In light of these concerns, various reform bills have been introduced in the past several Congresses, with three major reform bills pending in the 114 th Congress. The Electronic Communications Privacy Act Amendments Act of 2015 ( S. 356 ) and the Email Privacy Act ( H.R. 699 ), almost identical in text, would, among other things, place both ECSs and RCSs under the same legal requirement; eliminate the current 180-day rule found in the Stored Communications Act (SCA) and require a warrant for emails no matter how long they have been stored or whether they have been opened; and eliminate the reliance on the definition of "electronic storage," which has confused the lower courts. 656 ) would make similar changes to the SCA. Some federal agencies, most prominently the Securities and Exchange Commission (SEC), which currently rely on their subpoena authority to access electronic communications, have argued that these bills would stymie their ability to conduct investigations as they lack legal authority to obtain a warrant. In response to this concern, both the Email Privacy Act and the ECPA Amendments Act include a rule of construction providing that nothing in these bills should be read to preclude the SEC or any other federal agency from seeking these records directly from a party to the communication, rather than the target's third-party service provider. Finally, there has been ongoing litigation in the lower federal courts as to ECPA's extraterritorial reach. The scope of the SCA is determined largely by the entities to which it applies. First, it does not apply to personal users, but only to providers of an "electronic communication service" (ECS) and a "remote computing service" (RCS). A provider of RCS provides "computer storage or processing services by means of an electronic communication system." The SCA has two core components: (1) a broad prohibition against providers voluntarily sharing customers' communications with the government or others, subject to certain enumerated exceptions, and (2) procedures permitting the government to require the disclosure of customers' communications or records. Section 2703 sets up a tiered system with different standards that apply depending on whether an ECS or RCS is holding the record, whether the data sought is content or non-content, whether the email has been opened, and whether advanced notice has been given to the customer. ECPA Reform Legislation

In recent years, ECPA has faced increased criticism from both the technology and privacy communities that it has outlived its usefulness in the digital era and does not provide adequate privacy safeguards for individuals' electronic communications. 283 ) and the Email Privacy Act ( H.R. A competing bill, the Law Enforcement Access to Data Stored Abroad (LEADS) Act ( S. 512 , H.R. Third, H.R. Like the Email Privacy Act, the ECPA Amendments Act, and the Online Communication and Geolocation Privacy Act, the Law Enforcement Access to Data Stored Abroad Act (LEADS Act) would require a warrant based on probable cause to obtain the contents of communications from both an ECS and RCS and eliminate the 180-day rule. The act would require third-party service providers to disclose the contents of U.S. persons' electronic communications held overseas upon issuance of a warrant based on probable cause.
In 1986, Congress enacted the Electronic Communications Privacy Act (ECPA) to both protect the privacy of an individual's electronic communications and provide the government with a means for accessing these communications and related records. Although passed at the infancy of the Internet, the Stored Communications Act (SCA), which is part of ECPA, has been interpreted over the years to cover the content of emails, private Facebook messages, YouTube videos, and so-called metadata, or non-content information, connected to our Internet transactions (e.g., websites visited, to/from and time/date stamps on emails).
The scope of the SCA is determined largely by the entities to which it applies, "electronic communication service" (ECS) providers and "remote computing service" (RCS) providers, as defined in the statute. It does not apply to government access to records held by a party to the communication. The SCA has two core components. First, it creates a broad bar against service providers voluntarily disclosing a customer's communications to the government or others, subject to various exceptions, and second, it establishes procedures under which the government can require a provider to disclose customers' communications or records. As to government access, ECPA utilizes a tiered system with different levels of evidence required depending on whether the provider is an ECS or RCS; whether the data sought is content or non-content; whether the email has been opened; and whether advance notice has been given to the customer.
In recent years, ECPA has faced increased criticism from both the technology and privacy communities that it has outlived its usefulness in the digital era and does not provide adequate privacy safeguards for individuals' electronic communications. In light of these concerns, various reform bills have been introduced in the past several Congresses, with three major reform bills pending in the 114th Congress. The Electronic Communications Privacy Act Amendments Act of 2015 (S. 356, H.R. 283) and the Email Privacy Act (H.R. 699), almost identical in text, would, among other things, place both ECS and RCS providers under the same legal requirement; eliminate the current 180-day rule found in the SCA and require a warrant for emails no matter how long they have been stored or whether they have been opened; and remove the reliance on the definition of "electronic storage," which has confused the lower courts. Additionally, the Online Communications and Geolocation Privacy Act (H.R. 656) would make similar changes to the SCA.
Some federal agencies, most prominently the Securities and Exchange Commission (SEC), which currently rely on their subpoena authority to access electronic communications, have argued that these bills would stymie their ability to conduct investigations as they have no legal authority to obtain a warrant. In response to this concern, both the Email Privacy Act and the ECPA Amendments Act include a rule of construction providing that nothing in these bills should be read to preclude the SEC or any other federal agency from seeking these records directly from a party to the communication, rather than the target's service provider.
Finally, there has been ongoing litigation in the lower federal courts as to ECPA's extraterritorial reach. The Law Enforcement Access to Data Stored Abroad (LEADS) Act (S. 512, H.R. 1174) would require third-party service providers to disclose the contents of U.S persons' electronic communications held overseas upon issuance of a warrant based on probable cause.