John Doe Litigation Toolkit: Early Discovery Motions, Platform Subpoenas, and Motions to Quash

Summary. This toolkit collects the papers that John Doe identification litigation runs on, each introduced by its purpose, its owner, and when to use it, and each followed by drafting commentary tied to the governing authority. The plaintiff's templates cover a triage memo, a capture log and declaration, a preservation request, Doe complaint paragraphs, a motion for leave to serve subpoenas before the Rule 26(f) conference, falsity and harm declarations, a proposed order with notice and Cable Act provisions, and subpoena riders for platforms and internet providers. Further templates supply a court-directed notice to the account holder, a DMCA 512(h) subpoena package, and a verification memo with a motion to substitute a named defendant. The speaker's template is a motion to quash with a motion to proceed anonymously and an anonymous declaration, and the platform's are a user notice and an objection letter. A protective order rider for identity information, a deadline tracker, an FAQ, and practical takeaways close the toolkit.

A John Doe case is mostly paperwork written against two clocks. The motion has to be a merits brief in disguise, the order has to satisfy a federal privacy statute that most judges rarely see, and the subpoena rider has to be narrow enough that the platform's lawyer has nothing left to object to. This toolkit is that paperwork, for the plaintiff who needs a name, the speaker who wants to keep it, and the platform caught in the middle.

The short answer

• The motion is a merits motion. Courts unmask on evidence, statement by statement, not on adjectives. Write it to satisfy every test a court might apply, from Columbia Insurance Co. v. Seescandy.com, 185 F.R.D. 573 (N.D. Cal. 1999), to Dendrite International, Inc. v. Doe No. 3, 775 A.2d 756 (N.J. Super. Ct. App. Div. 2001), and Highfields Capital Management, L.P. v. Doe, 385 F. Supp. 2d 969 (N.D. Cal. 2005).
• The order does the protective work. Notice to the account holder, a waiting period, preservation, limits on use, and, for cable operators only, the court-order language of 47 U.S.C. § 551(c)(2)(B).
• The rider asks for little. Non-content subscriber and log records for named accounts and dates, which 18 U.S.C. § 2702(c)(6) lets a provider give a private party. Never message contents.
• The speaker's papers attack the evidence and protect the name. A motion to quash, a motion to proceed anonymously, and a declaration that proves facts without identifying anyone.
• The platform's papers are a notice, an objection, and a clean production.

How to use this toolkit

Each template states its purpose, its owner, and when to use it, then gives the template and a short drafting commentary. Bracketed text in capitals is to be filled in. Use one numbering system across every paper: S- for statements, C- for captures, P- for productions, and IP- for network addresses, so that a declaration, a chart, and a subpoena rider can all point to "S-2" or "IP-01" and mean the same thing.

The sample entries follow one invented federal case. Larkspur Diagnostics, Inc., a Massachusetts maker of rapid test kits, sues "Doe 1," who posts as @benchside_truth on a microblogging platform headquartered in San Francisco. The account posted pages from Larkspur's confidential validation report and wrote that the company "faked its accuracy numbers." Larkspur sues in the District of Massachusetts under the Defend Trade Secrets Act, with state claims for defamation and breach of contract; the platform's compliance court is the Northern District of California; and the second-tier subpoenas go to a cable provider and a mobile carrier.

The doctrine behind every template is in Unmasking Anonymous Online Speakers: John Doe Subpoenas, the Dendrite and Cahill Tests, and the First Amendment; the order of tasks is in the Anonymous Speaker Unmasking Checklist: A Practical Checklist; and the step-by-step narrative is in Identifying an Anonymous Defendant Online: A Practical Guide.

Template 1: Identification triage memo

Purpose: decide whether a name is worth pursuing and, if so, on what claim, in what court, and under what test. Owner: the plaintiff's lead counsel, shared with the client. When to use: in the first week, before anything is filed.

Drafting commentary. The memo forces three early decisions. The category of speech comes first, because "the nature of the speech should be a driving force in choosing a standard," In re Anonymous Online Speakers, 661 F.3d 1168 (9th Cir. 2011): a leak in breach of a confidentiality agreement sits far from the protected core, and S-3, an opinion, stays out of every later paper. The forum comes second. A federal claim such as the Defend Trade Secrets Act, 18 U.S.C. § 1836, makes a federal Doe case possible, because Doe defendants defeat diversity jurisdiction, Howell v. Tribune Entertainment Co., 106 F.3d 215 (7th Cir. 1997). The clock comes third: the trade secret claim runs three years from discovery under § 1836(d), but without a state Doe statute the plan must produce a name before the earliest defamation deadline, Herrera v. Cleveland, 8 F.4th 493 (7th Cir. 2021). Mark the memo as prepared in anticipation of litigation, Fed. R. Civ. P. 26(b)(3), and assume its facts will be tested anyway.

Template 2: Capture log and capturer's declaration

Purpose: preserve each statement and its context in a form a court will accept. Owner: a paralegal or investigator, supervised by counsel. When to use: from day one, and again before filing to capture anything new.

I, [NAME], declare:

1. I am a [paralegal / licensed investigator] at [FIRM]. I make this declaration from personal knowledge.
2. Between [TIME] and [TIME] UTC on [DATE], I used [TOOL AND VERSION] to capture the web pages listed in Exhibit A, captures C-001 through C-0[ ].
3. For each capture, the tool recorded the URL, the date and time, and a SHA-256 hash of the captured file. Those values appear in Exhibit A. I have not altered any capture.
4. Exhibit B contains true and correct copies of the captures, including the account's profile page and the replies to each post.

I declare under penalty of perjury that the foregoing is true and correct. Executed on [DATE] at [CITY, STATE].

[SIGNATURE]

Drafting commentary. Authentication under Fed. R. Evid. 901 requires only evidence sufficient to support a finding that the capture is what it purports to be, and a witness who made it and can describe the method supplies that. The closing sentence is the in-country form prescribed by 28 U.S.C. § 1746. Record the numeric account ID, because handles change, and capture the replies, because context decides whether a statement reads as fact or as hyperbole, as in Krinsky v. Doe 6, 159 Cal. App. 4th 1154 (2008). Monique C.M. Leahy, Proof of Instant Message, Blog, or Chat as Evidence, 100 Am. Jur. Proof of Facts 3d 89 §§ 13, 19 (2008), covers authentication and the elements of proving an anonymous poster's identity; see also Capturing the Web: A Practitioner's Guide to Authenticating Website Screenshots as Evidence in Federal Court.

Template 3: Preservation request to a platform

Purpose: ask the platform to keep the records a subpoena will seek. Owner: plaintiff's counsel. When to use: when filing is days away, not weeks.

Re: Request to preserve records; account @benchside_truth (account ID [ ])

We represent Larkspur Diagnostics, Inc., which [intends to file / has filed] an action in [COURT] concerning posts made through the account identified above (URLs attached). Pending service of a subpoena, please preserve these non-content records for [DATE] to the present: basic subscriber information; the date, time, and IP address of the account's creation; and the IP addresses, ports, and timestamps of each access to the account. We do not seek the contents of any communication. Please confirm whether, and for how long, you will preserve these records, and where you accept civil process.

[SIGNATURE BLOCK]

Drafting commentary. The statutory preservation demand in 18 U.S.C. § 2703(f) belongs to governmental entities, so this letter is a request and should not pretend otherwise. Identify the account by numeric ID and URL, ask for the categories listed in § 2703(c)(2), disclaim contents, and ask about retention so you know how fast to move. Assume the user may learn of the request, and send it only when the complaint is ready. The client's own preservation duty is separate; see Litigation Hold and Evidence Preservation Checklist: A Practical Checklist.

Template 4: Doe complaint paragraphs

Purpose: plead a complaint that supports early discovery and survives the later motion to dismiss. Owner: plaintiff's counsel. When to use: at filing, with Templates 5 to 7.

Parties. Defendant Doe 1 is the person or persons who control the account "@benchside_truth" (account ID [ ]) on [PLATFORM]. Larkspur does not know Doe 1's true name and will amend this complaint when it is learned.

Jurisdiction and venue. The Court has jurisdiction over the Defend Trade Secrets Act claim under 28 U.S.C. § 1331 and over the related state-law claims under 28 U.S.C. § 1367(a). On information and belief, Doe 1 resides in Massachusetts: the posts describe [the Worcester facility's shift schedule and the layout of its validation laboratory], information known only to people who worked there, and the posting times track that facility's [second shift].

The statements. Doe 1 published the statements in the following table (captures in Exhibit A).

S-ref	Date	URL	Statement, verbatim
S-1	[DATE]	[URL]	[Photographs of pages 4 to 9 of the validation report]
S-2	[DATE]	[URL]	"[EXACT TEXT]"

Falsity and harm. Statement S-2 is false because [FACTS, citing the documents that show it]. As a result of S-2, [DISTRIBUTOR] canceled order [NUMBER] for $[AMOUNT] on [DATE], and [SECOND ITEM OF SPECIAL DAMAGE].

Reservation. Larkspur will seek leave to serve limited discovery to identify Doe 1 and will amend to name Doe 1 when identified.

Drafting commentary. Fed. R. Civ. P. 10(a) requires the title to name all parties, but courts permit Doe defendants when the identity is unknown and discovery is likely to reveal it. Gillespie v. Civiletti, 629 F.2d 637 (9th Cir. 1980). Quote each statement exactly, as Dendrite requires, and leave pure opinion out. Facts peculiarly within the defendant's knowledge may be pleaded on information and belief, Arista Records, LLC v. Doe 3, 604 F.3d 110 (2d Cir. 2010), within the plausibility standard of Ashcroft v. Iqbal, 556 U.S. 662 (2009). Special damages must be specifically stated, Fed. R. Civ. P. 9(g). Name only Does who made actionable statements; Independent Newspapers, Inc. v. Brodie, 407 Md. 415 (2009), unraveled because the named Does had not. The trade secret claim needs its own particularized identification; see Trade Secret Litigation Toolkit: Identification Statements, Two-Tier Protective Orders, and Forensic Protocols.

Template 5: Motion for leave to serve subpoenas before the Rule 26(f) conference

Purpose: obtain the order that authorizes identification discovery. Owner: plaintiff's counsel. When to use: filed with the complaint, supported by Templates 2 and 6, with Template 7 as the proposed order. With small changes, the same structure answers a motion to quash.

PLAINTIFF'S MOTION FOR LEAVE TO SERVE THIRD-PARTY SUBPOENAS BEFORE THE RULE 26(f) CONFERENCE

I. Introduction. [One paragraph: who Doe 1 is, what Doe 1 published, the evidence that it is actionable, and the narrow records sought, from whom.]

II. Background. [The statements chart; a summary of the evidence with declaration citations; the steps already taken; the recipients and why each is likely to hold identifying records.]

III. Legal standard. [Rule 26(d)(1); good cause or reasonableness; the First Amendment test this court applies; a sentence stating that the motion satisfies every test courts use.]

IV. Argument.

• A. Doe 1 is a real person who can be sued in this court. [Specificity; jurisdictional facts; any geolocation.]
• B. Larkspur has tried every other means of identification. [Steps-taken declaration.]
• C. Each claim is supported by prima facie evidence on every element within Larkspur's control. [Element-by-element chart for S-1 and S-2.]
• D. The request is narrow: named accounts, a stated period, and non-content records only.
• E. The information is central to the case and unavailable from any other source.
• F. Doe 1's expectation of privacy is limited and is protected by the proposed order. [Terms of service; notice; waiting period; limits on use.]
• G. The balance of harms favors disclosure.
• H. The proposed order satisfies the Cable Act for any recipient that is a cable operator.

V. Conclusion. [The relief: the proposed order (Template 7), the notice (Template 8), and the riders (Templates 9 and 10).]

Drafting commentary. Fed. R. Civ. P. 26(d)(1) bars discovery before the Rule 26(f) conference without a stipulation or order, and most courts ask for good cause, Semitool, Inc. v. Tokyo Electron America, Inc., 208 F.R.D. 273 (N.D. Cal. 2002), or reasonableness, Ayyash v. Bank Al-Madina, 233 F.R.D. 325 (S.D.N.Y. 2005), filled in with a First Amendment test. The outline satisfies all of the tests at once. Sections IV.A, B, C, and E track the four safeguards of Seescandy; Sections IV.C through F track the five factors of Sony Music Entertainment Inc. v. Does 1-40, 326 F. Supp. 2d 556 (S.D.N.Y. 2004), adopted in Arista Records; Section IV.C supplies the evidence that Dendrite and Highfields demand, in the "within the plaintiff's control" terms of Doe v. Cahill, 884 A.2d 451 (Del. 2005), which does not make a public figure prove actual malice before learning the speaker's name; and Section IV.G answers the balancing step. A motion built this way is why the D.C. Circuit could reverse a denial "under any applicable standard." Strike 3 Holdings, LLC v. Doe, 964 F.3d 1203 (D.C. Cir. 2020). Keep the brief short and the declarations long. If the subpoena targets a witness rather than a defendant, add the test of Doe v. 2TheMart.com Inc., 140 F. Supp. 2d 1088 (W.D. Wash. 2001), and if a magistrate judge decides the motion, calendar 14 days to object under Fed. R. Civ. P. 72(a).

To oppose a motion to quash, keep Sections III and IV and add four things: dismissal of any Doe whose statement proves true; the concrete reasons a name is still needed if the Doe is litigating through counsel, since active participation defeated the claimed need in Art of Living Foundation v. Does 1-10, No. 10-cv-05022 (N.D. Cal. Nov. 9, 2011); the point that jurisdictional objections are premature before identification, Arista Records LLC v. Does 1-19, 551 F. Supp. 2d 1 (D.D.C. 2008); and a narrower fallback, such as the in camera review used in London-Sire Records, Inc. v. Doe 1, 542 F. Supp. 2d 153 (D. Mass. 2008). For motion structure generally, see Motion Practice Toolkit: Dispositive, Discovery, and In Limine Motions.

Template 6: Falsity, harm, and steps-taken declarations

Purpose: supply the evidence that the motion argues from. Owner: counsel drafts; the declarants must have personal knowledge. When to use: filed with the motion.

6A. Falsity (knowledgeable officer). I am [TITLE], responsible for [THE VALIDATION PROGRAM]. Statement S-2 says that Larkspur "faked its accuracy numbers." The accuracy figures in Larkspur's [YEAR] submission came from a study conducted by [INDEPENDENT LABORATORY], whose report is Exhibit [ ]. [Explain how the figures were generated, who controlled the data, and why they were not and could not have been changed.] No one at Larkspur altered the laboratory's results.

6B. Harm. From [DATE] to [DATE], [METRIC] fell from [X] to [Y], compared with the same period last year (Exhibit [ ]). On [DATE], [DISTRIBUTOR] canceled order [NUMBER] for $[AMOUNT]; its email canceling the order, which attaches a screenshot of S-2, is Exhibit [ ].

6C. Steps already taken. [Attach the investigation log: searches run; registration, archive, and image lookups; the review of the report's internal access log, which shows that [N] user accounts opened it in the 30 days before S-1; and why none of this identified the poster.]

I declare under penalty of perjury that the foregoing is true and correct. Executed on [DATE] at [CITY, STATE].

Drafting commentary. Falsity is the element courts most often find missing, and California requires evidence of it before unmasking, ZL Technologies, Inc. v. Does 1-7, 13 Cal. App. 5th 603 (2017). Harm decided both Dendrite and Pilchesky v. Gatelli, 12 A.3d 430 (Pa. Super. Ct. 2011). Prove a number rather than relying on presumed damages, which require actual malice where the speech involves a matter of public concern, Gertz v. Robert Welch, Inc., 418 U.S. 323 (1974). Attach business records with a foundation that satisfies Fed. R. Evid. 803(6). Declaration 6C should narrow the field without naming a suspect in a public filing; if a name must appear, seek leave to file it under seal. The confidentiality showing for S-1 deserves its own paragraph, because the employer in Glassdoor, Inc. v. Superior Court, 9 Cal. App. 5th 623 (2017), lost for want of one.

Template 7: Proposed order granting early discovery

Purpose: authorize the subpoenas and build in the protections that make the order defensible. Owner: plaintiff's counsel proposes; the court decides. When to use: submitted with the motion.

[PROPOSED] ORDER GRANTING LEAVE TO SERVE THIRD-PARTY SUBPOENAS BEFORE THE RULE 26(f) CONFERENCE

Having considered the motion and the supporting declarations, the Court finds good cause and finds that Plaintiff has made [THE SHOWING REQUIRED BY THE GOVERNING TEST]. IT IS ORDERED:

1. Scope. Plaintiff may serve subpoenas under Rule 45 on [PLATFORM] and, after its production, on any internet service provider, email provider, or wireless carrier identified in that production, seeking only the records described in Schedules A and B for the accounts, addresses, and periods listed there.
2. Attachments. Each subpoena shall attach this Order and the Court-Directed Notice (Exhibit 1).
3. Notice. Within [7] days after service, each recipient shall send the subpoena, this Order, and the Notice to the affected account holder or subscriber by any reasonable means.
4. Waiting period. The account holder or subscriber may, within [30] days after notice is sent, file a motion to quash or modify the subpoena or to proceed anonymously, and shall send a copy to the recipient the same day. No recipient shall produce before that period ends or while a timely motion is pending.
5. Production. If no timely motion is filed, the recipient shall produce within [10] days after the period ends.
6. Preservation. Each recipient shall preserve the subpoenaed records until production or the resolution of any motion.
7. Cable Act. To the extent any recipient is a cable operator as defined in 47 U.S.C. § 522(5), this Order is a court order authorizing disclosure under 47 U.S.C. § 551(c)(2)(B), and the notice under paragraph 3 is the notice that section requires.
8. Educational institutions. For any recipient that is an educational institution, the notice under paragraph 3 is the advance notice required by 34 C.F.R. § 99.31(a)(9)(ii).
9. Use and confidentiality. Plaintiff may use the information produced only to prosecute and resolve the claims in this action. Identifying information shall be treated as Attorneys' Eyes Only for [30] days after production and shall not be filed publicly without leave of Court.
10. Costs. A recipient may charge reasonable costs of compliance and shall provide Plaintiff with a billing summary.

Drafting commentary. The structure follows the order in Digital Sin, Inc. v. Does 1-176, 279 F.R.D. 239 (S.D.N.Y. 2012), which gave providers 60 days to notify subscribers and subscribers 60 days to move, barred production before then or while a motion was pending, required preservation, and limited use of the information to protecting the rights asserted in the complaint. Shorter periods suit a single-Doe case if the speaker still has time to find a lawyer. Keep paragraph 7 conditional: the Cable Act reaches only cable operators, 47 U.S.C. § 522(5), and the court in Arista Records LLC v. Does 1-19 reissued its order without a § 551 reference because the subpoenaed university was not one. For a cable operator, though, the recital is what permits disclosure, 47 U.S.C. § 551(c)(2)(B), and disclosure without it invites suit under § 551(f). Paragraph 8 tracks 34 C.F.R. Part 99 and 20 U.S.C. § 1232g, which let a school comply with a subpoena or order only after a reasonable effort to notify the student. Paragraph 9 rests on Fed. R. Civ. P. 26(c) and the court's power to restrict use of discovered information, Seattle Times Co. v. Rhinehart, 467 U.S. 20 (1984).

Template 8: Court-directed notice to the account holder

Purpose: tell the account holder, in plain language, what is happening and what can be done. Owner: drafted by plaintiff's counsel, approved by the court, sent by each recipient. When to use: attached to every subpoena under the order.

NOTICE TO ACCOUNT HOLDER OR SUBSCRIBER: A SUBPOENA SEEKS INFORMATION THAT MAY IDENTIFY YOU

What is happening. [PLAINTIFF] has filed a lawsuit in the United States District Court for [DISTRICT], Case No. [ ], against people it has not yet identified, whom it calls "Doe" defendants. It claims that [ONE NEUTRAL SENTENCE DESCRIBING THE CLAIM]. The court has not decided whether that claim is true. The court has allowed [PLAINTIFF] to ask [RECIPIENT] for records that may identify the person who used [THE ACCOUNT / THE INTERNET CONNECTION] described in the enclosed subpoena.

Your name has not been disclosed. [RECIPIENT] will disclose the requested records on or after [DATE] unless, before that date, you file a motion with the court named below and send a copy to [RECIPIENT] at [CONTACT].

Your options. You may (1) do nothing, in which case the records will be disclosed; (2) file a motion to quash or modify the subpoena in the United States District Court for [COMPLIANCE DISTRICT], and you may ask that court to let you proceed without revealing your name; or (3) talk to a lawyer about these and other options. If someone else used the account or connection, tell the lawyer that too.

Help. [The court's help desk for self-represented litigants; the local bar's lawyer referral service; [ORGANIZATIONS]].

This notice is approved by the court. It is not a finding that you did anything wrong.

Drafting commentary. The court in London-Sire attached a notice of this kind to its order: it told each Doe that the name had not been disclosed, that it would be disclosed after 14 days absent a challenge, that a motion would hold disclosure until decided, and where to find a lawyer. The notice also serves as the subscriber notification that 47 U.S.C. § 551(c)(2)(B) requires of a cable operator. Write for the reader who will actually open it, who may be a parent who pays for the household connection rather than the speaker. Keep it neutral and leave settlement solicitations out; the notice is the court's, and it should not read like a demand letter.

Template 9: Subpoena rider to a platform

Purpose: ask the platform for exactly what the order allows and nothing it cannot lawfully give. Owner: plaintiff's counsel. When to use: with the first-tier subpoena.

SCHEDULE A TO SUBPOENA TO [PLATFORM]

Definitions. "Account" means the account "@benchside_truth," account ID [ ]. "Period" means [DATE] through [DATE]. "Subscriber Information" means the names, email addresses, telephone numbers, and postal addresses associated with the Account; the date, time, and IP address of the Account's creation; the length and types of service; and the means and source of payment for any paid service. "Access Logs" means records of the IP addresses, with source ports where recorded, used to log into or access the Account during the Period, with the date and time of each access in UTC.

Exclusion. This subpoena does not seek the contents of any communication, as defined in 18 U.S.C. § 2510(8). Do not produce messages, posts, drafts, or attachments.

Requests. (1) Subscriber Information for the Account. (2) Access Logs for the Account. (3) [Only if the order allows it: records sufficient to identify any other account registered with the same email address or telephone number.]

Instructions. Produce in native electronic form, such as CSV, stating the time zone used. If the Account was deleted or any records are no longer kept, say so and state the retention period that applied. Complete the enclosed certification under Federal Rule of Evidence 902(11). Direct questions about scope or cost to [COUNSEL].

Drafting commentary. The definitions track 18 U.S.C. § 2703(c)(2), the non-content records that 18 U.S.C. § 2702(c)(6) lets a provider give a private party, and the exclusion borrows the definition of contents in 18 U.S.C. § 2510(8), which 18 U.S.C. § 2711(1) carries into the Stored Communications Act. Excluding contents is not a courtesy: civil subpoenas cannot compel them, Crispin v. Christian Audigier, Inc., 717 F. Supp. 2d 965 (C.D. Cal. 2010), and an overbroad subpoena can create liability of its own, Theofel v. Farey-Jones, 359 F.3d 1066 (9th Cir. 2004). Set compliance within 100 miles of where the platform regularly transacts business, Fed. R. Civ. P. 45(c)(2)(A), and expect any motion to be heard there, as in Music Group Macao Commercial Offshore Ltd. v. Does, 82 F. Supp. 3d 979 (N.D. Cal. 2015). The certification lets the records in under Fed. R. Evid. 902(11) without a custodian's testimony. In a state case, domesticate the subpoena where the records are kept, Yelp, Inc. v. Hadeed Carpet Cleaning, Inc., 289 Va. 426 (2015); California's version of the Uniform Interstate Depositions and Discovery Act is Cal. Code Civ. Proc. §§ 2029.100 to 2029.900.

Template 10: Subpoena rider to an internet provider or carrier

Purpose: turn an IP address and a timestamp into a subscriber. Owner: plaintiff's counsel. When to use: as soon as the platform produces, because providers keep assignment records for limited periods.

SCHEDULE B TO SUBPOENA TO [PROVIDER]

Target connections.

IP-ref	IP address	Source port	Date and time (UTC)	Source
IP-01	[ADDRESS]	[PORT]	[DATE, TIME]	P-001, row 14
IP-02	[ADDRESS]	[PORT]	[DATE, TIME]	P-001, row 22

Request. For each target connection, the name, service address, billing address, telephone number, and email address of the subscriber to whom the address (and port, where listed) was assigned at the listed date and time.

Instructions. If an address was shared and cannot be attributed to a single subscriber with the information given, say so rather than listing possible subscribers. If records for a listed time no longer exist, say so and state the retention period. This subpoena does not seek the contents of any communication or any browsing history.

Drafting commentary. Exact UTC timestamps and source ports prevent the most common error, a wrong household; mobile carriers place many customers behind one address, and only the port separates them. A cable operator will disclose only under an order meeting 47 U.S.C. § 551(c)(2)(B) and will notify the subscriber and wait, commonly about 30 days. Wireless carriers treat call details as customer proprietary network information under 47 U.S.C. § 222 and may disclose it without the customer's approval only as required by law, so ask only for identity. Universities give advance notice under FERPA, and payment processors may respond to judicial process under 15 U.S.C. § 6802(e)(8). The answer identifies a subscriber, not a speaker: an account holder is not necessarily the person who used the connection, Cobbler Nevada, LLC v. Gonzales, 901 F.3d 1142 (9th Cir. 2018), so Template 15 comes next.

Template 11: DMCA 512(h) subpoena package

Purpose: identify an alleged infringer without filing a lawsuit. Owner: the copyright owner's counsel. When to use: when the provider stores or links to the infringing material and a compliant takedown notice has been sent.

Request to the clerk. [COPYRIGHT OWNER] requests that the Clerk issue the attached subpoena to [SERVICE PROVIDER] under 17 U.S.C. § 512(h). Attached are (A) a copy of the notification sent to [SERVICE PROVIDER] on [DATE] under § 512(c)(3)(A); (B) the proposed subpoena; and (C) a sworn declaration.

Proposed subpoena, operative paragraph. [SERVICE PROVIDER] shall expeditiously disclose to [COPYRIGHT OWNER] information sufficient to identify the alleged infringer of the material described in the attached notification, to the extent such information is available to [SERVICE PROVIDER], namely [the Subscriber Information defined in Schedule A].

Declaration. I, [NAME], declare that the purpose for which this subpoena is sought is to obtain the identity of an alleged infringer, and that such information will only be used for the purpose of protecting rights under title 17 of the United States Code. I declare under penalty of perjury that the foregoing is true and correct. Executed on [DATE].

Drafting commentary. The declaration and the operative paragraph track the words of 17 U.S.C. § 512(h)(2)(C) and (h)(3), and the clerk "shall expeditiously issue" the subpoena when the notification satisfies § 512(c)(3)(A), the subpoena is in proper form, and the declaration is properly executed, § 512(h)(4). Rule 45 governs procedure and enforcement "to the greatest extent practicable," § 512(h)(6). The route is closed for providers that only transmit traffic, Recording Industry Ass'n of America, Inc. v. Verizon Internet Services, Inc., 351 F.3d 1229 (D.C. Cir. 2003); In re Charter Communications, Inc., Subpoena Enforcement Matter, 393 F.3d 771 (8th Cir. 2005), and it can be quashed when the target raises a substantial fair use defense, In re DMCA Subpoena to Reddit, Inc., 441 F. Supp. 3d 875 (N.D. Cal. 2020). No registration is needed for the subpoena, but one is needed before an infringement suit, Fourth Estate Public Benefit Corp. v. Wall-Street.com, LLC, 586 U.S. 296 (2019). For the notice itself, see Filing a DMCA Takedown Notice: A Practical Checklist and Copyright Enforcement and DMCA Toolkit: A Roadmap and Research Guide.

Template 12: Motion to quash, motion to proceed anonymously, and anonymous declaration

Purpose: stop or narrow disclosure without giving up the name in the process. Owner: the speaker's counsel. When to use: within the notice window, before the production date.

DOE 1'S MOTION TO QUASH THE SUBPOENA TO [RECIPIENT] AND FOR LEAVE TO PROCEED ANONYMOUSLY

I. Introduction. [What the subpoena seeks; why the showing fails; the relief requested.]

II. Leave to proceed anonymously. [The interest at stake is anonymity itself; the risk of retaliation; no prejudice, because Doe 1 will litigate through counsel; an offer to disclose identity to the court in camera.]

III. Standing. [Doe 1's own First Amendment and privacy interests in the records.]

IV. The governing standard. [The most protective test that fits the speech, and why.]

V. Plaintiff has not made the required showing. A. Statement by statement: opinion, hyperbole, or true. B. No evidence of falsity, of harm, or (for a leak) that the information was confidential. C. Fair use, for quoted or copied material. D. The balance of harms.

VI. Alternative relief. [Disclosure to counsel only; use limited to the case; narrowing to specific statements; in camera review.]

VII. Fees and costs. [Rule 45(d)(1); any state fee statute.]

Anonymous declaration. I am the person who [wrote the post at URL / controls the account @HANDLE]. I submit this declaration without my name because [SPECIFIC REASONS], and I will provide my identity to the Court in camera on request. 1. [Facts that show truth or personal experience, without identifying details.] 2. [Facts showing the forum has no connection to me, if true.] 3. [Specific facts showing the harm disclosure would cause.] I declare under penalty of perjury that the foregoing is true and correct. Executed on [DATE].

Drafting commentary. File in the court for the district where compliance is required, Fed. R. Civ. P. 45(d)(3), before the production date, and send the recipient a copy the same day so it holds production, as the Digital Sin order required. Courts weighing pseudonymous plaintiffs balance the interest in anonymity against the public interest and prejudice, Sealed Plaintiff v. Sealed Defendant #1, 537 F.3d 185 (2d Cir. 2008); Doe v. Megless, 654 F.3d 404 (3d Cir. 2011); a Doe resisting a subpoena has the stronger claim, because anonymity is the subject of the motion. Sign the declaration with the pseudonym and lodge a signed, unredacted copy under seal or for in camera review under the court's sealing procedure. On the merits, use Highfields and Cahill for the standard, Milkovich v. Lorain Journal Co., 497 U.S. 1 (1990), and Krinsky for opinion and hyperbole, and SaleHoo Group, Ltd. v. ABC Co., 722 F. Supp. 2d 1210 (W.D. Wash. 2010), for a plaintiff that rested on its pleading. Do not overclaim: if a statement was factual and false, concentrate on the others and on the protective order. In California, Cal. Code Civ. Proc. § 1987.2 shifts fees in some out-of-state online-speech cases and § 425.16 supplies an anti-SLAPP motion; see Filing an Anti-SLAPP Motion: A Practical Guide. If disclosure is ordered, seek a stay at once and consider mandamus under 28 U.S.C. § 1651, as in In re Anonymous Online Speakers.

Template 13: Platform user notice and objection letter

Purpose: give the user a real chance to object, and preserve the platform's own objections. Owner: the platform's legal-process team, with counsel. When to use: on receipt of any civil subpoena seeking user identity.

13A. Notice to the user. Subject: Legal process concerning your [PLATFORM] account. We received a subpoena in [CASE NAME AND NUMBER], pending in [COURT], seeking information about your account [@HANDLE]. Copies of the subpoena and any court order are attached. Unless we receive a copy of a motion to quash or similar filing by [DATE], we intend to produce these records: [CATEGORIES]. We will not produce the contents of your messages or posts. We cannot give you legal advice, and you may wish to consult a lawyer. If you file a motion, please send a copy to [ADDRESS] so that we can hold production.

13B. Objection letter to issuing counsel. [PLATFORM] objects to the subpoena served on [DATE] as follows. (1) Contents. Federal law bars production of the contents of communications. (2) First Amendment. The subpoena seeks to identify an anonymous speaker, and [PLATFORM] will not produce identifying information until [the user's objection period has run / the court has found that the required showing has been made]. (3) Scope. [Accounts, periods, or categories beyond the order.] (4) Process. [Not domesticated in [STATE]; place of compliance more than 100 miles away; no court order for cable subscriber information.] (5) Costs. [Estimate and request for reimbursement.] Subject to these objections, [PLATFORM] will produce [CATEGORIES] for [ACCOUNT] after [DATE], absent a motion by the user.

Drafting commentary. Objections are due before the earlier of the compliance date or 14 days after service, Rule 45(d)(2)(B), and once served they shift the burden to the issuing party to move to compel. The contents objection rests on 18 U.S.C. § 2702(a), and wrongful disclosure is actionable under 18 U.S.C. § 2707. Platforms may assert their users' rights, Enterline v. Pocono Medical Center, 751 F. Supp. 2d 782 (M.D. Pa. 2008); Yelp Inc. v. Superior Court, 17 Cal. App. 5th 1 (2017), or take the middle course Twitter took in Music Group: no position on the merits, and a request that the court apply the correct standard. Whatever the choice, make it policy and apply it every time. See Responding to a Third-Party Subpoena: A Practical Guide for Businesses and Platform Liability Toolkit: Terms of Service, Notice Procedures, and Litigation Defenses.

Template 14: Protective order rider for identity information

Purpose: let identification proceed while limiting the damage if the wrong person is named or the speech proves protected. Owner: either side may propose it. When to use: in the early discovery order, in a stipulated protective order, or as the alternative relief in a motion to quash.

Identity Information. "Identity Information" means information produced under the Court's order of [DATE] that identifies, or could reasonably be used to identify, an account holder or subscriber.

• (a) Identity Information is designated Attorneys' Eyes Only until [the later of 30 days after production or the Court's ruling on any timely motion].
• (b) Identity Information may be used only to prosecute, defend, or resolve this action, including to effect service.
• (c) No party shall file Identity Information publicly without leave of Court; filings containing it shall be lodged under seal or redacted.
• (d) If the person identified is not the person who made the statements at issue, Plaintiff shall not name that person on that basis alone, shall use the information only to identify the person who did, and shall destroy it at the end of the case.
• (e) At the end of the action, Identity Information shall be returned or destroyed, except as needed to enforce a judgment.

Drafting commentary. Courts have the power to limit how discovered information is used, Fed. R. Civ. P. 26(c); Seattle Times, and an identity disclosed to counsel under a protective order before judgment is how the court handled the blogger in Signature Management Team, LLC v. Doe, 876 F.3d 831 (6th Cir. 2017), which then held that, once the plaintiff has won, a presumption in favor of unmasking applies. Paragraph (d) answers the household problem: a magistrate judge observed that the infringer "could be the subscriber, a member of his or her family, an employee, invitee, neighbor or interloper." K-Beech, Inc. v. John Does 1-37, 296 F.R.D. 80 (E.D.N.Y. 2012). For sealing practice, see Confidentiality Toolkit: Protective Orders, Designation Challenges, and Sealing Motions.

Template 15: Verification memo and motion to substitute a named defendant

Purpose: confirm that the subscriber is the speaker, then put the name in the case in time. Owner: plaintiff's counsel. When to use: when the second-tier production arrives.

Motion paragraph. Plaintiff moves under Rules 15(a)(2) and 4(m) for leave to file the attached First Amended Complaint, which substitutes [NAME] for Doe 1, and for [45] additional days to serve. Good cause exists: Plaintiff moved for early discovery the day it filed, served [PLATFORM] within [3] days of the Court's order, served [PROVIDER] within [2] days of the platform's production, and received the provider's production on [DATE]. [The amendment relates back under Rule 15(c)(1)(A) because [STATE LAW] allows it.]

Drafting commentary. The memo is the plaintiff's Fed. R. Civ. P. 11(b)(3) file: factual contentions need evidentiary support, and being the account holder is not enough. Leave to amend is freely given under Fed. R. Civ. P. 15(a)(2); relation back is the real issue. Most circuits hold that a Doe placeholder is not a "mistake" under Rule 15(c)(1)(C), Herrera; Barrow v. Wethersfield Police Department, 66 F.3d 466 (2d Cir. 1995); Wayne v. Jarvis, 197 F.3d 1098 (11th Cir. 1999), while Rule 15(c)(1)(A) imports state Doe statutes, Lindley v. General Electric Co., 780 F.2d 797 (9th Cir. 1986); Hogan v. Fischer, 738 F.3d 509 (2d Cir. 2013). Under Fed. R. Civ. P. 4(m), an extension is mandatory on good cause, and a dated record of diligence is the good cause. Dismiss Does who were never identified under Fed. R. Civ. P. 41(a); a self-represented plaintiff may ask the court for help identifying a Doe, Valentin v. Dinkins, 121 F.3d 72 (2d Cir. 1997).

Template 16: Deadline and retention tracker

Purpose: keep both clocks in view. Owner: the docketing clerk for each side. When to use: opened on day one and updated at every step.

Drafting commentary. Two clocks start on the day of the post, data retention and limitations, and neither stops while a subpoena is litigated. The Rule 4(m) period runs from filing, not from identification, so move to extend before it expires. Copy the earliest limitations date into every status report; it is the date the case is built around. See Statute of Limitations Diary Checklist: A Practical Checklist.

Frequently asked questions

Can these templates be used in state court? Yes, with changes. Replace Rule 26(d)(1) with the state's authority for early discovery or a pre-suit petition (Texas Rule 202, New York CPLR 3102(c), or Illinois Supreme Court Rule 224), apply the state's unmasking test, and domesticate any subpoena to an out-of-state platform.

Does the speaker need a lawyer to use Template 12? A self-represented speaker can file, and courts often allow it anonymously, but the notice window is short and the standards are technical. Counsel, including public interest organizations and law school clinics, makes a real difference.

Practical takeaways

• Write the motion to the most demanding test, with evidence on every element you can reach.
• Let the order carry the protections: notice, a waiting period, preservation, use limits, and the Cable Act recital only for cable operators.
• Ask for non-content records only, with exact UTC timestamps and ports for shared addresses.
• For speakers, file in the compliance court, keep the name out of the papers, and ask for a protective order in the alternative.
• For platforms, notify, object in time, and produce only after the waiting period.
• Corroborate before you name anyone, and track both clocks from the first day.

This document is general information, not legal advice for any particular situation; the law changes, and the facts matter.

Related Documents

Related Articles

• Unmasking Anonymous Online Speakers: John Doe Subpoenas, the Dendrite and Cahill Tests, and the First Amendment: the tests these templates are written to satisfy.
• Rule 45 Subpoenas to Nonparties: Service, Objections, and Motions to Quash: service, compliance courts, and quash practice in general.
• Section 230 and Platform Liability: What the Statute Actually Says and Where It Stops: why the platform receives a subpoena instead of a complaint.
• Defamation, Business Disparagement, and Online Reviews: the elements behind the falsity and harm declarations.

Related Guides

• Identifying an Anonymous Defendant Online: A Practical Guide: when each template is used, step by step.
• Filing an Anti-SLAPP Motion: A Practical Guide: the speaker's companion motion where a statute applies.
• Responding to a Third-Party Subpoena: A Practical Guide for Businesses: the recipient's obligations and options.
• Enforcing Trademarks Against Online Sellers and Platforms: A Practical Guide: identification when the anonymous actor is a marketplace seller.

Related Checklists

• Anonymous Speaker Unmasking Checklist: A Practical Checklist: the tasks behind these templates, in order, for all three sides.
• Authenticating Website Evidence: A Practical Checklist: the foundation for Template 2.
• Protective Order and Sealing Checklist: A Practical Checklist: the companion to Template 14.
• Rule 45 Subpoena Response Checklist: A Practical Checklist: the recipient's deadlines behind Template 13.

Related Toolkits

• Nonparty Discovery Toolkit: Subpoenas, Third-Party Records, and Privilege: general subpoena forms for nonparty records.
• Publicity and Free Speech Toolkit: Transformative Use Memos, Newsworthiness Analyses, and Anti-SLAPP Motions: speech-defense motion papers.
• Advanced Domain Dispute Toolkit: URS Complaints, In Rem Pleadings, and Reverse Hijacking Defenses: in rem pleadings when an anonymous registrant cannot be found.
• Cross-Border Discovery Toolkit: 1782 Applications, Hague Requests, and Blocking Statute Analyses: identification discovery for foreign proceedings.