PolicyBrief
H.R. 9016
119th CongressMay 22nd 2026
Email Privacy Act
IN COMMITTEE

This bill updates federal law to require a warrant for government access to the content of stored electronic communications, regardless of how long they have been stored, while also clarifying provider disclosure rules.

Suzan DelBene
D

Suzan DelBene

Representative

WA-1

LEGISLATION

Email Privacy Act: Warrants Now Required for All Stored Digital Communications, Boosting Your Online Privacy

Ever felt a bit uneasy about who can peek into your old emails or cloud files? Well, a new piece of legislation, aptly titled the “Email Privacy Act,” is looking to beef up your digital privacy. This bill updates the rules around how and when service providers — think your email host or cloud storage company — can hand over your stored electronic communications to the government. The biggest change? No more easy access for Uncle Sam; they’ll need a warrant for all your stored content, regardless of how old it is.

Your Digital Mailbox Just Got a Stronger Lock

Previously, there was this quirky rule where electronic communications stored for over 180 days could be accessed by the government with just a subpoena or court order, which is a lower bar than a full-blown warrant. Essentially, your old emails had less protection than your newer ones. This bill scraps that 180-day distinction entirely. Now, whether it's an email from yesterday or a photo from five years ago sitting in the cloud, the government needs a warrant issued by a judge to compel its disclosure. This is a pretty significant upgrade for your Fourth Amendment rights in the digital age, making sure your digital 'stuff' gets the same protection as the physical stuff in your home.

What This Means for Your Service Providers (and You)

This legislation also clarifies a few things for the companies holding onto your data. First, it updates the language around when they can voluntarily disclose your communications. They can share with you, the sender, or the intended recipient, or with your lawful consent. This just makes the rules clearer for them, which is a good thing for everyone involved.

Second, if a government agency does come knocking with a warrant, the service provider now has a clear obligation to disclose the information promptly, especially if the warrant specifies a deadline. Crucially, the bill also allows providers to notify you, the customer, when they receive such a request. This means you might actually find out if the government is trying to access your data, which is a big step for transparency. There are some exceptions, of course, like if law enforcement gets a special order to delay that notice, but the general rule is now toward informing you.

The Fine Print: Who’s Affected and Who Isn’t

While this bill significantly tightens privacy for most people, it's not a blanket shield for everything. For instance, if you're an employee and your communication is with your employer’s service provider, and you’re acting in your official capacity, the government might still be able to get that communication directly from the provider without a warrant. Think of internal company emails or communications related to your job. Also, if you’ve posted something publicly, like an advertisement for a product or service, that’s still fair game. And don't forget, Congress's own investigative powers under Article I of the Constitution remain untouched by this bill. So, while your personal digital life gets a stronger lock, there are still specific scenarios where access is permitted under different rules.

Overall, this bill is a solid win for anyone who values their digital privacy. It brings an outdated law into the 21st century, ensuring that the protections you expect for your physical belongings extend to your digital communications. It means less worry about your old emails being easily scooped up and more confidence that your online life is truly private, unless a judge says otherwise.