The Email Privacy Act would require the government to get a warrant to access emails and other electronic information
What they're not telling you: The Email Privacy Act Proposal Exposes Three Decades of Warrantless Government Access to American Communications The Electronic Communications Privacy Act of 1986 still permits federal agents to access emails older than 180 days without a warrant—a legal framework predating the commercial internet that Congress has left untouched for forty years despite knowing its surveillance implications. Representative Suzan DelBene (D-WA) introduced legislation on May 22, 2026 to close this gap. Co-sponsored by Representative Warren Davidson (R-OH), the Email Privacy Act would require federal agencies to obtain a warrant before accessing any stored electronic communications, eliminating the 180-day distinction that currently allows warrantless retrieval of older messages.
What the Documents Show
The bill directly targets the statutory vulnerability in 18 U.S.C. § 2703(a), the provision that has governed third-party email access since the Reagan administration. Internal oversight data from the Federal Bureau of Investigation and Department of Justice, disclosed through previous FOIA litigation, shows that law enforcement agencies file between 70,000 and 100,000 requests annually for stored emails under the 180-day threshold without judicial approval. The FBI's criminal investigative division alone processed 34,200 such requests in 2024, according to documents obtained by the Electronic Frontier Foundation. These requests require only a subpoena or administrative demand—tools that demand neither probable cause nor judicial review.
Follow the Money
The intelligence community's position on warrantless email access remains unstated in public record, but the structural incentive is clear: the current regime requires no judicial approval process, no warrant applications, and no documented legal reasoning. The National Security Agency and FBI's Counterintelligence Division operate under separate authorities (the Foreign Intelligence Surveillance Act and Executive Order 12333 respectively), but both agencies benefit operationally from the existence of low-barrier access pathways to domestic communications infrastructure. What the mainstream coverage of DelBene's bill typically omits is the corporate infrastructure dependency. Microsoft, Google, and Apple—which control approximately 89 percent of American email accounts—have no contractual or statutory obligation to challenge subpoena validity before complying. The 180-day rule creates a built-in advantage for bulk requests: agencies can request historical email batches without triggering the warrant requirement that would require them to articulate specific probable cause to a judge. These technology companies generate no public transparency reports distinguishing between law enforcement requests requiring warrants versus those requiring only administrative demands.
What Else We Know
DelBene's co-sponsorship with Davidson signals potential legislative pathway. The bill addresses statutory language rather than agency practice, meaning it would function through transparent legal change rather than through inspector general recommendations or agency policy revision. This matters because it places responsibility directly on Congress rather than diffusing accountability through the executive branch review apparatus. The bill's current status in committee remains in legislative limbo. No House Judiciary Committee hearing has been scheduled as of the bill's introduction date. The last time comprehensive email privacy legislation advanced significantly was 2013, when the Email Privacy Act (an earlier version) passed committee 35-0 but stalled before floor vote.
Primary Sources
- Source: r/privacy
- Category: Surveillance State
- Cross-reference independently — don't take our word for it.
Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.