For years, cops have been able to get hold of emails older than 180 days without obtaining a search warrant. But a proposed update to a 27-year-old privacy law could change that—and even the often privacy-bashing Justice Department is backing reform.
The Electronic Communications Privacy Act was first written in 1986 in order to create a balance between law enforcement surveillance and the rights of Americans. At the time the law was drafted, however, it was unusual for the average citizen to even use email, let alone store it electronically for more than a few weeks or months. Congress concluded that it would be rare for email to be saved online for more than 180 days, so emails older than that were deemed not to be protected by a warrant. Instead, they could be obtained by the lesser standard of a subpoena issued without the approval of a judge.
Today, legislation that aims to scrap the 180-days clause was published. ECPA 2013, authored by Senate Judiciary Committee Chairman Patrick Leahy, D-Vt., and Sen. Mike Lee, R-Utah, would ensure authorities have to obtain a search warrant to get access to emails no matter how old. It would also require the government to notify an individual whose electronic communications have been disclosed within 10 days of obtaining a search warrant.
“Privacy laws written in an analog era are no longer suited for privacy threats we face in a digital world,” Leahy, who authored the 1986 version of ECPA, said in a statement. “Three decades later, we must update this law to reflect new privacy concerns and new technological realities, so that our Federal privacy laws keep pace with American innovation and the changing mission of our law enforcement agencies.”
Perhaps surprisingly, the Justice Department has agreed that it is time to reform ECPA and enhance its privacy provisions. DOJ representative Elana Tyrangiel acknowledged in a presentation before a House judiciary subcommittee hearing today that there is “no principled basis to treat email less than 180 days old differently than email more than 180 days old,” adding that “it makes sense that the statute not accord lesser protection to opened emails than it gives to emails that are unopened.”
But while there may be a bipartisan consensus building for scrapping the 180 days provision, law enforcement agencies are using the prospect of ECPA reform to lobby for data retention of text messages. Authorities have been pushing for a clause that would force carriers like Verizon and AT&T to store all text messages sent by Americans in a vast database so that the information can be perused at a later date to help with investigations. “Billions of texts are sent every day, and some surely contain key evidence about criminal activity,” Richard Littlehale, a special agent with the Tennessee Bureau of Investigation, said today before the House judiciary subcommittee, echoing similar statements made by authorities in December.
It looks increasingly likely that provisions enhancing email privacy will be enacted by Congress, probably before the end of this year. But for privacy groups the push for greater data retention of text messages could represent the beginning of a new battle.