77-23c - Electronic Information Privacy Act
Title 77 > 77-23c
Sections (5)
77-23c-101.2 - Definitions.
As used in this chapter: 77-23c-101.2(1) “Electronic communication service” means a service that provides to users of the service the ability to send or receive wire or electronic communications. 77-23c-101.2(2) “Electronic device” means a device that enables access to or use of an electronic communication service, remote computing service, or location information service. 77-23c-101.2(3) “Electronic information” means information or data including a sign, signal, writing, image, sound, or intelligence of any nature transmitted or stored in whole or in part by a wire, radio, electromagnetic, photoelectronic, or photooptical system. “Electronic information” includes the location information, stored data, or transmitted data of an electronic device. “Electronic information” does not include: a wire or oral communication; a communication made through a tone-only paging device; or electronic funds transfer information stored by a financial institution in a communications system used for the electronic storage and transfer of money. 77-23c-101.2(4) “Law enforcement agency” means:
an entity of the state or a political subdivision of the state that exists to primarily prevent, detect, or prosecute crime and enforce criminal statutes or ordinances; or an individual or entity acting for or on behalf of an entity described in Subsection (4)(a). 77-23c-101.2(5) “Location information” means information concerning the geographical location of an electronic device that, in whole or in part, is generated or derived from or obtained by the operation of an electronic device or the operation of a software application on an electronic device. “Location information” includes past, current, and future location information. 77-23c-101.2(6) “Location information service” means the provision of a global positioning service or other mapping, location, or directional information service. 77-23c-101.2(7) “Oral communication” means the same as that term is defined in Section 77-23a-3. 77-23c-101.2(8) “Remote computing service” means the provision to the public of computer storage or processing services by means of an electronic communications system. 77-23c-101.2(9) “Transmitted data” means electronic information that is transmitted wirelessly:
from an electronic device to another electronic device without the use of an intermediate connection or relay; or from an electronic device to a nearby antenna or from a nearby antenna to an electronic device. 77-23c-101.2(10) “Wire communication” means the same as that term is defined in Section 77-23a-3.
77-23c-102 - Electronic information privacy — Warrant required for disclosure — Exceptions.
77-23c-102(1) Except as provided in Subsection (2) or (4), for a criminal investigation or prosecution, a law enforcement agency may not obtain, without a search warrant issued by a court upon probable cause: the location information, stored data, or transmitted data of an electronic device; or electronic information transmitted by the owner of the electronic information:
to a provider of a remote computing service; or through a provider of an electronic communication service. Except as provided in Subsection (1)(c), a law enforcement agency may not use, copy, or disclose, for any purpose, the location information, stored data, or transmitted data of an electronic device, or electronic information provided by a provider of a remote computing service or an electronic communication service, that: is not the subject of the warrant; and is collected as part of an effort to obtain the location information, stored data, or transmitted data of an electronic device, or electronic information provided by a provider of a remote computing service or an electronic communication service that is the subject of the warrant in Subsection (1)(a). A law enforcement agency may use, copy, or disclose the transmitted data of an electronic device used to communicate with the electronic device that is the subject of the warrant if the law enforcement agency reasonably believes that the transmitted data is necessary to achieve the objective of the warrant. The electronic information described in Subsection (1)(b) shall be destroyed in an unrecoverable manner by the law enforcement agency as soon as reasonably possible after the electronic information is collected. 77-23c-102(2) A law enforcement agency may obtain location information without a warrant for an electronic device: in accordance with Section 53-10-104.5; if the device is reported stolen by the owner; with the informed, affirmative consent of the owner or user of the electronic device; except for the automobile exception to the warrant requirement, in accordance with a judicially recognized exception to warrant requirements; if the owner has voluntarily and publicly disclosed the location information; or from a provider of a remote computing service or an electronic communications service if the provider voluntarily discloses the location information:
under a belief that an emergency exists involving an imminent risk to an individual of death, serious physical injury, sexual abuse, live-streamed sexual exploitation, kidnapping, or human trafficking; or that is inadvertently discovered by the provider and appears to pertain to the commission of a felony, or of a misdemeanor involving physical violence, sexual abuse, or dishonesty. A law enforcement agency may obtain stored data or transmitted data from an electronic device or electronic information transmitted by the owner of the electronic information to a provider of a remote computing service or through a provider of an electronic communication service, without a warrant: with the informed consent of the owner of the electronic device or electronic information; except for the automobile exception to the warrant requirement, in accordance with a judicially recognized exception to warrant requirements; or subject to Subsection (2)(a)(vi)(B), from a provider of a remote computing service or an electronic communication service if the provider voluntarily discloses the stored or transmitted data as otherwise permitted under 18 U.S.C. Sec. 2702. A prosecutor may obtain a judicial order as described in Section 77-22-2.5 for the purposes described in Section 77-22-2.5. 77-23c-102(3) A provider of an electronic communication service or a remote computing service, the provider’s officers, employees, or agents, or other specified persons may not be held liable for providing information, facilities, or assistance in good faith reliance on the terms of the warrant issued under this section or without a warrant in accordance with Subsection (2). 77-23c-102(4) Nothing in this chapter:
limits or affects the disclosure of public records under Title 63G, Chapter 2, Government Records Access and Management Act; affects the rights of an employer under Subsection 34-48-202(1)(e) or an administrative rule adopted under Section 63A-16-205; or limits the ability of a law enforcement agency to receive or use information, without a warrant or subpoena, from the National Center for Missing and Exploited Children under 18 U.S.C. Sec. 2258A.
77-23c-103 - Notification required — Exceptions — Delayed notification.
77-23c-103(1) Except as provided in Subsection (1)(b) or (2), a law enforcement agency that executes a warrant under Subsection 77-23c-102(1) or 77-23c-104(3) shall serve the owner of the electronic device or electronic information specified in the warrant with a notice described in Subsection (3): within 90 days after the day on which the electronic device or the electronic information is obtained by the law enforcement agency but in no case more than three days after the day on which the investigation is concluded; or if the owner of the electronic device or electronic information specified in the warrant is unknown to the law enforcement agency, within 90 days after the day on which the law enforcement agency identifies, or reasonably could identify, the owner. A law enforcement agency is not required to serve a notice described in Subsection (1)(a) to the owner of the electronic device or electronic information if the owner is located outside of the United States. 77-23c-103(2) A law enforcement agency seeking a warrant in accordance with Subsection 77-23c-102(1)(a) or 77-23c-104(3) may submit a request, and the court may grant permission, to delay service of the notice required under Subsection (1) for a period not to exceed 30 days, if the court determines that there is reasonable cause to believe that the notification may:
endanger the life or physical safety of an individual; cause a person to flee from prosecution; lead to the destruction of or tampering with evidence; intimidate a potential witness; or otherwise seriously jeopardize an investigation or unduly delay a trial. When a delay of notification is granted under Subsection (2)(a)(i) and upon application by the law enforcement agency, the court may grant additional extensions of up to 30 days each. A law enforcement agency that seeks a warrant for an electronic device or electronic information in accordance with Subsection 77-23c-102(1)(a) or 77-23c-104(3) may submit a request to the court, and the court may grant permission, to delay service of the notice required under Subsection (1), if the purpose of delaying the notification is to apprehend an individual:
who is a fugitive from justice under Section 77-30-13; and for whom an arrest warrant has been issued for a violent felony offense as defined in Section 76-3-203.5. The court may grant the request under Subsection (2)(b)(i) to delay notification until the individual who is a fugitive from justice under Section 77-30-13 is apprehended by the law enforcement agency. A law enforcement agency shall serve the notice required under Subsection (1) to the owner of the electronic device or electronic information within 14 days after the day on which the law enforcement agency apprehends the individual described in Subsection (2)(b)(i). 77-23c-103(3) A notice required under Subsection (1) shall include:
a copy of the warrant; and a written statement identifying: the offense specified in the warrant application; the identity of the law enforcement agency that filed the application; the date on which the electronic information was obtained; and the number and length of any authorized delays in serving the notice required under Subsection (1), including, if applicable, the name of the court that authorized the delay and a reference to the provision of this chapter that permitted the delay. 77-23c-103(4) A law enforcement agency shall serve the notice required under Subsection (1) to the owner of the electronic device or electronic information by:
personal service on the owner; first-class mail to the owner’s last-known address; or other reasonable means if the owner’s last-known address is unknown.
77-23c-104 - Third-party electronic information.
77-23c-104(1) As used in this section, “subscriber record” means a record or information of a provider of an electronic communication service or remote computing service that reveals the subscriber’s or customer’s:
name; address; local and long distance telephone connection record, or record of session time and duration; length of service, including the start date; type of service used; telephone number, instrument number, or other subscriber or customer number or identification, including a temporarily assigned network address; and means and source of payment for the service, including a credit card or bank account number. 77-23c-104(2) Except as provided in Chapter 22, Subpoena Powers for Aid of Criminal Investigation and Grants of Immunity or Section 77-23f-105, a law enforcement agency may not obtain, use, copy, or disclose a subscriber record. 77-23c-104(3) A law enforcement agency may not obtain, use, copy, or disclose, for a criminal investigation or prosecution, any record or information, other than a subscriber record, of a provider of an electronic communication service or remote computing service related to a subscriber or customer without a warrant. 77-23c-104(4) Notwithstanding Subsections (2) and (3), a law enforcement agency may obtain, use, copy, or disclose a subscriber record, or other record or information related to a subscriber or customer, without an investigative subpoena or a warrant:
with the informed, affirmed consent of the subscriber or customer; in accordance with a judicially recognized exception to warrant requirements; if the subscriber or customer voluntarily discloses the record in a manner that is publicly accessible; or if the provider of an electronic communication service or remote computing service voluntarily discloses the record: under a belief that an emergency exists involving the imminent risk to an individual of:
death; serious physical injury; sexual abuse; live-streamed sexual exploitation; kidnapping; or human trafficking; that is inadvertently discovered by the provider, if the record appears to pertain to the commission of:
a felony; or a misdemeanor involving physical violence, sexual abuse, or dishonesty; or subject to Subsection 77-23c-104(4)(d)(ii), as otherwise permitted under 18 U.S.C. Sec. 2702. 77-23c-104(5) A provider of an electronic communication service or remote computing service, or the provider’s officers, employees, agents, or other specified persons may not be held liable for providing information, facilities, or assistance in good faith reliance on the terms of a warrant issued under this section, or without a warrant in accordance with Subsection (3).
77-23c-105 - Exclusion of records.
All electronic information or data and records of a provider of an electronic communications service or remote computing service pertaining to a subscriber or customer that are obtained in violation of the provisions of this chapter shall be subject to the rules governing exclusion as if the records were obtained in violation of the Fourth Amendment to the United States Constitution and Utah Constitution, Article I, Section 14.