No. 95-2080.United States Court of Appeals, Fourth Circuit.Argued March 5, 1996.
Decided May 20, 1996.
Page 689
Appeal from the United States District Court for the Middle District of North Carolina, at Durham. (CA-94-5-1) Richard C. Erwin, Senior District Judge.
ARGUED: Mark Alexander Charns, Durham, North Carolina; Thomas Franklin Loflin, III, Durham, North Carolina, for Appellant. Reginald B. Gillespie, Jr., FAISON FLETCHER, Durham, North Carolina, for Appellees.
ON BRIEF: Ann F. Loflin, Durham, North Carolina; William G. Goldston, Durham, North Carolina, for Appellant. Keith D. Burns, FAISON FLETCHER, Durham, North Carolina, for Appellees.
Before MURNAGHAN and MOTZ, Circuit Judges, and YOUNG, Senior United States District Judge for the District of Maryland, sitting by designation.
Vacated and remanded by published opinion. Judge Motz wrote the opinion, in which Judge Murnaghan and Senior Judge Young joined.
DIANA GRIBBON MOTZ, Circuit Judge:
[1] This case involves alleged violations of Title II of the Electronic Communications Privacy Act of 1986, 18 U.S.C. Section(s) 2701 et seq., by appellee, the City of Durham, North Carolina,Page 690
and certain officials in its police department.[1]
Appellant, Cora Tucker, sued the City of Durham pursuant to 18 U.S.C. §(s) 2707, which allows a private right of action for persons aggrieved by knowing or intentional violations of the Act. Her complaint alleged that the City, through its police officers, violated 18 U.S.C. §(s) 2703(c) when the officers obtained subscriber information regarding her telephone service from GTE South, Incorporated, through the use of two improper subpoenas.
I.
[3] The City of Durham argues that Section(s) 2703(c) does not create a cause of action against governmental entities.[2] Of course, in Tucker’s complaint the asserted basis for jurisdiction was Section(s) 2707, not Section(s) 2703(c). Section 2707 provides in pertinent part:
Page 691
(1995) (in construing a statute, “the Court will avoid a reading which renders some words altogether redundant”); Crestar Bank v. Neal (In re Kitchin Equip. Co.), 960 F.2d 1242, 1247 (4th Cir. 1992) (“It is an axiom of statutory construction that courts are obliged to give effect, if possible, to every word used by the legislature.”)
[6] The legislative history of the Electronic Communications Privacy Act provides further support for the conclusion that Section(s) 2707 creates a private cause of action for violations of the Act by “persons and governmental entities”. In summarizing the proposed legislation, the Senate Committee Report indicates that providers, subscribers, or customers aggrieved by violations of the chapter “may recover from any person or entity — including governmental entities — who knowingly or intentionally violated this chapter.” S. Rep. No. 541, 99th Cong., 2d Sess. 43 (1986), reprinted in 1986 U.S.C.C.A.N. 3555, 3597 (emphasis added). The House Committee Report is equally clear on this issue: “[r]ecovery may be had under [Section(s) 2707] against a person or entity who violated the provisions of this chapter. This includes governmental entities who have violated the provisions of this chapter.” H.R. Rep. No. 647, 99th Cong., 2d Sess. 74 (1986) (emphasis added). [7] In sum, the plain language of Section(s) 2707, particularly when considered in light of its legislative history, compels the holding that the statute authorizes a private cause of action against governmental entities that violate the Electronic Communications Privacy Act.II.
[8] This holding does not, however, end our inquiry. Persons aggrieved by violations of the Act can only assert a cause of action against the person or entity that “engaged in that violation.” 18 U.S.C. §(s) 2707(a). The only statute which Tucker alleges that the City violated is 18 U.S.C. §(s) 2703(c).[3]
Accordingly, in order for Tucker to have a cause of action and a basis for federal jurisdiction in this case, the police department must have “engaged in” a violation of Section(s) 2703(c). The language of Section(s) 2703(c) does not expressly proscribe any action by governmental entities or their employees. Rather, Section(s) 2703(c) only prohibits the actions of providers of electronic communication services and remote computing services:
Page 692
different courses of action available to governmental entities wishing to obtain customer information, but only in the context of limiting the circumstances under which providers may disclose such information.
[14] Tucker’s sole support for her argument that Section(s) 2703(c) prohibits governmental entities and their employees from obtaining subscriber telephone records is the following statement from a handbook on law enforcement search and investigation techniques: “An officer who obtains a customer’s telephone information by violating this federal law [Section(s) 2703(c)] is subject to civil damages to the customer of at least $1,000.” Robert L. Farb, Arrest, Search, and Investigation in North Carolina, 2d ed. (Institute of Government, The University of North Carolina at Chapel Hill, 1992), at 86. The author cites no authority for this proposition, and we have found none. [15] The Electronic Communications Privacy Act was “modeled after the Right to Financial Privacy Act, 12 U.S.C. § 3401 et. seq.” S. Rep. No. 541 at 3, 1986 U.C.C.A.N. at 3557. Examination of the Right to Financial Privacy Act indicates that Congress there recognized a distinction between limiting disclosure of information and limiting access to information. The Right to Financial Privacy Act, like the Electronic Communications Privacy Act at issue here, contains a section limiting the circumstances under which customer records may be disclosed to governmental authorities (by financial institutions rather than by communications service providers). 12 U.S.C. §(s) 3403(1994).[5] However, the Right to Financial Privacy Act, unlike the statute involved here, also contains a “companion” section limiting the circumstances under which governmental authorities may obtain access to customer records from the financial institutions. 12 U.S.C. §(s) 3402 (1994). Customers aggrieved by the improper disclosure of their records have a private right of action against the governmental authority that obtained the records and the financial institution that disclosed the records. 12 U.S.C. §(s) 3417(a). Civil actions against governmental authorities for improperly obtaining information allege violations of Section(s) 3402, while actions against financial institutions for improper disclosure allege violations of Section(s) 3403. Compare Duncan v. Belcher, 813 F.2d 1335 (4th Cir. 1987) (action based on Section(s) 3402); with Waye v. First Citizen’s Nat’l Bank, 846 F. Supp. 310 (M.D.Pa.) (action based on Section(s) 3403), aff’d, 31 F.3d 1175 (3d Cir. 1994). [16] Thus, in enacting the Right to Financial Privacy Act, Congress limited both the disclosure of customer records by financial institutions and the acquisition of such information by governmental entities. It did so by enacting two “companion” sections, one directed at the actions of governmental entities, and the other directed at the actions of financial institutions. Although Congress modeled the statute invoked here, the Electronic Communications Privacy Act, on the Right to Financial Privacy Act and fashioned a similar prohibition against disclosure of customer information held by electronic communications service providers, Congress did not incorporate in the statute relied on in this case any similar bar to acquisition of information by governmental entities. The absence of a “companion” section limiting the access of customer information by governmental entities indicates that Congress did not intend to authorize civil suits against governmental entities for improperly obtaining customer records. [17] Furthermore, even within Section(s) 2703 itself, the distinction between limiting disclosure and limiting access is apparent. While subsection (c) focuses on the conduct of the service providers, subsections (a) and (b) focus on the conduct of governmental entities. For example, subsection (a) provides: [18] A governmental entity may require the disclosure by a provider of electronic communication service of the contents of an electronic communication, that is in electronic storage in an electronic communications system for one hundred and eighty days or less, only pursuant to a warrant issued under the Federal Rules of Criminal
Page 693
Procedure or equivalent State warrant. A governmental entity may require the disclosure by a provider of electronic communications services of the contents of an electronic communication that has been in electronic storage in an electronic communications system for more than one hundred and eighty days by the means available under subsection (b) of this section.
[19] 18 U.S.C. §(s) 2703(a) (1988) (emphasis added). Subsection (b) is similarly focused on the conduct of the government, describing when and how “[a] governmental entity may require a provider of remote computing service to disclose the contents of an electronic communication.”18 U.S.C. §(s) 2703(b). The inclusion, within the same section, of two subsections limiting governmental access to information and one subsection limiting provider disclosure of information makes the distinction between the two eminently clear. [20] A governmental entity that violates the dictates of Section(s) 2703(a) or (b) may be held civilly liable for such violation. See Steve Jackson Games, Inc. v. United States Secret Service, 816 F. Supp. 432, 442-43 (W.D.Tex. 1993) (holding Secret Service liable under Section(s) 2707 for violation of Section(s) 2703(b)), aff’d, 36 F.3d 457 (5th Cir. 1994); Organizacion JD Ltda. v. United States Dep’t. of Justice, 18 F.3d 91, 94-95 (2d Cir.) (discussing “the government’s possible liability under Section(s) 2707(a),” concluding that the government may be held liable if the district court finds that the government did not comply with the requirements of Section(s) 2703(a)), cert. denied, ___ U.S. ___, 114 S.Ct. 2679 (1994). In contrast, the language of Section(s) 2703(c) does not prohibit any governmental conduct, and thus a governmental entity may not violate that subsection by simply accessing information improperly.[6]Consequently, Section(s) 2707 does not authorize a private cause of action against the City of Durham or its officers in this case.
III.
[21] Having concluded that the ECPA does not authorize a civil suit against the City for “violating” Section(s) 2703(c), we cannot address the merits of this appeal. Thus, we do not reach the question of whether the information obtained by the City, through its police department, was in the public domain. Instead because the complaint failed to state a claim upon which relief can be granted, we vacate the orders of the district court and remand the case for entry of an order of dismissal on that ground.
et seq. (1994). None of the amendments are relevant for our purposes in this case.
Page 131