A 2703(f) preservation request is a written demand from a government agency ordering an internet service provider, social media platform, or cloud storage company to freeze a specific user’s existing records for 90 days so the data survives while investigators pursue a warrant, subpoena, or court order. It comes from 18 U.S.C. § 2703(f). The provider does not hand anything over at this stage. It simply stops its normal deletion routines and holds the records in place. No judge signs off, no probable cause is required, and the account holder is not notified.1Office of the Law Revision Counsel. 18 USC 2703 – Required Disclosure of Customer Communications or Records
A Freeze, Not a Disclosure
The single most important feature of a § 2703(f) request is what it does not accomplish. It does not give the government access to anyone’s data. The provider locks down the specified records internally and waits. Investigators still need separate legal process before the provider turns anything over.
That is why the procedural hurdles are so low. No degree of suspicion is required. No court reviews the request beforehand. The statute simply says that upon a governmental entity’s request, the provider “shall take all necessary steps to preserve records and other evidence in its possession pending the issuance of a court order or other process.” Nothing is being disclosed, so the government is only making sure evidence does not vanish while it builds a case strong enough to satisfy a judge.
There is one significant limit. A preservation request covers only data the provider already holds at the moment it processes the request. It does not compel the provider to capture future messages or future login activity. Ongoing collection requires a different tool, such as a wiretap order or a pen register.
Who Can Send One
The statute uses the term “governmental entity,” which the Stored Communications Act defines as any department or agency of the United States or of any state or political subdivision.2GovInfo. 18 USC 2711 – Definitions for Chapter 121 That reaches the FBI and DEA, but it equally reaches a county sheriff’s office, a state attorney general’s cybercrime unit, or a local police department investigating a fraud case. Military investigators, such as those operating through the Army JAG Corps, also qualify.
There is no rank or title requirement inside the agency. A detective, a special agent, or a government attorney can draft and send the request. Most agencies route these through designated digital evidence personnel because providers process them faster when the formatting and contact details follow a familiar pattern.
What Records Can Be Frozen
The statute covers “records and other evidence in its possession,” which is deliberately broad. Practically, the data splits into tiers that matter enormously later, because the legal standard for actually obtaining each tier is different.
Subscriber and Transactional Records
Basic subscriber information is the least sensitive tier. The statute lists the categories a provider must disclose when served with proper legal process: name, address, telephone connection records or session times and durations, length and type of service including start date, telephone or device number or other subscriber identifier (including temporarily assigned network addresses like IP addresses), and the means and source of payment such as a credit card or bank account number.1Office of the Law Revision Counsel. 18 USC 2703 – Required Disclosure of Customer Communications or Records
Beyond that, transactional records and metadata (connection logs, IP addresses used during sessions, records of which services a user accessed) provide a digital footprint without revealing the substance of any communication. They can show when someone logged in, from where, and for how long.
Content of Communications
The most sensitive tier is actual message content: stored emails, private messages, uploaded files, attachments, drafts, and items sitting in a trash folder that have not been permanently purged. A preservation request freezes all of it. Content itself, though, carries the highest legal bar for production, generally a search warrant based on probable cause.1Office of the Law Revision Counsel. 18 USC 2703 – Required Disclosure of Customer Communications or Records
How Long the Freeze Lasts
Once the provider receives a valid request, the statute requires it to hold the identified records for 90 days. That gives investigators time to build the case for a warrant or other compulsory process. If the investigation is still active but the legal process is not ready, the government can send a renewed request for one additional 90-day period, bringing the maximum statutory preservation window to 180 days.1Office of the Law Revision Counsel. 18 USC 2703 – Required Disclosure of Customer Communications or Records
The statute authorizes only one extension. Its language says “an additional 90-day period,” singular. It does not explicitly address whether the government can issue a brand-new preservation request for the same records after the 180-day window closes, and courts have not settled the question. In practice, investigators treat the 180-day ceiling seriously and prioritize obtaining their warrant within that timeframe.
After the preservation window closes without legal process being served, the provider is no longer bound to retain the data under that request. It can return to its normal deletion schedules.
What the Provider Has to Do
A preservation request creates an immediate obligation. The provider must ensure that no data within the scope of the request is deleted, modified, or overwritten during the holding period. That means suspending automated maintenance routines that would clear old logs, purge inactive messages, or cycle out stored files. The provider acts as a custodian. Its job is to hold the data in its current state, not to analyze it or share it with the government.
If the provider fails to preserve the records after receiving a valid request, it may face legal consequences. The Stored Communications Act creates a civil cause of action for knowing or intentional violations, allowing an aggrieved subscriber or provider to recover actual damages and any profits the violator gained, with a statutory floor of $1,000. Courts can also award punitive damages for willful violations and reasonable attorney’s fees.3Office of the Law Revision Counsel. 18 USC 2707 – Civil Action Civil suits under § 2707 cannot be brought against the United States itself. Federal employees who violate the statute face administrative discipline rather than money damages.
Whether the Account Holder Gets Told
Section 2703(f) does not prohibit a provider from telling the user that their records have been frozen. Many providers follow internal confidentiality policies and will not notify users unless required to do so. Others alert users about government requests as a matter of corporate transparency, unless a court order bars them from doing so.
That silencing order comes from a separate statute, 18 U.S.C. § 2705, which allows the government to ask a judge to command the provider to stay silent about the existence of a warrant, subpoena, or court order. The court must find reason to believe that notification would endanger someone’s life or physical safety, lead to flight from prosecution, result in destruction of or tampering with evidence, cause intimidation of potential witnesses, or otherwise seriously jeopardize the investigation.4Office of the Law Revision Counsel. 18 USC 2705 – Delayed Notice Investigators worried about tip-offs often pair the preservation request with a § 2705 nondisclosure order once they obtain subsequent legal process.
Getting the Records After the Freeze
Preserving data is only the first step. To obtain the records, law enforcement must use the appropriate legal process, and the standard escalates with the sensitivity of the data:
- Subscriber information (name, address, payment method, session times) can be obtained with an administrative subpoena, a grand jury subpoena, or a trial subpoena.1Office of the Law Revision Counsel. 18 USC 2703 – Required Disclosure of Customer Communications or Records
- Transactional and metadata records (detailed logs, IP addresses over time) typically require a § 2703(d) court order, which demands “specific and articulable facts” showing the records are relevant and material to an ongoing criminal investigation.
- Content of communications (emails, messages, files) generally requires a search warrant based on probable cause. For electronic communications stored 180 days or less in an electronic communication service, a warrant is the only option.
The Supreme Court’s 2018 decision in Carpenter v. United States tightened these requirements further for one category. The Court held that obtaining historical cell-site location information constitutes a Fourth Amendment search requiring a warrant, even though the Stored Communications Act had previously allowed access through a lower-standard § 2703(d) order.5Supreme Court of the United States. Carpenter v. United States, No. 16-402 The Court called its decision “narrow,” but it signaled that certain categories of digital records may demand warrant-level protection regardless of what the statute’s text says.
What an Account Holder Can Do About It
Section 2703(f) is strikingly one-sided. It contains no mechanism for an account holder, or even the provider, to challenge, vacate, or quash a preservation request. Providers can move to quash or modify a § 2703(d) court order that is unusually voluminous or creates an undue burden. No equivalent right exists for a preservation demand.
The practical consequence is that an account holder usually will not even know the freeze happened. If they do learn about it, they have no statutory way to fight the hold itself. Their opening comes later. When the government uses formal legal process to obtain the data, the account holder, now likely a defendant, can contest the warrant, subpoena, or court order through standard criminal defense motions.
One argument that will not work: seeking to suppress evidence solely because of a procedural defect in the preservation request. Courts have consistently found that the Stored Communications Act does not provide a suppression remedy for violations of its provisions. Evidence can be excluded only if the government’s conduct violates the Fourth Amendment, a much higher bar than a technical SCA misstep. A flawed preservation request is unlikely to keep the evidence out of court if the subsequent warrant was otherwise valid.