The Next Generation Communications Privacy Act

Orin S. Kerr

The George Washington University Law School

July 29, 2013

162 University of Pennsylvania Law Review 373 (2014).
GWU Law School Public Law Research Paper No. 2013-80

In 1986, Congress enacted the Electronic Communications Privacy Act (ECPA) to regulate government access to Internet communications and records. ECPA is widely regarded as outdated, and ECPA reform is now on the Congressional agenda. At the same time, existing reform proposals retain the structure of the 1986 Act and merely tinker with a few small aspects of the statute. This Article offers a thought experiment about what might happen if Congress were to repeal ECPA and enact a new privacy statute to replace it.

The new statute would look quite different from ECPA because overlooked changes in Internet technology have dramatically altered the assumptions on which the 1986 Act was based. ECPA was designed for a network world with high storage costs and only local network access. Its design reflects the privacy threats of such a network, including high privacy protection for real-time wiretapping, little protection for noncontent records, and no attention to particularity or jurisdiction. Today’s Internet reverses all of these assumptions. Storage costs have plummeted, leading to a reality of almost total storage. Even U.S.-based services now serve a predominantly foreign customer base. A new statute would need to account for these changes.

This Article contends that a next generation privacy act should contain four features. First, it should impose the same requirement on access to all contents. Second, it should impose particularity requirements on the scope of disclosed metadata. Third, it should impose minimization rules on all accessed content. And fourth, it should impose a two-part territoriality regime with a mandatory rule structure for U.S.-based users and a permissive regime for users located abroad.

Number of Pages in PDF File: 47

Keywords: ECPA, Stored Communications Act, Fourth Amendment

JEL Classification: K42, K30

Open PDF in Browser Download This Paper

Date posted: July 30, 2013 ; Last revised: February 26, 2015

Suggested Citation

Kerr, Orin S., The Next Generation Communications Privacy Act (July 29, 2013). 162 University of Pennsylvania Law Review 373 (2014). ; GWU Law School Public Law Research Paper No. 2013-80. Available at SSRN: https://ssrn.com/abstract=2302891

Contact Information

Orin S. Kerr (Contact Author)
The George Washington University Law School ( email )
2000 H Street, N.W.
Washington, DC 20052
United States
202-994-4775 (Phone)
202-994-9817 (Fax)
HOME PAGE: http://www.law.gwu.edu/orin-s-kerr

Feedback to SSRN

Paper statistics
Abstract Views: 4,504
Downloads: 746
Download Rank: 25,049