PolicyBrief
S. 4594
119th CongressMay 20th 2026
Subpoena Abuse Prevention Act
IN COMMITTEE

This Act reforms government subpoenas for customer records held by phone and internet companies by requiring specific identification, prohibiting subpoenas targeting constitutionally protected activities, and mandating annual public reporting on administrative subpoena usage.

Ron Wyden
D

Ron Wyden

Senator

OR

LEGISLATION

Subpoena Abuse Prevention Act Mandates Specific IDs and Annual Reporting for Data Requests

The Subpoena Abuse Prevention Act aims to tighten the leash on how federal agencies grab your digital footprints. By amending 18 U.S.C. 2703(c), the bill moves to end the era of 'fishing expeditions' where the government could potentially cast a wide net over phone and internet records without a specific target in mind. Under Section 2, any administrative, grand jury, or trial subpoena must now include specific identifiers like a name, address, or account ID. Think of it as requiring a specific address for a search warrant instead of just saying 'we want to look through every house on this block.' For a software developer or a freelance writer, this means your data is less likely to be swept up in a bulk collection effort just because you use a certain service.

Protecting Your Right to Speak and Assemble

One of the most significant guardrails in this bill is the explicit shield for constitutionally protected activities. Section 2 prohibits the government from using subpoenas to monitor or retaliate against people for exercising their rights to free speech, assembly, or religion. To ensure this isn't just a pinky promise, the bill requires a government official to certify—under penalty of perjury—that the subpoena is for a lawful purpose and not targeting someone for their beliefs or protests. If you’re a community organizer or a journalist, this provision adds a layer of legal armor, requiring the government to put a name on a document swearing they aren't just trying to shut you down.

Transparency for Providers and the Public

The bill also changes the dynamic between the government and your service providers, like your ISP or mobile carrier. Unless a court specifically orders otherwise, the government must inform the service provider that they are allowed to tell the customer about the subpoena and consult a lawyer. This shifts the default away from automatic secrecy. Furthermore, the bill demands accountability through data: every federal entity using these subpoenas must publish an annual report. These reports must list the total number of subpoenas issued and the number of accounts affected, giving the public a clear scorecard on how often these powers are actually being used.

Practical Impacts and Implementation

For the average person juggling work and family, these changes happen mostly in the background, but they provide a critical safety net for digital privacy. By requiring specific identifiers and perjury-backed certifications, the bill raises the 'cost' for the government to access your data, making it a more deliberate process. The main challenge will be in the oversight of these certifications; while the threat of perjury is real, the bill relies on courts to be the gatekeepers when the government asks for secrecy orders. For small business owners who handle customer data, these clear rules and the ability to consult an attorney provide a much-needed roadmap for handling government requests without being left in the dark.