Email Privacy Act

May 22, 2026
May 22, 2026

Summary

Requires the government to get a warrant to access emails and other electronic information stored with third-party services, no matter how old the data is.

What problem does this solve?

Current laws from 1986 give less privacy protection to emails and files that are more than 180 days old, letting the government see them without a warrant. This bill fixes that by requiring the government to get a warrant for all stored digital information, protecting people's privacy in the modern age.

What does this bill do?

Requires a warrant for all stored communications
Forces a government agency to get a warrant from a court to make a service provider turn over the contents of any stored communication, like emails or files.
Removes the 180-day rule
Gets rid of the old rule that gave less privacy protection to electronic communications, like emails, that have been stored for more than 180 days.
Allows providers to notify customers
Permits service providers to tell a customer when they have received a warrant, court order, or subpoena for that customer's data, unless a court specifically orders them to keep it secret.
Protects congressional power
States that nothing in the law limits the power of the U.S. Congress to investigate and issue subpoenas for information.
Updates legal terms
Changes words in the existing law, such as replacing 'divulge' with 'disclose', to make the rules clearer and more consistent for service providers and government agencies.

Who does this affect?

  • All users of email and cloud storage services
  • Technology companies and service providers
  • Federal and state law enforcement agencies

What is the real world impact?

Modernizes digital privacy laws
Updates the 1986 Electronic Communications Privacy Act to reflect how people use technology today. The old law treated emails older than 180 days as abandoned, giving them less protection, which this bill corrects by requiring a warrant for all stored content.
Clarifies rules for tech companies
Provides clear rules for when technology companies can or must disclose user data to the government. It also allows companies to tell their users about government data requests unless a court orders them not to.

When does this start?

The changes would take effect as soon as the bill becomes law.