FISA Explained: How It Impacts Privacy and National Security

FISA's Origins in the 1970s Responded to Executive Overreach

The Foreign Intelligence Surveillance Act, signed into law in 1978, was a direct response to decades of unchecked executive surveillance. The Church Committee hearings of 1975 exposed that intelligence agencies had spied on civil rights leaders, anti-war activists, and journalists without judicial oversight. Congress established FISA to create a legal framework for foreign intelligence gathering, requiring a warrant from a secret court — the Foreign Intelligence Surveillance Court (FISC).

The act initially targeted only foreign powers and their agents, but its scope expanded significantly after the September 11 attacks. The USA PATRIOT Act of 2001 lowered the bar for surveillance and allowed information sharing between intelligence and law enforcement. Subsequent amendments broadened FISA’s reach, enabling collection of Americans’ communications incidentally.

“The Church Committee concluded that warrantless surveillance had become ‘a pervasive and often unnecessary intrusion into the lives of Americans.’ FISA was supposed to fix that — yet today, millions of Americans are caught in the net every year.”

The tension between security and privacy was built into FISA from the start. The law created a special court that meets in secret, issues few denials, and operates with minimal public transparency. By 2026, FISC has approved over 50,000 applications with only a handful of modifications, raising questions about whether it is a meaningful check on executive power.

Section 702: The Controversial Backbone of Modern Surveillance

Enacted in 2008, Section 702 of the FISA Amendments Act allows the government to collect communications of non-U.S. persons located abroad without a warrant — but the program inevitably vacuums up Americans' data. The National Security Agency targets foreign nationals, but when they correspond with Americans, those conversations are collected and stored for years.

The provision has been reauthorized three times, most recently in 2024, despite fierce debate. Proponents argue it is essential for counterterrorism; the Office of the Director of National Intelligence claims Section 702 produced 59% of all intelligence reports in a recent year. Critics counter that the program functions as a backdoor search tool — the FBI can query the database for Americans' communications without probable cause.

• In 2022, the FBI conducted over 200,000 warrantless queries of Section 702 data for U.S. persons.
• The Prism program, revealed by Edward Snowden in 2013, operates under Section 702 and compels tech companies to hand over user data.
• Amendments like the USA FREEDOM Act (2015) ended bulk phone metadata collection but did not address Section 702's core authorities.
• In 2025, a federal appeals court ruled that warrantless backdoor searches likely violate the Fourth Amendment, but the case remains pending.

Tech companies are caught in the middle. Microsoft, Google, and Apple have challenged overly broad requests in FISC but are bound by gag orders that prevent them from fully informing users. Digital archives of historical surveillance programs show that the scope of collection has only grown wider over successive administrations.

Tech Companies and FISA: A Clash Between Privacy and Compliance

Every major U.S. tech firm receives FISA requests — often secret directives to hand over customer data. Compliance is legally mandatory, but the reputational cost is high. In 2024, Apple refused to comply with a Section 702 directive, arguing it would force them to weaken end-to-end encryption. The case is now before the FISA Court of Review.

The rise of encryption has intensified the conflict. Intelligence agencies argue they need exceptional access to prevent terror plots; privacy advocates counter that any backdoor is a systemic vulnerability. The debate over government access to data mirrors larger questions about the balance between security and civil liberties.

Congress has considered reforms like requiring a warrant for backdoor searches and increasing transparency around FISC opinions. The USA FREEDOM Reauthorization Act of 2026 proposes to end warrantless queries of Americans' data — but its prospects remain uncertain. Tech companies are lobbying for mandatory reporting of how many users are affected by FISA orders, currently classified.

• In 2025, major tech firms published a joint report showing they received over 150,000 FISA-related requests, but were prohibited from revealing exact numbers per request.
• The Lavabit case (2013) set a precedent: the founder resisted a FISA order for encryption keys and was held in contempt, ultimately shutting down the service.
• Some companies now publish transparency reports that detail FISA requests in ranges, but critics say these are too vague to be useful.

The next reauthorization battle is expected in 2027. If Section 702 lapses, the government would lose a primary tool for monitoring foreign threats. But every extension has come with modest reforms — and privacy advocates argue that the only way to protect Americans is to end warrantless collection entirely.

Key Takeaways

• FISA remains a vital tool for national security but faces ongoing criticism for overreach and lack of transparency.
• The balance between privacy and security is fragile, with Section 702 set to expire in 2027 unless reauthorized.
• Digital privacy is increasingly at risk due to incidental collection and data sharing with intelligence agencies.
• Tech companies continue to push for more transparency and stricter limits on surveillance.
• Public awareness of FISA's scope is low, even as it affects millions of Americans indirectly.
• Future reforms may focus on ending warrantless backdoor searches of Americans' data collected under FISA.