NEW YORK — California now requires police to get a court order before they can search messages, photos and other digital data stored on phones or company servers in the nation’s most-populous state.
Civil-liberties advocates called the new law an important advance and said it highlights the need for similar protections at the national level.
The California Electronic Communications Privacy Act was signed into law by Gov. Jerry Brown on Thursday. It’s only the third of its kind in the U.S.
While some states guarantee some of its protections, only Maine and Utah previously had comprehensive laws on the books, noted Hanni Fakhoury, senior staff attorney for the Electronic Frontier Foundation.
“It’s an expansive bill and this being California, it covers a lot of people,” Fakhoury said of the state with a population of about 39 million. “It’s an important thing and a good development.”
The digital rights group, along with the American Civil Liberties Union, news organizations and tech companies, worked for the bill’s passage. They argued that previous California law dating back to the 1980s was in desperate need of an update given the dramatic changes in the digital world.
Law-enforcement requests for people’s electronic information, particularly from technology companies such as Google and Twitter, have skyrocketed in recent years, said Nicole Ozer, technology and civil liberties policy director for the ACLU of California.
Previously, all that was generally needed to get the information was a subpoena. Now, under the new law, a warrant will be required in most cases.
“It really is a true update of privacy law for the digital world, making sure that sensitive information about who we are, and where we go, and what we do, and who we know is protected from government intrusion,” Ozer said.
She added that “hopefully this will send an important message to Congress to make sure all that all Americans have these important, updated privacy protections.”
Advocates have tried to pass legislation at the national level for years without any success. The Email Privacy Act, a proposed update to the Electronic Communications Privacy Act, has 300 sponsors in the U.S. House of Representatives, but its future remains unclear.