Manage CalECPA Compliance
How to track California Electronic Communications Privacy Act requirements
How to Manage CalECPA Compliance
This guide shows you how to manage California Electronic Communications Privacy Act (CalECPA) compliance for digital evidence requests in IronCase.
CalECPA imposes strict requirements on accessing electronic communications and location data. Non-compliance can result in evidence suppression and civil liability.
Understanding CalECPA
CalECPA (California Penal Code §§ 1546-1546.4) requires California law enforcement to obtain a warrant before:
- Accessing electronic communications content
- Obtaining location information from devices
- Requesting records from service providers
The law also requires notification to the target of the request.
Accessing CalECPA Tracking
- Go to CalECPA in the navigation
- View all requests subject to CalECPA
- See notification status and deadlines
- Track compliance across cases
When CalECPA Applies
| Request Type | CalECPA Applies? |
|---|---|
| Email content | Yes |
| Text message content | Yes |
| Social media messages | Yes |
| Location data (GPS, cell tower) | Yes |
| Subscriber information only | No (but other laws may apply) |
| Metadata (pen register) | Yes, with separate requirements |
| Cloud storage content | Yes |
| Geofence requests | Yes |
Creating a CalECPA-Compliant Request
Step 1: Obtain a Warrant
CalECPA requires a warrant for most electronic evidence requests:
- Create a warrant in IronCase (see Create a Warrant Request)
- Specify CalECPA applicability
- Include required statutory language
- Obtain judicial authorization
Step 2: Submit the Request
- Go to Digital Evidence tab in your case
- Click New Request
- Select request type
- Check Subject to CalECPA
- Link the authorizing warrant
- Submit to provider
Step 3: Set Notification Requirements
CalECPA requires notifying the target:
- IronCase calculates notification deadline
- Default: Contemporaneous with request
- Delayed notification requires court order
Notification Requirements
Standard Notification
The target must be notified when you submit a request to a provider. Notification includes:
- Nature of the investigation (general)
- That electronic information was sought
- Court that issued the warrant
- Applicable statutory provision
Delayed Notification
You may request delayed notification if disclosure would:
- Endanger life or safety
- Result in flight from prosecution
- Destroy evidence
- Intimidate witnesses
- Seriously jeopardize investigation
To request delayed notification:
- Include request in warrant application
- Specify grounds for delay
- Request specific delay period (max 90 days)
- Court may grant extensions
Tracking Notification Deadlines
IronCase tracks all notification deadlines:
Viewing Deadlines
- Go to CalECPA dashboard
- View upcoming deadlines
- Filter by case, status, or date
- Export deadline report
Deadline Statuses
| Status | Meaning |
|---|---|
| Pending | Notification not yet required |
| Due Soon | Deadline approaching (7 days) |
| Due | Notification required today |
| Overdue | Deadline passed without notification |
| Completed | Notification sent |
| Extended | Court granted extension |
Sending Notifications
When notification is due:
- Open the CalECPA request
- Click Generate Notification
- IronCase creates compliant notification letter
- Review and customize as needed
- Select delivery method:
- Mail to last known address
- Email if address known
- Personal service
- Record proof of notification
- Upload confirmation
Requesting Extensions
If you need more time before notification:
- Go to the CalECPA request
- Click Request Extension
- Document continued justification
- Specify extension period (max 90 days)
- Submit to court
- Upload court order when granted
- IronCase updates deadline
Extensions are not automatic. You must demonstrate ongoing grounds for delayed notification.
Exceptions to CalECPA
CalECPA does not apply in certain situations:
| Exception | Condition |
|---|---|
| Consent | Target consented to access |
| Emergency | Imminent danger of death or serious injury |
| Device belonging to agency | Agency-owned device |
| Lost/stolen device | Owner reported device lost/stolen |
| Parolee/probationer | Subject to search conditions |
Even with exceptions, document your basis thoroughly.
Emergency Access
In genuine emergencies:
- Document the emergency circumstances
- Access the information as needed
- Obtain warrant within 48 hours (if possible)
- Create detailed record of emergency basis
- Still provide notification (unless delayed notification order obtained)
Compliance Reports
Generate reports for review:
- Go to CalECPA dashboard
- Click Reports
- Select report type:
- Notification compliance rate
- Pending deadlines
- Extensions granted
- By case or by officer
- Export for command review
Audit Trail
IronCase maintains complete audit trail:
- Every CalECPA request logged
- All notification actions recorded
- Extension requests documented
- Compliance status tracked
- Reports generated automatically
Best Practices
- Plan ahead — CalECPA adds time; build it into your timeline
- Document everything — Every decision, every justification
- Track deadlines — Don't miss notifications
- Train regularly — CalECPA is specific and technical
- Consult counsel — When in doubt, ask your DA or legal advisor