2 Pertinent Laws and Regulations 2 Pertinent Laws and Regulations
2.1. 18 U.S. Code § 1030 - Fraud and related activity in connection with computers | U.S. Code | US Law | LII / Legal Information Institute
2.2. Rule 11. Signing Pleadings, Motions, and Other Papers; Representations to the Court; Sanctions | Federal Rules of Civil Procedure | US Law | LII / Legal Information Institute
2.3. NY Rules of Professional Conduct (2025)
Comment 8:
To maintain the requisite knowledge and skill, a lawyer should
(i) keep abreast of changes in substantive and procedural law relevant to the lawyer’s practice,
(ii) keep abreast of the benefits and risks associated with technology the lawyer uses to provide services to clients or to store or transmit confidential information, and
(iii) engage in continuing study and education and comply with all applicable continuing
legal education requirements under 22 N.Y.C.R.R. Part 1500."
2.4. NYCL: PEN § 240.30
While no law against doxxing, Penal Law 240.30 is often used as legislation to combat the results of doxxing
2.5 Cloud/Vendor Specific 2.5 Cloud/Vendor Specific
2.5.1. 18 U.S. Code Chapter 121 Part I - STORED WIRE AND ELECTRONIC COMMUNICATIONS AND TRANSACTIONAL RECORDS ACCESS | U.S. Code | US Law | LII / Legal Information Institute
Consider in Section 2703 (18 U.S.C. § 2703) of the SCA the definitions of:
- Electronic communication service.
- In storage for 180 days or less, state must obtain warrant
- In storage for 180 days or less, state must obtain warrant
- Remote computing service.
- If more than 180 days, state must obtain subpeona (notice to customer/subscriber) or warrant (no notice)
These days, most big name ECS platforms are also RCS platforms.
Pay close attention to "content" vs "non-content."
- Content: Think emails and messages
- Non-Content: Think demographic information and account information.
2.5.2. 18 U.S. Code § 2523 - Executive agreements on access to data by foreign governments | U.S. Code | US Law | LII / Legal Information Institute
Also known as the CLOUD ACT, allows state to compel US-based telecom companies to produce information stored abroad -- usually and typically by warrant.
Also allows the state to enter into bilateral treaties to gain information abroad.