USA PATRIOT Act The Act was amended in 2001 by the
USA PATRIOT Act, primarily to include terrorism on behalf of groups that are not specifically backed by a foreign government.
Lone wolf amendment In 2004, FISA was amended to include a "lone wolf" provision. . A "lone wolf" is a non-U.S. person who engages in or prepares for international terrorism. The provision amended the definition of "foreign power" to permit the FISA courts to issue surveillance and physical search orders without having to find a connection between the "lone wolf" and a foreign government or terrorist group. However, "if the court authorizes such a surveillance or physical search using this new definition of 'agent of a foreign power', the FISC judge has to find, in pertinent part, that, based upon the information provided by the applicant for the order, the target had engaged in or was engaging in international terrorism or activities in preparation therefor".
Terrorist Surveillance Act of 2006 On March 16, 2006, Senators
Mike DeWine (R-OH),
Lindsey Graham (R-SC),
Chuck Hagel (R-NE), and
Olympia Snowe (R-ME) introduced the Terrorist Surveillance Act of 2006 (S.2455), under which the President would be given certain additional limited statutory authority to conduct electronic surveillance of suspected terrorists in the United States subject to enhanced Congressional oversight. Also on March 16, 2006, Senator
Arlen Specter (R-PA) introduced the
National Security Surveillance Act of 2006 (), which would amend FISA to grant retroactive amnesty for warrantless surveillance conducted under presidential authority and provide FISA court (FISC) jurisdiction to review, authorize, and oversight "electronic surveillance programs". On May 24, 2006, Senator Specter and Senator
Dianne Feinstein (D-CA) introduced the
Foreign Intelligence Surveillance Improvement and Enhancement Act of 2006 () asserting FISA as the exclusive means to conduct foreign intelligence surveillance. All three competing bills were the subject of Judiciary Committee hearings throughout the summer. On September 13, 2006, the Senate Judiciary Committee voted to approve all three mutually exclusive bills, thus, leaving it to the full Senate to resolve. On July 18, 2006, U.S. Representative
Heather Wilson (R-NM) introduced the
Electronic Surveillance Modernization Act (). Wilson's bill would give the President the authority to authorize electronic surveillance of international phone calls and e-mail linked specifically to identified terrorist groups immediately following or in anticipation of an armed or terrorist attack on the United States. Surveillance beyond the initial authorized period would require a FISA warrant or a presidential certification to Congress. On September 28, 2006, the House of Representatives passed Wilson's bill and it was referred to the Senate.
Protect America Act of 2007 On July 28, 2007, President Bush called on Congress to pass legislation to reform the FISA in order to ease restrictions on surveillance of terrorist suspects where one party (or both parties) to the communication are located overseas. He asked that Congress pass the legislation before its August 2007 recess. On August 3, 2007, the Senate passed a Republican-sponsored version of FISA (S. 1927) in a vote of 60 to 28. The House followed by passing the bill, 227–183. The
Protect America Act of 2007 (, ) was then signed into law by
George W. Bush on August 5, 2007. Under the Protect America Act of 2007, communications that begin or end in a foreign country may be wiretapped by the U.S. government without supervision by the FISA Court. The Act removes from the definition of "electronic surveillance" in FISA any surveillance directed at a person reasonably believed to be located outside the United States. As such, surveillance of these communications no longer requires a government application to, and order issuing from, the FISA Court. The Act provides procedures for the government to "certify" the legality of an acquisition program, for the government to issue directives to providers to provide data or assistance under a particular program, and for the government and recipient of a directive to seek from the FISA Court, respectively, an order to compel provider compliance or relief from an unlawful directive. Providers receive costs and full immunity from civil suits for compliance with any directives issued pursuant to the Act. A summary of key provisions follows. The Act empowers the Attorney General or Director of National Intelligence ("DNI") to authorize, for up to one year, the acquisition of communications concerning "persons reasonably believed to be outside the United States" if the Attorney General and DNI determine that each of five criteria has been met: • There are reasonable procedures in place for determining that the acquisition concerns persons reasonably believed to be located outside the United States; • The acquisition does not constitute electronic surveillance (meaning it does not involve solely domestic communications); • The acquisition involves obtaining the communications data from or with the assistance of a communications service provider who has access to communications; • A significant purpose of the acquisition is to obtain foreign intelligence information; and • Minimization procedures outlined in the FISA will be used. This determination by the Attorney General and DNI must be certified in writing, under oath, and supported by appropriate affidavit(s). If immediate action by the government is required and time does not permit the preparation of a certification, the Attorney General or DNI can direct the acquisition orally, with a certification to follow within 72 hours. The certification is then filed with the FISA Court. Once the certification is filed with the FISA Court, the Attorney General or DNI can direct a provider to undertake or assist in the undertaking of the acquisition. If a provider fails to comply with a directive issued by the Attorney General or DNI, the Attorney General may seek an order from the FISA Court compelling compliance with the directive. Failure to obey an order of the FISA Court may be punished as a contempt of court. Likewise, a person receiving a directive may challenge the legality of that directive by filing a petition with the FISA Court. An initial review must be conducted within 48 hours of the filing to determine whether the petition is frivolous, and a final determination concerning any non-frivolous petitions must be made – in writing – within 72 hours of receipt of the petition. Determinations of the FISA Court may be appealed to the Foreign Intelligence Court of Appeals, and a petition for a
writ of certiorari of a decision from the FICA can be made to the U.S. Supreme Court. All petitions must be filed under seal. The Act allows providers to be compensated, at the prevailing rate, for providing assistance as directed by the Attorney General or DNI. The Act provides explicit immunity from civil suit in any federal or state court for providing any information, facilities, or assistance in accordance with a directive under the Act. Within 120 days, the Attorney General must submit to the FISA Court for its approval the procedures by which the government will determine that acquisitions authorized by the Act conform with the Act and do not involve purely domestic communications. The FISA Court then will determine whether the procedures comply with the Act. The FISA Court thereafter will enter an order either approving the procedures or directing the government to submit new procedures within 30 days or cease any acquisitions under the government procedures. The government may appeal a ruling of the FISA Court to the FICA and ultimately the Supreme Court. On a semiannual basis, the Attorney General shall inform the Intelligence and Judiciary Committees of the House and Senate of incidents of noncompliance with a directive issued by the Attorney General or the DNI, incidents of noncompliance with FISA Court-approved procedures by the Intelligence Community, and the number of certifications and directives issued during the reporting period. The amendments to FISA made by the Act expire 180 days after enactment, except that any order in effect on the date of enactment remains in effect until the date of expiration of such order and such orders can be reauthorized by the FISA Court. The Act expired on February 17, 2008.
Subsequent developments Legal experts experienced in national security issues are divided on how broadly the new law could be interpreted or applied. Some believe that due to subtle changes in the definitions of terms such as "electronic surveillance", it could empower the government to conduct warrantless physical searches and even seizures of communications and computer devices and their data which belong to U.S. citizens while they are in the United States, if the government contended that those searches and potential seizures were related to its surveillance of parties outside the United States. Intelligence officials, while declining to comment directly on such possibilities, respond that such interpretations are overly broad readings of the act, and unlikely to actually occur. In a September 10, 2007 address at a symposium on modernizing FISA held at
Georgetown University Law Center's National Security Center,
Kenneth L. Wainstein,
Assistant Attorney General for National Security, argued against the current six-month
sunset provision in the Protect America Act of 2007, saying that the broadened surveillance powers the act provides for should be made permanent. Wainstein proposed that internal audits by the Office of the
Director of National Intelligence and the
National Security Division of the Justice Department, with reporting to select groups of Congressmen, would ensure that the expanded capability would not be abused. Also on September 10, DNI
Mike McConnell testified before the
Senate Committee on Homeland Security and Governmental Affairs. He mistakenly claimed that the Protect America Act had helped foil a major terror plot in Germany. Speaking at
National Security Agency headquarters in Fort Meade, Maryland on September 19, 2007, President
George W. Bush urged Congress to make the provisions of the Protect America Act permanent. Bush also called for retroactive immunity for telecommunications companies who had cooperated with government surveillance efforts, saying, "It's particularly important for Congress to provide meaningful liability protection to those companies now facing multibillion-dollar lawsuits only because they are believed to have assisted in efforts to defend our nation, following the 9/11 attacks". On October 4, 2007, the bipartisan Liberty and Security Committee of the
Constitution Project, co-chaired by
David Keene and
David D. Cole, issued its "Statement on the Protect America Act". The Statement urged Congress not to reauthorize the PAA, saying the language of the bill "runs contrary to the tripartite balance of power the Framers envisioned for our constitutional democracy, and poses a serious threat to the very notion of government of the people, by the people and for the people". Some in the legal community have questioned the constitutionality of any legislation that would retroactively immunize telecommunications firms alleged to have cooperated with the government from civil liability for having potentially violated their customers' privacy rights. In an article appearing in the January/February 2008 issue of the
Institute of Electrical and Electronics Engineers journal of Security and Privacy, noted technology experts from academia and the computing industry found significant flaws in the technical implementation of the Protect America Act which they said created serious security risks, including the danger that such a surveillance system could be exploited by unauthorized users, criminally misused by trusted insiders, or abused by the government. On October 7, 2007,
The Washington Post reported that House Democrats planned to introduce alternative legislation which would provide for one-year "umbrella" warrants, and would require the
Justice Department Inspector General to audit the use of those warrants and issue quarterly reports to a special FISA court and to Congress. The proposed bill would not include immunity for telecommunications firms facing lawsuits in connection with the administration's
NSA warrantless surveillance program. House Democrats said that as long as the administration withholds requested documents explaining the basis for the program that they cannot consider immunity for firms alleged to have facilitated it. On October 10, 2007, comments on the White House South Lawn, President Bush said he would not sign any bill that did not provide retroactive immunity for telecommunications corporations. On October 18, 2007, the House Democratic leadership put off a vote on the proposed legislation by the full chamber to avoid consideration of a Republican measure that made specific references to
Osama bin Laden. At the same time, the
Senate Intelligence Committee reportedly reached a compromise with the White House on a different proposal that would give telephone carriers legal immunity for any role they played in the National Security Agency's domestic eavesdropping program approved by President Bush after the Sept. 11 terrorist attacks. On November 15, 2007, the
Senate Judiciary Committee voted 10–9 along party lines to send an alternative measure to the full Senate other than the one the intelligence committee had crafted with the White House. On the same day, the House of Representatives voted 227–189 to approve a Democratic bill that would expand court oversight of government surveillance inside the United States while denying immunity to telecom companies. In February 2008, the Senate passed the version of the
new FISA that would allow telecom companies immunity. On March 13, 2008, the U.S. House of Representatives held a secret session to discuss related information. On March 14, the House voted 213–197 to approve a bill that would
not grant telecom immunity – far short of the 2/3 majority required to override a Presidential veto. The Senate and House bills are compared and contrasted in a June 12, 2008 report from the
Congressional Research Service. On March 13, 2008, the House of Representatives held a secret, closed door meeting to debate changes to the FISA bill.
FISA Amendments Act of 2008 The
FISA Amendments Act of 2008 passed by the
United States Congress on July 9, 2008. The amendments added a new Title VII to the Act, which was slated to expire at the end of 2012 pending reauthorization; Congress subsequently extended the provision to December 31, 2017. The 2008 amendments gave telecoms immunity, increased the time allotted for warrantless surveillance, and adds provisions for emergency eavesdropping. On June 20, 2008, the House of Representatives passed the amendment with a vote of 293 to 129. It passed in the Senate 69 to 28 on July 9, 2008 after a failed attempt to strike Title II from the bill by Senator Dodd. On July 10, 2008, President Bush signed it into law.
2015 USA Freedom Act First proposed in response to the disclosures of NSA contractor
Edward Snowden, which revealed mass surveillance undertaken by the agency, the
USA Freedom Act was intended by its sponsors to provide a "balanced approach" to intelligence gathering. The law restored and modified several provisions of the
Patriot Act, overhauled the NSA, and required the U.S. government to undergo standard court procedures in order to gather data regarding suspicious activities.
FISA Amendments Reauthorization Act of 2017 After months of congressional hearings and some public controversy, following a short-term extension of three weeks, Congress passed a six-year extension of the FISA Amendments Act of 2008, which was signed into law in January 2018. Beginning in late 2016, the government initiate efforts to persuade Congress to extend the surveillance authority in Title VII of the Act, which, pursuant to the 2008 and 2012 amendments, was slated to expire on December 31, 2017.
Tom Cotton, a Republican Senator from Arkansas, introduced a bill to permanently extend the provisions of Title VII with no changes, but the bill did not advance, as many in Congress were seeking reforms to address privacy concerns. The
U.S. House Committee on the Judiciary introduced an extension bill with significant proposed reforms, as did the
U.S. House Permanent Select Committee on Intelligence, but ultimately a version of the extension with less significant reforms was advanced by
U.S. Senate Select Committee on Intelligence, and in effect that version, through a complex series of amendments was ultimately enacted into law. The Senate agreed to a House amendment on January 18, 2018, and the
President signed the legislation, S. 139, the FISA Amendments Reauthorization Act of 2017 (Public Law 115–118), into law on January 19, 2018. Many privacy and civil liberties advocates argued that the reforms enacted by the extension bill were inadequate, but their arguments were successfully opposed by the government. The January 2018 law also made unauthorized removal and retention of
classified information of the United States government a
felony crime punishable by five years imprisonment and/or a fine.
2023 short-term reauthorization Pursuant to the most recent reauthorization in 2017, Section 702 of FISA was set to expire by the end of 2023. At the beginning of 2023, several
Biden administration officials began urging Congress to renew the provision, including National Security Advisor
Jake Sullivan, Attorney General
Merrick Garland, Director of National Intelligence,
Avril Haines, and NSA Director
Paul M. Nakasone. Federal authorities and other advocates have argued that Section 702 is critical to national security, whereas critics have reaffirmed ongoing concerns about privacy and civil liberties. Several lawmakers, particularly among House Republicans, have called for any reauthorization to be contingent on several reforms, including limiting the scope of who can be investigated, requiring a warrant for surveillance in all instances, and restricting the amount of time collected data can be stored. On December 14, 2023, Congress passed the
National Defense Authorization Act, which included a short-term extension of Section 702 until April 19, 2024.
Reforming Intelligence and Securing America Act of 2024 On April 10, 2024,
Donald Trump urged Congress to "kill FISA" based on claims of FBI surveillance during his
2016 presidential campaign, leading libertarian Republicans to join progressive Democrats in opposing Section 702's reauthorization on privacy-related grounds. To secure its passage,
House Speaker Mike Johnson reduced the reauthorization to two years, rather than the typical five-year term, to allow Trump to veto a hypothetical 2026 reauthorization should he win the
2024 presidential election, which he did. After Congress rejected various privacy-related amendments to minimize the gap in Section 702 authorization, the Senate approved the bill by a 60–34 vote with bipartisan support, and President
Joe Biden signed the two-year reauthorization on April 20, 2024.
2026 proposed reforms As the end of the 2024 re-authorization came near, President Trump urged Congress to pass an 18-month extension for FISA without reforms. However, Republican privacy hawks and members of the House Freedom Caucus opposed this extension. On April 16, 2026, House Republicans announced an agreement for a five year extension of FISA with reforms. The agreement includes language that says the government may need a warrant to access information on Americans suspected to be acting on behalf of a foreign government, adds new criminal penalties for violating the law when officials use FISA to conduct searches, and expands the number of congressman who can review information on FISA. However, 12 House Republicans, including privacy hawks who did not feel the agreement went far enough and House Intelligence Committee members who felt the reforms went too far, voted against the agreement. Thus the agreement failed to pass the House in a 200–220 vote. Afterwards, the House attempted a procedural vote to move forward a 18-month authorization without reforms. The procedural vote would also fail, with 20 Republicans, all privacy hawks, voting against it. Finally, with voting now in the early hours of the morning on April 17, the House passed a 10 day FISA authorization without reforms through
unanimous consent. On April 23, 2026, Republicans released a second agreement for a three year FISA extension with reforms. The proposed reforms include requring searches of Americans through FISA to be reviewed by the civil liberties protection officer at the Office of the Director of National Intelligence every month and requiring FBI agents to get attorney approval, instead of a supervisor, before running a search on Americans. ==See also==