Stored Communications Act (SCA)
Definition
Part of the US Electronic Communications Privacy Act (18 U.S.C. 2701-2712) that governs government access to stored electronic communications and data. It sets out the three-tier process: subpoena for subscriber records, court order for metadata, and search warrant for content. Many non-US jurisdictions have equivalent statutes with similar threshold structures.
- Field
- US digital evidence law, cloud forensics
- Citation
- 18 U.S.C. 2701-2712
- Part of
- Electronic Communications Privacy Act
- Tier structure
- Subpoena for subscriber records, order for metadata, warrant for content
Common questions
Why does the SCA require a warrant for content but only a subpoena for subscriber records?+
The tiered structure reflects an escalating privacy interest: basic account details like a name or IP address are treated as less sensitive than the actual content of communications, so the law sets a correspondingly higher evidentiary bar, a full warrant, before a provider must hand over message content.
Does the Stored Communications Act apply outside the United States?+
It only directly governs US-based providers and US legal process, but many other countries have built comparable tiered-access statutes for stored communications, and cross-border requests often route through mutual legal assistance treaties when a foreign provider is involved.
Related terms
- MLAT (Mutual Legal Assistance Treaty)
- A bilateral or multilateral treaty framework through which countries agree to provide legal cooperation in criminal investigations, including compelling disclosure of evidence...
- Account Attribution
- The process of linking a pseudonymous or anonymous online account to a real-world identity. Methods include IP log analysis, device fingerprinting, cross-platform...
- CLOUD Act
- The Clarifying Lawful Overseas Use of Data Act (US, 2018). Clarifies that US service providers must comply with valid US legal process...
- Forensic Capture
- Tool-based documentation of online content that records the URL, timestamp, and page hash alongside the visible content. Preferred over manual screenshots in...
- Google Legal Investigations Support
- Google's process for handling law enforcement requests, documented at its transparency report portal. Google distinguishes between emergency disclosure requests (no legal process...
- iCloud Backup
- A daily encrypted snapshot of an iPhone or iPad stored in Apple's cloud. Includes app data the developer marks for backup, device...
- OSINT (Open-Source Intelligence)
- Intelligence gathered from publicly available sources without special legal authority. In social media investigation, OSINT covers all content visible to any user:...
- Preservation Letter
- A formal written request to a cloud provider asking it to preserve a specific account's data for a defined period, typically 90...
- Preservation Request
- A formal letter sent to a platform asking it to freeze and retain specified account data pending formal legal process. Under 18...
Explained in these topics
- Cloud Account Forensics
- Online Account and Social Media InvestigationUS federal statute (18 U.S.C. §§ 2701-2713) that governs law enforcement access to stored electronic communications held by third-party providers. It establish...