The Electronic Communications Privacy Act of 1986 established rules for law enforcement access to email and other electronic communications and transactional data held by service providers. The law has not been meaningfully updated to protect privacy in over 25 years. It no longer fits well with the way technology is used. This session will describe the problem and discuss proposals to update the law.