On Sept 22, the Senate Committee on the Judiciary held a hearing on the Electronic Communications Privacy Act, a 24-year-old law setting the rules on how law enforcement agencies can obtain electronic records.
Committee Chairman Patrick Leahy (D-VT) said the law needs to be updated because it's out of step with modern technology and privacy expectations. Web-based e-mail messages, information stored in cloud-computing environments and mobile-phone location information don't enjoy the same legal protections from government snooping as other types of digital data. "The content of a single e-mail could be subject to as many as four different levels of privacy protections under ECPA, depending on where it is stored, and when it is sent," Chairman Leahy said. "There are also no clear standards under that law for how and under what circumstances the government can access cell phone, or other mobile location information when investigating crime or national security matters."
Critics of ECPA have called the law confusing and inconsistent. The Department of Justice has asserted that under ECPA, federal agents do not need a court-issued warrant to request the contents of e-mail on Web- or cloud-based services, even though agents would need a warrant to see an e-mail stored on a laptop or a document stored in a file cabinet, critics have noted. The ECPA also doesn't require a warrant for unopened e-mail stored with a vendor for longer than 180 days, although law enforcement agencies would need court approval to access unopened e-mail less than 180 days old. In addition, under the law, police need a warrant to track a suspect by GPS, but not to track a suspect using less precise cell tower location information.
Microsoft is urging U.S. lawmakers to overhaul laws for electronic privacy to help new services such as cloud computing, a technology that may double sales in five years. As more data is stored on remote servers and away from personal computers, a 1986 digital law needs to be updated to give consumers confidence their information is protected, Brad Smith, Microsoft's general counsel, said. "The law needs to catch up," Smith said after the hearing. Cloud computing is "a critical part of the future and quite central to all that we're doing." Collecting and storing data using remote computer servers, called cloud computing, may generate global sales of $148.8 billion by the end of 2014, up from $58.6 billion last year, according to researcher Gartner Inc. in Stamford, Connecticut. If consumers worry about online security, it could limit the industry's growth, Smith said