§2702 — Title 18 Crimes and Criminal Procedure | U.S. Code

Summary

Providers that offer public electronic communications (like email) or remote computing or cloud storage must not knowingly share the contents of messages they keep in storage or give customer records to a government agency, except in certain situations. Allowed sharing includes giving the message to the intended recipient or their agent, sharing with people who help deliver the message, sharing with the message sender or with a customer who consents, following other specific law authorizations (for example sections 2517, 2511(2)(a), or 2703), protecting the provider’s service or property, reporting to the National Center for Missing and Exploited Children, accidentally acquired messages that seem related to a crime, urgent emergencies that risk death or serious injury, or under an order from a foreign government covered by a certified executive agreement. Providers may share non‑content customer records in similar limited ways, including with consent, for service operation or protection, to non‑governmental persons, in emergencies, to NCMEC, or as allowed by section 2703. Each year the Attorney General must report to the House and Senate Judiciary Committees the number of accounts the Justice Department got under subsection (b)(8), summaries when those disclosures led to closed investigations without charges, and the number of accounts disclosed under subsection (c)(4).

Title 18, §2702

Crimes and Criminal Procedure — Source: USLM XML via OLRC

(a)Except as provided in subsection (b) or (c)—

(1)a person or entity providing an electronic communication service to the public shall not knowingly divulge to any person or entity the contents of a communication while in electronic storage by that service; and

(2)a person or entity providing remote computing service to the public shall not knowingly divulge to any person or entity the contents of any communication which is carried or maintained on that service—

(A)on behalf of, and received by means of electronic transmission from (or created by means of computer processing of communications received by means of electronic transmission from), a subscriber or customer of such service;

(B)solely for the purpose of providing storage or computer processing services to such subscriber or customer, if the provider is not authorized to access the contents of any such communications for purposes of providing any services other than storage or computer processing; and

(3)a provider of remote computing service or electronic communication service to the public shall not knowingly divulge a record or other information pertaining to a subscriber to or customer of such service (not including the contents of communications covered by paragraph (1) or (2)) to any governmental entity.

(b)A provider described in subsection (a) may divulge the contents of a communication—

(1)to an addressee or intended recipient of such communication or an agent of such addressee or intended recipient;

(2)as otherwise authorized in section 2517, 2511(2)(a), or 2703 of this title;

(3)with the lawful consent of the originator or an addressee or intended recipient of such communication, or the subscriber in the case of remote computing service;

(4)to a person employed or authorized or whose facilities are used to forward such communication to its destination;

(5)as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider of that service;

(6)to the National Center for Missing and Exploited Children, in connection with a report submitted thereto under section 2258A;

(7)to a law enforcement agency—

(A)if the contents—

(i)were inadvertently obtained by the service provider; and

(ii)appear to pertain to the commission of a crime; or

[(B)Repealed. Pub. L. 108–21, title V, § 508(b)(1)(A), Apr. 30, 2003, 117 Stat. 684]

(8)to a governmental entity, if the provider, in good faith, believes that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay of communications relating to the emergency; or

(9)to a foreign government pursuant to an order from a foreign government that is subject to an executive agreement that the Attorney General has determined and certified to Congress satisfies section 2523.

(c)A provider described in subsection (a) may divulge a record or other information pertaining to a subscriber to or customer of such service (not including the contents of communications covered by subsection (a)(1) or (a)(2))—

(1)as otherwise authorized in section 2703;

(2)with the lawful consent of the customer or subscriber;

(3)as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider of that service;

(4)to a governmental entity, if the provider, in good faith, believes that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay of information relating to the emergency;

(5)to the National Center for Missing and Exploited Children, in connection with a report submitted thereto under section 2258A;

(6)to any person other than a governmental entity; or

(7)to a foreign government pursuant to an order from a foreign government that is subject to an executive agreement that the Attorney General has determined and certified to Congress satisfies section 2523.

(d)On an annual basis, the Attorney General shall submit to the Committee on the Judiciary of the House of Representatives and the Committee on the Judiciary of the Senate a report containing—

(1)the number of accounts from which the Department of Justice has received voluntary disclosures under subsection (b)(8);

(2)a summary of the basis for disclosure in those instances where—

(A)voluntary disclosures under subsection (b)(8) were made to the Department of Justice; and

(B)the investigation pertaining to those disclosures was closed without the filing of criminal charges; and

(3)the number of accounts from which the Department of Justice has received voluntary disclosures under subsection (c)(4).

Notes & Related Subsidiaries

Editorial Notes

Amendments

2018—Subsec. (b)(9). Pub. L. 115–141, § 104(2)(A)(i), added par. (9). Subsec. (c)(7). Pub. L. 115–141, § 104(2)(A)(ii), added par. (7). 2015—Subsec. (d)(3). Pub. L. 114–23 added par. (3). 2008—Subsecs. (b)(6), (c)(5). Pub. L. 110–401 substituted “section 2258A” for “section 227 of the Victims of Child Abuse Act of 1990 (42 U.S.C. 13032)”. 2006—Subsec. (a). Pub. L. 109–177, § 107(c), inserted “or (c)” after “Except as provided in subsection (b)”. Subsec. (b)(8). Pub. L. 109–177, § 107(b)(1)(A), struck out “Federal, State, or local” before “governmental entity”. Subsec. (c)(4). Pub. L. 109–177, § 107(b)(1)(B), added par. (4) and struck out former par. (4) which read as follows: “to a governmental entity, if the provider reasonably believes that an emergency involving immediate danger of death or serious physical injury to any person justifies disclosure of the information;”. Subsec. (d). Pub. L. 109–177, § 107(a), added subsec. (d). 2003—Subsec. (b)(5). Pub. L. 108–21, § 508(b)(1)(C), which directed amendment of par. (5) by striking “or” at the end, could not be executed because “or” did not appear at the end. See 2002 Amendment note below. Subsec. (b)(6). Pub. L. 108–21, § 508(b)(1)(D), added par. (6). Former par. (6) redesignated (7). Subsec. (b)(6)(B). Pub. L. 108–21, § 508(b)(1)(A), struck out subpar. (B) which read as follows: “if required by section 227 of the Crime Control Act of 1990; or”. Subsec. (b)(7), (8). Pub. L. 108–21, § 508(b)(1)(B), redesignated pars. (6) and (7) as (7) and (8), respectively. Subsec. (c)(5), (6). Pub. L. 108–21, § 508(b)(2), added par. (5) and redesignated former par. (5) as (6). 2002—Subsec. (b)(5). Pub. L. 107–296, § 2207(d)(1)(A), formerly § 225(d)(1)(A), as renumbered by Pub. L. 115–278, § 2(g)(2)(I), struck out “or” at end. Subsec. (b)(6)(A). Pub. L. 107–296, § 2207(d)(1)(B), formerly § 225(d)(1)(B), as renumbered by Pub. L. 115–278, § 2(g)(2)(I), inserted “or” at end. Subsec. (b)(6)(C). Pub. L. 107–296, § 2207(d)(1)(C), formerly § 225(d)(1)(C), as renumbered by Pub. L. 115–278, § 2(g)(2)(I), struck out subpar. (C) which read as follows: “if the provider reasonably believes that an emergency involving immediate danger of death or serious physical injury to any person requires disclosure of the information without delay.” Subsec. (b)(7). Pub. L. 107–296, § 2207(d)(1)(D), formerly § 225(d)(1)(D), as renumbered by Pub. L. 115–278, § 2(g)(2)(I), added par. (7). 2001—Pub. L. 107–56, § 212(a)(1)(A), substituted “Voluntary disclosure of customer communications or records” for “Disclosure of contents” in section catchline. Subsec. (a)(3). Pub. L. 107–56, § 212(a)(1)(B), added par. (3). Subsec. (b). Pub. L. 107–56, § 212(a)(1)(C), substituted “Exceptions for disclosure of communications” for “Exceptions” in heading and “A provider described in subsection (a)” for “A person or entity” in introductory provisions. Subsec. (b)(6)(C). Pub. L. 107–56, § 212(a)(1)(D), added subpar. (C). Subsec. (c). Pub. L. 107–56, § 212(a)(1)(E), added subsec. (c). 1998—Subsec. (b)(6). Pub. L. 105–314 amended par. (6) generally. Prior to amendment, par. (6) read as follows: “to a law

Enforcement

agency, if such contents— “(A) were inadvertently obtained by the service provider; and “(B) appear to pertain to the commission of a crime.” 1988—Subsec. (b)(2). Pub. L. 100–690 substituted “2517” for “2516”.

Statutory Notes and Related Subsidiaries

Effective Date

of 2002 AmendmentAmendment by Pub. L. 107–296 effective 60 days after Nov. 25, 2002, see section 4 of Pub. L. 107–296, set out as an

Effective Date

note under section 101 of Title 6, Domestic Security.

Effective Date

Section effective 90 days after Oct. 21, 1986, and, in the case of conduct pursuant to a court order or extension, applicable only with respect to court orders or extensions made after such

Effective Date

, see section 202 of Pub. L. 99–508, set out as a note under section 2701 of this title.

§2702 Voluntary disclosure of customer communications or records

Summary

Title 18, §2702

Notes & Related Subsidiaries

Editorial Notes

Amendments

Enforcement

Statutory Notes and Related Subsidiaries

Effective Date

Effective Date

Effective Date

Effective Date

Citations & Metadata