The Electronic Communications Privacy Act was passed in 1986. The Internet has changed a great deal since then. Privacy standards have been left mainly in the hands of courts, which widely differ as to what they consider within ECPA's scope. These decisions have immense implications for users' privacy rights online. (Unread email, for example, has been held to two different standards of privacy-- the stricter standard of the Wiretapping Act, and the considerably laxer standard of the Stored Communications Act.) It is extremely important that a new CTO get ECPA back on the radar, and update U.S. privacy policy as applies to online activity.