NDO Fairness Act
Click any stage to learn more about the legislative process.
The bill would raise the legal and procedural requirements the government must meet to obtain a nondisclosure order (NDO) — a court order barring electronic service providers from telling customers that law enforcement has demanded their data — and would cap most NDOs at 90 days.
It would also give providers a formal right to challenge NDOs in court, require the government to notify targeted customers after orders expire, and direct the Justice Department to report annually to Congress on NDO use, including orders affecting journalists.
What this bill would do
What it would do
The bill would amend the Stored Communications Act to tighten the standards for nondisclosure orders (NDOs), which are court orders that prevent electronic communications or remote computing service providers from telling customers that the government has compelled disclosure of their records. A court could only grant an NDO upon a written determination — based on specific and articulable facts, with findings of fact and conclusions of law — that withholding notice is necessary to prevent one of five enumerated harms: endangering a life, enabling flight from prosecution, destruction or tampering with evidence, intimidating witnesses, or seriously jeopardizing an investigation. Courts would also be required to review the underlying warrant or subpoena before issuing an NDO, and orders would have to be narrowly tailored with no less-restrictive alternative available.
NDOs would generally be limited to 90 days, extendable in 90-day increments by court order; a longer maximum of one year would apply to child sexual exploitation investigations. When an order expires, the government would be required to notify the targeted customer within five business days by at least two approved methods, and to provide a copy of the disclosed information upon the customer's request within 180 days. The Attorney General would be required to report annually to Congress on NDO applications, orders granted or denied, and orders targeting media members.
Key provisions
- 1Would require courts to issue a written determination, based on specific and articulable facts with findings of fact and conclusions of law, that one of five enumerated adverse results would likely occur before granting an NDO.
- 2Would require courts to review the underlying warrant, order, or subpoena under Section 2703 and ensure the NDO is narrowly tailored with no less-restrictive alternative available.
- 3Would limit NDO duration to 90 days for most investigations, with 90-day extensions available by court order; permits up to one year for child pornography or sexual exploitation of children cases.
- 4Would give providers a formal right to petition the court to modify or vacate an NDO, staying the government's disclosure obligations during the challenge; the court's ruling would be a final, appealable order.
- 5Would require the government, within 5 business days of an NDO's expiration, to notify the targeted customer by at least 2 approved methods and provide a copy of disclosed information upon request within 180 days.
- 6Would require the Attorney General to report annually to Congress and publish on the DOJ website district-by-district data on NDO applications, orders granted or denied, and orders targeting members of the news media.
Who would be affected
Electronic communications and remote computing service providers — including email, cloud, and telephone companies — that receive government data demands; customers and subscribers whose stored records are sought by law enforcement; journalists and media organizations potentially targeted by NDO-covered subpoenas; federal courts reviewing NDO applications; and the Department of Justice, which would face new annual reporting obligations.
Why it matters
If enacted, targeted customers would gain a new right to learn after the fact that their records were obtained, and to receive a copy of what was disclosed. Courts would face a higher procedural bar before approving government secrecy requests, and providers would gain an explicit statutory right to challenge NDOs. The annual public reporting requirement would give Congress and the public a new window into how often, and in what contexts, these orders are used — including against the press.
What would change
Changes to existing law
Amends 18 U.S.C. § 2705 (Stored Communications Act) (Sec. 2)
Rewrites the NDO provision to add heightened standards, written court findings, narrow-tailoring requirement, 90-day duration limits, provider challenge rights, mandatory post-expiration customer notice, and annual DOJ reporting.
Agencies directed to act
How implementation would work
Courts would apply the new heightened standard on each NDO application, issuing written findings before granting an order and separately reviewing the underlying warrant or subpoena. If circumstances change materially, the government would have up to 14 days to notify the court, which would reassess the order. Providers could petition the court to modify or vacate an order; disclosure obligations would be stayed during that challenge. Upon NDO expiration, the government would deliver notice by at least two approved methods within five business days. The Attorney General would annually compile and publish a district-by-district report on the DOJ website, covering applications, orders granted or denied, and orders affecting media figures.
Legislative status & sources
Latest action
Ordered to be Reported (Amended) by Voice Vote.
Official CRS summary
Show the CRS summaryHide the CRS summary
NDO Fairness Act
This bill increases the requirements the government must meet to obtain a nondisclosure order (NDO) under the Stored Communications Act (SCA).
The SCA generally prohibits providers of remote computing services or electronic communication services (providers) from disclosing stored electronic communications or records (e.g., emails) or information pertaining to customers or subscribers. However, the SCA authorizes the government seek a warrant, order, or subpoena to compel providers to disclose electronic communications or records or information pertaining to customers or subscribers during an investigation. Providers may notify customers and subscribers of the warrant, order, or subpoena unless the government obtains a court order—an NDO—that delays the notification.
This bill raises the standard the government must meet to obtain (or extend) an NDO. The bill also requires the court, before issuing an NDO, to issue a written determination that the standard was met based on specific and articulable facts, and to review the underlying warrant, order, or subpoena.
The bill requires NDOs to be narrowly tailored. It also limits their duration to 90 days for most investigations, though it permits a duration of up to one year for investigations pertaining to an offense involving child pornography or sexual exploitation of children.
Finally, the bill requires the Department of Justice to report annually on data related to NDOs, including the number of customers or subscribers targeted; applications for orders; orders granted, extended, or denied; and orders targeting members of the media or conduct related to certain protected activities.
Legislative subjects
Business records; Computers and information technology; Congressional oversight; Consumer affairs; Crime and Law Enforcement; Criminal investigation, prosecution, interrogation; Internet, web applications, social media; Judicial procedure and administration; Right of privacy; Telephone and wireless communication