How FISA Section 702 Works—and Why It Divides Congress

What Section 702 Actually Authorizes

Section 702 of the Foreign Intelligence Surveillance Act allows U.S. intelligence agencies—chiefly the NSA—to intercept the electronic communications of non-U.S. persons reasonably believed to be located outside the United States. Congress enacted it in 2008 as part of the FISA Amendments Act, replacing an earlier, more legally tenuous surveillance framework exposed during the War on Terror.

The key distinction: the government does not need an individualized court order for each target. Instead, the Foreign Intelligence Surveillance Court (FISC) approves broad annual procedures governing how surveillance is conducted, and agencies then select specific foreign targets under those procedures. Each year, roughly 350,000 foreign targets have their communications collected under Section 702 authority.

How 'Incidental Collection' Pulls in Americans

Although Section 702 explicitly prohibits targeting U.S. persons or anyone on American soil, it inevitably captures Americans' communications. When a foreign target emails, texts, or calls someone in the United States, both sides of the conversation are collected. This is known as incidental collection, and it forms the heart of the program's controversy.

Once that data sits in government databases, analysts at the FBI, CIA, NSA, and National Counterterrorism Center can search it using American names, phone numbers, or email addresses—so-called "backdoor searches." Critics argue this creates an end-run around the Fourth Amendment's warrant requirement. Supporters counter that the data was lawfully collected and searching it is simply good intelligence practice.

The Scale of Backdoor Searches

The numbers have been staggering. In 2021, the FBI conducted up to 3.4 million U.S. person queries of systems containing Section 702 data, according to figures the bureau disclosed under congressional pressure. After the FBI changed how it counts queries—grouping multiple searches on the same person as one—the reported number dropped to about 200,000 in 2022 and 57,094 in 2023, according to the Brennan Center for Justice.

Even the lower figures alarmed oversight bodies. The FISC itself found "widespread violations" of querying rules. Documented misuses include warrantless searches targeting Black Lives Matter protesters, journalists, political commentators, and 19,000 donors to a single congressional campaign, as reported by the ACLU.

The Reauthorization Cycle

Section 702 is not permanent law. Congress must periodically reauthorize it, creating regular political flashpoints. The last reauthorization came in April 2024 through the Reforming Intelligence and Securing America Act (RISAA), which set a sunset date requiring renewal by April 2026.

Each reauthorization triggers the same core debate: should agencies need a warrant before querying Americans' data? Privacy advocates in both parties say yes—arguing the Constitution demands it. Intelligence officials and successive administrations say a warrant requirement would slow investigations and endanger national security.

Why Both Sides Claim the Constitution

Defenders point to Section 702's role in disrupting terrorist plots, cyberattacks, and foreign espionage. The Office of the Director of National Intelligence calls it "a substantial and important targeted intelligence collection program" with layered oversight from the FISC, Congress, and internal compliance teams.

Opponents, including organizations like the Electronic Privacy Information Center and the Electronic Frontier Foundation, argue that programmatic approval is no substitute for individualized judicial review. They note that the FISC operates in secret, rarely denies government requests, and cannot meaningfully supervise how hundreds of thousands of queries are conducted in practice.

What Reform Proposals Look Like

Bipartisan reform bills have repeatedly proposed requiring a warrant or FISA Title I order before accessing Americans' communications, with exceptions for emergencies, cyberattacks, and situations where the person consents. Other proposals call for criminal penalties for willful abuse, mandatory reporting of query statistics, and independent audits of compliance.

So far, no warrant requirement has survived the legislative process. The program's supporters have consistently argued that even narrow warrant mandates would create operational bottlenecks—a claim critics dispute, noting that emergency exceptions would cover time-sensitive cases.

Section 702 sits at the intersection of national security and civil liberties—two values Americans broadly support but that collide when the government's most powerful surveillance tool sweeps ordinary citizens into its net.