EnglishEspañol

Federal Wiretap Act and ECPA: The Complete Guide (2026)

Independently fact-checked against primary sources (last audited August 4, 2026). · Law checked current as of August 9, 2026. · 33 primary sources cited on this page. How we verify our legal content

Federal Wiretap Act and ECPA: The Complete Guide (2026)

Frequently Asked Questions

What is the federal one-party consent rule under the Wiretap Act?

Under 18 U.S.C. § 2511(2)(d), it is lawful to intercept a wire, oral, or electronic communication where one party to the communication consents to the interception, provided the interception is not carried out for the purpose of committing a criminal or tortious act. Because the consenting party may be the person doing the recording, this effectively means you may record a conversation you are part of without informing the other parties, unless your purpose is to commit a crime or tort.

Does the federal Wiretap Act cover silent video recording?

No. The Wiretap Act, 18 U.S.C. §§ 2510-2523, covers wire, oral, and electronic communications. Silent video recording with no audio component is outside the statute entirely. Purely visual surveillance is regulated, if at all, by state video-voyeurism statutes and constitutional law, not by the federal Wiretap Act.

What are the criminal penalties for violating the Wiretap Act?

A violation of 18 U.S.C. § 2511 is a federal felony. Section 2511(4)(a) provides that a violator shall be fined under Title 18 or imprisoned not more than five years, or both. Each interception is a separate offense. There is no first-time-offender sentence reduction in the current statute. Section 2511(4)(a) states that maximum 'except as provided in paragraph (b) of this subsection or in subsection (5),' so there are two exceptions to it and neither reaches an ordinary recording case. The carve-out in § 2511(4)(b) is narrow and unrelated: it covers the interception of certain unencrypted satellite transmissions sent to a broadcasting station for retransmission to the public, or as an audio subcarrier for redistribution to facilities open to the public, and it does not apply where the conduct is for direct or indirect commercial advantage or private financial gain. Section 2511(5) is the second exception: it routes certain unencrypted private satellite video transmissions and radio communications on specified frequencies, intercepted without tortious purpose and not for commercial advantage or private financial gain, to a federal civil action for injunctive relief and a mandatory $500 civil fine rather than to criminal penalties.

What is the civil remedy under the Wiretap Act?

Under 18 U.S.C. § 2520, any person whose wire, oral, or electronic communication is intercepted, disclosed, or intentionally used in violation of the Wiretap Act may bring a civil action. The court may award the greater of actual damages, or statutory damages of $100 per day of violation (with a $10,000 minimum per violation), plus punitive damages in appropriate cases, and reasonable attorney fees and costs.

What is the difference between the Wiretap Act and the Stored Communications Act?

The Wiretap Act (18 U.S.C. §§ 2510-2523, ECPA Title I) covers communications intercepted in transit, meaning while they are being transmitted. The Stored Communications Act (18 U.S.C. §§ 2701-2713, ECPA Title II) covers communications at rest, meaning stored on a server or device after transmission. Accessing a live phone call is a Wiretap Act issue; reading stored emails without authorization is a Stored Communications Act issue.

If I am in a one-party consent state, does federal law protect me if the other person is in an all-party state?

Not necessarily. Federal one-party consent under § 2511(2)(d) is a floor: it preempts no state law that imposes stricter requirements. On an interstate call between a one-party state and an all-party state such as California or Florida, the cautious approach is to comply with the stricter state's law. Courts have generally applied the law of the state where interception occurs, but the issue involves genuine circuit-level uncertainty; consulting a lawyer before recording interstate calls is advisable.

What is the tortious-purpose caveat in § 2511(2)(d)?

Section 2511(2)(d) withholds the one-party consent exception when the interception is carried out 'for the purpose of committing any criminal or tortious act in violation of the Constitution or laws of the United States or of any State.' The Ninth Circuit explained in Sussman v. American Broadcasting Cos., 186 F.3d 1200 (9th Cir. 1999), that the focus is on the purpose for the interception and its intended use, not on whether the act of recording was itself tortious. Where a lawful recording is made to facilitate a further impropriety such as blackmail, § 2511 applies. Where the purpose is lawful but the means are tortious, the court said the victims must seek redress elsewhere.

What is a Title III warrant?

A Title III warrant (sometimes called a super-warrant) is a court order under 18 U.S.C. §§ 2516-2518 authorizing law enforcement to intercept wire, oral, or electronic communications. Requirements are more demanding than for a standard search warrant: the government must show probable cause of a specific federal crime, identify the facilities or places to be intercepted, demonstrate that normal investigative procedures have failed or would be unlikely to succeed, and limit the interception to 30 days (extendable). The government must also minimize interception of communications not within the scope of the order.

How many states require all-party consent to record a conversation?

Twelve: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Oregon, Pennsylvania, and Washington. Three states are commonly miscounted. Michigan is not on the list, because the Michigan Court of Appeals held in Sullivan v. Gray, 117 Mich. App. 476 (1982), that a participant is not an eavesdropper under the state statute. Nevada is split by medium: NRS 200.650 permits in-person recording with one participant's authorization, while the Nevada Supreme Court read NRS 200.620 in Lane v. Allstate Insurance Co., 114 Nev. 1176 (1998), to require both parties' consent for telephone calls. Connecticut is on the list but is also split: its criminal statute reaches only a person not present at the conversation, while Conn. Gen. Stat. § 52-570d imposes all-party consent on telephone recording.

Does the TAKE IT DOWN Act of 2025 amend the Wiretap Act?

No. The TAKE IT DOWN Act, Pub. L. 119-12, signed May 19, 2025, is a separate federal statute that creates criminal liability for publishing nonconsensual intimate images, including AI-generated deepfakes. It does not amend or interact with the Wiretap Act or ECPA. The two statutes address different harms through different mechanisms.

Can a provider of a communication service record its own users' communications?

Yes, subject to limits. The provider exception at 18 U.S.C. § 2511(2)(a)(i) permits a provider of wire or electronic communication service to intercept, disclose, or use communications in the normal course of providing the service or for protecting the rights or property of the provider. The exception does not authorize providers to sell or disclose communications to third parties beyond the scope of service delivery.

What is the pen register and trap-and-trace law under ECPA?

ECPA Title III, 18 U.S.C. §§ 3121-3127, governs pen registers (devices that capture outgoing dialing, routing, addressing, or signaling information) and trap-and-trace devices (devices that capture incoming information). Installing such a device without a court order is a federal crime under § 3121. The standard for obtaining a pen register order is lower than for a Title III intercept warrant: the government need only certify that the information is relevant to an ongoing investigation.

Updates

Governing law re-checked for recent changes

Corrected the all-party consent state list to twelve states, adding Delaware and giving Michigan, Nevada, and Connecticut the accurate treatment their own statutes and courts require. Also corrected the description of the Wiretap Act's criminal penalty carve-out, the Stored Communications Act's 180-day rule, and several case citations, and replaced every source link with a court, legislature, or government text. Also moved the twelve frequently asked questions onto the page itself, where they had previously existed only in the page's structured data and were invisible to readers.

Independently fact-checked against the cited primary sources

Correction and re-verification pass against primary sources. Corrected the all-party consent state list from 13 to 12 to match the statutes and this site's state guides: added Delaware (11 Del. C. 1335(a)(4)), removed Michigan (Sullivan v. Gray, 117 Mich. App. 476 (1982), holds a participant is not an eavesdropper under MCL 750.539c) and removed Nevada as a flat all-party state (NRS 200.650 permits in-person recording with one participant's authorization; Lane v. Allstate Insurance Co., 114 Nev. 1176 (1998), requires both parties' consent for telephone calls only). Added the same medium-split treatment for Connecticut (Conn. Gen. Stat. 53a-187(a)(2) vs 52-570d). Corrected 18 U.S.C. 2511(4)(b): it is a narrow satellite-transmission carve-out, not a one-year sentence reduction for first-time offenders, and the earlier text describing such a reduction has been removed from both the article and its FAQ. Corrected the description of 18 U.S.C. 2511(4)(a), which excepts both paragraph (b) and subsection (5) from the five-year maximum, and added what subsection (5) actually does. Pin-cited the statutory-damages formula to 18 U.S.C. 2520(c)(2), which is where it appears, rather than to 2520(b)(2). Corrected the description of the undercover operative in Sussman v. American Broadcasting Cos. to match the opinion's statement of facts. Moved the twelve frequently asked questions out of the page's structured data and onto the page itself, where readers can actually see the answers. Corrected the citation for Sullivan v. Gray to 117 Mich. App. 476 (previously 117 Mich. App. 16). Corrected the circuit attribution and holding for Sussman v. American Broadcasting Cos., 186 F.3d 1200 (9th Cir. 1999): it is a Ninth Circuit decision, and it rejected a blanket journalism exemption rather than creating one. Removed a citation to Thompson v. Dulaney that did not support the proposition it was attached to. Corrected the description of 18 U.S.C. 2703 to reflect the statute's 180-day structure, with United States v. Warshak, 631 F.3d 266 (6th Cir. 2010), added. Corrected the description of 18 U.S.C. 2511(3)(a) and (3)(b) and of 18 U.S.C. 2516(2). Removed two uncited generalizations about how courts resolve the in-transit versus at-rest question and about director and officer liability. Added Carpenter v. United States, 585 U.S. 296 (2018), to the constitutional section. Replaced five source links that pointed to sites we do not cite, and replaced three bill links with the Statutes at Large and Public Law texts on govinfo.gov.

Initial publication. Covers 18 U.S.C. §§ 2510-2523 (Wiretap Act / ECPA Title I), §§ 2701-2713 (Stored Communications Act / ECPA Title II), and §§ 3121-3127 (pen register / ECPA Title III). Includes § 2511(2)(d) one-party consent rule and tortious-purpose caveat; § 2520 civil damages ($10,000 minimum floor); Title III super-warrant requirements; provider and business-extension exceptions; federal floor vs. state all-party ceiling; First Amendment limits under Bartnicki v. Vopper (2001); recording police under Glik (1st Cir. 2011); TAKE IT DOWN Act Pub. L. 119-12 (May 19, 2025) noted as separate layer. Silent video recording outside federal Wiretap Act clarified.

Sources and References

  1. 18 U.S.C. § 2510: ECPA definitions, including the ordinary-course-of-business exclusion at § 2510(5)(a)(uscode.house.gov).gov
  2. 18 U.S.C. § 2511: Wiretap Act core prohibition, the § 2511(2)(d) one-party consent exception, the § 2511(3) provider disclosure rules, and the § 2511(4) penalties(uscode.house.gov).gov
  3. 18 U.S.C. § 2511 (2023 edition, govinfo.gov): § 2511(4)(b) is a satellite-transmission carve-out, not a first-offense sentence reduction(govinfo.gov).gov
  4. 18 U.S.C. § 2512: manufacture, possession, sale, and advertising of surreptitious interception devices(uscode.house.gov).gov
  5. 18 U.S.C. § 2516: offenses for which Title III interception may be authorized; § 2516(2) state applications in conformity with § 2518 and the applicable state statute(uscode.house.gov).gov
  6. 18 U.S.C. § 2518: procedure for interception; probable cause, exhaustion, particularity, 30-day limit, and minimization(uscode.house.gov).gov
  7. 18 U.S.C. § 2520: civil action; statutory damages of $100 per day with a $10,000 minimum per violation, punitive damages, and attorney fees(uscode.house.gov).gov
  8. 18 U.S.C. § 2701: Stored Communications Act; unlawful access to stored communications(uscode.house.gov).gov
  9. 18 U.S.C. § 2703: required disclosure of customer communications; warrant for content in storage 180 days or less, subpoena or § 2703(d) order for content stored longer(uscode.house.gov).gov
  10. 18 U.S.C. § 2707: SCA civil action; $1,000 minimum statutory damages(uscode.house.gov).gov
  11. 18 U.S.C. § 3121: pen register and trap-and-trace prohibition and court-order exception(uscode.house.gov).gov
  12. Omnibus Crime Control and Safe Streets Act of 1968, Pub. L. 90-351, 82 Stat. 197: the original Title III wiretapping prohibition(govinfo.gov).gov
  13. Electronic Communications Privacy Act of 1986, Pub. L. 99-508, 100 Stat. 1848: the three-title ECPA structure(govinfo.gov).gov
  14. TAKE IT DOWN Act, Pub. L. 119-12, 139 Stat. 55, signed May 19, 2025: federal prohibition on nonconsensual intimate visual depictions, including deepfakes(govinfo.gov).gov
  15. 18 U.S.C. § 2511 via Cornell LII: annotated Wiretap Act prohibition and exceptions(law.cornell.edu)
  16. 18 U.S.C. § 2520 via Cornell LII: civil action; $10,000 minimum statutory damages(law.cornell.edu)
  17. Katz v. United States, 389 U.S. 347 (1967), U.S. Reports via the Library of Congress: the Fourth Amendment protects people rather than places(tile.loc.gov).gov
  18. Berger v. New York, 388 U.S. 41 (1967), U.S. Reports via the Library of Congress: eavesdropping statute struck down for want of particularity and a termination provision(tile.loc.gov).gov
  19. Bartnicki v. Vopper, 532 U.S. 514 (2001), U.S. Reports via the Library of Congress: First Amendment limits on liability for publishing a lawfully obtained intercepted call(tile.loc.gov).gov
  20. Carpenter v. United States, 585 U.S. 296 (2018), slip opinion via supremecourt.gov: acquiring historical cell-site location records is a Fourth Amendment search(supremecourt.gov).gov
  21. Glik v. Cunniffe, 655 F.3d 78 (1st Cir. 2011), opinion via the First Circuit: filming police in a public space is a clearly established First Amendment right(media.ca1.uscourts.gov).gov
  22. United States v. Warshak, 631 F.3d 266 (6th Cir. 2010), opinion via the Sixth Circuit: a warrant is required to compel stored email content from a commercial ISP(opn.ca6.uscourts.gov).gov
  23. Sussman v. American Broadcasting Cos., 186 F.3d 1200 (9th Cir. 1999): the § 2511(2)(d) caveat turns on the purpose of the interception, and there is no blanket exemption for journalists(law.resource.org)
  24. Watkins v. L.M. Berry & Co., 704 F.2d 577 (11th Cir. 1983): consent can be limited, and monitoring must cease once a call is identified as personal(law.resource.org)
  25. Cal. Penal Code § 632: California all-party consent for confidential communications(leginfo.legislature.ca.gov).gov
  26. Fla. Stat. § 934.03: Florida all-party consent; third-degree felony for violations(leg.state.fl.us).gov
  27. 720 ILCS 5/14-1: Illinois eavesdropping definitions, including the reasonable-expectation test for a private conversation at § 14-1(d)(ilga.gov).gov
  28. 720 ILCS 5/14-2: elements of Illinois eavesdropping; a participant offends only by recording a private conversation in a surreptitious manner without all-party consent(ilga.gov).gov
  29. Mass. Gen. Laws ch. 272, § 99: interception means to secretly hear or record without prior authority from all parties(malegislature.gov).gov
  30. Wash. Rev. Code § 9.73.030: Washington all-party consent for private telephone communications and private conversations(app.leg.wa.gov).gov
  31. NRS 200.620, 200.650, and 200.690: Nevada wire interception, the one-participant authorization for in-person recording, and category D felony penalties(leg.state.nv.us).gov
  32. Lane v. Allstate Insurance Co., 114 Nev. 1176, 969 P.2d 938 (1998): NRS 200.620 requires the consent of both parties to record a telephone conversation(courtlistener.com)
  33. Sullivan v. Gray, 117 Mich. App. 476, 324 N.W.2d 58 (1982): a participant recording their own conversation is not eavesdropping under MCL 750.539c(courtlistener.com)
  34. AFT Michigan v. Project Veritas, 378 F. Supp. 3d 614 (E.D. Mich. 2019): participant protection under the Michigan eavesdropping statute described as an unresolved question of state law(courtlistener.com)
  35. Conn. Gen. Stat. § 53a-187(a)(2): mechanical overhearing of a conversation reaches only a person not present at the conversation(cga.ct.gov).gov
  36. Conn. Gen. Stat. § 52-570d: Connecticut all-party consent, recorded verbal notification, or repeating tone warning for recording a private telephonic communication(cga.ct.gov).gov
  37. Conn. Gen. Stat. § 31-48d: employers engaged in electronic monitoring must give prior notice to employees; exceptions and civil penalty(cga.ct.gov).gov
  38. 11 Del. C. § 1335(a)(4): Delaware violation of privacy; intercepting a private message or conversation without the consent of all parties(delcode.delaware.gov).gov
  39. 11 Del. C. § 2402(c)(4): Delaware's parallel one-party interception provision, which points the other way from § 1335(a)(4)(delcode.delaware.gov).gov
  40. Del. Code tit. 19, § 705: notice required before a Delaware employer monitors telephone, email, or internet usage; $100 civil penalty per violation(delcode.delaware.gov).gov
Share: