18 U.S.C. § 2709: National Security Letters and FBI Data Requests

Meta description: Learn what 18 U.S.C. § 2709 allows the FBI to request through national security letters, what records are covered, and how recipients can challenge requests and nondisclosure orders.

National security letters are a form of administrative demand used in certain federal national security investigations. Under 18 U.S.C. § 2709, the FBI can require specified communications providers to disclose certain customer records without first obtaining a court order. The law does not authorize the FBI to demand the contents of emails, texts, or calls through an NSL. Understanding the statute’s scope, limits, and review procedures helps clarify what an NSL can—and cannot—require.

What 18 U.S.C. § 2709 Covers

Section 2709 is part of the Stored Communications Act, a federal law governing access to certain communications records. It authorizes the FBI to issue national security letters, or NSLs, to a provider of wire or electronic communication services. The statute applies to specified categories of non-content records held by those providers.

An NSL is an administrative demand, not a search warrant. The FBI issues it under statutory authority rather than asking a judge to approve the request in advance. That distinction does not make an NSL unlimited: the request must meet the conditions in the statute, and the recipient can seek judicial review in certain circumstances.

Section 2709 should not be confused with other government requests for communications data. A warrant, subpoena, or court order under a different provision may involve different records, legal standards, and judicial procedures. The authority used depends on the information sought and the applicable law.

What Records Can an NSL Request?

Under § 2709(a), the FBI may require a covered provider to disclose specified records and information about a subscriber or customer. The categories listed in § 2709(b) include:

• Name, address, and length of service for a subscriber or customer.
• Local and long-distance toll billing records, as defined by the statute.
• Local and long-distance telephone connection records, as defined by the statute.
• Records of session times and durations.
• Any temporarily assigned network address, including a network address assigned to a customer or subscriber.
• Other subscriber numbers or identities, including temporarily assigned network addresses, as authorized by the statutory language.

The precise records available depend on what the provider maintains and whether they fall within the statute’s categories. Section 2709 does not require a provider to create information it does not have. Nor does it give the FBI a general right to obtain every record associated with a person or account.

What an NSL Does Not Authorize

Section 2709 does not authorize the FBI to obtain the contents of communications. Content generally means the substance or meaning of a communication, such as the text of an email or message, or the spoken words in a call. An NSL under this section is directed at specified subscriber and transactional records, not message content.

This distinction can be difficult to apply in practice. A record showing that an account connected to a service at a particular time is generally different from the content transmitted through that service. The legal treatment of a particular data field depends on what it reveals and on the laws governing the relevant provider and records. For content, the government generally must use a separate legal process, such as a warrant, where required by law.

An NSL also does not establish that its subject committed a crime. It is a records request tied to an authorized investigation. The statute’s relevance requirement and national security purpose constrain its use, while judicial review and nondisclosure procedures provide additional safeguards.

When the FBI May Issue a Section 2709 Letter

Section 2709 requires the FBI Director or a designee to certify that the requested information is relevant to an authorized investigation conducted to protect against international terrorism or clandestine intelligence activities. The investigation cannot be conducted solely on the basis of activities protected by the First Amendment.

The statute also requires that the investigation be conducted under applicable guidelines approved by the Attorney General. These requirements distinguish an NSL from an ordinary request for records: it must serve a qualifying national security investigation and meet the statutory relevance standard.

The relevance standard does not require the FBI to prove probable cause before issuing an NSL. That is one reason NSLs have attracted legal and public scrutiny. At the same time, the statute limits the type of records that can be demanded and provides a process for recipients to challenge the demand or a related nondisclosure requirement.

How National Security Letters Work

In a typical process, the FBI identifies a provider that may hold records within § 2709’s scope and issues a written request. The letter identifies the statutory authority and the records sought. The recipient reviews the demand, preserves relevant information as appropriate, and responds through its legal or compliance process.

Section 2709 requires the recipient to comply with a valid request. Providers may consult counsel, ask the government to clarify or narrow a demand, and seek judicial review under applicable procedures. Because an NSL may come with a nondisclosure requirement, providers must also consider what they may tell employees, customers, or others.

Each NSL is not necessarily a request for a large volume of records. The statute permits requests for defined categories of information; the amount and type of data depend on the investigation, the provider, and the specific demand. Public reporting about NSLs may be limited by secrecy rules and reporting restrictions.

NSL Nondisclosure Requirements

Section 2709(c) allows the FBI to impose a nondisclosure requirement when an authorized official makes the required certification. The certification must state that disclosure of the NSL’s existence or its contents could result in one or more specified harms, such as danger to national security, interference with diplomatic relations, danger to a person’s life or physical safety, or interference with a criminal, counterterrorism, or counterintelligence investigation.

A nondisclosure requirement is commonly called an NSL gag order. It is separate from the demand for records: one concerns disclosure of the letter, while the other concerns production of information. The restriction does not automatically mean that the recipient can never speak about the NSL. Federal law provides routes for review and for ending nondisclosure when the government’s justification no longer applies.

The statute permits limited disclosure necessary to comply with the demand or to obtain legal advice, subject to its terms. Recipients should not assume that they may discuss a specific NSL publicly without checking the letter, current law, and any applicable court order.

Challenging an NSL or Its Gag Order

Under 18 U.S.C. § 3511, a recipient may petition a federal district court to modify or set aside an NSL if compliance would be unreasonable, oppressive, or otherwise unlawful. A recipient may also challenge a nondisclosure requirement. The court can review the government’s position, including information submitted under seal when permitted by law.

For a nondisclosure challenge, the government may submit a certification that disclosure may cause one of the harms listed in § 2709(c). Section 3511 sets out how the court considers that certification and the standards relevant to whether the restriction should remain in place. The review is not the same as a public trial over the underlying investigation; sensitive material may be handled confidentially.

Recipients facing an NSL typically need to assess the request’s scope, the information they hold, response deadlines, and any secrecy restrictions. Legal counsel can help determine whether to comply, seek clarification, or petition for review. A challenge should follow the procedures and timing stated in the statute and the demand.

Legal History and Reforms

Courts have examined the constitutional implications of NSLs, particularly the combination of demands for records and restrictions on disclosure. In Doe v. Mukasey (2008), the U.S. Court of Appeals for the Second Circuit considered the NSL nondisclosure framework and required changes to aspects of judicial review. The decision helped shape later protections for recipients seeking to challenge gag orders.

The USA FREEDOM Act of 2015 revised parts of the NSL framework, including procedures concerning nondisclosure and transparency. Among other changes, it established mechanisms for periodic review of certain nondisclosure requirements and enabled more reporting about NSLs, subject to statutory limits. These reforms did not eliminate § 2709 or require advance judicial approval for every NSL.

Section 2709 remains part of federal law. Its operation should be assessed using the current statutory text, related provisions such as § 3511, and applicable court decisions—not solely older descriptions of NSL practice.

NSLs Compared With Other Data Requests

This comparison is general, not a substitute for analyzing a particular demand. A request’s legal basis, the type of data sought, and the status of the provider can change which rules apply. The word “data” alone does not identify the applicable legal standard.

Practical Points for Providers and the Public

• Check the legal authority. Confirm that the demand cites § 2709 and identify the specific records it seeks.
• Separate records from content. Section 2709 covers specified non-content information, not the substance of communications.
• Review any nondisclosure language. A gag requirement has its own statutory basis and potential challenge process.
• Preserve confidentiality carefully. Disclosure may be restricted, while consultation with counsel and necessary compliance steps may be allowed under the statute.
• Use the appropriate review procedure. Section 3511 provides a court process for challenging an NSL or nondisclosure requirement.

For the public, an NSL does not by itself reveal what information was requested or establish wrongdoing by the account holder. Providers may be constrained in what they can disclose, and public statistics may not describe every detail of individual requests. The most reliable assessment comes from the statute, current court decisions, and official reporting, rather than assumptions that an NSL grants unrestricted access to communications.

Where to Find the Law

The primary provisions are 18 U.S.C. § 2709, which governs FBI requests to communications providers, and 18 U.S.C. § 3511, which addresses judicial review. Readers should consult the current U.S. Code and seek qualified legal advice for questions involving an actual demand, investigation, or nondisclosure order.