United StatesStored Communications Act, provider disclosure of customer communications and records
Also known as Stored Communications Act.
In force.
A sensitive categories rule binding public and private bodies.
- Obligation class
- Prohibition
As of .
What it requires
- Applies to a provider of an electronic communication service or a remote computing service to the public, and to a governmental entity that seeks a customer's communications or records from such a provider.
- If you provide an electronic communication service to the public, do not knowingly divulge the contents of a communication in electronic storage by that service to any person or entity unless an exception in section 2702(b) applies.
- If you provide a remote computing service to the public, do not knowingly divulge the contents of a communication you maintain for a subscriber or customer solely to store or process it unless an exception in section 2702(b) applies.
- If you provide either service to the public, do not knowingly divulge a record or other information about a subscriber or customer, other than the contents of communications, to a governmental entity unless an exception in section 2702(c) applies; the prohibition does not reach a disclosure of such a record to a person other than a governmental entity.
- Give a governmental entity the contents of a communication only on the process section 2703 requires: a warrant for contents in electronic storage for 180 days or less, and for other contents a warrant, or a subpoena or court order with the prior notice section 2703(b) describes.
- Give a governmental entity a customer record other than contents only on a warrant, a court order under section 2703(d), the customer's consent, a formal written telemarketing-fraud request, or, for the subscriber information listed in section 2703(c)(2), a subpoena.
If you get it wrong
Private right of actionYes
Statutory damages
18 U.S.C. 2707(c): the court may assess the sum of the actual damages suffered by the plaintiff and any profits made by the violator, but in no case may a person entitled to recover receive less than $1,000, and may assess punitive damages if the violation is willful or intentional.
- As of
- Currency
- USD
- Per person minimum
- 1,000
What this law does
Chapter 121 of title 18 is popularly known as the Stored Communications Act. Chapter 121 was added by Public Law 99-508, enacted on , and Title II of that law took effect ninety days after the date of its enactment. A person or entity providing an electronic communication service to the public shall not knowingly divulge to any person or entity the contents of a communication while in electronic storage by that service.
A person or entity providing remote computing service to the public shall not knowingly divulge the contents of a communication that it carries or maintains for a subscriber or customer solely for the purpose of providing storage or computer processing services, if the provider is not authorized to access the contents for any other service.
A provider of remote computing service or electronic communication service to the public shall not knowingly divulge a record or other information pertaining to a subscriber or customer, not including the contents of communications, to any governmental entity.
A provider may divulge the contents of a communication to an addressee or intended recipient, with the lawful consent of the originator or an addressee or intended recipient, or of the subscriber in the case of remote computing service, or as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider, among the other exceptions in section 2702(b).
A provider may divulge a record or other information pertaining to a subscriber or customer, not including the contents of communications, to any person other than a governmental entity. A governmental entity may require a provider of electronic communication service to disclose the contents of a communication that has been in electronic storage for one hundred and eighty days or less only pursuant to a warrant.
A governmental entity may require a provider of remote computing service to disclose contents without notice to the subscriber if it obtains a warrant, or with prior notice to the subscriber if it uses an administrative subpoena, a grand jury or trial subpoena, or a court order under subsection (d) of section 2703.
A governmental entity may require a provider to disclose a record or other information pertaining to a subscriber, not including contents, only when it obtains a warrant, obtains a court order under subsection (d), has the consent of the subscriber or customer, submits a formal written request in a telemarketing fraud investigation, or seeks the subscriber information listed in section 2703(c)(2) with a subpoena.
A court order under subsection (d) of section 2703 shall issue only if the governmental entity offers specific and articulable facts showing that there are reasonable grounds to believe that the contents or the records sought are relevant and material to an ongoing criminal investigation.
No cause of action shall lie in any court against a provider of wire or electronic communication service for providing information, facilities, or assistance in accordance with the terms of a court order, warrant, subpoena, statutory authorization, or certification under the chapter.
Except as provided in section 2703(e), a provider of electronic communication service, a subscriber, or another person aggrieved by a violation of the chapter committed with a knowing or intentional state of mind may bring a civil action against the person or entity, other than the United States, that engaged in the violation.
The court may assess actual damages and any profits made by the violator, but a person entitled to recover shall receive not less than $1,000, and may assess punitive damages if the violation is willful or intentional. Among the grounds in section 2707(e), a good faith reliance on a court warrant or order, a grand jury subpoena, a legislative authorization, or a statutory authorization is a complete defense to any civil or criminal action brought under the chapter or any other law.
A civil action may not be commenced later than two years after the claimant first discovered or had a reasonable opportunity to discover the violation. The remedies and sanctions described in the chapter are the only judicial remedies and sanctions for nonconstitutional violations of the chapter.
When LexLint raises it
When your app profile says your app operates a social platform or provides telecom services.