NDO Fairness Act of 2026
- Bill Number
- S. 3663
- Origin Chamber
- Senate
- Congress
- 119th Congress, Session 2
- Policy Area
- Crime and Law Enforcement
- Status
- Introduced
- Latest Action
- 2026-01-15: Read twice and referred to the Committee on the Judiciary.
- Last Updated
- 2026-05-20T15:43:20Z
AI-Generated Summary
Purpose of the Legislation
The "NDO Fairness Act of 2026" aims to reform rules for when government agencies can secretly obtain electronic communications or records from service providers without immediately notifying the affected customer or user. It seeks to balance law enforcement needs with individual privacy rights by adding stricter limits, oversight, and transparency to "nondisclosure orders" (NDOs), which prevent providers from telling customers about government requests.
Key Provisions
- Application for NDOs: Government agencies can apply to a court for an NDO when seeking a warrant, court order, or subpoena under 18 U.S.C. § 2705 (part of the Stored Communications Act, which governs access to emails, files, and other digital data). The application must disclose if the customer knows about the request or is suspected of a crime.
- Duration Limits:
- Up to 1 year for investigations involving child pornography (as defined in 18 U.S.C. § 2256), child sexual exploitation (under 18 U.S.C. § 2251), or similar offenses under federal, state, tribal, or military law.
- Up to 90 days for all other cases.
- Court Approval Requirements: Courts can only issue or extend an NDO if they make a written finding, based on specific facts, that disclosure would likely cause harm such as endangering lives, evidence tampering, witness intimidation, or jeopardizing the investigation. The order must be narrowly tailored with no less restrictive options. For child exploitation cases, courts can presume harm without a full written explanation if there's reasonable belief of such offenses.
- Extensions and Changes: Agencies can request 90-day extensions, but each requires the same strict court review. If circumstances change (e.g., the risk decreases), agencies must notify the court within 14 days, allowing the court to modify or cancel the order.
- Provider Challenges: Service providers (e.g., email or cloud storage companies) can ask courts to modify or vacate NDOs if they're unlawful or unreasonable. Filing such a challenge temporarily pauses the provider's duty to hand over data until resolved, unless the court lifts the pause for urgent reasons. Court decisions on challenges are final and appealable.
- Exceptions to Secrecy: Providers can share NDO details with people needed to comply (e.g., their own staff), lawyers for advice, or others approved by the court. Anyone receiving this info must also keep it secret.
- Post-Expiration Notifications: After an NDO expires, agencies must notify the customer within 5 business days using at least two methods (e.g., mail and email). The notice includes details of the request, what data was shared (if any), the court's role, and legal basis. Customers can request copies of disclosed data within 180 days (with exceptions for illegal content like child pornography). Courts can allow limited redactions (edits to hide parts) only if needed to protect ongoing investigations.
- Annual Reporting: The Attorney General must submit and publicly post (with national security redactions) yearly reports to Congress and courts. These cover, by federal district: number of data requests, NDO applications and outcomes, impacts on news media (protected by the First Amendment), and results like arrests or convictions tied to these orders. Reports explain data collection methods.
Significant Changes to Existing Law
- Stricter Standards: Previously, delayed notices under 18 U.S.C. § 2705 could last indefinitely with minimal court scrutiny. This bill caps durations, mandates detailed written findings for approvals/extensions, and requires proving no alternatives exist—raising the bar for secrecy.
- Enhanced Transparency: Adds mandatory post-order notifications to customers (not required before) and public annual reports (new requirement), replacing vague or optional disclosures.
- Provider Protections: Introduces formal challenge processes with stays on compliance, plus requirements for agencies to provide supporting documents when serving NDOs.
- Special Rules for Serious Crimes: Creates a presumption of harm for child exploitation cases, allowing easier but still limited NDOs, while excluding such content from post-notice disclosures.
- No Provider Notification Duty: Removes any obligation for providers to alert courts or agencies when NDOs expire.
Potential Impacts
- On Government Agencies: Law enforcement (e.g., FBI, DOJ) may face more hurdles and paperwork to obtain secrecy, potentially slowing investigations but encouraging focused use of NDOs. Annual reports could increase public scrutiny of their practices.
- On Citizens: Improves privacy by ensuring most people learn about data requests after a set time, allowing them to challenge government actions or seek remedies. However, victims or those in child exploitation cases may not get full disclosures to avoid re-traumatization.
- On Service Providers: Tech companies and ISPs gain tools to contest orders, reducing legal risks, but must handle more notifications and secrecy obligations.
- On International Relations: No direct impacts; the bill focuses on domestic U.S. law enforcement accessing data from U.S.-based providers.
Main Stakeholders Affected
- Government Entities: Federal agencies like the Department of Justice and law enforcement (e.g., FBI) that request digital data.
- Service Providers: Companies offering electronic communications (e.g., email services like Gmail) or remote computing (e.g., cloud storage like Dropbox).
- Customers and Subscribers: Individuals whose emails, files, or online records are accessed, including the general public, journalists, and those investigated for crimes.
- Courts and Judges: Federal courts that review and issue NDOs, with added workload for detailed findings.
- News Media: Specifically tracked in reports due to First Amendment protections, affecting investigative journalism.
Notable Legal, Constitutional, or Political Implications
- Legal/Constitutional: Strengthens Fourth Amendment protections against unreasonable searches by limiting "secret" warrants and requiring fact-based justifications, potentially reducing overreach in digital surveillance. It may invite challenges if agencies argue the new rules hinder critical investigations (e.g., in national security cases, though not directly addressed). The First Amendment angle protects media from undue secrecy in leak or source-related probes.
- Political: Bipartisan sponsorship (Sens. Coons and Lee) signals cross-party support for privacy reforms amid debates on tech surveillance. Could set precedents for future laws on data access, influencing ongoing discussions like FISA (Foreign Intelligence Surveillance Act) reauthorizations, without altering international treaties or foreign policy.
This summary was generated by AI and may contain inaccuracies. Refer to the official source document for the authoritative text.
Sponsor
Sen. Coons, Christopher A. [D-DE]
Cosponsors (5)
Sen. Lee, Mike [R-UT], Sen. Blackburn, Marsha [R-TN], Sen. Cruz, Ted [R-TX], Sen. Welch, Peter [D-VT], Sen. Durbin, Richard J. [D-IL]
Recent Actions
- 2026-01-15: Read twice and referred to the Committee on the Judiciary.
- 2026-01-15: Introduced in Senate
Bill Versions
- NDO Fairness Act of 2026 — issued 2026-01-15 — PDF (13 pages)