Req. No. 421 Page 1 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 STATE OF OKLAHOMA 1st Session of the 59th Legislature (2023) SENATE BILL 35 By: Dahm AS INTRODUCED An Act relating to electronic information privacy; creating the Electronic Communic ation and Device Privacy Act; providing short title; def ining terms; prohibiting a government entity from access or compelling production of certain electronic information; authorizing compelled production of certain information under certain circumstances; stating special circumstances; allowing physical interaction with certain devices under warrants and consent; providing for certain g ood faith and emergency access; providing for access to devices in correctional facility; requiring warrant for information to comply with certain provisions; stating provisions; establishing court procedures for warrants and petitions; stating authority; requi ring destruction of certain i nformation within certain time; providing for emergency access to electronic device information; construing authority for other processes to secure electronic information; requiring notification for accessing electronic information; providing for delayed notification under certain circumstances; providing for extension of delayed notification; directing copy of all electronic information be notif ied to targets of warrants; directing certain information be submitted to the Department of Public Safety if ther e is no identified target for warrant; providing for publication and redacting of names on c ertain reports; construing service provider ability to disclose information; providing for suppression of evidence; requiring compliance with state and federal law and procedure in trial; authorizing the Attorney General to institute civil action; authorizing petition for court order to avoid access to el ectronic information in violation of law; granting immunity for certain Req. No. 421 Page 2 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 corporation officers for release of certain information; providing for codification; and providing an effective date . BE IT ENACTED BY THE PEOPLE OF THE STATE OF OKLAHOMA: SECTION 1. NEW LAW A new section of law to be codified in the Oklahoma Statutes as Section 1251 of Title 22, unless there is created a duplication in numbering, reads as follows: This act shall be known and may be cited as the “Electronic Communication and Device Privacy Act ”. SECTION 2. NEW LAW A new section of law to be codified in the Oklahoma Statutes as Section 1252 of Title 22, unless there is created a duplication in numbering, reads as follows: As used in this act: 1. “Adverse result” means: a. danger to the life or physical safety of an individual, b. flight from prosecution , c. destruction of or tampering with ev idence, d. intimidation of potential witnesses, or e. serious jeopardy to an investigation o r undue delay of a trial; 2. “Authorized possessor ” means the possessor of an electronic device when such person is the owner of the device or has been authorized to possess the device by th e owner of the device; Req. No. 421 Page 3 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 3. “Electronic communication ” means the transfer of signs, signals, writings, images, sounds, data , or intelligence of any nature in whole or in part by a wire, radio, electromagneti c, photoelectric, or photo-optical system; 4. “Electronic communication information ” means any information about an electronic communication or the use of an electronic communication service including, but not limit ed to, the contents, sender, recipients, format, or location of the sender or recipients at any point during the communication, the time or date the communication was created, sent, or received or any information pertaining to any individual or device part icipating in the communication including , but not limited to, an IP address. Electronic communication information does not include subscriber information as defined in this act; 5. “Electronic communication service ” means a service that provides to its subscribers or users the ability to send or receive electronic communications including any service that acts as an intermediary in the transmission of elec tronic communications, or stores electronic communication information; 6. “Electronic device” means a device that stores, generates , or transmits information in electronic form; 7. “Electronic device information” means any information stored on or generated through the operation of an electronic device including the current and prior locations of the dev ice; Req. No. 421 Page 4 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 8. “Electronic information ” means electronic communication information or electronic device information; 9. “Government entity” means a department or agency of the state or a political subdivision thereof, or an individual acting for or on behalf of the state or a political subdivision th ereof; 10. “Service provider” means a person or en tity offering an electronic communication service; 11. “Specific consent” means consent provided directly to the government entity seeking information including but not limited to when the government en tity is the addressee or i ntended recipient or a member of the intended audience of an electronic communication. Specific consent does not require that the originator of the communication have actual knowledge that an addressee, intended recipient, or member of the specific audience is a government entity; and 12. “Subscriber information” means the name, street addres s, telephone number, email address or similar contact information provided by the subscriber to a service provider to establish or maintain an account or communication channel, a subscriber or account number or identifier, the length of service, and the ty pes of services used by a user of or subscriber to a service provider. SECTION 3. NEW LAW A new section of law to be codified in the Oklahoma Statutes as Section 12 53 of Title 22, unless there is created a duplication in numbering, reads as follows: Req. No. 421 Page 5 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 A. Except as provided in this section, a government entity shall not: 1. Compel the production of or access to electronic communication information from a service provider; 2. Compel the production of or access to electronic device information from any person or entity other than the aut horized possessor of the dev ice; or 3. Access electronic device information by means of physical interaction or electronic communication with the elec tronic device. This section does not prohibit the i ntended recipient of an electronic communication from voluntarily disclosing electro nic communication information conc erning that communication to a government entity. B. A government entity may compel t he production of or access to electronic communicati on information from a service provider, or compel the production of or access to ele ctronic device information from any person or entity other than the authorized poss essor of the device only under the fo llowing circumstances: 1. Pursuant to a lawful warrant issued pursuant to federal law or the laws of this state and subject to subsectio n D of this section; 2. Pursuant to a wiretap order issued pursuant to federal law or the laws of this state; Req. No. 421 Page 6 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 3. Pursuant to an order for electronic reader records issue d pursuant to federal law or the laws of this state ; or 4. Pursuant to a subpoena issued p ursuant to the laws of this state provided that the information is not sough t for the purpose of investigating or prosecuting a criminal offense, and that compelling the production of or access to the information via the subpoena is not otherwise prohibited by state or federal law. Nothing in this paragraph shall be construed to expand any authority under state law to compel the production of or access to electronic information. C. A government entity may access electronic device information by means of physical interaction or electronic comm unication with the device only: 1. Pursuant to a warrant issued pursuant t o federal law or the laws of this state and subject to subsection D of this section; 2. Pursuant to a wiretap order issued pursuant to federal law or the laws of this state ; 3. With the specific consent of the aut horized possessor of the device; 4. With the specific consent of the owner of the device, on ly when the device has been reported as lost or stolen; 5. If the government entity believes in good faith that an emergency involving danger of death or serious phys ical injury to any person requires ac cess to the electronic device information; Req. No. 421 Page 7 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 6. If the government entity believes in good faith that the device is lost, stolen, or aband oned; provided, the entity shall only access electronic device information in or der to attempt to identify, verify, or c ontact the owner or aut horized possessor of the device; or 7. Except where prohibited by state or federal law, if the device is seized from an inmate’s possession or found in an area of a correctional facility under the jurisdiction of the Department of Corrections where inmates have access and the device is not in the possession of an individual and is not known or believe d to be the possession of an auth orized visitor. Nothing in this paragraph shall be construed to supersede or override the laws of this state or rules promulgated by the Department of Co rrections for electronic devices. D. Any warrant for electronic infor mation shall comply with the following: 1. The warrant shall describe with particul arity the information to be seized by specifying t he time periods covered and, as appropriate and reas onable, the target individuals or accounts, the applications or servic es covered, and the types of information sought; 2. The warrant shall require that any information obtained through the execution of the warrant that is unrelated to the objective of the warrant shall be sealed and not subject to further Req. No. 421 Page 8 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 review, use, or disclosure without a court order. A court shall issue such an order upon a finding th at there is probable cause to believe that the information is relevant to an active investigation, or if its review, use, or disclosure is required by state or federal law; and 3. The warrant shall comply with al l other provisions of state and federal law includi ng any provisions prohibiting, limiting , or imposing additional requirements on the use of se arch warrants. If directed to a service provider, the warrant shall be accompan ied by an order requiring the ser vice provider to verify the authenticity of electronic information that it produces by prov iding an affidavit that complies with the requiremen ts set forth in the Oklahoma Evidence Code. Admission of such information into evidence shall be subject to the Oklahoma Evidence Code. E. When issuing any warran t or order for electronic information, or upon the petition from the target or recipient of the warrant or order, a court m ay do one or both of the following: 1. Appoint a special maste r charged with ensuring that only information necessary to achieve the objective of the warrant or order is produced or accessed; or 2. Require that any informat ion obtained through the execution of the warrant or order t hat is unrelated to the objective of the warrant be destroyed as soon as feasible af ter the termination of Req. No. 421 Page 9 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 the current investigation and any rel ated investigations or proceedings. F. A service provider may voluntarily disclose electronic communication information or subscriber informatio n when that disclosure is not otherwise prohibited by state or federal law. G. If a government entity receives electronic communication information voluntarily pr ovided pursuant to subsection F of this section, the entity shall destroy such information within ninety (90) days unless one or more of the following c ircumstances apply: 1. The entity has or obtains th e specific consent of the sender or recipient of the electronic communications about which information was disclosed; 2. The entity obtains a court orde r authorizing the retention of the information. A court shall issue a retention order upon a finding that the conditions justifying the initial voluntary disclosure persist, in which case the court shall authorize the retention of the information only for so long as those conditions persist, or if there is probable cause to believe that the information constitutes evidence that a crime has been committed; or 3. The entity reasonably believes that the information relates to child pornography and the informati on is retained as part of a multiagency database us ed in the investigation of child pornography and related crimes. Req. No. 421 Page 10 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 H. If a government entity obtains e lectronic information pursuant to an emergency involving danger of deat h or serious physical injury to a person that requires access to the electronic information without delay, the entity shall, within t hree (3) days after obtaining the electronic informa tion, file with the appropriate court an application for a warrant or o rder authorizing obtaining the electronic information or a motion seeking approval o f the emergency disclosure that shall set forth t he facts giving rise to the emergency, and if applic able, a request supported by a sworn affidavit for an order delaying notification under paragraph 1 of subsection B of Section 4 of this act. The court shall promptly rule on the application or motion . Upon a finding that the facts did not give rise to a n emergency or upon rejecting the warrant or order application on any o ther ground, the court shall order the immediate destruction of all information obta ined and immediate notification pursuant to sub section A of Section 4 of this act, i f such notice has not already been given. I. This section shall not be construed to limit the authority of a government entity to use an administrative, grand jury, trial, or civil discovery subpoena to: 1. Require an originator, addressee, or intended recipient of an electronic communication to disclose any electronic communication information associated with that communication; Req. No. 421 Page 11 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 2. Require an entity that provides electronic communications services to its officers, dire ctors, employees, or agents for the purpose of carrying out their duties, to disclose electronic communication information associated with an electro nic communication to or from an officer, director, employee, or agent of the entity; or 3. Require a service provider to provide subscriber information. SECTION 4. NEW LAW A new section of law to be codified in the Oklahoma Statutes as Section 1254 of Title 22, unless there is created a duplication in numbering, reads as follows: A. Except as otherwise provided in this section, any gove rnment entity that executes a warrant, or obtains electronic in formation in an emergency pursuan t to Section 3 of this act, shall serve upon, or deliver to by registered or first-class mail, electronic ma il, or other means reasonably calculated to be effec tive, the identified targets of the warrant or emergency request , a notice that informs the recipient that information about the recipient has been compelled or requested, and states with reasonable speci ficity the nature of the government investigation un der which the information is sought. The notice shall include a copy of the warrant or a written statement setting forth facts giving rise to the e mergency. The notice shall be provided contemporaneousl y with the execution of Req. No. 421 Page 12 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 a warrant, or in the case of an emergency, within three (3) days after obtaining the electr onic information. B. 1. When a warrant is sought or electronic information is obtained in an emergency under Section 3 of this act, the government entity may submit a request supported by a s worn affidavit for an order delaying notification and prohibiti ng any party providing information from notifying any other party that information h as been sought. The court shall issue the order if the c ourt determines that there is reason to believe that notification may have an adverse result, but only for the peri od of time that the court finds there is reason to believe that the notification may have that adverse result, and not to exceed ninety (90) days. 2. The court may grant extensions of the dela y of up to ninety (90) days each on the same grou nds as provided in paragraph 1 of this subsection. 3. Upon expiration of the period of delay of t he notification, the government entity shall serve upon, or deliver to by registered or first-class mail, electronic mail, or other means reasonably calculated to be effect ive as specified by the court iss uing the order authorizing delayed notification, th e identified targets of the warrant, a document that incl udes the information described in subsection A of this section, a copy of all electronic information obtained or a summary of that information inclu ding, at a minimum, the number and types of records disclosed, the date and time when Req. No. 421 Page 13 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 the earliest and lates t records were created, and a statement of the grounds for the court’s determination to grant a delay in notifying the individual. C. If there is no identified target of a warrant or emergency request at the time of its issuance, the government entity sha ll submit to the Department of Public Safety within three (3) days of the execution of the warrant or issuance of t he request all of the information required in subsection A of this section . If an order delaying notice is obtained pursuant to subsection B of this section, the government entity shall submit to the Department upon the expiration of the period of delay o f the notification all of the information required in paragraph 3 of subsection B of this section. The Department shall publish all those re ports on its website within ninety (90) days of receipt. The Department may redact names or other personal identifying information from the reports . D. Except as otherwise provided in this sectio n, nothing in this act shall be construed to prohibit or limit a service provider or any other party from discl osing information about any request or demand for electronic informat ion. SECTION 5. NEW LAW A new section of law to be codified in the Oklahoma Statutes as Section 1255 of Title 22, unless there is created a duplication in numberin g, reads as follows: A. Any person in a trial, hearing , or proceeding may move to suppress any electronic info rmation obtained or retained in Req. No. 421 Page 14 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 violation of the Fourth Amendment to the United States Consti tution or of this act. The motion shall be made, de termined, and be subject to review in accordance with the procedures set forth in the laws of this state. B. The Attorney General may commence a civil action to compel any government entity to comply wit h the provisions of this act. C. An individual whose information is targeted by a warrant, order, or other legal process that is inconsistent with this act or the United States Constitution, or a service provider or any other recipient of the warrant, ord er, or other legal process may petition the issuing court to void or modify the warrant, order , or process, or to order the destruction of any information obtained in violation of this act or the United States Consti tution. D. An Oklahoma or foreign corporation, and its officers, employees, and agents are not subject to any cause of action for providing records, information, fa cilities, or assistance in accordance with the terms of a warrant, court order, statutory authorization, emergency certification , or wiretap order issued pursuant to this act . SECTION 6. This act shall become effective November 1, 2023. 59-1-421 TEK 12/14/2022 11:50:54 AM