NSA Section 702 Reauthorization: Warrantless Surveillance Extended and Expanded

Congress reauthorized and expanded Section 702 of the Foreign Intelligence Surveillance Act, which allows the NSA to conduct warrantless surveillance of non-US persons abroad but incidentally collects vast amounts of American communications in the process. The reauthorization included an expansion of the definition of "electronic communications service provider," which civil liberties organizations warned could compel virtually any business with access to communications equipment to assist in surveillance. The FBI was revealed to have conducted over 278,000 warrantless queries of the Section 702 database searching for Americans' communications in a single year, many of which were later found to be improper. Despite bipartisan concerns about the scope of incidental collection of American communications, the program was renewed without a warrant requirement for US person queries. Privacy advocates and some members of Congress argued the expansion represented the most significant increase in surveillance authority since the original PATRIOT Act.

The ramifications of this incident extend beyond the immediate data exposure. Privacy regulators in multiple jurisdictions have opened investigations, and affected individuals are organizing collective action to demand accountability and meaningful remediation. The case highlights systemic weaknesses in how organizations handle personal data and the gap between corporate privacy promises and operational reality.

For impacted individuals, immediate action is critical. Filing a data subject access request forces the company to disclose exactly what data they hold about you, providing the foundation for deletion requests, regulatory complaints, and potential legal action. Below, we outline the specific data types at risk and the concrete steps you can take to protect yourself.