IronCase
How-to Guides

Manage CalECPA Compliance

How to track California Electronic Communications Privacy Act requirements

How to Manage CalECPA Compliance

This guide shows you how to manage California Electronic Communications Privacy Act (CalECPA) compliance for digital evidence requests in IronCase.

CalECPA imposes strict requirements on accessing electronic communications and location data. Non-compliance can result in evidence suppression and civil liability.


Understanding CalECPA

CalECPA (California Penal Code §§ 1546-1546.4) requires California law enforcement to obtain a warrant before:

  • Accessing electronic communications content
  • Obtaining location information from devices
  • Requesting records from service providers

The law also requires notification to the target of the request.


Accessing CalECPA Tracking

  1. Go to CalECPA in the navigation
  2. View all requests subject to CalECPA
  3. See notification status and deadlines
  4. Track compliance across cases

When CalECPA Applies

Request TypeCalECPA Applies?
Email contentYes
Text message contentYes
Social media messagesYes
Location data (GPS, cell tower)Yes
Subscriber information onlyNo (but other laws may apply)
Metadata (pen register)Yes, with separate requirements
Cloud storage contentYes
Geofence requestsYes

Creating a CalECPA-Compliant Request

Step 1: Obtain a Warrant

CalECPA requires a warrant for most electronic evidence requests:

  1. Create a warrant in IronCase (see Create a Warrant Request)
  2. Specify CalECPA applicability
  3. Include required statutory language
  4. Obtain judicial authorization

Step 2: Submit the Request

  1. Go to Digital Evidence tab in your case
  2. Click New Request
  3. Select request type
  4. Check Subject to CalECPA
  5. Link the authorizing warrant
  6. Submit to provider

Step 3: Set Notification Requirements

CalECPA requires notifying the target:

  1. IronCase calculates notification deadline
  2. Default: Contemporaneous with request
  3. Delayed notification requires court order

Notification Requirements

Standard Notification

The target must be notified when you submit a request to a provider. Notification includes:

  • Nature of the investigation (general)
  • That electronic information was sought
  • Court that issued the warrant
  • Applicable statutory provision

Delayed Notification

You may request delayed notification if disclosure would:

  • Endanger life or safety
  • Result in flight from prosecution
  • Destroy evidence
  • Intimidate witnesses
  • Seriously jeopardize investigation

To request delayed notification:

  1. Include request in warrant application
  2. Specify grounds for delay
  3. Request specific delay period (max 90 days)
  4. Court may grant extensions

Tracking Notification Deadlines

IronCase tracks all notification deadlines:

Viewing Deadlines

  1. Go to CalECPA dashboard
  2. View upcoming deadlines
  3. Filter by case, status, or date
  4. Export deadline report

Deadline Statuses

StatusMeaning
PendingNotification not yet required
Due SoonDeadline approaching (7 days)
DueNotification required today
OverdueDeadline passed without notification
CompletedNotification sent
ExtendedCourt granted extension

Sending Notifications

When notification is due:

  1. Open the CalECPA request
  2. Click Generate Notification
  3. IronCase creates compliant notification letter
  4. Review and customize as needed
  5. Select delivery method:
    • Mail to last known address
    • Email if address known
    • Personal service
  6. Record proof of notification
  7. Upload confirmation

Requesting Extensions

If you need more time before notification:

  1. Go to the CalECPA request
  2. Click Request Extension
  3. Document continued justification
  4. Specify extension period (max 90 days)
  5. Submit to court
  6. Upload court order when granted
  7. IronCase updates deadline

Extensions are not automatic. You must demonstrate ongoing grounds for delayed notification.


Exceptions to CalECPA

CalECPA does not apply in certain situations:

ExceptionCondition
ConsentTarget consented to access
EmergencyImminent danger of death or serious injury
Device belonging to agencyAgency-owned device
Lost/stolen deviceOwner reported device lost/stolen
Parolee/probationerSubject to search conditions

Even with exceptions, document your basis thoroughly.


Emergency Access

In genuine emergencies:

  1. Document the emergency circumstances
  2. Access the information as needed
  3. Obtain warrant within 48 hours (if possible)
  4. Create detailed record of emergency basis
  5. Still provide notification (unless delayed notification order obtained)

Compliance Reports

Generate reports for review:

  1. Go to CalECPA dashboard
  2. Click Reports
  3. Select report type:
    • Notification compliance rate
    • Pending deadlines
    • Extensions granted
    • By case or by officer
  4. Export for command review

Audit Trail

IronCase maintains complete audit trail:

  • Every CalECPA request logged
  • All notification actions recorded
  • Extension requests documented
  • Compliance status tracked
  • Reports generated automatically

Best Practices

  • Plan ahead — CalECPA adds time; build it into your timeline
  • Document everything — Every decision, every justification
  • Track deadlines — Don't miss notifications
  • Train regularly — CalECPA is specific and technical
  • Consult counsel — When in doubt, ask your DA or legal advisor

On this page