(a)
(1) a person or entity providing an electronic communication service to the public shall not knowingly divulge to any person or entity the contents of a communication while in electronic storage by that service; and
(2) a person or entity providing remote computing service to the public shall not knowingly divulge to any person or entity the contents of any communication which is carried or maintained on that service—
(A) on behalf of, and received by means of electronic transmission from (or created by means of computer processing of communications received by means of electronic transmission from), a subscriber or customer of such service;
(B) solely for the purpose of providing storage or computer processing services to such subscriber or customer, if the provider is not authorized to access the contents of any such communications for purposes of providing any services other than storage or computer processing; and
(3) a provider of remote computing service or electronic communication service to the public shall not knowingly divulge a record or other information pertaining to a subscriber to or customer of such service (not including the contents of communications covered by paragraph (1) or (2)) to any governmental entity.
(b)
(1) to an addressee or intended recipient of such communication or an agent of such addressee or intended recipient;
(2) as otherwise authorized in section 2517, 2511(2)(a), or 2703 of this title;
(3) with the lawful consent of the originator or an addressee or intended recipient of such communication, or the subscriber in the case of remote computing service;
(4) to a person employed or authorized or whose facilities are used to forward such communication to its destination;
(5) as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider of that service;
(6) to the National Center for Missing and Exploited Children, in connection with a report submitted thereto under section 2258A;
(7) to a law enforcement agency—
(A) if the contents—
(i) were inadvertently obtained by the service provider; and
(ii) appear to pertain to the commission of a crime; or
[(B) Repealed. Pub. L. 108–21, title V, §508(b)(1)(A), Apr. 30, 2003, 117 Stat. 684]
(8) to a governmental entity, if the provider, in good faith, believes that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay of communications relating to the emergency; or
(9) to a foreign government pursuant to an order from a foreign government that is subject to an executive agreement that the Attorney General has determined and certified to Congress satisfies section 2523.
(c)
(1) as otherwise authorized in section 2703;
(2) with the lawful consent of the customer or subscriber;
(3) as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider of that service;
(4) to a governmental entity, if the provider, in good faith, believes that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay of information relating to the emergency;
(5) to the National Center for Missing and Exploited Children, in connection with a report submitted thereto under section 2258A;
(6) to any person other than a governmental entity; or
(7) to a foreign government pursuant to an order from a foreign government that is subject to an executive agreement that the Attorney General has determined and certified to Congress satisfies section 2523.
(d)
(1) the number of accounts from which the Department of Justice has received voluntary disclosures under subsection (b)(8);
(2) a summary of the basis for disclosure in those instances where—
(A) voluntary disclosures under subsection (b)(8) were made to the Department of Justice; and
(B) the investigation pertaining to those disclosures was closed without the filing of criminal charges; and
(3) the number of accounts from which the Department of Justice has received voluntary disclosures under subsection (c)(4).
Amendments
2018—Subsec. (b)(9). Pub. L. 115–141, §104(2)(A)(i), added par. (9).
Subsec. (c)(7). Pub. L. 115–141, §104(2)(A)(ii), added par. (7).
2015—Subsec. (d)(3). Pub. L. 114–23 added par. (3).
2008—Subsecs. (b)(6), (c)(5). Pub. L. 110–401 substituted "section 2258A" for "section 227 of the Victims of Child Abuse Act of 1990 (42 U.S.C. 13032)".
2006—Subsec. (a). Pub. L. 109–177, §107(c), inserted "or (c)" after "Except as provided in subsection (b)".
Subsec. (b)(8). Pub. L. 109–177, §107(b)(1)(A), struck out "Federal, State, or local" before "governmental entity".
Subsec. (c)(4). Pub. L. 109–177, §107(b)(1)(B), added par. (4) and struck out former par. (4) which read as follows: "to a governmental entity, if the provider reasonably believes that an emergency involving immediate danger of death or serious physical injury to any person justifies disclosure of the information;".
Subsec. (d). Pub. L. 109–177, §107(a), added subsec. (d).
2003—Subsec. (b)(5). Pub. L. 108–21, §508(b)(1)(C), which directed amendment of par. (5) by striking "or" at the end, could not be executed because "or" did not appear at the end. See 2002 Amendment note below.
Subsec. (b)(6). Pub. L. 108–21, §508(b)(1)(D), added par. (6). Former par. (6) redesignated (7).
Subsec. (b)(6)(B). Pub. L. 108–21, §508(b)(1)(A), struck out subpar. (B) which read as follows: "if required by section 227 of the Crime Control Act of 1990; or".
Subsec. (b)(7), (8). Pub. L. 108–21, §508(b)(1)(B), redesignated pars. (6) and (7) as (7) and (8), respectively.
Subsec. (c)(5), (6). Pub. L. 108–21, §508(b)(2), added par. (5) and redesignated former par. (5) as (6).
2002—Subsec. (b)(5). Pub. L. 107–296, §2207(d)(1)(A), formerly §225(d)(1)(A), as renumbered by Pub. L. 115–278, §2(g)(2)(I), struck out "or" at end.
Subsec. (b)(6)(A). Pub. L. 107–296, §2207(d)(1)(B), formerly §225(d)(1)(B), as renumbered by Pub. L. 115–278, §2(g)(2)(I), inserted "or" at end.
Subsec. (b)(6)(C). Pub. L. 107–296, §2207(d)(1)(C), formerly §225(d)(1)(C), as renumbered by Pub. L. 115–278, §2(g)(2)(I), struck out subpar. (C) which read as follows: "if the provider reasonably believes that an emergency involving immediate danger of death or serious physical injury to any person requires disclosure of the information without delay."
Subsec. (b)(7). Pub. L. 107–296, §2207(d)(1)(D), formerly §225(d)(1)(D), as renumbered by Pub. L. 115–278, §2(g)(2)(I), added par. (7).
2001—Pub. L. 107–56, §212(a)(1)(A), substituted "Voluntary disclosure of customer communications or records" for "Disclosure of contents" in section catchline.
Subsec. (a)(3). Pub. L. 107–56, §212(a)(1)(B), added par. (3).
Subsec. (b). Pub. L. 107–56, §212(a)(1)(C), substituted "Exceptions for disclosure of communications" for "Exceptions" in heading and "A provider described in subsection (a)" for "A person or entity" in introductory provisions.
Subsec. (b)(6)(C). Pub. L. 107–56, §212(a)(1)(D), added subpar. (C).
Subsec. (c). Pub. L. 107–56, §212(a)(1)(E), added subsec. (c).
1998—Subsec. (b)(6). Pub. L. 105–314 amended par. (6) generally. Prior to amendment, par. (6) read as follows: "to a law enforcement agency, if such contents—
"(A) were inadvertently obtained by the service provider; and
"(B) appear to pertain to the commission of a crime."
1988—Subsec. (b)(2). Pub. L. 100–690 substituted "2517" for "2516".
Effective Date of 2002 Amendment
Amendment by Pub. L. 107–296 effective 60 days after Nov. 25, 2002, see section 4 of Pub. L. 107–296, set out as an Effective Date note under section 101 of Title 6, Domestic Security.
Effective Date
Section effective 90 days after Oct. 21, 1986, and, in the case of conduct pursuant to a court order or extension, applicable only with respect to court orders or extensions made after such effective date, see section 202 of Pub. L. 99–508, set out as a note under section 2701 of this title.
Tried the LawStack mobile app?
Join thousands and try LawStack mobile for FREE today.
- Carry the law offline, wherever you go.
- Download CFR, USC, rules, and state law to your mobile device.
