US Federal

Can a social media company give my private messages to law enforcement?

Warrant require
For content <180 days
Subpoena OK
For basic subscriber info
180+ days
Stored content rules differ
Criminal cases
Only authorized disclosures
The Short Answer

Yes, but only under strict legal conditions — law enforcement generally needs a warrant, subpoena, or court order to obtain your private messages from a social media company.

What the Law Says

The Stored Communications Act (SCA), part of the Electronic Communications Privacy Act, sets federal rules for when and how electronic communication service providers — including social media companies — may disclose user communications to government entities.

Under 18 U.S.C. § 2701, it is illegal for anyone to intentionally access without authorization a facility through which an electronic communication service is provided — and thereby obtain, alter, or prevent authorized access to a wire or electronic communication while it is in electronic storage. This makes unauthorized access to private messages a federal crime.

However, the SCA also authorizes lawful disclosures. Law enforcement may obtain private messages only through specific legal processes: a search warrant (for content stored less than 180 days), a subpoena with prior notice to the user (for basic subscriber information), or a court order under § 2703(d) (for certain non-content records or older stored content). The provider itself is generally prohibited from voluntarily disclosing the contents of private electronic communications unless an exception applies — such as with user consent or to protect life or safety.

Importantly, § 2701 does not govern *when* companies *must* disclose data — that’s covered in § 2702 (restrictions on disclosure by providers) and § 2703 (required disclosures to government). But § 2701 establishes the baseline criminal prohibition against unauthorized access — reinforcing that private messages are legally protected unless disclosed under lawful authority.

Statutory Text

Whoever intentionally accesses without authorization a facility through which an electronic communication service is provided; and thereby obtains, alters, or prevents authorized access to a wire or electronic communication while it is in electronic storage in such system shall be punished as provided in subsection (b).

18 U.S.C. § 2701(a) — Unlawful access to stored communications

What to Do

1

Review the social media platform’s privacy policy and law enforcement guidelines (e.g., Meta’s Transparency Report, Twitter’s Rules for Law Enforcement)

2

Ask the company in writing whether they received a legal request for your data — many providers notify users unless legally prohibited

3

Consult an attorney if you learn your messages were disclosed without proper process — you may have civil remedies under § 2707

4

File a motion to suppress evidence in criminal court if your messages were obtained in violation of the SCA

Sources

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.