What is Section 702 (FISA)?
A provision of the Foreign Intelligence Surveillance Act that allows the NSA to collect communications of non-US persons abroad — but in practice sweeps up vast amounts of Americans' data through 'incidental collection.'
Also known as: FISA Section 702, FISA Amendments Act, 702 Surveillance
Section 702 is the legal authority behind some of the most sweeping surveillance programs ever disclosed — including PRISM and Upstream collection revealed by Edward Snowden.
What It Authorizes
- Target: Non-US persons located outside the US
- Method: Compel US tech companies (Google, Apple, Meta, Microsoft) to provide communications data
- Scope: Email content, chat messages, photos, videos, stored files, VoIP calls
The "Incidental Collection" Problem
The law targets foreigners, but Americans are constantly swept up:
- If you email anyone abroad, that email can be collected
- If a foreign target mentions you in an email, your communication is collected
- The NSA estimates hundreds of millions of communications involving Americans are collected annually
- Once collected, FBI can search this data for Americans' communications without a warrant (the "backdoor search" loophole)
Key Programs Under 702
- PRISM: Direct access to data from Google, Microsoft, Apple, Facebook, Yahoo, and others
- Upstream: Collection of internet traffic directly from fiber optic backbone cables
- Combined: These programs provide access to a massive portion of global internet traffic
Timeline
- 2008: FISA Amendments Act creates Section 702
- 2013: Snowden disclosures reveal PRISM and Upstream
- 2018: Reauthorized with minimal reforms
- 2024: Reauthorized again, with expanded definition of "electronic communications service provider" (potentially including hotels, libraries, data centers)
Why It Matters
- Your communications with anyone outside the US can be collected without a warrant targeting you
- FBI can query this data for US persons without going to a judge
- The expanded 2024 reauthorization may compel more businesses to assist with surveillance
- No meaningful transparency — annual reports redact key statistics
What You Can Do
- Use end-to-end encrypted communications — Even if collected, content is unreadable without the encryption keys
- Use Signal for messaging — E2EE prevents content access even under PRISM
- Use ProtonMail for email — Swiss jurisdiction, end-to-end encrypted
- Use a VPN — Complicates Upstream collection from fiber backbone taps
- Support reform organizations — EFF, ACLU, and others challenge Section 702 in courts
- Contact your representatives — Section 702 requires periodic reauthorization; public pressure matters
Related Terms
Five Eyes Alliance
An intelligence-sharing alliance between the US, UK, Canada, Australia, and New Zealand that cooperates on signals intelligence and mass surveillance.
Fourth Amendment
The US Constitutional amendment protecting against unreasonable searches and seizures, which forms the legal basis for many digital privacy rights.
Harvest Now, Decrypt Later
A surveillance strategy where intelligence agencies intercept and store encrypted communications today, planning to decrypt them in the future when quantum computers become powerful enough to break the encryption.
Mass Surveillance
The systematic monitoring of entire populations' communications, movements, and activities by governments, enabled by modern technology and justified as necessary for national security.
XKEYSCORE
An NSA surveillance system that enables analysts to search and analyze global internet data including emails, browsing activity, and social media content in near real-time.
Have more questions?
Use our guided flow to get the right next privacy step for Section 702 (FISA).
Open Guided Flow