, or agents of the person or entity (for the purpose of carrying out their duties) to disclose wire or electronic communication (including the contents of that communication) to or from the person or entity itself or to or from an officer, director, employee, or agent of the entity to a governmental entity, if the wire or electronic communication is stored, held, or maintained on an electronic communications system owned, operated, or controlled by the person or entity; or
“(3) require a person or entity that provides a remote computing service or electronic communication service to disclose a wire or electronic communication (including the contents of that communication) that advertises or promotes a product or service and that has been made readily accessible to the general public.”
Sec. 3 Particularity requirement for stored electronic records
Sec. 4 Notice of lawfully obtained information
“(1) In general—A governmental entity that is seeking a warrant under subsection (a) or (h) of section 2703 may include in the application for the warrant a request for an order delaying the notification required under section 2703(b) for a period of not more than 90 days.”
“(3) Extension—Upon request by a governmental entity, a court may grant one or more extensions of the delay of notification granted under paragraph (2) of not more than 90 days.”
“(A) a copy of the warrant; and”
“(i) of the nature of the law enforcement inquiry with reasonable specificity;”
“(iii) of the date on which the warrant was served on the provider and the date on which the information was provided by the provider to the governmental entity;”
“(b) Preclusion of notice to subject of governmental access
“(1) In general—A governmental entity that is obtaining the contents of a communication or information or records under section 2703 may apply to a court for an order directing a provider of electronic communication service, geolocation service, or remote computing service to which a warrant, order, subpoena, or other directive under section 2703 is directed not to notify any other person of the existence of the warrant, order, subpoena, or other directive for a period of not more than 90 days.
“(2) Determination—A court shall grant a request for an order made under paragraph (1) if the court determines that there is reason to believe, based on specific and articulable facts, that notification of the existence of the warrant, order, subpoena, or other directive will result in—
“(A) endangering the life or physical safety of an individual;
“(B) flight from prosecution;
“(C) destruction of or tampering with evidence;
“(D) intimidation of potential witnesses; or
“(E) otherwise seriously jeopardizing an investigation or unduly delaying a trial.
“(3) Extension—Upon request by a governmental entity, a court may grant one or more extensions of an order granted under paragraph (2) of not more than 90 days.
“(4) Notification of changed circumstances—Upon conclusion of the investigation for which a warrant, order, subpoena, or other directive under section 2703 was sought, or if the need for the nondisclosure order under subparagraph (2) ceases to exist, the governmental entity that requested the nondisclosure order shall, within a reasonable period of time, notify the court of the changed circumstances so that the nondisclosure order can be reassessed or vacated.
“(5) Exception—A provider of electronic communication service or remote computing service to which an order under subsection (b)(2) applies, or officer, employee, or agent thereof, may disclose information otherwise subject to any applicable nondisclosure requirement to—
“(A) those persons to whom disclosure is necessary in order to comply with the request;
“(B) an attorney in order to obtain legal advice or assistance regarding the request; and
“(C) upon an application by a provider, any person the court determines can be notified of the request without causing the adverse result in subparagraph (2) that serves as the basis for the issuance of the nondisclosure order.
“(6) Scope of nondisclosure order—Any person to whom disclosure is made under paragraph (5) shall be subject to the nondisclosure requirements applicable to the person to whom the order is issued under subparagraph (2) in the same manner as the person to whom the request is issued. Any recipient that discloses to a person information otherwise subject to a nondisclosure requirement shall notify the person of the applicable nondisclosure requirement.”
Sec. 5 Warrant requirement for real-time geolocation information and location tracking
“(5) the term electronic communications device means any device that enables access to or use of an electronic communications system, electronic communication service, remote computing service, or geolocation information service;
“(6) the term geolocation information—
“(A) means any information concerning the past or current location of an electronic communications device that is in whole or in part generated by or derived from the operation or use of the electronic communications device; and
“(B) does not include—
“(i) information described in section 2703(c)(2); or
“(ii) the contents of a communication; and
“(7) the term geolocation information service means the provision of a service or functionality that uses or collects geolocation information.”
“2713. Location tracking of electronic communications device
“(a) Prohibition—Except as provided in subsection (b), (c), or (d), or section 2702 or 2703, no governmental entity may access or use an electronic communications device to acquire geolocation information.
“(b) Acquisition pursuant to a warrant or court order—A governmental entity may access or use an electronic communications device to acquire geolocation information if the governmental entity obtains—
“(1) a warrant issued and executed in accordance with provisions relating to tracking devices in the Federal Rules of Criminal Procedure (or, in the case of a State court, issued using State warrant procedures), issued by a court of competent jurisdiction authorizing the access or use of an electronic communications device to acquire geolocation information; or
“(2) a court order under title I, title III, or title VII of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq., 1821 et seq., and 1881 et seq.) authorizing the access or use of an electronic communications device to acquire geolocation information.
“(c) Permitted acquisitions without court order—A governmental entity may access or use an electronic communications device to acquire geolocation information—
“(1) as permitted under section 222(d)(4) of the Communications Act of 1934 (47 U.S.C. 222(d)(4)) in order to respond to a call for emergency services by a user of an electronic communications device;
“(2) with the lawful consent of the owner or authorized user of the electronic communications device concerned; or
“(3) if the owner or user of the electronic communications device concerned has knowingly communicated geolocation information in a manner that is readily accessible to the general public.
“(d) Emergency acquisition of geolocation information
“(1) In general—Subject to paragraph (2), an investigative or law enforcement officer specially designated by the Attorney General, the Deputy Attorney General, the Associate Attorney General, any Assistant Attorney General, any acting Assistant Attorney General, any United States attorney, any acting United States attorney, or the principal prosecuting attorney of any State or political subdivision thereof acting pursuant to a statute of that State may access or use an electronic communications device to acquire geolocation information if the investigative or law enforcement officer reasonably determines that—
“(A) an emergency situation exists that—
“(i) involves—
“(I) immediate danger of death or serious bodily injury to any person; or
“(II) an immediate threat to national security; and
“(ii) requires the access or use of an electronic communications device to acquire geolocation information before an order authorizing the acquisition may, with due diligence, be obtained; and
“(B) in circumstances in which geolocation information may be used as evidence of a crime or in furtherance of a criminal investigation, there are grounds upon which an order could be entered under this section to authorize the accessing or use of an electronic communications device to acquire geolocation information.
“(2) Notice, order and termination—If an investigative or law enforcement officer accesses or uses an electronic communications device to acquire geolocation information under paragraph (1)—
“(A) the officer shall, not later than 10 business days after acquiring geolocation information, serve upon, or deliver to by registered or first-class mail, electronic mail, or other means reasonably calculated to be effective, notice to the owner or authorized user of the electronic communications device whose geolocation information was acquired that such information was obtained or accessed pursuant to the emergency provisions under this subsection and describing the factual bases that led to the officer’s determination that an emergency situation existed;
“(B) in circumstances in which geolocation information may be used as evidence of a crime or in furtherance of a criminal investigation, not later than 48 hours after the activity to acquire or access the geolocation information has occurred, or begins to occur, the investigative or law enforcement officer shall seek a warrant or order described in subsection (b) approving the acquisition; and
“(C) unless a warrant or order described in subsection (b) is issued approving the acquisition, the activity to acquire the geolocation information shall terminate immediately at the earlier of the time—
“(i) the information sought is obtained;
“(ii) the application for the warrant or order is denied; or
“(iii) at which 48 hours have elapsed since the activity to acquire or access the geolocation information began to occur.
“(3) Violation and suppression of evidence
“(A) In general—In a circumstance described in subparagraph (B)—
“(i) no information obtained, or evidence derived, from geolocation information acquired as part of the access or use of an electronic communications device to acquire geolocation information may be received into evidence or otherwise disclosed in any trial, hearing, or other proceeding in or before any court, grand jury, department, office, agency, regulatory body, legislative committee, or other authority of the United States, a State, or political subdivision thereof;
“(ii) no information concerning any person acquired from the geolocation information may be used, disseminated, or disclosed in any other manner, without the consent of the person; and
“(iii) all information collected shall be promptly destroyed.
“(B) Circumstances—A circumstance described in this subparagraph is any instance in which—
“(i) an investigative or law enforcement officer does not—
“(I) obtain a warrant or order described in subsection (b) within 48 hours of commencing the access or use of the electronic communications device; or
“(II) terminate the activity to acquire geolocation information in accordance with paragraph (2)(B); or
“(ii) a court denies the application for a warrant or order approving the accessing or use of an electronic communications device to acquire geolocation information.
“(e) Assistance and compensation
“(1) In general—A warrant described in subsection (b)(1) authorizing the accessing or use of an electronic communications device to acquire geolocation information shall, upon request of the applicant, direct that a provider of electronic communication service, remote computing service, or geolocation information service shall provide to the applicant forthwith all information, facilities, and technical assistance necessary to accomplish the acquisition unobtrusively and with a minimum of interference with the services that the provider is providing to or through the electronic communications device in question.
“(2) Compensation—Any provider of electronic communication service, remote computing service, or geolocation information service providing information, facilities, or technical assistance under a directive under paragraph (1) shall be compensated by the applicant for reasonable expenses incurred in providing the information, facilities, or assistance.
“(f) No cause of action against a provider—No cause of action shall lie in any court against any provider of electronic communication service, remote computing service, or geolocation information service, or an officer, employee, or agent of the provider or other specified person for providing information, facilities, or assistance necessary to accomplish an acquisition of geolocation information authorized under this section.”
Sec. 6 Suppression of unlawfully obtained wire or electronic communication or geolocation information
“2714. Suppression remedy
“(a) In general—If a governmental entity requires the disclosure of a wire or electronic communication or geolocation information in violation of this chapter, or accesses or uses an electronic communications device to acquire geolocation information in violation of this chapter, no part of the contents of the communication, no geolocation information, and no evidence derived therefrom may be received in evidence in any trial, hearing, or other proceeding in or before any court, grand jury, department, officer, agency, regulatory body, legislative committee, or other authority of the United States, a State, or a political subdivision thereof.
“(b) Grounds—An aggrieved person in a trial, hearing, or proceeding in or before a court, department, officer, agency, regulatory body, or other authority of the United States, a State, or a political subdivision thereof may move to suppress the contents of any wire or electronic communication or geolocation information disclosed or acquired under this chapter, or evidence derived therefrom, on the grounds that—
“(1) the communication or information was unlawfully disclosed;
“(2) the warrant under which it was disclosed is insufficient on its face; or
“(3) the disclosure was not made in conformity with the warrant.
“(c) Procedure
“(1) Timing—A motion under subsection (b) shall be made before the trial, hearing, or proceeding commences, unless there was no opportunity to make such motion or the person was not aware of the grounds of the motion.
“(2) Inspection—The judge or other official, upon the filing of a motion under subsection (b), may make available to the aggrieved person or the attorney for the aggrieved person for inspection such portions of the disclosed communication, geolocation information, or evidence derived therefrom as the judge or other official determines to be in the interests of justice.
“(3) Motion granted—If a motion under subsection (b) is granted, the contents of the disclosed wire or electronic communication, geolocation information, or evidence derived therefrom, shall be treated as having been obtained in violation of this chapter.
“(d) Appeal—In addition to any other right to appeal, the United States shall have the right to appeal an order granting a motion to suppress made under subsection (b) if the United States attorney certifies to the judge or other official granting such motion that the appeal is not taken for purposes of delay. Such appeal shall be taken within 30 days after the date the order was entered and shall be diligently prosecuted.
“(e) Definition—In this section, the term aggrieved person means—
“(1) a person whose wire or electronic communication or geolocation information was disclosed pursuant to this chapter; or
“(2) the owner or authorized user of the electronic communications device whose geolocation information was acquired pursuant to this chapter.”