Emergency data request
An emergency data request asks a service provider to disclose information urgently to address a claimed emergency, commonly a threat to life or serious physical safety.
These requests usually reach a provider through a law-enforcement or legal-response channel. Staff need to act promptly while checking who is asking and what information they need.
The FBI’s November 2024 advisory described criminals using compromised government email accounts to submit fraudulent emergency requests. A genuine-looking government address can therefore coexist with an unauthorized request. The claimed danger, the sender’s authority, and the requested disclosure need their own checks.
Route the request to the authorized decision-maker
Frontline support should preserve the request and use the organization’s established emergency-disclosure handoff. The specialist team needs a trusted way to validate the originating authority and assess the requested scope. A telephone number inside the disputed message is not independent confirmation.
Microsoft’s published practice is one example: its compliance team evaluates emergency requests before disclosure and limits released information to what it believes would address the emergency. That is Microsoft’s process, not a universal legal rule for every company or jurisdiction.
Confirm that the reviewing team has accepted the request so it does not sit unassigned in a forwarded email. Our emergency-intake article follows that handoff, and the callback guide explains how to find an independent contact.