EnglishEspañol

Federal Wiretap Act and ECPA: The Complete Guide (2026)

Independently fact-checked against primary sources (last audited August 4, 2026). · Law checked current as of August 9, 2026. · 33 primary sources cited on this page. How we verify our legal content

Federal Wiretap Act and ECPA: The Complete Guide (2026)

Updates

Corrected the quotation from Katz v. United States to the Court's exact words and fixed the timing of Berger v. New York, which was decided earlier in 1967 rather than in the same Term as Katz.

Governing law re-checked for recent changes

Corrected the all-party consent state list to twelve states, adding Delaware and giving Michigan, Nevada, and Connecticut the accurate treatment their own statutes and courts require. Also corrected the description of the Wiretap Act's criminal penalty carve-out, the Stored Communications Act's 180-day rule, and several case citations, and replaced every source link with a court, legislature, or government text. Also moved the twelve frequently asked questions onto the page itself, where they had previously existed only in the page's structured data and were invisible to readers.

Independently fact-checked against the cited primary sources

Correction and re-verification pass against primary sources. Corrected the all-party consent state list from 13 to 12 to match the statutes and this site's state guides: added Delaware (11 Del. C. 1335(a)(4)), removed Michigan (Sullivan v. Gray, 117 Mich. App. 476 (1982), holds a participant is not an eavesdropper under MCL 750.539c) and removed Nevada as a flat all-party state (NRS 200.650 permits in-person recording with one participant's authorization; Lane v. Allstate Insurance Co., 114 Nev. 1176 (1998), requires both parties' consent for telephone calls only). Added the same medium-split treatment for Connecticut (Conn. Gen. Stat. 53a-187(a)(2) vs 52-570d). Corrected 18 U.S.C. 2511(4)(b): it is a narrow satellite-transmission carve-out, not a one-year sentence reduction for first-time offenders, and the earlier text describing such a reduction has been removed from both the article and its FAQ. Corrected the description of 18 U.S.C. 2511(4)(a), which excepts both paragraph (b) and subsection (5) from the five-year maximum, and added what subsection (5) actually does. Pin-cited the statutory-damages formula to 18 U.S.C. 2520(c)(2), which is where it appears, rather than to 2520(b)(2). Corrected the description of the undercover operative in Sussman v. American Broadcasting Cos. to match the opinion's statement of facts. Moved the twelve frequently asked questions out of the page's structured data and onto the page itself, where readers can actually see the answers. Corrected the citation for Sullivan v. Gray to 117 Mich. App. 476 (previously 117 Mich. App. 16). Corrected the circuit attribution and holding for Sussman v. American Broadcasting Cos., 186 F.3d 1200 (9th Cir. 1999): it is a Ninth Circuit decision, and it rejected a blanket journalism exemption rather than creating one. Removed a citation to Thompson v. Dulaney that did not support the proposition it was attached to. Corrected the description of 18 U.S.C. 2703 to reflect the statute's 180-day structure, with United States v. Warshak, 631 F.3d 266 (6th Cir. 2010), added. Corrected the description of 18 U.S.C. 2511(3)(a) and (3)(b) and of 18 U.S.C. 2516(2). Removed two uncited generalizations about how courts resolve the in-transit versus at-rest question and about director and officer liability. Added Carpenter v. United States, 585 U.S. 296 (2018), to the constitutional section. Replaced five source links that pointed to sites we do not cite, and replaced three bill links with the Statutes at Large and Public Law texts on govinfo.gov.

Initial publication. Covers 18 U.S.C. §§ 2510-2523 (Wiretap Act / ECPA Title I), §§ 2701-2713 (Stored Communications Act / ECPA Title II), and §§ 3121-3127 (pen register / ECPA Title III). Includes § 2511(2)(d) one-party consent rule and tortious-purpose caveat; § 2520 civil damages ($10,000 minimum floor); Title III super-warrant requirements; provider and business-extension exceptions; federal floor vs. state all-party ceiling; First Amendment limits under Bartnicki v. Vopper (2001); recording police under Glik (1st Cir. 2011); TAKE IT DOWN Act Pub. L. 119-12 (May 19, 2025) noted as separate layer. Silent video recording outside federal Wiretap Act clarified.

Sources and References

  1. 18 U.S.C. § 2510: ECPA definitions, including the ordinary-course-of-business exclusion at § 2510(5)(a)(uscode.house.gov).gov
  2. 18 U.S.C. § 2511: Wiretap Act core prohibition, the § 2511(2)(d) one-party consent exception, the § 2511(3) provider disclosure rules, and the § 2511(4) penalties(uscode.house.gov).gov
  3. 18 U.S.C. § 2511 (2023 edition, govinfo.gov): § 2511(4)(b) is a satellite-transmission carve-out, not a first-offense sentence reduction(govinfo.gov).gov
  4. 18 U.S.C. § 2512: manufacture, possession, sale, and advertising of surreptitious interception devices(uscode.house.gov).gov
  5. 18 U.S.C. § 2516: offenses for which Title III interception may be authorized; § 2516(2) state applications in conformity with § 2518 and the applicable state statute(uscode.house.gov).gov
  6. 18 U.S.C. § 2518: procedure for interception; probable cause, exhaustion, particularity, 30-day limit, and minimization(uscode.house.gov).gov
  7. 18 U.S.C. § 2520: civil action; statutory damages of $100 per day with a $10,000 minimum per violation, punitive damages, and attorney fees(uscode.house.gov).gov
  8. 18 U.S.C. § 2701: Stored Communications Act; unlawful access to stored communications(uscode.house.gov).gov
  9. 18 U.S.C. § 2703: required disclosure of customer communications; warrant for content in storage 180 days or less, subpoena or § 2703(d) order for content stored longer(uscode.house.gov).gov
  10. 18 U.S.C. § 2707: SCA civil action; $1,000 minimum statutory damages(uscode.house.gov).gov
  11. 18 U.S.C. § 3121: pen register and trap-and-trace prohibition and court-order exception(uscode.house.gov).gov
  12. Omnibus Crime Control and Safe Streets Act of 1968, Pub. L. 90-351, 82 Stat. 197: the original Title III wiretapping prohibition(govinfo.gov).gov
  13. Electronic Communications Privacy Act of 1986, Pub. L. 99-508, 100 Stat. 1848: the three-title ECPA structure(govinfo.gov).gov
  14. TAKE IT DOWN Act, Pub. L. 119-12, 139 Stat. 55, signed May 19, 2025: federal prohibition on nonconsensual intimate visual depictions, including deepfakes(govinfo.gov).gov
  15. 18 U.S.C. § 2511 via Cornell LII: annotated Wiretap Act prohibition and exceptions(law.cornell.edu)
  16. 18 U.S.C. § 2520 via Cornell LII: civil action; $10,000 minimum statutory damages(law.cornell.edu)
  17. Katz v. United States, 389 U.S. 347 (1967), U.S. Reports via the Library of Congress: the Fourth Amendment protects people rather than places(tile.loc.gov).gov
  18. Berger v. New York, 388 U.S. 41 (1967), U.S. Reports via the Library of Congress: eavesdropping statute struck down for want of particularity and a termination provision(tile.loc.gov).gov
  19. Bartnicki v. Vopper, 532 U.S. 514 (2001), U.S. Reports via the Library of Congress: First Amendment limits on liability for publishing a lawfully obtained intercepted call(tile.loc.gov).gov
  20. Carpenter v. United States, 585 U.S. 296 (2018), slip opinion via supremecourt.gov: acquiring historical cell-site location records is a Fourth Amendment search(supremecourt.gov).gov
  21. Glik v. Cunniffe, 655 F.3d 78 (1st Cir. 2011), opinion via the First Circuit: filming police in a public space is a clearly established First Amendment right(media.ca1.uscourts.gov).gov
  22. United States v. Warshak, 631 F.3d 266 (6th Cir. 2010), opinion via the Sixth Circuit: a warrant is required to compel stored email content from a commercial ISP(opn.ca6.uscourts.gov).gov
  23. Sussman v. American Broadcasting Cos., 186 F.3d 1200 (9th Cir. 1999): the § 2511(2)(d) caveat turns on the purpose of the interception, and there is no blanket exemption for journalists(law.resource.org)
  24. Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983): consent can be limited, and monitoring must cease once a call is identified as personal(law.resource.org)
  25. Cal. Penal Code § 632: California all-party consent for confidential communications(leginfo.legislature.ca.gov).gov
  26. Fla. Stat. § 934.03: Florida all-party consent; third-degree felony for violations(leg.state.fl.us).gov
  27. 720 ILCS 5/14-1: Illinois eavesdropping definitions, including the reasonable-expectation test for a private conversation at § 14-1(d)(ilga.gov).gov
  28. 720 ILCS 5/14-2: elements of Illinois eavesdropping; a participant offends only by recording a private conversation in a surreptitious manner without all-party consent(ilga.gov).gov
  29. Mass. Gen. Laws ch. 272, § 99: interception means to secretly hear or record without prior authority from all parties(malegislature.gov).gov
  30. Wash. Rev. Code § 9.73.030: Washington all-party consent for private telephone communications and private conversations(app.leg.wa.gov).gov
  31. NRS 200.620, 200.650, and 200.690: Nevada wire interception, the one-participant authorization for in-person recording, and category D felony penalties(leg.state.nv.us).gov
  32. Lane v. Allstate Insurance Co., 114 Nev. 1176, 969 P.2d 938 (1998): NRS 200.620 requires the consent of both parties to record a telephone conversation(courtlistener.com)
  33. Sullivan v. Gray, 117 Mich. App. 476, 324 N.W.2d 58 (1982): a participant recording their own conversation is not eavesdropping under MCL 750.539c(courtlistener.com)
  34. AFT Michigan v. Project Veritas, 378 F. Supp. 3d 614 (E.D. Mich. 2019): participant protection under the Michigan eavesdropping statute described as an unresolved question of state law(courtlistener.com)
  35. Conn. Gen. Stat. § 53a-187(a)(2): mechanical overhearing of a conversation reaches only a person not present at the conversation(cga.ct.gov).gov
  36. Conn. Gen. Stat. § 52-570d: Connecticut all-party consent, recorded verbal notification, or repeating tone warning for recording a private telephonic communication(cga.ct.gov).gov
  37. Conn. Gen. Stat. § 31-48d: employers engaged in electronic monitoring must give prior notice to employees; exceptions and civil penalty(cga.ct.gov).gov
  38. 11 Del. C. § 1335(a)(4): Delaware violation of privacy; intercepting a private message or conversation without the consent of all parties(delcode.delaware.gov).gov
  39. 11 Del. C. § 2402(c)(4): Delaware's parallel one-party interception provision, which points the other way from § 1335(a)(4)(delcode.delaware.gov).gov
  40. Del. Code tit. 19, § 705: notice required before a Delaware employer monitors telephone, email, or internet usage; $100 civil penalty per violation(delcode.delaware.gov).gov
Share: