Loading Map…

H.R. 2604

119th CONGRESS 1st Session

To ensure the digital contents of electronic equipment and online accounts belonging to or in the possession of United States persons entering or exiting the United States are adequately protected at the border, and for other purposes.

IN THE HOUSE OF REPRESENTATIVES · April 2, 2025 · Sponsor: Mr. Lieu

H.R. 2604

SEC. 1. Short title

This Act may be cited as the Protecting Data at the Border Act.

SEC. 2. Findings

Congress finds the following:
- United States persons have a reasonable expectation of privacy in the digital contents of their electronic equipment, the digital contents of their online accounts, and the nature of their online presence.
- The Supreme Court of the United States recognized in Riley v. California, 134 S. Ct. 2473 (2014), the extraordinary privacy interests in electronic equipment like cell phones.
- The privacy interest of United States persons in the digital contents of their electronic equipment, the digital contents of their online accounts, and the nature of their online presence differs in both degree and kind from their privacy interest in closed containers.
- Accessing the digital contents of electronic equipment, accessing the digital contents of an online account, or obtaining information regarding the nature of the online presence of a United States person entering or exiting the United States, without a lawful warrant based on probable cause, is unreasonable under the Fourth Amendment to the Constitution of the United States.

SEC. 3. Definitions

As used in this Act—
- the term includes a username, password, PIN number, fingerprint, or biometric indicator; access credential
- the term border means the international border of the United States and the functional equivalent of such border;
- the term digital contents means any signs, signals, writing, images, sounds, data, or intelligence of any nature transmitted in whole or in part by electronic equipment, or stored in electronic equipment or an online account;
- the term electronic communication service has the meaning given that term in section 2510 of title 18, United States Code;
- the term electronic equipment,computer has the meaning given the term in section 1030(e) of title 18, United States Code;
- the term Governmental entity means a department or agency of the United States (including any officer, employee, or contractor or other agent thereof);
- the term online account means an online account with an electronic communication service or remote computing service;
- the term online account information means the screen name or other identifier or information that would allow a Governmental entity to identify the online presence of an individual;
- the term remote computing service has the meaning given that term in section 2711 of title 18, United States Code; and
- the term United States person means an individual who is a United States person, as defined in section 101 of the Foreign Intelligence Surveillance Act of 1978 (). 50 U.S.C. 1801

SEC. 4. Procedures for lawful access to digital data at the border

(a) Standard
- Subject to subsection (b), a Governmental entity may not—
  - access the digital contents of any electronic equipment belonging to or in the possession of a United States person at the border without a valid warrant supported by probable cause issued using the procedures described in the Federal Rules of Criminal Procedure by a court of competent jurisdiction;
  - deny entry into or exit from the United States by a United States person based on a refusal by the United States person to—
    - disclose an access credential that would enable access to the digital contents of electronic equipment or the digital contents of an online account;
    - provide access to the digital contents of electronic equipment or the digital contents of an online account; or
    - provide online account information; or
  - delay entry into or exit from the United States by a United States person for longer than the period of time, which may not exceed 4 hours, necessary to determine whether the United States person will, in a manner in accordance with subsection (c), consensually provide an access credential, access, or online account information, as described in subparagraphs (A), (B), and (C) of paragraph (2).
(b) Emergency exceptions
- (1) Emergency situations generally
  - (A) In general
    - An investigative or law enforcement officer of a Governmental entity who is designated by the Secretary of Homeland Security for purposes of this paragraph may access the digital contents of electronic equipment belonging to or in possession of a United States person at the border without a warrant described in subsection (a)(1) if the investigative or law enforcement officer—
      - (i) reasonably determines that—
      - an emergency situation exists that involves—
      - immediate danger of death or serious physical injury to any person;
      - conspiratorial activities threatening the national security interest of the United States; or
      - conspiratorial activities characteristic of organized crime;
      - the emergency situation described in subclause (I) requires access to the digital contents of the electronic equipment before a warrant described in subsection (a)(1) authorizing such access can, with due diligence, be obtained; and
      - there are grounds upon which a warrant described in subsection (a)(1) could be issued authorizing such access; and
      - (ii) makes an application in accordance with this section for a warrant described in subsection (a)(1) as soon as practicable, but not later than 7 days after the investigative or law enforcement officer accesses the digital contents under the authority under this subparagraph.
  - (B) Warrant not obtained
    - If an application for a warrant described in subparagraph (A)(ii) is denied, or in any other case in which an investigative or law enforcement officer accesses the digital contents of electronic equipment belonging to or in possession of a United States person at the border without a warrant under the emergency authority under subparagraph (A) and a warrant authorizing the access is not obtained—

SEC. 5. Limits on use of digital contents as evidence

(a) In general
- Whenever any digital contents or online account information have been obtained in violation of this Act, no part of the digital contents or online account information and no evidence derived therefrom may be received in evidence in any trial, hearing, or other proceeding (including any proceeding relating to the immigration laws, as defined in section 101(a) of the Immigration and Nationality Act ()) in or before any court, grand jury, department, officer, agency, regulatory body, legislative committee, or other authority of the United States, a State, or a political subdivision thereof. 8 U.S.C. 1101(a)
(b) Application
- To the maximum extent practicable, the limitations under subsection (a) shall be applied in the same manner as the limitations under section 2515 of title 18, United States Code.

SEC. 6. Limits on seizure of electronic equipment

A Governmental entity may not seize any electronic equipment belonging to or in the possession of a United States person at the border unless there is probable cause to believe that the electronic equipment contains information that is relevant to an allegation that the United States person has committed a felony.

SEC. 7. Audit and reporting requirements

In March of each year, the Secretary of Homeland Security shall submit to Congress and make publicly available on the website of the Department of Homeland Security a report that includes the following:
- The number of times during the previous year that an officer or employee of the Department of Homeland Security did each of the following:
  - Accessed the digital contents of any electronic equipment belonging to or in the possession of or the digital contents of an online account of a United States person at the border pursuant to a warrant supported by probable cause issued using the procedures described in the Federal Rules of Criminal Procedure by a court of competent jurisdiction.
  - Accessed the digital contents of any electronic equipment belonging to or in the possession of a United States person at the border pursuant to the emergency authority under section 5(b).
  - Requested consent to access the digital contents of any electronic equipment belonging to or in the possession of, the digital contents of an online account of, or online account information of a United States person at the border.
  - Accessed the digital contents of any electronic equipment belonging to or in the possession of, the digital contents of an online account of, or online account information of a United States person at the border pursuant to written consent provided in accordance with section 5(c).
  - Requested a United States person at the border consensually disclose an access credential that would enable access to the digital contents of electronic equipment or the digital contents of an online account of the United States person.
  - Accessed the digital contents of electronic equipment or the digital contents of an online account of a United States person at the border using an access credential pursuant to written consent provided in accordance with section 5(c).
  - Accessed the digital contents of any electronic equipment belonging to or in the possession of, the digital contents of an online account of, or online account information of a United States person at the border in a manner that was not in accordance with section 5.
  - Accessed the digital contents of any electronic equipment belonging to or in the possession of, the digital contents of an online account of, or online account information of an individual who is not a United States person at the border.
  - Accessed the digital contents of any electronic equipment belonging to or in the possession of an individual at the border, the digital contents of an online account of an individual at the border, or online account information of an individual at the border (regardless of whether the individual is a United States person) at the request of a Governmental entity (including another component of the Department of Homeland Security) that is not the Governmental entity employing the individual accessing the digital contents or online account information.
- Aggregate data on—

SEC. 8. Savings provisions

Nothing in this Act shall be construed to—
- prohibit a Governmental entity from conducting an inspection of the external physical components of the electronic equipment to determine the presence or absence of weapons or contraband without a warrant, including activating or attempting to activate an object that appears to be electronic equipment to verify that the object is electronic equipment; or
- limit the authority of a Governmental entity under the Foreign Intelligence Surveillance Act of 1978 (). 50 U.S.C. 1801 et seq.

Protecting Data at the Border Act · Introduced in House (2025-04-02) · Congress.wiki

(1) Notice
- (A) In general
  - A Governmental entity shall provide the notice described in subparagraph (B) before requesting that a United States person at the border—
    - (i) provide consent to access the digital contents of any electronic equipment belonging to or in the possession of or the digital contents of an online account of the United States person;
    - (ii) disclose an access credential that would enable access to the digital contents of electronic equipment or the digital contents of an online account of the United States person;
    - (iii) provide access to the digital contents of electronic equipment or the digital contents of an online account of the United States person; or
    - (iv) provide online account information of the United States person.
- (B) Contents
  - The notice described in this subparagraph is written notice in a language understood by the United States person that the Governmental entity—
    - (i) may not—
    - compel access to the digital contents of electronic equipment belonging to or in the possession of, the digital contents of an online account of, or the online account information of a United States person without a valid warrant;
    - deny entry into or exit from the United States by the United States person based on a refusal by the United States person to—
    - disclose an access credential that would enable access to the digital contents of electronic equipment or the digital contents of an online account;
    - provide access to the digital contents of electronic equipment or the digital contents of an online account; or
    - provide online account information; or
    - delay entry into or exit from the United States by the United States person for longer than the period of time, which may not exceed 4 hours, necessary to determine whether the United States person will consensually provide an access credential, access, or online account information, as described in items (aa), (bb), and (cc) of subclause (II); and
    - (ii) if the Governmental entity has probable cause that the electronic equipment contains information that is relevant to an allegation that the United States person has committed a felony, may seize electronic equipment belonging to or in the possession of the United States person for a period of time if the United States person refuses to consensually provide access to the digital contents of the electronic equipment.
(2) Consent
- (A) In general
  - A Governmental entity shall obtain written consent described in subparagraph (B) before—
    - (i) accessing, pursuant to the consent of a United States person at the border the digital contents of electronic equipment belonging to or in the possession of or the digital contents of an online account of the United States person;
    - (ii) obtaining, pursuant to the consent of a United States person at the border, an access credential of the United States person that would enable access to the digital contents of electronic equipment or the digital contents of an online account; or
    - (iii) obtaining, pursuant to the consent of a United States person at the border, online account information for an online account of the United States person.
- (B) Contents of written consent
  - Written consent described in this subparagraph is written consent that—
    - (i) indicates the United States person understands the protections and limitations described in paragraph (1)(B);
    - (ii) states the United States person is—
    - providing consent to the Governmental entity to access certain digital contents or consensually disclosing an access credential; or
    - consensually providing online account information; and
    - (iii) specifies the digital contents, access credential, or online account information with respect to which the United States person is providing consent.