SEC Chairwoman Mary Jo White admitted this week that the agency hasn't been using subpoenas to get citizen email data from ISP. Her disclosure came as a surprise to privacy advocates who have accused the SEC of standing in the way of updates to email privacy law, which would require law enforcement to get a subpoena to access email records. Currently, the 1986 Electronic Communications Privacy Act governs email rules and does not require such permission.