Section 1 Short title
This Act may be cited as the “Protecting Data at the Border Act”.
Protecting Data at the Border Act
A BILL
To ensure the digital contents of electronic equipment and online accounts belonging to or in the possession of United States persons entering or exiting the United States are adequately protected at the border, and for other purposes.
Sec. 2 Findings
Congress finds the following:
United States persons have a reasonable expectation of privacy in the digital contents of their electronic equipment, the digital contents of their online accounts, and the nature of their online presence.
The Supreme Court of the United States recognized in Riley v. California, 134 S. Ct. 2473 (2014) the extraordinary privacy interests in electronic equipment like cell phones.
The privacy interest of United States persons in the digital contents of their electronic equipment, the digital contents of their online accounts, and the nature of their online presence differs in both degree and kind from their privacy interest in closed containers.
Accessing the digital contents of electronic equipment, accessing the digital contents of an online account, or obtaining information regarding the nature of the online presence of a United States person entering or exiting the United States, without a lawful warrant based on probable cause, is unreasonable under the Fourth Amendment to the Constitution of the United States.
Sec. 3 Scope
Nothing in this Act shall be construed to—
prohibit a Governmental entity from conducting an inspection of the external physical components of the electronic equipment to determine the presence or absence of weapons or contraband without a warrant, including activating or attempting to activate an object that appears to be electronic equipment to verify that the object is electronic equipment; or
limit the authority of a Governmental entity under the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.).
Sec. 4 Definitions
As used in this Act—
the term access credential includes a username, password, PIN number, fingerprint, or biometric indicator;
the term border means the international border of the United States and the functional equivalent of such border;
the term digital contents means any signs, signals, writing, images, sounds, data, or intelligence of any nature transmitted in whole or in part by electronic equipment, or stored in electronic equipment or an online account;
the term electronic communication service has the meaning given that term in section 2510 of title 18, United States Code;
the term electronic equipment has the meaning given the term computer in section 1030(e) of title 18, United States Code;
the term Governmental entity means a department or agency of the United States (including any officer, employee, or contractor or other agent thereof);
the term online account means an online account with an electronic communication service or remote computing service;
the term online account information means the screen name or other identifier or information that would allow a Governmental entity to identify the online presence of an individual;
the term remote computing service has the meaning given that term in section 2711 of title 18, United States Code; and
the term United States person means an individual who is a United States person, as defined in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801).
Sec. 5 Procedures for lawful access to digital data at the border
Standard— Subject to subsection (b), a Governmental entity may not—
access the digital contents of any electronic equipment belonging to or in the possession of a United States person at the border without a valid warrant supported by probable cause issued using the procedures described in the Federal Rules of Criminal Procedure by a court of competent jurisdiction;
deny entry into or exit from the United States by a United States person based on a refusal by the United States person to—
disclose an access credential that would enable access to the digital contents of electronic equipment or the digital contents of an online account;
provide access to the digital contents of electronic equipment or the digital contents of an online account; or
provide online account information; or
delay entry into or exit from the United States by a United States person for longer than the period of time, which may not exceed 4 hours, necessary to determine whether the United States person will, in a manner in accordance with subsection (c), consensually provide an access credential, access, or online account information, as described in subparagraphs (A), (B), and (C) of paragraph (2).
Emergency exceptions—
Emergency situations generally—
In general— An investigative or law enforcement officer of a Governmental entity who is designated by the Secretary of Homeland Security for purposes of this paragraph may access the digital contents of electronic equipment belonging to or in possession of a United States person at the border without a warrant described in subsection (a)(1) if the investigative or law enforcement officer—
reasonably determines that—
an emergency situation exists that involves—
immediate danger of death or serious physical injury to any person;
conspiratorial activities threatening the national security interest of the United States; or
conspiratorial activities characteristic of organized crime;
the emergency situation described in subclause (I) requires access to the digital contents of the electronic equipment before a warrant described in subsection (a)(1) authorizing such access can, with due diligence, be obtained; and
there are grounds upon which a warrant described in subsection (a)(1) could be issued authorizing such access; and
makes an application in accordance with this section for a warrant described in subsection (a)(1) as soon as practicable, but not later than 7 days after the investigative or law enforcement officer accesses the digital contents under the authority under this subparagraph.
Warrant not obtained— If an application for a warrant described in subparagraph (A)(ii) is denied, or in any other case in which an investigative or law enforcement officer accesses the digital contents of electronic equipment belonging to or in possession of a United States person at the border without a warrant under the emergency authority under subparagraph (A) and a warrant authorizing the access is not obtained—
any copy of the digital contents in the custody or control of a Governmental entity shall immediately be destroyed;
the digital contents, and any information derived from the digital contents, may not be disclosed to any Governmental entity or a State or local government; and
the Governmental entity employing the investigative or law enforcement officer that accessed the digital contents shall notify the United States person that any copy of the digital contents has been destroyed.
Protection of public safety and health— A Governmental entity may access the digital contents of electronic equipment belonging to or in possession of a United States person at the border without a warrant described in subsection (a)(1) if the access is—
necessary for the provision of fire, medical, public safety, or other emergency services; and
unrelated to the investigation of a possible crime or other violation of the law.
Informed consent in writing—
Notice—
In general— A Governmental entity shall provide the notice described in subparagraph (B) before requesting that a United States person at the border—
provide consent to access the digital contents of any electronic equipment belonging to or in the possession of or the digital contents of an online account of the United States person;
disclose an access credential that would enable access to the digital contents of electronic equipment or the digital contents of an online account of the United States person;
provide access to the digital contents of electronic equipment or the digital contents of an online account of the United States person; or
provide online account information of the United States person.
Contents— The notice described in this subparagraph is written notice in a language understood by the United States person that the Governmental entity—
may not—
compel access to the digital contents of electronic equipment belonging to or in the possession of, the digital contents of an online account of, or the online account information of a United States person without a valid warrant;
deny entry into or exit from the United States by the United States person based on a refusal by the United States person to—
disclose an access credential that would enable access to the digital contents of electronic equipment or the digital contents of an online account;
provide access to the digital contents of electronic equipment or the digital contents of an online account; or
provide online account information; or
delay entry into or exit from the United States by the United States person for longer than the period of time, which may not exceed 4 hours, necessary to determine whether the United States person will consensually provide an access credential, access, or online account information, as described in items (aa), (bb), and (cc) of subclause (II); and
if the Governmental entity has probable cause that the electronic equipment contains information that is relevant to an allegation that the United States person has committed a felony, may seize electronic equipment belonging to or in the possession of the United States person for a period of time if the United States person refuses to consensually provide access to the digital contents of the electronic equipment.
Consent—
In general— A Governmental entity shall obtain written consent described in subparagraph (B) before—
accessing, pursuant to the consent of a United States person at the border the digital contents of electronic equipment belonging to or in the possession of or the digital contents of an online account of the United States person;
obtaining, pursuant to the consent of a United States person at the border, an access credential of the United States person that would enable access to the digital contents of electronic equipment or the digital contents of an online account; or
obtaining, pursuant to the consent of a United States person at the border, online account information for an online account of the United States person.
Contents of written consent— Written consent described in this subparagraph is written consent that—
indicates the United States person understands the protections and limitations described in paragraph (1)(B);
states the United States person is—
providing consent to the Governmental entity to access certain digital contents or consensually disclosing an access credential; or
consensually providing online account information; and
specifies the digital contents, access credential, or online account information with respect to which the United States person is providing consent.
Retention of digital contents—
Lawful access— A Governmental entity that obtains access to the digital contents of electronic equipment, the digital contents of an online account, or online account information in accordance with this section may not make or retain a copy of the digital contents or online account information, or any information directly or indirectly derived from the digital contents or online account information, unless there is probable cause to believe the digital contents or online account information contains evidence of, or constitutes the fruits of, a crime.
Unlawful access— If a Governmental entity obtains access to the digital contents of electronic equipment, digital contents of an online account, or online account information in a manner that is not in accordance with this section, the Governmental entity—
shall immediately destroy any copy of the digital contents or online account information, and any information directly or indirectly derived from the digital contents or online account information, in the custody or control of the Governmental entity;
may not disclose the digital contents or online account information, or any information directly or indirectly derived from the digital contents or online account information, to any other Governmental entity or a State or local government; and
shall notify the United States person that any copy of the digital contents or online account information, and any information directly or indirectly derived from the digital contents or online account information, has been destroyed.
Recordkeeping— A Governmental entity shall keep a record of each instance in which the Governmental entity obtains access to the digital contents of electronic equipment belonging to or in the possession of an individual at the border, the digital contents of an online account of an individual who is at the border, or online account information of an individual who is at the border, which shall include—
the reason for the access;
the nationality, immigration status, and admission category of the individual;
the nature and extent of the access;
if the access was consensual, how and to what the individual consented, and what the individual provided by consent;
whether electronic equipment of the individual was seized;
whether the Governmental entity made a copy of all or a portion of the digital contents or online account information, or any information directly or indirectly derived from the digital contents or online account information; and
whether the digital contents or online account information, or any information directly or indirectly derived from the digital contents or online account information, was shared with another Governmental entity or a State or local government.
Sec. 6 Limits on use of digital contents as evidence
In general— Whenever any digital contents or online account information have been obtained in violation of this Act, no part of the digital contents or online account information and no evidence derived therefrom may be received in evidence in any trial, hearing, or other proceeding (including any proceeding relating to the immigration laws, as defined in section 101(a) of the Immigration and Nationality Act (8 U.S.C. 1101(a))) in or before any court, grand jury, department, officer, agency, regulatory body, legislative committee, or other authority of the United States, a State, or a political subdivision thereof.
Application— To the maximum extent practicable, the limitations under subsection (a) shall be applied in the same manner as the limitations under section 2515 of title 18, United States Code.
Sec. 7 Limits on seizure of electronic equipment
A Governmental entity may not seize any electronic equipment belonging to or in the possession of a United States person at the border unless there is probable cause to believe that the electronic equipment contains information that is relevant to an allegation that the United States person has committed a felony.
Sec. 8 Audit and reporting requirements
In March of each year, the Secretary of Homeland Security shall submit to Congress and make publicly available on the Web site of the Department of Homeland Security a report that includes the following:
The number of times during the previous year that an officer or employee of the Department of Homeland Security did each of the following:
Accessed the digital contents of any electronic equipment belonging to or in the possession of or the digital contents of an online account of a United States person at the border pursuant to a warrant supported by probable cause issued using the procedures described in the Federal Rules of Criminal Procedure by a court of competent jurisdiction.
Accessed the digital contents of any electronic equipment belonging to or in the possession of a United States person at the border pursuant to the emergency authority under section 5(b).
Requested consent to access the digital contents of any electronic equipment belonging to or in the possession of, the digital contents of an online account of, or online account information of a United States person at the border.
Accessed the digital contents of any electronic equipment belonging to or in the possession of, the digital contents of an online account of, or online account information of a United States person at the border pursuant to written consent provided in accordance with section 5(c).
Requested a United States person at the border consensually disclose an access credential that would enable access to the digital contents of electronic equipment or the digital contents of an online account of the United States person.
Accessed the digital contents of electronic equipment or the digital contents of an online account of a United States person at the border using an access credential pursuant to written consent provided in accordance with section 5(c).
Accessed the digital contents of any electronic equipment belonging to or in the possession of, the digital contents of an online account of, or online account information of a United States person at the border in a manner that was not in accordance with section 5.
Accessed the digital contents of any electronic equipment belonging to or in the possession of, the digital contents of an online account of, or online account information of an individual who is not a United States person at the border.
Accessed the digital contents of any electronic equipment belonging to or in the possession of an individual at the border, the digital contents of an online account of an individual at the border, or online account information of an individual at the border (regardless of whether the individual is a United States person) at the request of a Governmental entity (including another component of the Department of Homeland Security) that is not the Governmental entity employing the individual accessing the digital contents or online account information.
Aggregate data on—
the number of United States persons for which a Governmental entity obtains access to—
the digital contents of electronic equipment belonging to or in the possession of the United States person at the border;
the digital contents of an online account of the United States person while at the border; or
online account information of the United States person while at the border;
the country from which United States persons departed most recently before arriving in the United States for the United States persons for which a Governmental entity obtains access to—
the digital contents of electronic equipment belonging to or in the possession of the United States person at the border;
the digital contents of an online account of the United States person while at the border; or
online account information of the United States person while at the border;
the number and nationality of individuals who are not United States persons for which a Governmental entity obtains access to—
the digital contents of electronic equipment belonging to or in the possession of the individuals at the border;
the digital contents of an online account of the individuals while at the border; or
online account information of the individuals while at the border; and
the country from which individuals who are not United States persons departed most recently before arriving in the United States for the individuals for which a Governmental entity obtains access to—
the digital contents of electronic equipment belonging to or in the possession of the individuals at the border;
the digital contents of an online account of the individuals while at the border; or
online account information of the individuals while at the border.
Aggregate data regarding the perceived race and ethnicity of individuals for whom a Governmental entity obtains access to—
the digital contents of electronic equipment belonging to or in the possession of the individuals at the border;
the digital contents of an online account of the individuals while at the border; or
online account information of the individuals while at the border.