SB 4649, the Email Privacy Act, would update federal privacy rules governing electronic communications stored by third-party service providers. The bill amends provisions of the Stored Communications Act in Title 18 to replace outdated terminology, broaden references to communications that are “stored, held, or maintained” by providers, and clarify when providers may voluntarily disclose information to users, subscribers, or others with lawful consent.
The bill also revises the standards for government access to stored communications. It expands warrant and legal-process language to cover both electronic communication services and remote computing services, removes the 180-day distinction for stored content, and generally requires a warrant for the contents of stored communications. It also adds notice provisions, clarifies subpoena and consent rules, and includes rules of construction preserving certain congressional subpoena powers and access to communications involving provider personnel or publicly available promotional communications.
If enacted, the bill would significantly amend sections 2702 and 2703 of Title 18, United States Code, which govern voluntary disclosure and compelled disclosure of stored electronic communications. It would strengthen privacy protections for email and other stored digital content, reduce ambiguity in provider disclosure obligations, and modernize the law to reflect current cloud-storage and remote-computing practices. The bill would affect technology companies, email and cloud service providers, law enforcement agencies, and users whose stored communications are protected under federal law.
The available record shows the bill was introduced and referred to the Senate Judiciary Committee, but there are no recorded committee transcripts or votes in the provided material. Based on the text, the measure appears to be framed as a privacy modernization bill that seeks to balance consumer privacy with law enforcement needs. The overall posture is therefore neutral-to-supportive in concept, with the bill presented as a technical and substantive update to outdated electronic privacy law.
The main points of potential contention are the bill’s stronger warrant requirement for stored communications, the elimination of the 180-day rule, and the limits it places on government access to provider-held content. Privacy advocates would likely support these changes as overdue protections, while law enforcement and prosecutors may object that the bill could make access to evidence more difficult or slower. The bill also preserves exceptions for certain provider-related communications, public promotional content, and congressional subpoenas, which may reflect efforts to address concerns from both government and service providers.