18 U.S.C. 2709 authorizes specified FBI demands for subscriber and transactional records from covered communications providers in qualifying national-security investigations. It is not a general warrant to read message content. The statutory records, certification, and investigation requirements matter. [1]
What the demand can seek
The statute identifies subscriber information and specified billing and transactional records. The authorized official must certify the required relevance to an authorized investigation. Investigations of U.S. persons cannot be conducted solely on the basis of protected First Amendment activity under the statutory limitation. [1]
A gag is not simply automatic
Nondisclosure has its own statutory conditions and certification addressing specified harms. The recipient should examine what the actual demand requires and the permitted disclosures, including access to legal advice. A record-production obligation and a nondisclosure obligation are related but distinct.
Judicial review is available
Section 3511 addresses court review of national-security-letter and nondisclosure requirements. Review procedures and standards should be evaluated promptly with counsel rather than assuming the letter is either unchallengeable or optional. [2]
For example, a demand for subscriber records cannot automatically be treated as authority for unrestricted access to all stored communications.
Preserve and respond carefully
Retain the original demand, service information, certifications, scope, and deadlines. Avoid unauthorized disclosure or deletion while counsel reviews compliance and available challenges.
Legal advice and public disclosure are different
The statutory nondisclosure framework permits specified disclosures, including obtaining legal advice under its conditions. That does not mean a recipient can publicly post the demand whenever it wishes to challenge it. Ask counsel to identify the exact nondisclosure certification, allowed recipients, duration or review provisions, and procedure for seeking judicial relief. [1] [2]
For production, compare every requested field with the statute’s permitted records and the letter’s scope. A provider should not casually expand a subscriber-record request into delivery of message content or unrelated customers’ files. If the demand is unclear or contested, preserve the data while pursuing a lawful clarification or challenge. The lack of advance judicial issuance is a feature of the mechanism, not proof that the recipient has no review rights or that every demand is valid.
See stored-communications access and computer-access liability for different authorities governing digital information.
Primary sources
Sources checked: October 31, 2026.