2025 -- H 5360 ======== LC000831 ======== S T A T E O F R H O D E I S L A N D IN GENERAL ASSEMBLY JANUARY SESSION, A.D. 2025 ____________ A N A C T RELATING TO CRIMINAL PROCEDURE -- ELECTRONIC INFORMATION AND DATA PRIVACY ACT Introduced By: Representatives Place, Quattrocchi, and Felix Date Introduced: February 07, 2025 Referred To: House Judiciary It is enacted by the General Assembly as follows: SECTION 1. Title 12 of the General Laws entitled "CRIMINAL PROCEDURE" is hereby 1 amended by adding thereto the following chapter: 2 CHAPTER 34 3 ELECTRONIC INFORMATION AND DATA PRIVACY ACT 4 12-34-1. Short title. 5 This chapter shall be known and may be cited as the "Electronic Information and Data 6 Privacy Act". 7 12-34-2. Definitions. 8 As used in this chapter: 9 (1) "Electronic communication service" means a service that provides to users of the 10 service the ability to send or receive wire or electronic communications. 11 (2) "Electronic device" means a device that enables access to or use of an electronic 12 communication service, remote computing service, or location information service. 13 (3) "Electronic information or data" means information or data including a sign, signal, 14 writing, image, sound or intelligence of any nature transmitted or stored, in whole or in part, by a 15 wire, radio, electromagnetic, photo-electronic, or photo-optical system: 16 (i) "Electronic information or data" includes the location information, stored data, or 17 transmitted data of an electronic device; 18 LC000831 - Page 2 of 12 (ii) "Electronic information or data" does not include: 1 (A) A wire or oral communication; 2 (B) A communication made through a tone-only paging device; or 3 (C) Electronic funds transfer information stored by a financial institution in a 4 communications system used for the electronic storage and transfer of money. 5 (4) "Law enforcement agency" means an entity of the state or a political subdivision of the 6 state including any municipality within the state, or any agency acting on their behalf, that exists 7 primarily to prevent, detect, or prosecute crime and enforce criminal statutes or ordinances. 8 (5) "Location information" means information obtained by means of a tracking device, 9 concerning the location of an electronic device that, in whole or in part, is generated or derived 10 from or obtained from the operation of an electronic device. 11 (6) "Location information service" means the provision of a global positioning service or 12 other mapping, location, or directional information service. 13 (7) "Oral communication" means any oral communication uttered by a person exhibiting 14 an expectation that the communication is not subject to interception under circumstances justifying 15 that expectation. 16 (8) "Remote computing service" means the provision to the public of computer storage or 17 processing services by means of an electronic communication system. 18 (9) "Transmitted data" means electronic information or data that is transmitted wirelessly 19 from: 20 (i) An electronic device to another electronic device without the use of an intermediate 21 connection or relay; or 22 (ii) An electronic device to a nearby antenna. 23 (10) "Wire communications" means any aural transfer made, in whole or in part, through 24 the use of facilities for the transmission of communications by the aid of wire, cable, or other like 25 connection between the point of origin and the point of reception, (including the use of the 26 connection in a switching station) furnished or operated by any person engaged in providing or 27 operating the facilities for the transmission of communications. The term includes any electronic 28 storage of the communication. 29 12-34-3. Electronic information or data privacy-Warrant required for disclosure. 30 (a) Except as provided in subsection (e) of this section, for a criminal investigation or 31 prosecution, a law enforcement agency shall not obtain the following electronic information or 32 data, without a search warrant issued by a court upon a finding of probable cause: 33 (1) The location information, stored data, or transmitted data of an electronic device; or 34 LC000831 - Page 3 of 12 (2) Electronic information or data transmitted by the owner of the electronic information 1 or data to a remote computing service provider. 2 (b) Except as provided in subsection (d) of this section, a law enforcement agency shall not 3 use, copy, or disclose, for any purpose, the location information, stored data, transmitted data of an 4 electronic device, or electronic information or data provided by a remote computing service 5 provider, that: 6 (1) Is not the subject of the warrant; and 7 (2) Is collected as part of an effort to obtain the location information, stored data, 8 transmitted data of an electronic device, or electronic information or data provided by a remote 9 computing service provider that is the subject of the warrant described in subsection (a) of this 10 section. 11 (c) A law enforcement agency may use, copy, or disclose the transmitted data of an 12 electronic device used to communicate with the electronic device that is the subject of the warrant, 13 if the law enforcement agency reasonably believes that the transmitted data is necessary to achieve 14 the objective of the warrant. 15 (d) The electronic information or data described in subsection (b) of this section shall be 16 destroyed in an unrecoverable manner by the law enforcement agency as soon as reasonably 17 possible after the electronic information is collected. 18 (e) A law enforcement agency may obtain location information without a warrant for an 19 electronic device: 20 (1) If the device is reported stolen by the owner; 21 (2) With the informed, affirmative consent of the owner or user of the electronic device; 22 (3) In accordance with a judicially recognized exception to the warrant requirement; 23 (4) If the owner has voluntarily and publicly disclosed the location information; or 24 (5) From the remote computing service provider, if the remote computing service provider 25 voluntarily discloses the location information: 26 (i) Under a belief that an emergency exists involving an imminent risk to an individual of 27 death, serious physical injury, sexual abuse, live-streamed sexual exploitation, kidnapping, or 28 human trafficking; or 29 (ii) That is inadvertently discovered by the remote computing service provider and appears 30 to pertain to the commission of a felony, or of a misdemeanor involving physical violence, sexual 31 abuse, or dishonesty. 32 (f) A law enforcement agency may obtain stored or transmitted data from an electronic 33 device, or electronic information or data transmitted by the owner of the electronic information or 34 LC000831 - Page 4 of 12 data to a remote computing service provider, without a warrant: 1 (1) With the informed consent of the owner of the electronic device or electronic 2 information or data; 3 (2) In accordance with a judicially recognized exception to the warrant requirement; 4 (3) In connection with a report forwarded by the National Center for Missing and Exploited 5 Children under 18 U.S.C. § 2258A; or 6 (4) From the remote computing service provider, if the remote computing service provider 7 voluntarily discloses the location information: 8 (i) Under a belief that an emergency exists involving an imminent risk to an individual of 9 death, serious physical injury, sexual abuse, live-streamed sexual exploitation, kidnapping, or 10 human trafficking; or 11 (ii) That is inadvertently discovered by the remote computing service provider and appears 12 to pertain to the commission of a felony, or of a misdemeanor involving physical violence, sexual 13 abuse, or dishonesty. 14 (g) A prosecutor may obtain a judicial order based on a finding of probable cause, 15 consistent with 18 U.S.C. §§ 2703 and 2702(b) and (c), to the electronic communications system 16 or service or remote computing service provider that owns or controls the Internet protocol address, 17 websites, email address, or service to a specific telephone number, requiring the production of the 18 following information, if available, upon providing in the court order the Internet protocol address, 19 email address, telephone number, or other identifier, and the dates and times the address, telephone 20 number, or other identifier suspected of being used in the commission of the offense; 21 (1) Names of subscribers, service customers, and users; 22 (2) Addresses of subscribers, service customers, and users; 23 (3) Records of session times and durations; 24 (4) Length of service, including the start date and types of service utilized; and 25 (5) Telephone or other instrument subscriber numbers or other subscriber identifiers, 26 including any temporarily assigned network address. 27 (h) An electronic communication service provider or remote computing service provider, 28 their officers, agents, employees or other specified individuals acting pursuant to and in accordance 29 with the provisions of this chapter, may not be held liable for providing information, facilities, or 30 assistance in good faith reliance on the terms of the warrant or without a warrant in accordance 31 with subsections (e) and (f) of this section. 32 (i) Nothing in this chapter affects the provisions of chapter 2 of title 38, (access to public 33 records act,) or limits or affects the rights of an employer to voluntarily provide location 34 LC000831 - Page 5 of 12 information, stored or transmitted data from an electronic device, or electronic information or data 1 transmitted by an employee utilizing an electronic device owned by the employer. 2 12-34-4. Notification required - Delayed notification. 3 (a) Except as provided in subsection (b) of this section, a law enforcement agency that 4 executes a warrant pursuant to this chapter shall, within fourteen (14) days after the day on which 5 the electronic information or data that is the subject of the warrant is obtained by the law 6 enforcement agency, issue a notification to the owner of the electronic device or electronic 7 information or data specified in the warrant that includes the following information: 8 (1) That a warrant was applied for and granted; 9 (2) The kind of warrant issued; 10 (3) The period of time during which the collection of the electronic information or data was 11 authorized; 12 (4) The offense specified in the application for the warrant; 13 (5) The identity of the law enforcement agency that filed the application; and 14 (6) The identity of the judge or magistrate who issued the warrant. 15 (b) The notification requirement of subsection (a) of this section, shall not be triggered 16 until the owner of the electronic device or electronic information or data specified in the warrant is 17 known, or could reasonably be identified, by the law enforcement agency. 18 (c) A law enforcement agency seeking a warrant pursuant to this chapter may submit a 19 request, and the court may grant permission, to delay notification required by subsection (a) of this 20 section for a period not to exceed thirty (30) days, if the court determines that there is reasonable 21 cause to believe that the notification may: 22 (1) Endanger the life or physical safety of an individual; 23 (2) Cause a person to flee from prosecution; 24 (3) Lead to the destruction of evidence; 25 (4) Intimidate a potential witness; or 26 (5) Otherwise seriously jeopardize an investigation or unduly delay a trial. 27 (d) When a delay of notification is granted under subsection (c) of this section and upon 28 application by the law enforcement agency, the court may grant additional extensions of up to thirty 29 (30) days each. 30 (e) Notwithstanding subsection (d) of this section, when a delay of notification is granted 31 under subsection (c) of this section, and upon application by a law enforcement agency, the court 32 may grant an additional extension of up to sixty (60) days if the court determines that a delayed 33 notification is justified because the investigation involving the warrant: 34 LC000831 - Page 6 of 12 (1) Is interstate in nature and sufficiently complex; or 1 (2) Is likely to extend up to or beyond an additional sixty (60) days. 2 (f) Upon expiration of the period of delayed notification granted under subsections (c) or 3 (d) of this section, the law enforcement agency shall serve upon or deliver by first-class mail, or by 4 other means if delivery is impracticable, to the owner of the electronic device or electronic 5 information or data a copy of the warrant together with notice that: 6 (1) States with reasonable specificity the nature of the law enforcement inquiry including: 7 (i) The information described in subsection (a) of this section; 8 (ii) A statement that notification of the search was delayed; 9 (iii) The name of the court that authorized the delay of notification; and 10 (iv) A reference to the provision of this chapter that allowed the delay of notification. 11 (g) A law enforcement agency is not required to notify the owner of the electronic device 12 or electronic information or data if the owner is located outside of the United States. 13 12-34-5. Third-party electronic information or data. 14 (a) As used in this section, "subscriber record" means a record or information of a provider 15 of an electronic communication service or remote computing service that reveals the subscriber's 16 or customer's: 17 (1) Name; 18 (2) Address; 19 (3) Local and long distance telephone connection record, or record of session time and 20 duration; 21 (4) Length of service, including the start date; 22 (5) Type of service used; 23 (6) Telephone number, instrument number, or other subscriber or customer number or 24 identification, including a temporarily assigned network address; and 25 (7) Means and source of payment for the service, including credit card or bank account 26 numbers. 27 (b) Except for purposes of grand jury testimony or use at trial after indictment, a law 28 enforcement agency shall not obtain, use, copy or disclose a subscriber record. 29 (c) A law enforcement agency shall not obtain, use, copy or disclose, for a criminal 30 investigation or prosecution, any record or information, other than a subscriber record, of a provider 31 of an electronic communication service or remote computing service related to a subscriber or 32 customer without a warrant. 33 (d) Notwithstanding subsections (b) and (c) of this section, a law enforcement agency may 34 LC000831 - Page 7 of 12 obtain, use, copy or disclose a subscriber record, or other record or information related to a 1 subscriber or customer, without a warrant: 2 (1) With the informed, affirmed consent of the subscriber or customer; 3 (2) In accordance with a judicially recognized exception to warrant requirements; 4 (3) If the subscriber or customer voluntarily discloses the record in a manner that is publicly 5 accessible; or 6 (4) If the provider of an electronic communication service or remote computing service 7 voluntarily discloses the record: 8 (i) Under a belief that an emergency exists involving the imminent risk to an individual of: 9 (A) Death; 10 (B) Serious physical injury; 11 (C) Sexual abuse; 12 (D) Live-streamed sexual exploitation; 13 (E) Kidnapping; or 14 (F) Human trafficking; 15 (ii) That is inadvertently discovered by the provider, if the record appears to pertain to the 16 commission of: 17 (A) A felony; or 18 (B) A misdemeanor involving physical violence, sexual abuse or dishonesty; or 19 (iii) Subject to subsection (d) of this section, as otherwise permitted under 18 U.S.C. § 20 2702. 21 (e) A provider of an electronic communication service or remote computing service, or the 22 provider's officers, agents, or other specified persons shall not be held liable for providing 23 information facilities, or assistance in good faith reliance on the terms of a warrant issued under 24 this section, or without a warrant in accordance with subsection (d) of this section. 25 12-34-6. Exclusion of records. 26 All electronic information or data and records of a provider of an electronic communication 27 service or remote computing service pertaining to a subscriber or customer that are obtained in 28 violation of the provisions of this chapter shall be subject to the rules governing exclusion as if the 29 records were obtained in violation of the Fourth Amendment to the United States Constitution and 30 Article 1, Section 6 of the Rhode Island Constitution. 31 SECTION 2. Sections 12-5.2-1, 12-5.2-2, 12-5.2-3 and 12-5.2-4 of the General Laws in 32 Chapter 12-5.2 entitled "Pen Registers and Trap and Trace Devices" are hereby amended to read 33 as follows: 34 LC000831 - Page 8 of 12 12-5.2-1. Definitions. 1 As used in this chapter: 2 (1) “Designated offense” means the offenses of: 3 (i) Murder, robbery, kidnapping, extortion, assault with a dangerous weapon, and assault 4 with intent to rob or murder; 5 (ii) Arson in the first degree, arson in the second degree, or arson in the third degree; 6 (iii) Bribery; larceny involving the receipt of stolen property of a value of more than five 7 hundred dollars ($500); 8 (iv) Any violation of chapter 28 of title 21 where the offense is punishable by imprisonment 9 for more than one year; 10 (v) Any violation of chapters 19, 47, or 51 of title 11, where the offense is punishable by 11 imprisonment for more than one year; 12 (vi) The lending of money at a rate of interest in violation of law; and 13 (vii) Conspiracy to commit any of the offenses provided in this subdivision; 14 (2) “Pen register” means a device which records or decodes electronic or other impulses 15 which identify the numbers dialed or otherwise transmitted on the telephone line to which the 16 device is attached, but does not include any device used by a provider or customer of a wire or 17 electronic communication service for billing, or recording as an incident to billing, for 18 communications services provided by the provider or any device used by a provider or customer of 19 a wire communication service for cost accounting or other like purposes in the ordinary course of 20 its business; 21 (3) "Stingray" means any cell-site simulator device which forces nearby mobile phones and 22 other cellular data devices to connect to it, or forces a temporary connection with cellular devices 23 for the purpose of downloading the IMSI, ESN, or other identifying data from each of the cellular 24 phones or cellular data devices which are forced to connect to the device; 25 (3)(4) “Trap and trace device” means a device which captures the incoming electronic or 26 other impulses which identify the originating number of an instrument or device from which a wire 27 or electronic communication was transmitted; 28 (4)(5) “Wire communications” has the meaning set forth in § 12-5.1-1. 29 12-5.2-2. Application for an order for a pen register or a trap and trace device 30 Application for an order for a pen register, a trap and trace device or a stingray. 31 (a)(1) The attorney general or an assistant attorney general designated by the attorney 32 general may make application for an order or an extension of an order pursuant to the provisions 33 of § 12-5.2-3 authorizing or approving the installation and use of a pen register, or a trap and trace 34 LC000831 - Page 9 of 12 device, or stingray under this chapter, in writing under oath or equivalent affirmation, to the 1 presiding justice of the superior court or his or her designee in order to obtain information regarding 2 a designated offense. 3 (2) Any law enforcement officer set forth in § 12-5-3 may make application for an order or 4 an extension of an order under § 12-5.2-3 authorizing or approving the installation and use of a pen 5 register, or a trap and trace device, or stingray under chapter, in writing under oath or equivalent 6 affirmation to the presiding justice of the superior court or his or her designee. 7 (b) An application pursuant to subsection (a) of this section shall include: 8 (1) The identity of the attorney general, assistant attorney general, or the law enforcement 9 officer making the application and the identity of the law enforcement agency conducting the 10 investigation; and 11 (2) A certification by the applicant that the information likely to be obtained is relevant and 12 necessary to an ongoing criminal investigation, that other investigative procedures have been or are 13 being initiated or conducted, and that the request for the issuance of the pen register and/or trap and 14 trace device, or stingray is necessary to further an ongoing criminal investigation being conducted 15 by that agency. 16 12-5.2-3. Issuance of an order for a pen register or a trap and trace device Issuance 17 of an order for a pen register, trap and trace device, or stingray. 18 (a)(1) Upon an application made pursuant to § 12-5.2-2, the court shall enter an ex parte 19 order authorizing the installation and use of a pen register or a trap and trace device, or stingray if 20 the court is reasonably satisfied that the information likely to be obtained by the installation and 21 use is relevant and necessary to further an ongoing criminal investigation and that use of a pen 22 register, or trap and trace device, or stingray is the least intrusive way to obtain the information 23 sought. 24 (2) An order issued under this section shall specify: 25 (i) The identity, if known, of the person to whom is leased or in whose name is listed the 26 telephone line to which the pen register, or trap and trace device, or stingray is to be attached; 27 (ii) The identity of the person who is the subject of the criminal investigation; 28 (iii) The number and physical location of the telephone line to which the pen register or 29 trap and trace device is to be attached and, in the case if of a trap and trace device, the geographic 30 limits of the trap and trace device, order or stingray; 31 (iv) A statement of the offense to which the information likely to be obtained by the pen 32 register, or trap and trace device, or stingray is relevant; and 33 (v) Shall direct, upon the request of the applicant, the furnishing of information, facilities, 34 LC000831 - Page 10 of 12 and technical assistance necessary to accomplish the installation of the pen register, or a trap and 1 trace device, or stingray under § 12-5.2-4. 2 (b) An order issued pursuant to this section shall authorize the installation and use of a pen 3 register, or a trap and trace device, or stingray for a period not to exceed sixty (60) days. 4 (c) Extensions of the order may be granted only upon an application for an order pursuant 5 to § 12-5.2-2, and upon the judicial finding required by subdivision (a)(1) of this section. The period 6 of extension shall be a period not to exceed sixty (60) days. 7 (d) An order authorizing or approving the installation and use of a pen register or a trap 8 and trace device, or stingray shall direct that: 9 (1) The order is sealed until otherwise ordered by the court; and 10 (2) The person owning or leasing the line to which the pen register, or a trap and trace 11 device, or stingray is attached, or who has been ordered by the court to provide assistance to the 12 applicant, not disclose the existence of the pen register or trap and trace device or the existence of 13 the investigation to the listed subscriber, or to any other person, unless or until otherwise ordered 14 by the court. 15 12-5.2-4. Assistance in installation and use of pen register or a trap and trace device 16 Assistance in installation and use of pen register, a trap and trace device or a stingray. 17 (a) Upon the request of the attorney general, assistant attorney general, or law enforcement 18 officer authorized to install and use a pen register under this chapter, a provider of wire 19 communication service shall immediately furnish the attorney general, assistant attorney general, 20 or law enforcement officer all information, facilities, and technical assistance necessary to 21 accomplish the installation of the pen register or a stingray unobtrusively, and with a minimum of 22 interference with the services that the person so ordered by the court accords the party with respect 23 to whom the installation and use is to take place, if the assistance is directed by a court order as 24 provided in § 12-5.2-3. 25 (b) Upon the request of the attorney general, assistant attorney general, or an officer of a 26 law enforcement agency authorized to receive the results of a trap and trace device or a stingray 27 under this chapter, a provider of a wire communication service shall immediately install the device 28 on the appropriate line and shall furnish the investigative or law enforcement officer all additional 29 information, facilities, and technical assistance including installation and operation of the device 30 unobtrusively and with a minimum of interference with the services that the person so ordered by 31 the court accords the party with respect to whom the installation and use is to take place, if the 32 installation and assistance is directed by a court order as provided in § 12-5.2-3. Unless otherwise 33 ordered by the court, the results of the trap and trace device or a stingray shall be furnished to the 34 LC000831 - Page 11 of 12 attorney general, assistant attorney general, or officer of a law enforcement agency, designated by 1 the court, at reasonable intervals during regular business hours for the duration of the order. 2 (c) A provider of a wire communication service who furnishes facilities or technical 3 assistance pursuant to this section shall be reasonably compensated for reasonable expenses 4 incurred in providing these facilities and assistance. 5 (d) No cause of action shall lie in any court against any provider of a wire communication 6 service, its officers, employees, or agents, or other specified persons for providing information, 7 facilities, or assistance in accordance with the terms of a court order under this chapter. 8 (e) Good faith reliance on a court order, a legislative authorization, or a statutory 9 authorization shall be an absolute defense against any civil or criminal action brought pursuant to 10 this chapter or any other law. 11 SECTION 3. This act shall take effect upon passage. 12 ======== LC000831 ======== LC000831 - Page 12 of 12 EXPLANATION BY THE LEGISLATIVE COUNCIL OF A N A C T RELATING TO CRIMINAL PROCEDURE -- ELECTRONIC INFORMATION AND DATA PRIVACY ACT *** This act would require law enforcement agencies to obtain search warrants for electronic 1 information, data, location information and other identifying information of subscribers and 2 customers except in specified circumstances. Additionally, this act would prohibit the use of a 3 stingray cell-site simulator by any law enforcement agency except upon application for its use and 4 the granting of an order by the presiding justice of the superior court. 5 This act would take effect upon passage. 6 ======== LC000831 ========