HR 7901
Government Surveillance Reform Act of 2026
Take action
Record your position on this measure.
Sign in to record your position, submit testimony, or contact your legislator.
Sign in to take action- Introduced
- Passed House
- Passed Senate
- To President
- Became Law
Bill overview
The Government Surveillance Reform Act of 2026 aims to reform how the government collects and uses intelligence information. It primarily focuses on strengthening protections for United States persons whose communications are collected under Section 702 of the Foreign Intelligence Surveillance Act (FISA), limiting the use of that information in criminal and civil cases, and prohibiting reverse targeting. The bill also addresses Fourth Amendment concerns by restricting the purchase of personal data by law enforcement and establishing new privacy protections for data held by data brokers and electronic communication service providers. Finally, it includes provisions for increased oversight and transparency regarding surveillance activities.
Key provisions
- Limits warrantless queries of communications of US persons and persons located in the US under Section 702 of FISA.
- Prohibits the use of information obtained under Section 702 in criminal, civil, and administrative actions relating to US persons and persons located in the US.
- Bans reverse targeting of US persons and persons located in the US under Section 702.
- Establishes data retention limits for information collected under Section 702.
- Requires the Foreign Intelligence Surveillance Court to supervise demands for technical assistance from electronic communication service providers.
- Prohibits warrantless acquisition of domestic communications pursuant to Section 702.
- Requires a primary foreign intelligence purpose for queries conducted under Section 702.
- Prohibits Federal law enforcement agencies from purchasing personal data from data brokers.
Who is affected
Sponsors
Official sponsors from legislative records.
Primary sponsor
Cosponsors
Arguments in favor
Reasons to support this legislation.
No arguments in favor have been submitted.
Submit yoursArguments opposed
Reasons to oppose this legislation.
No arguments opposed have been submitted.
Submit yoursRead the latest version inline or switch to a previous version.
119th CONGRESS — 2d Session
H. R. 7901
IN THE HOUSE OF REPRESENTATIVES
A BILL
To implement reforms relating to foreign intelligence surveillance authorities, and for other purposes.
.Government Surveillance Reform Act of 2026
The table of contents for this Act is as follows:
The term appropriate committees of Congress means—
the congressional intelligence committees (as defined in section 3 of the National Security Act of 1947 (50 U.S.C. 3003));
the ; and
the .
Section 701(b) of such title (50 U.S.C. 1881) is amended by adding at the end the following new paragraph:
The term covered person means, with respect to a query, a communication, an acquisition, or creation of information, a person who is—
a person known or believed to be located in the United States—
in section 102(a)(3) (50 U.S.C. 1802(a)(3)), by striking the court established under section 103(a)
and inserting the Foreign Intelligence Surveillance Court
;
in section 103 (50 U.S.C. 1803)—
The court established under this subsectionand inserting
The Foreign Intelligence Surveillance Court; and
by striking the court established under this subsection
each place it appears and inserting the Foreign Intelligence Surveillance Court
;
in subsection (g)—
the court established pursuant to subsection (a)and inserting
the Foreign Intelligence Surveillance Court; and
the court of review established pursuant to subsection (b)and inserting
the Foreign Intelligence Surveillance Court of Review; and
in paragraph (1), by striking The courts established pursuant to subsections (a) and (b)
and inserting The Foreign Intelligence Surveillance Court and the Foreign Intelligence Surveillance Court of Review
;
in subsection (h), by striking a court established under this section
and inserting the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review
;
the courts established under subsections (a) and (b)and inserting
the Foreign Intelligence Surveillance Court and the Foreign Intelligence Surveillance Court of Review;
the courtsand inserting
the Foreign Intelligence Surveillance Court and the Foreign Intelligence Surveillance Court of Review;
the courtand inserting
the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review, as the case may be,;
the courteach place it appears and inserting
the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review;
by striking a court established under subsection (a) or (b)
each place it appears and inserting the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review
; and
A court established under subsection (a) or (b)each place it appears and inserting
The Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review;
by striking a court established under subsection (a)
and inserting the Foreign Intelligence Surveillance Court
; and
by striking the court determines
and inserting the Foreign Intelligence Surveillance Court determines
;
the court established under subsection (a)each place it appears and inserting
the Foreign Intelligence Surveillance Court; and
by striking the court established under subsection (b)
each place it appears and inserting the Foreign Intelligence Surveillance Court of Review
;
the courteach place it appears and inserting
the Foreign Intelligence Surveillance Court;
in section 401(1) (50 U.S.C. 1841(1)), by striking , and
and inserting State
;State
, Foreign Intelligence Surveillance Court
, and Foreign Intelligence Surveillance Court of Review
in subsection (b)(1), by striking the court established by section 103(a) of this Act
and inserting the Foreign Intelligence Surveillance Court
; and
the court established under section 103(a)and inserting
the Foreign Intelligence Surveillance Court;
in section 502(b)(1)(A), by striking the court established by section 103(a) of this Act
and inserting the Foreign Intelligence Surveillance Court (as defined by section 101)
;
in section 801 (50 U.S.C. 1885)—
the court established under section 103(a)and inserting
the Foreign Intelligence Surveillance Court; and
by adding at the end the following new paragraph:
the court established under section 103(a)and inserting
the Foreign Intelligence Surveillance Court.
In this Act—
the term covered person has the meaning given such term in section 701 of such Act (50 U.S.C. 1881), as amended by subsection (a)(2).
in paragraph (1)(A), by inserting and the limitations and requirements in this subsection
after Constitution of the United States
;
meansand all that follows through the period and inserting the following:
means the use of 1 or more terms, whether conducted through manual or automated means, to retrieve any information acquired under this section, including retrieval from a subset of such information, whether that subset was created by retrieval through a query or other means.;
by inserting after subparagraph (A) the following:
The term covered information means—
communications content; and
information, the compelled disclosure of which would require a probable cause warrant if sought for law enforcement purposes inside the United States.
The term covered query means a query that is conducted—
using a term associated with 1 or more covered persons; or
for a significant purpose of retrieving information of or concerning 1 or more covered persons.
by adding at the end the following:
Except as provided in subparagraphs (B) and (C), no officer or employee of the Federal Government may access covered information returned in response to a covered query.
Subparagraph (A) shall not apply if—
the covered person to whom the covered query relates is the subject of an order or emergency authorization authorizing electronic surveillance or physical search under section 105 or 304 of this Act, or a warrant issued pursuant to the Federal Rules of Criminal Procedure by a court of competent jurisdiction, if—
the officer or employee accessing the covered information has a reasonable belief that—
an emergency exists involving an imminent threat of death or serious bodily harm; and
in order to prevent or mitigate the threat described in item (aa), the covered information must be accessed before authorization described in clause (i) can, with due diligence, be obtained; and
not later than 14 days after the covered information is accessed, a description of the circumstances justifying the accessing of the covered information is provided to the Foreign Intelligence Surveillance Court and the appropriate committees of Congress;
the covered person to whom the covered query relates or, if such person is incapable of providing consent, a third party legally authorized to consent on behalf of such person, has provided consent for the access on a case-by-case basis; or
the covered information is accessed and used for defensive cybersecurity purposes, including the protection of a covered person from cybersecurity attack;
other than for such defensive cybersecurity purposes, no covered information is accessed or reviewed; and
not later than 14 days after the covered information is accessed, a description of the circumstances justifying the accessing of the covered information is provided to the Foreign Intelligence Surveillance Court and the appropriate committees of Congress.
If covered information is accessed pursuant to an emergency authorization described in subparagraph (B)(i) and the subsequent application to authorize electronic surveillance, a physical search, or an acquisition pursuant to section 105(e) or section 304(e) of this Act is denied, or in any other case in which covered information is accessed in violation of this paragraph—
no covered information accessed, or information or evidence derived from such access may be used, received in evidence, or otherwise disseminated in any investigation, trial, hearing, or other proceeding in or before any court, grand jury, department, office, agency, regulatory body, legislative committee, or other authority of the United States, a State, or political subdivision thereof; and
no covered information accessed may subsequently be used or disclosed in any other manner without the consent of such person, except if the Attorney General personally approves the use or disclosure of such information in order to prevent the death of or serious bodily harm to any person and not later than 14 days of such approval, a description of the circumstances justifying the approval is provided to the Foreign Intelligence Surveillance Court and the appropriate committees of Congress.
Not less frequently than once each year, the Attorney General shall assess compliance with the requirements under clause (i).
Except as provided in clause (ii), no officer or employee of the Federal Government may conduct a query unless the query is—
is made with a significant foreign intelligence purpose.
An officer or employee of the Federal Government is permitted to conduct a query if an exception described in clauses (i) and (ii) of paragraph (2)(B) applies.
No officer or employee of the Federal Government may conduct a query, or access covered information returned in response to a covered query, unless an electronic record is created that includes—
each term used for the conduct of the query;
for each access—
Each head of an agency who is authorized to conduct a covered query shall ensure that a system, mechanism, or business practice is in place to maintain the records described in subparagraph (E), including ensuring that any queries or accesses to covered information returned in response to covered queries, that are conducted by automated means are attributed to the officer or employee who was the proximate cause of such query or access.
in the headings for subparagraph (B) of paragraph (1), subparagraph (A) of paragraph (2), and subparagraph (A) of paragraph (3), by striking united states person
each place it appears and inserting covered person
;
in paragraph (6)—
non-United States personsand inserting
noncovered persons; and
by striking non-United States persons
and inserting noncovered persons
; and
in paragraphs (1) through (6), by striking United States person
each place it appears and inserting covered person
.
Paragraph (2) of section 706(a) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881e(a)) is amended—
in the paragraph heading, by striking United states persons
and inserting Covered persons
; and
United States personboth places it appears and inserting
covered person;
in the matter before clause (i), by striking in any criminal proceeding
and inserting in any criminal, civil, or administrative proceeding
; and
in clause (ii), by striking the criminal proceeding
both places it appears and inserting the proceeding
.
Section 702 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881a), as amended by section 101, is further amended—
in subsection (b)—
by redesignating paragraph (6) as paragraph (7); and
by inserting after paragraph (5) the following:
may not intentionally target a person reasonably believed to be located outside the United States if a significant purpose of such acquisition is to acquire the information of one or more particular, known covered persons, unless—
there is a reasonable belief that an emergency exists involving an imminent threat of death or serious bodily harm to such covered persons;
the information is sought for the purpose of assisting that covered persons; and
not later than 14 days after the targeting, a description of the targeting is provided to the Foreign Intelligence Surveillance Court and the appropriate committees of Congress; or
the covered persons have provided consent to the targeting, or if such persons are incapable of providing consent, a third party legally authorized to consent on behalf of such covered person has provided consent;
in subsection (d)(1), by amending subparagraph (A) to read as follows:
ensure that—
any acquisition authorized under subsection (a) is limited to targeting persons reasonably believed to be non-United States persons located outside the United States; and
except as provided in subsection (b)(6), it is not a significant purpose of an acquisition to acquire the information of one or more particular, known covered persons; and
in subsection (h)(2)(A)(i), by amending subclause (I) to read as follows:
ensure that—
an acquisition authorized under subsection (a) is limited to targeting persons reasonably believed to be non-United States persons located outside the United States; and
except as provided in subsection (b)(6), it is not a significant purpose of an acquisition to acquire the information of one or more particular, known covered persons; and
in subsection (j)(2)(B), by amending clause (i) to read as follows:
ensure that—
an acquisition authorized under subsection (a) is limited to targeting persons reasonably believed to be non-United States persons located outside the United States; and
except as provided in subsection (b)(6), it is not a significant purpose of an acquisition to acquire the information of one or more particular, known covered persons; and
The Attorney General shall develop, and the heads of the elements of the intelligence community shall implement, procedures governing the retention of information collected pursuant to section 702.
For purposes of this section, covered information includes—
any information or communication pertaining to a covered person, including an encrypted communication to or from a covered person, that has been evaluated and is not specifically known to contain foreign intelligence information; and
any unevaluated information, unless it can reasonably be determined that the unevaluated information does not contain—
The procedures developed and implemented pursuant to subsection (a) shall ensure, with respect to information described in such subsection, that covered information shall be destroyed within 5 years of collection unless the Attorney General determines in writing that—
the information is the subject of a preservation obligation in pending administrative, civil, or criminal litigation, in which case the information shall be segregated, retained, and used solely for that purpose and shall be destroyed as soon as it is no longer required to be preserved for such litigation; or
the information is being used in a proceeding or investigation consistent with section 706(a).
The table of contents for such Act is amended by inserting after the item relating to section 709 the following:
Section 702(i)(1) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881a(i)(1)) is amended—
With respect toand inserting the following:
Subject to subparagraph (B), in carrying out
by adding at the end the following:
Neither the Attorney General nor the Director of National Intelligence may direct technical assistance from an electronic communication service provider under subparagraph (A) without demonstrating that the assistance sought—
is necessary;
is narrowly tailored to the surveillance at issue; and
would not pose an undue burden on the electronic communication service provider or its customers who are not intended targets of the surveillance.
An electronic communication service provider is not obligated to comply with a directive to provide technical assistance under this paragraph unless—
such assistance is a manner or method that has been explicitly approved by the Court; and
the Court issues an order, which has been delivered to the provider, explicitly describing the assistance to be furnished by the provider that has been approved by the Court.
Section 702 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881a) is amended—
in subsection (b)(4), by striking known at the time of the acquisition
and inserting known or believed at the time of acquisition or communication
;
in subsection (d)(1)(B), by striking known at the time of the acquisition
and inserting known or believed at the time of acquisition or communication
;
in subsection (h)(2)(A)(i)(II), by striking known at the time of the acquisition
and inserting known or believed at the time of acquisition or communication
; and
in subsection (j)(2)(B)(ii), by striking known at the time of the acquisition
and inserting known or believed at the time of acquisition or communication
.
Section 702(h)(2)(A)(v) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881a(h)(2)(A)(v)) is amended by striking a significant
and inserting the primary
.
Section 702(f)(3)(D) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881a(f)(3)(D)) is amended by adding at the end the following:
Not less frequently than once each year, the Attorney General shall submit to the appropriate committees of Congress an annual report on the number of sensitive queries made in the year covered by the report, disaggregated by the subclause of clause (ii) under which the queries were approved.
custodian,; and
by striking (D), or (E)
and inserting or (D)
;
by striking subparagraph (E);
in subparagraph (D), by striking the semicolon and inserting ; or
; and
by redesignating subparagraph (F) as subparagraph (E).
Section 801(6) of such Act (50 U.S.C. 1885(6)) is amended—
in subparagraph (G)—
by striking custodian,
; and
(E), or (F)and inserting
or (E);
by striking subparagraph (E);
in subparagraph (F), by striking the semicolon and inserting ; or
; and
by redesignating subparagraphs (F) and (G) as subparagraphs (E) and (F), respectively.
Any directive issued pursuant to section 702(i) of such Act (50 U.S.C. 1881a(i)) to a person who was considered an electronic communication service provider pursuant to section 701(b)(4) of such Act (50 U.S.C. 1881(b)(4)) as such section was in effect during the period beginning on April 20, 2024, and ending on the date of the enactment of this Act, but is not an electronic communication service provider pursuant to such section as in effect after the date of the enactment of this Act, shall be considered null and void.
Section 702(f) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881a(f)), as amended by section 101, is further amended—
by redesignating paragraph (7), as added by section 101, as paragraph (6).
in paragraph (1) (50 U.S.C. 1881–1881g note)—
effective two years after the date of enactment of the Reforming Intelligence and Securing America Actand inserting
effective April 20, 2030; and
and the Reforming Intelligence and Securing America Actand inserting
, the Reforming Intelligence and Securing America Act, and the; andGovernment Surveillance Reform Act of 2026
in paragraph (2) (18 U.S.C. 2511 note), in the matter preceding subparagraph (A), by striking two years after the date of enactment of the Reforming Intelligence and Securing America Act
and inserting April 20, 2030
.
two years after the date of enactment of the reforming intelligence and securing america actand inserting
April 20, 2030; and
by striking Government Surveillance Reform Act of 2026and the Reforming Intelligence and Securing America Act
and inserting , the Reforming Intelligence and Securing America Act, and the
; and
and the Reforming Intelligence and Securing America Actand inserting
, the Reforming Intelligence and Securing America Act, and the.Government Surveillance Reform Act of 2026
Section 2702 of title 18, United States Code, is amended by adding at the end the following:
In this subsection and subsections (f) and (g)—
the term biometric information—
means any covered personal data that allows or confirms the unique identification or verification of an individual and is generated from the measurement or processing of unique biological, physical, or physiological characteristics, including—
fingerprints;
voice prints;
iris or retina imagery scans;
facial or hand mapping, geometry, or templates; and
gait; and
does not include—
a digital or physical photograph;
an audio or video recording; or
data derived from a digital or physical photograph or an audio or video recording that cannot be used to identify or authenticate a specific individual;
the term covered organization means a person who—
is not a governmental entity; and
is not an individual, unless such individual is an agent of, or otherwise acting on behalf of, a person who is not a governmental entity and is not an individual;
the term covered person means an individual who—
is reasonably believed to be located inside the United States at the time of the creation of the covered personal data; or
is a United States person, as defined in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801);
the term covered personal data means personal data relating to a covered person;
the term electronic device has the meaning given the term computer in section 1030(e);
the term Federal law enforcement agency means a law enforcement agency of a department or agency of the United States;
the term lawfully obtained public data means covered personal data obtained by a particular covered organization—
that the covered organization reasonably understood to have been voluntarily made available to the general public by the covered person;
that the covered organization obtained in compliance with all applicable laws and regulations; and
if the covered organization did not initially obtain the covered personal data after the covered personal data was made available to the general public—
that the covered organization reasonably understood to have been obtained in compliance with all applicable laws and regulations by—
the person that initially obtained the covered personal data; and
if the covered organization did not obtain the covered personal data from the person described in item (aa), each other person in the sequence of transfers of the covered personal data leading up to the obtaining of the covered personal data by the covered organization; and
with respect to which the covered organization receives an attestation under penalty of perjury—
by the person that initially obtained the covered personal data indicating that the covered personal data was voluntarily made available to the general public by the covered person and was obtained in compliance with all applicable laws and regulations; and
if the covered organization did not obtain the covered personal data from the person described in item (aa), by each other person in the sequence of transfers of the covered personal data leading up to the obtaining of the covered personal data by the covered organization indicating that such person reasonably understood the data to have been lawfully obtained public data;
the term obtain in exchange for anything of value means to obtain by purchasing, to receive in connection with services being provided for monetary or nonmonetary consideration, or to otherwise obtain in exchange for consideration, including an access fee, service fee, maintenance fee, or licensing fee;
the term personal data—
means data, derived data, or any unique identifier that is linked to, or is reasonably linkable to, an individual or to an electronic device that is linked to, or is reasonably linkable to, 1 or more individuals in a household;
includes anonymized data that, if combined with other data, can be linked to, or is reasonably linkable to, an individual or to an electronic device that identifies, is linked to, or is reasonably linkable to 1 or more individuals in a household; and
does not include data that is lawfully available through Federal, State, or local government records or through widely distributed media; and
the term State or local law enforcement agency means a law enforcement department or agency of a State, or a political subdivision of a State.
Subject to clauses (ii) through (vii), a Federal law enforcement agency may not obtain in exchange for anything of value covered personal data if—
the covered personal data is directly or indirectly obtained from a covered organization; or
the covered personal data is derived from covered personal data that was directly or indirectly obtained from a covered organization.
A Federal law enforcement agency may obtain in exchange for something of value covered personal data as part of a larger compilation of data which includes personal data about persons who are not covered persons, if—
the Federal law enforcement agency is unable through reasonable means to exclude covered personal data from the larger compilation obtained; and
the Federal law enforcement agency minimizes any covered personal data from the larger compilation, in accordance with the requirements described in, and the procedures established under, subsection (f).
Clause (i) shall not apply to covered personal data that is obtained by a Federal law enforcement agency under a program established by an Act of Congress under which a portion of a penalty or a similar payment or bounty is paid to an individual who discloses information about an unlawful activity to the Government, such as the program authorized under section 7623 of the Internal Revenue Code of 1986 (relating to awards to whistleblowers in cases of underpayments or fraud).
Clause (i) shall not apply to covered personal data that is obtained by a Federal law enforcement agency from a covered organization in accordance with compulsory legal process that—
is established by statute; and
provides for the reimbursement of costs of the covered organization that are incurred in connection with providing the record or information to the Federal law enforcement agency, such as the reimbursement of costs under section 2706.
Clause (i) shall not apply to covered personal data about an employee of, or applicant for employment by, a Federal law enforcement agency that is—
obtained by the Federal law enforcement agency for lawful employment-related purposes;
accessed and used by the Federal law enforcement agency only for such employment-related purposes; and
destroyed at such time as the covered personal data is no longer needed for employment-related purposes.
Clause (i) shall not apply to covered personal data about a covered person that is—
obtained by a Federal law enforcement agency for purposes of conducting a background check of the covered person with the written consent of the covered person;
accessed and used by the Federal law enforcement agency only for background check-related purposes; and
destroyed at such time as the covered personal data is no longer needed for background check-related purposes.
Except as provided in subclause (II) or (III) of this clause, clause (i) shall not apply to covered personal data that is obtained by a Federal law enforcement agency if—
the Federal law enforcement agency reasonably believes that—
the covered personal data is lawfully obtained public data; or
the covered personal data is derived from covered personal data that solely consists of lawfully obtained public data; and
the Federal law enforcement agency receives—
an attestation under penalty of perjury from the person providing the covered personal data that the covered personal data is lawfully obtained public data or is derived from covered personal data that solely consists of lawfully obtained public data; and
each attestation described in paragraph (1)(G)(iii) with respect to the lawfully obtained public data.
The exception under subclause (I) shall not apply to biometric information.
The exception under subclause (I) shall not apply to location information.
The limitation under subparagraph (A) shall apply without regard to whether the covered organization possessing the covered personal data is the covered organization that initially obtained, collected, or received the disclosure of the covered personal data.
-A Federal law enforcement agency may not acquire, receive, query, or otherwise obtain or access covered personal data from any governmental entity (without regard to whether the governmental entity is a Federal entity), if the covered personal data was obtained by that governmental entity in a manner that would violate paragraph (2) if the Federal law enforcement agency directly obtained the covered personal data in a like manner.
-The prohibition in subparagraph (A) shall apply without regard to whether the Federal law enforcement agency caused the governmental entity to obtain the covered personal data.
-A Federal law enforcement agency may only acquire, receive, query, or otherwise obtain or access covered personal data from another governmental entity (without regard to whether the governmental entity is a Federal entity), if the Federal law enforcement agency obtains an attestation that the covered personal data was not obtained by that governmental entity in a manner that would violate paragraph (2) if the Federal law enforcement agency directly obtained the covered personal data in a like manner.
-If a Federal law enforcement agency learns that the Federal law enforcement agency previously acquired, received, queried, or otherwise obtained or accessed covered personal data from any governmental entity (without regard to whether the governmental entity is a Federal entity) that the governmental entity obtained in a manner described in subparagraph (A), the Federal law enforcement agency may not use or disseminate the covered personal data or any information derived from the covered personal data, and shall promptly destroy any such covered personal data that is still retained.
Covered personal data acquired, received, queried, or otherwise obtained or accessed by a Federal law enforcement agency in violation of paragraph (2) or (3), and any evidence derived therefrom, may not be used, received in evidence, or otherwise disseminated by, on behalf of, or upon a motion or other action by a Federal law enforcement agency in any investigation, trial, hearing, or other proceeding by, in, or before any court, grand jury, department, officer, agency, regulatory body, legislative committee, or other authority of the United States, a State, or a political subdivision thereof.
Nothing in subparagraph (A) shall be construed to limit the use of covered personal data by a covered person aggrieved of a violation of paragraph (2) or (3) in connection with any action relating to such a violation.
The Attorney General shall adopt specific procedures that are reasonably designed to minimize the acquisition and retention, and to restrict the querying, of covered personal data, and prohibit the dissemination of information derived from covered personal data, which shall include procedures to enforce the requirements of paragraphs (2), (3), and (4).
Not later than 3 years after the date of enactment of the
Government Surveillance Reform Act of 2026
, and every 3 years thereafter, the Attorney General shall—publish a determination regarding whether the procedures need to be revised, in light of new technologies or violations of the procedures; and
adopt any necessary revisions to the procedures.
Each Federal law enforcement agency shall—
to exclude covered personal data that is not subject to 1 or more of the exceptions set forth in clauses (iii) through (vii) of subsection (e)(2)(A) from the data obtained; and
to remove and delete covered personal data described in clause (i) after a compilation is obtained and before operational use of the compilation or inclusion of the compilation in a dataset intended for operational use; and
audit the acquisition and retention of covered personal data by the Federal law enforcement agency on an ongoing and continuous basis, to evaluate compliance with the procedures adopted under paragraph (1).
If a Federal law enforcement agency identifies covered personal data in a compilation described in paragraph (2)(A)(ii), the Federal law enforcement agency shall promptly destroy the covered personal data and any dissemination of information derived from the covered personal data shall be prohibited.
Except as provided in subparagraphs (B) and (C), no officer or employee of a Federal law enforcement agency may conduct a query of personal data, including personal data already subjected to minimization, in an effort to find records of or about 1 or more particular covered persons.
Subparagraph (A) shall not apply to a query related to 1 or more particular covered persons if—
such covered persons are the subject of a court order issued under this title or the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.) that would authorize the Federal law enforcement agency to compel the production of the covered personal data, during the effective period of that order;
the officer or employee of a Federal law enforcement agency carrying out the query has a reasonable belief that the life or safety of such covered persons are threatened and the information is sought for the purpose of assisting such covered persons, in which case information resulting from the query may be accessed or used solely for that purpose and shall be destroyed at such time as it is no longer necessary for such purpose; or
such covered persons have consented to the query.
For a query of a compilation of data obtained under subsection (e)(2)(A)(ii)—
each query shall be reasonably designed to exclude personal data of covered persons; and
any personal data of covered persons returned pursuant to a query shall not be reviewed and shall immediately be destroyed.
funds provided under the Edward Byrne Memorial Justice Assistance Grant Program under subpart 1 of part E of title I of the Omnibus Crime Control and Safe Streets Act of 1968 (34 U.S.C. 10151 et seq.);
funds provided through the Office of Community Oriented Policing Services;
funds received under an in-kind grant made under section 2576 of title 10;
funds received under an in-kind grant made via a transfer made under section 981 of this title; or
funds received under any other Federal program that offers assistance to a law enforcement agency similar to the assistance under the programs described in subparagraphs (A) through (D).
If a State or local law enforcement agency, using any means or facility of interstate or foreign commerce, through activities in or affecting interstate or foreign commerce, or by using covered Federal funds, obtains covered personal data in a manner that would violate subsection (e)(2) if obtained by a Federal law enforcement agency in a like manner, the State or local law enforcement agency shall publicly report, not less frequently than once per year—
the total amount in dollars of anything of value exchanged for such covered personal data during the preceding year, which shall be disaggregated into money directly exchanged and the estimated value of the other things of value that were exchanged;
the categories of covered personal data obtained in such a manner in the preceding year, including whether the agency obtained location information, biometric information, web browsing data, or metadata of communications; and
an estimate of the total number of covered persons whose covered data was obtained in such a manner in the preceding year.
Title VII of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881 et seq.) is amended—
by inserting after section 702 (50 U.S.C. 1881a) the following:
No officer or employee of the Federal Government may intentionally target a covered person for the purpose of acquiring foreign intelligence information, where such acquisition would be of communications content, location information, web browsing history, or internet search history of the covered person, or the acquisition would occur under circumstances in which the person has a reasonable expectation of privacy, or a warrant would be required for the acquisition of such information if the officer or employee sought to compel production of the information inside the United States for law enforcement purposes, unless such person is the subject of—
No officer or employee of the Federal Government may intentionally target a covered person for the purpose of collecting foreign intelligence information through the installation and use of a pen register or trap and trace device, or to acquire information the compelled production of which would require a pen register or trap and trace device order if conducted inside the United States, unless such person is the subject of—
If an acquisition is conducted pursuant to an emergency authorization described in subsection (a)(1) or (b)(1) and the subsequent application to authorize electronic surveillance, a physical search, an acquisition, or the installation and use of a pen register or trap and trace device pursuant to section 105(e), 304(e), or 403(a) of this Act is denied, or in any other case in which the acquisition has been conducted and no order is issued approving the acquisition—
no information obtained or evidence derived from such acquisition may be used, received in evidence, or otherwise disseminated in any investigation, trial, hearing, or other proceeding in or before any court, grand jury, department, office, agency, regulatory body, legislative committee, or other authority of the United States, a State, or political subdivision thereof; and
no information obtained or evidence derived from such acquisition concerning a covered person may subsequently be used or disclosed in any other manner without the consent of such person, except with the approval of the Attorney General, if the information indicates a threat of death or serious bodily harm to any person.
Subsections (a), (b), and (c) shall apply regardless of the location of the acquisition.
The Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.) is further amended—
in subparagraph (B), by striking the semicolon and inserting ; and
;
in section 603(b)(1) (50 U.S.C. 1873(b)(1)), in the matter before subparagraph (A), by striking and sections 703 and 704
; and
in section 706 (50 U.S.C. 1881e), by striking subsection (b).
The table of contents for such Act is amended—
by inserting after the item relating to section 702 the following:
The Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.) is amended in section 104(a)(12), in the matter before subparagraph (A), section 303(a)(10), in the matter before subparagraph (A), and section 402(c)(4), in the matter before subparagraph (A), are amended by inserting , and that the application fairly reflects all information,
after apprised of all information
each place it appears.
Such Act is further amended—
in section 104(a)—
; andand inserting a semicolon;
; andand inserting a semicolon; and
in paragraph (12)(B), by striking the period at the end and inserting ; and
;
; andand inserting a semicolon; and
; and; and
The Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.) is amended by adding at the end the following:
In this section, the term accuracy procedures means specific procedures, adopted by the Attorney General, to ensure that an application for a court order under this Act, including any application for renewal of an existing order, is accurate and complete, including procedures that ensure, at a minimum, that—
the application reflects all information that might reasonably call into question the accuracy of the information or the reasonableness of any assessment in the application, or otherwise raises doubts about the requested findings;
the application reflects all material information that might reasonably call into question the reliability and reporting of any information from a confidential human source that is used in the application;
a complete file documenting each factual assertion in an application is maintained;
the applicant coordinates with the appropriate elements of the intelligence community (as defined in section 3 of the National Security Act of 1947 (50 U.S.C. 3003)), concerning any prior or existing relationship with the target of any surveillance, search, or other means of investigation, and discloses any such relationship in the application;
before any application targeting a United States person is made, the applicant Federal officer or employee documents that the officer or employee has collected and reviewed for accuracy and completeness supporting documentation for each factual assertion in the application; and
the applicant Federal agency establishes compliance and auditing mechanisms on an annual basis to assess the efficacy of the accuracy procedures that have been adopted and reports such findings to the Attorney General.
Any Federal officer or employee making an application for a court order under this Act shall include with the application—
a description of the accuracy procedures employed by the officer or employee, or their designee; and
a certification that the officer or employee, or their designee, has collected and reviewed for accuracy and completeness—
supporting documentation for each factual assertion contained in the application;
all information that might reasonably call into question the accuracy of the information or the reasonableness of any assessment in the application, or otherwise raises doubts about the requested findings; and
all material information that might reasonably call into question the reliability and reporting of any information from any confidential human source that is used in the application.
The table of contents of the Foreign Intelligence Surveillance Act of 1978 is amended by adding at the end the following:
Not later than 180 days after the date of the enactment of this Act, the Attorney General shall issue accuracy procedures (as defined in section 901(a) of the Foreign Intelligence Surveillance Act of 1978, as added by subsection (a)).
On the day that is 180 days after the date of the enactment of this Act, paragraph (7) of section 10(a) of the Reforming Intelligence and Securing America Act (Public Law 118–49; 50 U.S.C. 1804 note) is repealed.
Section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801), as amended by section 2(a), is further amended by adding at the end the following:
For the purposes of notification provisions of this Act, information or evidence is derived from an electronic surveillance, physical search, use of a pen register or trap and trace device, production of tangible things, or acquisition under this Act when the Government would not have originally possessed the information or evidence but for that electronic surveillance, physical search, use of a pen register or trap and trace device, production of tangible things, or acquisition, and regardless of any claim that the information or evidence is attenuated from the surveillance or search, would inevitably have been discovered, or was subsequently reobtained through other means.
Not later than 90 days after the date of the enactment of this Act, the Attorney General and the Director of National Intelligence shall publish the following:
Policies concerning the application of subsection (t) of section 101 of such Act, as added by subsection (a).
Guidance for all members of the intelligence community (as defined in section 3 of the National Security Act of 1947 (50 U.S.C. 3003)) and all Federal agencies with law enforcement responsibilities concerning the application of such subsection (t).
Whenever the Attorney General and the Director modify a policy or guidance published under paragraph (1), the Attorney General and the Director shall publish such modifications.
Section 102(b)(2) of the USA PATRIOT Improvement and Reauthorization Act of 2005 (Public Law 109–177; 50 U.S.C. 1805 note) is amended by inserting Government Surveillance Reform Act of 2026, except that title V of the Foreign Intelligence Surveillance Act of 1978, as in effect on March 14, 2020, shall cease to have effect on the date that is 180 days after the date of the enactment of the
after continue in effect
.
Section 103 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1803) is amended by adding at the end the following:
Section 103(i)(2) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1803(i)(2)) is amended—
in subparagraph (A)—
shall appoint one or more individuals who have been designated under paragraph (1) and who possesses expertise in privacy and civil liberties to serve as amicus curiae to assist such court in the consideration of any application or motion for an order or review, unless the court issues a written finding that such application neither presents nor involves—
a novel or significant interpretation of the law;
a significant concern related to constitutional rights;
a sensitive investigative matter;
a request for approval of a new program, a new technology, or a new use of existing technology;
a request for reauthorization of programmatic surveillance; or
any other privacy or civil liberties issue for which an appointment of an amicus curiae to assist the court in the consideration of the application would be appropriate;
in clause (ii), by striking ; and
and inserting a period;
by redesignating clause (ii) as clause (iv) and moving such clause so as to appear after clause (iii);
by inserting after clause (i) the following:
shall appoint one or more individuals who have been designated under paragraph (1) and who possesses technical expertise to serve as amicus curiae to assist such court in the consideration of any application for an order or review, unless the court issues a written finding that such application neither presents nor involves—
a request for approval of a new program, a new technology, or a new use of existing technology;
a request for approval of a previously authorized program, technology, or use of existing technology for which no prior application for approval of such program, technology, or use was considered by the court with the assistance of an amicus curiae who possesses technical expertise; or
a technical issue material to any legal determination for which an appointment of an amicus curiae who possesses technical expertise to assist the court in the consideration of the application would be appropriate;
, unless the court issues a finding that such appointment is not appropriate or is likely to result in undue delay.and inserting
; and; and
Section 103(i) of such Act (50 U.S.C. 1803(i)) is amended by adding at the end the following:
In this subsection, the term sensitive investigative matter means—
an investigative matter involving the activities of—
a domestic public official or political candidate, or an individual serving on the staff of such an official or candidate;
a domestic religious or political organization, or a known or suspected United States person prominent in such an organization; or
the domestic news media; or
any other investigative matter involving a domestic entity or a known or suspected United States person that, in the judgment of the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review, is similarly as sensitive as an investigative matter described in subparagraph (A).
Section 103(i)(3)(A) of such Act (50 U.S.C. 1803(i)(3)(A)) is amended—
by inserting cybersecurity, cryptography,
after communications technology,
; and
by adding at the end the following: Of such individuals, at least one shall possess legal expertise and at least one shall possess technical expertise.
.
Section 103(i) of such Act (50 U.S.C. 1803(i)) is amended by striking paragraph (7) and inserting the following:
The presiding judge of the Foreign Intelligence Surveillance Court and the Foreign Intelligence Surveillance Court or Review shall, not less frequently than quarterly, provide to the Attorney General and the appropriate committees of Congress—
a notification of each appointment of an individual to serve as amicus curiae under paragraph (2); and
a copy of each written finding issued under paragraph (2).
Section 702(j)(5)(A) of such Act (50 U.S.C. 1881a(j)(5)(A)) is amended by striking at least 30 days prior to the expiration of such authorization
and inserting such number of days, not less than 30 days, before the expiration of such authorization as the Court considers necessary to permit review by amici curiae appointed under section 103(i)(2)(A)(iii).
.
Section 103(i) of such Act (50 U.S.C. 1803(i)), as amended by subsection (a), is further amended—
in paragraph (4)—
in the paragraph heading, by inserting ; authority
after Duties
;
in the matter preceding subparagraph (A), by striking shall
;
in subparagraph (B)—
shallbefore
provide;
in clause (i), by striking of United States persons
and inserting the following: , including legal arguments regarding any privacy or civil liberties interest of any United States person that would be significantly affected by the application or motion
; and
in clause (iii), by striking the period at the end and inserting ; and
;
by striking subparagraph (A);
by redesignating subparagraph (B) as subparagraph (A); and
by adding at the end the following:
may seek leave to raise any novel or significant privacy or civil liberties issue relevant to the application or motion or other issue directly affecting the legality of the proposed electronic surveillance with the court, regardless of whether the court has requested assistance on that issue.
by redesignating paragraphs (7) through (12) as paragraphs (8) through (13), respectively; and
by inserting after paragraph (6) the following:
An amicus curiae appointed under paragraph (2) may petition the Foreign Intelligence Surveillance Court of Review to certify for review to the Supreme Court of the United States any question of law pursuant to section 1254(2) of title 28, United States Code.
For purposes of section 602, a petition filed under subparagraph (A) or (B) of this paragraph and all of its content shall be considered a decision, order, or opinion issued by the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review described in paragraph (2) of section 602(a).
Section 103(i)(6) of such Act (50 U.S.C. 1803(i)(6)) is amended—
shall have access to, to the extent such information is available to the Government—
the application, certification, petition, motion, and other information and supporting materials, including any information described in section 901, submitted to the Foreign Intelligence Surveillance Court in connection with the matter in which the amicus curiae has been appointed, including access to any relevant legal precedent (including any such precedent that is cited by the Government, including in such an application);
any other information or materials that the court determines is relevant to the duties of the amicus curiae; and
an unredacted copy of each relevant decision made by the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review in which the court decides a question of law, without regard to whether the decision is classified; and
may make a submission to the court requesting access to any other particular materials or information (or category of materials or information) that the amicus curiae believes to be relevant to the duties of the amicus curiae.
by redesignating subparagraph (D) as subparagraph (F); and
by inserting after subparagraph (C) the following:
The Foreign Intelligence Surveillance Court, upon the motion of an amicus curiae appointed under paragraph (2) or upon its own motion, may require the Government to make available the supporting documentation described in section 902.
Section 103(i)(6) of such Act (50 U.S.C. 1803(i)(6)) is amended—
in subparagraph (B), by striking The Attorney General may periodically
and inserting Not less frequently than annually, the Attorney General shall
; and
by striking subparagraph (C) and inserting the following:
An amicus curiae appointed by the court shall have access to, to the extent such information is available to the Government, unredacted copies of each opinion, order, transcript, pleading, or other document of the Foreign Intelligence Surveillance Court and the Foreign Intelligence Surveillance Court of Review, including, if the individual is eligible for access to classified information, any classified documents, information, and other materials or proceedings.
Section 103(i)(6) of such Act (50 U.S.C. 1803(i)(6)), as amended by paragraphs (1) and (2), is further amended—
by redesignating subparagraphs (B), (C), and (D) as subparagraphs (C), (D), and (E), respectively; and
by inserting after subparagraph (A) the following:
If the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review determines that it is relevant to the duties of an amicus curiae appointed under paragraph (2), the amicus curiae may consult with one or more of the other individuals designated to serve as amicus curiae under paragraph (1) regarding any of the information relevant to any assigned proceeding.
Section 602 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1872) is amended by striking subsection (a) and inserting the following:
consistent with that review, make publicly available to the greatest extent practicable each such decision, order, or opinion; and
complete the declassification review required by subparagraph (A) and public release of each such decision, order, or opinion pursuant to subparagraph (B) by not later than 180 days after the date on which the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review issues such decision, order, or opinion.
A decision, order, or opinion issued by the Foreign Intelligence Surveillance Court or the Foreign Intelligence Surveillance Court of Review that is described in this paragraph is any such decision, order, or opinion issued before, on, or after the date of the enactment of this Act that—
involves a sensitive investigative matter (as defined in section 103(i)(12)); or
has been nominated for a declassification review by an amicus curiae appointed by the court.
Section 103 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1803), as amended by sections 206 and 207, is further amended—
by adding at the end the following:
The Foreign Intelligence Surveillance Court shall have jurisdiction to hear claims ancillary to any of its own proceedings, including jurisdiction to hear any claim for access to the court’s records, files, and proceedings under the Constitution of the United States, statute, common law, or any other authority. Upon deciding such a claim, the Court shall provide immediately for the record a written statement of the reasons for such decision. A party may file a petition for review of such decision with the Foreign Intelligence Surveillance Court of Review, which shall have jurisdiction to consider such petition and, upon deciding such petition, shall provide for the record a written statement of the reasons for its decision.
The Foreign Intelligence Surveillance Court of Review shall have jurisdiction to hear claims ancillary to any of its own proceedings, including jurisdiction to hear any claim for access to the court’s records, files, and proceedings under the Constitution of the United States, statute, common law, or any other authority. Upon deciding such a claim, the Court of Review shall provide immediately for the record a written statement of the reasons for such decision.
A party may file a petition for a writ of certiorari for review of a decision of the Foreign Intelligence Surveillance Court of Review under paragraphs (1) or (2), and the Supreme Court shall have jurisdiction to review such decision.
in subsection (a)(2)(A), in the matter preceding clause (i), by inserting paragraph (1) of subsection (o) of this section or
before paragraph (4) or (5) of section 702(i)
; and
in subsection (k)(1), by striking section 1254(2) of title 28
and inserting section 1254 of title 28
.
Section 103 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1803), as amended by section (a), is further amended—
in subsection (a)(2)(A), in the matter preceding clause (i), by striking section 501(f) or
; and
in subsection (e), by striking section 501(f)(1) or
each place it appears.
In this section, the terms foreign intelligence information, person, United States, and United States person have the meanings given such terms in section 101.
In any claim in a civil action brought in a court of the United States relating to the acquisition, copying, querying, retention, access, or use of information acquired under this Act or pursuant to any other authority of the executive branch of the Federal Government, by a United States person or person located inside the United States, the person asserting the claim has suffered an injury-in-fact traceable to that conduct if the person—
regularly communicates foreign intelligence information with persons who are not United States persons and who are located outside the United States; and
has taken or is taking objectively reasonable measures to avoid the acquisition, copying, querying, retention, access, or use of the person’s information under this Act or pursuant to another authority of the executive branch of the Federal Government; or
has a reasonable basis to believe that the person’s rights have been, are being, or imminently will be violated by an individual acting under color of Federal law.
The procedures set forth in section 106(f) shall apply when the State secrets privilege is asserted, with respect to any claim where the plaintiff, who is a United States person or person located in the United States, plausibly alleges an injury-in-fact relating to the acquisition, copying, querying, retention, access, or use of information acquired under this Act or pursuant to another authority of the executive branch of the Federal Government and plausibly alleges that the acquisition, copying, querying, retention, access, or use of information violates the Constitution or laws of the United States.
The table of contents of the Foreign Intelligence Surveillance Act of 1978, as amended by section 202, is further amended by adding at the end the following:
Title X of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881 et seq.), as added by section 310, is amended by adding at the end the following:
In this section:
The term appropriate committees of Congress has the meaning given such term in section 101.
The term covered person has the meaning given such term in section 701(b).
The term covered violation means a violation of this Act, the
Government Surveillance Reform Act of 2026
, or Executive Order 12333 (50 U.S.C. 3001 note; relating to United States intelligence activities), or successor order, by an employee of a covered agency that results in the inappropriate collection, use, querying, or dissemination of any communication, record, or information of a covered person.The terms person, United States, and United States person have the meanings given such terms in section 101.
The head of each covered agency shall—
establish procedures to hold employees of the covered agency accountable for willful, knowing, reckless, and negligent covered violations; and
designate an entity within the agency to investigate possible willful, knowing, reckless, and negligent covered violations; and
The procedures established under subsection (b)(1) shall include the following:
Centralized tracking of individual employee performance incidents involving willful, knowing, reckless, and negligent covered violations, over time.
Escalating consequences for willful, knowing, reckless, and negligent covered violations, including—
consequences for an initial reckless or negligent covered violation, including, at a minimum—
suspension of access to information acquired under this Act or to the dataset that gave rise to the violation for not less than 90 days; and
documentation of the incident in the personnel file of each employee responsible for the violation;
consequences for a second reckless or negligent covered violation, including, at a minimum—
suspension of access to information acquired under this Act or to the dataset that gave rise to the violation for not less than 180 days; and
reassignment of each employee responsible for the violation;
consequences for a third reckless or negligent covered violation, including, at a minimum—
termination of security clearance; and
reassignment or termination of each employee responsible for the violation;
consequences for an initial willful or knowing covered violation, including, at a minimum—
suspension of access to information acquired under this Act or to the dataset that gave rise to the violation for not less than 180 days; and
reassignment of each employee responsible for the violation; and
consequences for a second willful or knowing covered violation, including, at a minimum—
termination of security clearance; and
reassignment or termination of each employee responsible for the violation.
For purposes of subparagraphs (C)(ii) and (E)(ii) of subsection (c)(2), there shall be a presumption in favor of termination of an employee.
If the head of a covered agency determines not to terminate an employee for a third reckless or negligent violation under subparagraph (C)(ii) of subsection (c)(2) or a second willful or knowing violation under subparagraph (E)(ii) of that subsection, the agency head shall submit to the appropriate committees of Congress a written justification for the determination.
If a covered agency determines, through an investigation, that an employee committed a willful, knowing, reckless, or negligent covered violation, the agency head shall determine what consequences to impose on the employee under subsection (c)(2) not later than 60 days after the conclusion of the investigation.
The table of contents for such Act is amended by inserting after the item relating to section 1001, as added by section 310, the following:
Not later than 180 days after the date of the enactment of this Act, the head of each covered agency, as defined in section 1002 of the Foreign Intelligence Surveillance Act of 1978 (as added by subsection (a)), shall submit to the appropriate committees of Congress a report detailing—
the procedures established under section 1002 of the Foreign Intelligence Surveillance Act of 1978, as added by subsection (a); and
a description of any actions taken pursuant to such procedures.
The report required by paragraph (1) shall be submitted in unclassified form, but may include a classified annex to the extent necessary to protect sources and methods.
Paragraph (6) of such section 702(f), as added by section 101 and redesignated by section 110, is redesignated as paragraph (4) and moved before paragraph (5) of such section 702(f).
The amendments made by paragraphs (1) and (2) shall take effect on the date that is 180 days after the date of the enactment of this Act.
Section 2511(2)(f) of title 18, United States Code, is amended to read as follows:
Other than as provided in subsection (ii), nothing contained in this chapter or chapter 121 or 206 of this title, or section 705 of the Communications Act of 1934 (47 U.S.C. 605), shall be deemed to affect the acquisition by the United States Government of foreign intelligence information from international or foreign communications, or foreign intelligence activities conducted in accordance with otherwise applicable Federal law involving a foreign electronic communications system, utilizing a means other than electronic surveillance as defined in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801).
The procedures in this chapter, chapter 121, and the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.) shall be the exclusive means by which the United States Government may conduct—
electronic surveillance, as defined in section 101 of that Act;
the interception of wire, oral, and electronic communications within the United States or from a domestic electronic communications system; or
the interception of wire, oral, and electronic communications for which the sender and all intended recipients are located within the United States.
Section 112 of the Foreign Intelligence Surveillance Act (50 U.S.C. 1812) is amended to read as follows:
Except as provided in subsection (b), the procedures of chapters 119, 121, and 206 of title 18 and this Act shall be the exclusive means by which the United States Government may conduct—
electronic surveillance, as defined in section 101;
the interception of wire, oral, and electronic communications within the United States or from a domestic electronic communications system; or
the interception of wire, oral, and electronic communications for which the sender and all intended recipients are located within the United States.
Only an express statutory authorization for electronic surveillance or the interception of wire, oral, or electronic communications described in subsection (a), other than as an amendment to this chapter or chapters 119, 121, or 206 of title 18, shall constitute an additional exclusive means for the purpose of subsection (a).
The procedures in this Act and title IV of the
Government Surveillance Reform Act
shall be the exclusive means by which the location information of 1 or more persons located in the United States may be acquired for foreign intelligence purposes by the United States Government.In this title:
The terms congressional intelligence committees, intelligence, intelligence community, and foreign intelligence have the meanings given such terms in section 3 of the National Security Act of 1947 (50 U.S.C. 3003).
The terms electronic surveillance, person, State, United States, and United States person have the meanings given such terms in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801).
In this section:
The term covered information includes—
communications content; and
information, the compelled disclosure of which would require a probable cause warrant if sought for law enforcement purposes inside the United States.
The term covered query means a query—
using a term associated with 1 or more covered persons; or
for a significant purpose of retrieving information of, or concerning 1 or more covered persons.
The information described in this subparagraph is information that was acquired for foreign intelligence purposes, other than acquisitions authorized by the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.), regardless of whether such acquisition occurred inside or outside the United States.
Except as provided in subsections (c) and (d), no officer or employee of the Federal Government may access covered information returned in response to a covered query.
Subsection (b) shall not apply if—
the covered person to whom the covered query relates is the subject of an order or emergency authorization authorizing electronic surveillance or physical search under section 105 or 304 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1805, 1824), or a warrant issued pursuant to the Federal Rules of Criminal Procedure by a court of competent jurisdiction if—
the officer or employee accessing the covered information has a reasonable belief that—
an emergency exists involving an imminent threat of death or serious bodily harm; and
in order to prevent or mitigate the threat described in clause (i), the query must be conducted before authorization described in subparagraph (A) can, with due diligence, be obtained; and
not later than 14 days after the covered information is accessed, a description of the circumstances justifying the accessing of the covered information is provided to the congressional intelligence committees in a timely manner;
the covered person to whom the covered query relates or, if such person is incapable of providing consent, a third party legally authorized to consent on behalf of the person, has provided consent for such access on a case-by-case basis; or
the covered information is used for defensive cybersecurity purposes, including the protection of a covered person from cybersecurity attack;
other than for such defensive cybersecurity purposes, no covered information is accessed or reviewed; and
not later than 14 days after the covered information is accessed, a description of the circumstances justifying the accessing of the covered information is provided to the congressional intelligence committees.
If covered information is accessed pursuant to an emergency authorization described in subsection (c)(1) and the subsequent application to authorize electronic surveillance, a physical search, or an acquisition pursuant to section 105(e) or 304(e) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1805(e), 1824(e)) is denied, or in any other case in which covered information is accessed in violation of this section—
no covered information accessed, or evidence derived from such access, may be used, received in evidence, or otherwise disseminated in any investigation, trial, hearing, or other proceeding in or before any court, grand jury, department, office, agency, regulatory body, legislative committee, or other authority of the United States, a State, or political subdivision thereof; and
no covered information accessed, or evidence derived from such access, concerning a covered person may subsequently be used or disclosed in any other manner without the consent of such covered person, except if the Attorney General approves the use or disclosure of such covered information in order to prevent the death of or serious bodily harm to any person.
Not less frequently than annually, the Attorney General shall assess compliance with the requirements under paragraph (1).
This section shall not apply to the access of covered information collected pursuant to the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.).
made with a significant foreign intelligence purpose.
An officer or employee of the Federal Government is permitted to conduct a query if an exception described in clauses (i) and (ii) of section 702(f)(2)(B) of the Foreign Intelligence Surveillance Act of 1978, as amended by section 101, applies.
No officer or employee of the Federal Government may conduct a covered query, or access covered information returned in response to a covered query, unless an electronic record is created that includes—
for each query—
each term used for the conduct of the query;
the date of the covered query;
for each access—
No officer or employee of the Federal Government may intentionally target, for the purpose of acquiring foreign intelligence information, any person to acquire information, regardless of whether such targeting or acquisition occurs inside or outside the United States, if a significant purpose of the acquisition is to acquire the information of a particular, known covered person, unless—
the officer or employee has a reasonable belief that an emergency exists involving a threat of imminent death or serious bodily harm to such covered person;
the information is sought for the purpose of assisting that person; and
not later than 14 days after the targeting, a description of the targeting is provided to the congressional intelligence committees in a timely manner; or
the covered person has provided consent to the targeting, or if such covered person is incapable of providing consent, a third party legally authorized to consent on behalf of such covered person has provided consent.
This section shall not apply to—
an acquisition carried out pursuant to a warrant issued pursuant to the Federal Rules of Criminal Procedure by a court of competent jurisdiction covering the period of the acquisition and the acquisition is subject to the use, dissemination, querying, retention, and other minimization limitations required by such warrant.
In this section, the term covered data means—
does not include data that—
is lawfully available to the public through Federal, State, or local government records or through widely distributed media;
is reasonably believed to have been voluntarily made available to the general public by the covered person; or
is a specific communication or transaction with a targeted individual who is not a covered person.
An element of the intelligence community may acquire covered data if the data has been authorized for collection pursuant to an order or emergency authorization pursuant to the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.) or the Federal Rules of Criminal Procedure by a court of competent jurisdiction covering the period of the acquisition, subject to the use, dissemination, querying, retention, and other minimization limitations required by such authorization.
An element of the intelligence community may acquire covered data about an employee of, or applicant for employment by, an element of the intelligence community for employment-related purposes, provided that—
An element of the intelligence community may acquire covered data for the purpose of supporting compliance with collection limitations and minimization requirements imposed by statute, guidelines, procedures, or the United States Constitution, provided that—
An element of the intelligence community may acquire covered data if—
not later than 14 days after the acquisition, a description of the acquisition is provided to the congressional intelligence committees.
An element of the intelligence community may acquire covered data if—
access to and use of the covered data is limited to the purposes for which the consent was provided; and
the covered data is destroyed at such time as it is no longer necessary for such purposes.
An element of the intelligence community may acquire a dataset that includes covered data if the covered data is not reasonably segregable prior to acquisition, provided that the element of the intelligence community complies with the minimization procedures in subsection (c).
An element of the intelligence community may acquire, through noncompulsory means that are otherwise not contrary to a provision of Federal law, data that, in the United States, the Federal Government has the authority to compel production through a national security letter pursuant to section 2709 of title 18, United States Code, section 626 or 627 of the Consumer Credit Protection Act (15 U.S.C. 1681u, 1681v), or section 1114 of the Right to Financial Privacy Act of 1978 (12 U.S.C. 3414), provided—
the person or entity in possession of the data is outside the United States and compelled production is not feasible;
the acquisition is conducted consistent with the limitations that would apply if, in the United States, the Federal Government compelled production of such data with a national security letter pursuant to such provisions of law; and
the element of the intelligence community maintains all records required by such provisions of law, including the content of relevant certifications, for each covered person or each instance of data, derived data or unique identifier linked to or reasonably linkable to a covered person.
The Attorney General shall adopt specific procedures that are reasonably designed to minimize the acquisition and retention of covered data that is not subject to 1 or more of the exceptions set forth in subsection (b).
The procedures adopted under paragraph (1) shall require elements of the intelligence community to exhaust all reasonable means—
to exclude covered data not subject to 1 or more exceptions set forth in subsection (b) from datasets prior to acquisition; and
to remove and delete covered data not subject to 1 or more exceptions set forth in subsection (b) prior to the operational use of the acquired dataset or the inclusion of the dataset in a database intended for operational use.
The procedures adopted under paragraph (1) shall require that if an element of the intelligence community identifies covered data acquired in violation of subsection (b), such covered data shall be promptly destroyed.
Covered data acquired by an element of the intelligence community in violation of subsection (b), and any evidence derived therefrom, may not be used, received in evidence, or otherwise disseminated in any investigation, trial, hearing, or other proceeding in or before any court, grand jury, department, office, agency, regulatory body, legislative committee, or other authority of the United States, a State, or political subdivision thereof.
Not later than 180 days after the date of the enactment of this Act and not less frequently than once each year thereafter, the Director of National Intelligence shall submit to the appropriate committees of Congress and the Privacy and Civil Liberties Oversight Board a report on acquisitions pursuant to this section.
A description of datasets that the Director determines contain information of covered persons that is significant in volume proportion, or sensitivity, including—
the covered person information in each dataset; and
an estimate of the amount of covered person information in each dataset;
A description of data collected pursuant to subsection (b)(8), including—
a description of the covered person information for each acquisition; and
the number of covered persons or instances of data, derived data or unique identifiers linked to or reasonably linkable to a covered person, disaggregated by the national security letter authority for which compelled production would be required.
A description of covered data identified as having been acquired in violation of subsection (b) in the preceding year, including—
an estimate of the number of covered persons whose information was acquired in violation of subsection (b); and
any changes made to the procedures in subsection (c) to address compliance issues.
After submitting the report required by paragraph (1), the Director shall, in coordination with the Under Secretary, notify the appropriate committees of Congress of any changes to the information contained in such report.
The Director shall make available to the public on the website of the Director—
Nothing in this section shall authorize an acquisition otherwise prohibited by this Act, the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.), or title 18, United States Code.
No officer or employee of the Federal Government may intentionally acquire, for the purpose of acquiring foreign intelligence information, any communication as to which the sender and all intended recipients are known to be located in the United States at the time of acquisition or the time of communication, regardless of whether such acquisition occurs inside or outside the United States, except—
The information described in this paragraph is information that was acquired for foreign intelligence purposes, other than acquisitions authorized by the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.), regardless of whether such acquisition occurred inside or outside the United States.
In this subsection, the term covered information includes—
any information or communication pertaining to a covered person, including an encrypted communication to or from a covered person, that has been evaluated and is not specifically known to contain foreign intelligence information; and
any unevaluated information, unless it can reasonably be determined that the unevaluated information does not contain any information or communications pertaining to a covered person, including any encrypted communication to or from a covered person.
the information is the subject of a preservation obligation in pending administrative, civil, or criminal litigation, in which case the covered information shall be segregated, retained, and used solely for that purpose and shall be destroyed as soon as it is no longer required to be preserved for such litigation; or
the information is being used in a proceeding or investigation consistent with section 706(a) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881e(a)).
Section 511 of the National Security Act of 1947 (50 U.S.C. 3110) is amended by adding at the end the following:
With respect to a report submitted under subsection (a) prior to the date of the enactment of the
Government Surveillance Reform Act of 2026
, such report shall be made publicly available pursuant to paragraph (1) by not later than 180 days after the date of the enactment of such Act.The Attorney General, in consultation with the Director of National Intelligence, shall submit to the Committee on the Judiciary of the Senate and the Committee on the Judiciary of the House of Representatives a version of the report described in subsection (a) that only addresses violations of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.).
Not later than 1 year after the date of the enactment of this Act, the Inspector General of the Department of Justice and the Inspector General of each element of the intelligence community shall each initiate an audit of the applications for court orders made under the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.) and directives issued under section 702(i) of such Act by the Department or the element, respectively.
In conducting an audit under subsection (a)—
review such sample of applications and directives described in such subsection as the Inspector General determines appropriate in order to carry out the objectives of this section;
assess whether—
adequate safeguards are in place to ensure that the assertions made in applications are scrupulously accurate;
adequate safeguards are in place to ensure that each application includes all information required by the amendments made by section 10 of the Reforming Intelligence and Securing America Act (Public Law 118–49) and made by sections 302 and 303 of this Act; and
in the determination of the Inspector General, there are any other areas of potential risk or violation; and
make recommendations to address any deficiencies identified by the Inspector General; and
the Inspector General of the Department of Justice shall assess the information provided by the Department of Justice under subsection (f) of section 603 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1873), as added by section 803 of this Act, and include a determination on the accuracy and completeness of the information provided under that section.
The persons specified in this paragraph are the following:
The Attorney General.
The Director of National Intelligence.
The Privacy and Civil Liberties Oversight Board.
The appropriate committees of Congress.
The Foreign Intelligence Surveillance Court (as defined in section 601(e) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1871(e))).
Any amicus curiae appointed under section 103(i)(2) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1803(i)(2)).
The Attorney General and head of each element of the intelligence community shall ensure full and complete cooperation with the respective Inspector General conducting an audit under subsection (a), including by providing access to all evidence and information relevant to the assessments required under subsection (b)(2), subject to such procedures as are necessary to protect the national security of the United States.
The Inspector General of each element of the intelligence community shall each make publicly available on a website of the relevant element an unclassified version of any report submitted under subsection (c) by the respective Inspector General.
the Privacy and Civil Liberties Oversight Board,after
Inspector General of the Intelligence Community,; and
in subsection (c)(1)(A), in the matter before clause (i), by inserting the Privacy and Civil Liberties Oversight Board,
after Inspector General of the Intelligence Community,
.
except thatand all that follows through the period at the end and inserting
except that no rate of pay fixed under this subsection may exceed the highest amount paid by any element of the intelligence community for a comparable position, based on salary information provided to the chairman of the Board by the Director of National Intelligence..
Not later than 30 days after providing a certification described in clause (B) of the first sentence of subparagraph (ii) to a provider of wire or electronic communication service, an officer, employee, or agent thereof, a landlord, a custodian, or another person, the person providing the certification shall submit the certification to the appropriate committees of Congress, as defined in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801).
In this subsection—
the term appropriate committees of Congress has the meaning given that term in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801), as amended by section 2 of this Act;
Not later than 90 days after the date of enactment of this Act, the person that provided an ongoing certification to a provider of wire or electronic communication service, an officer, employee, or agent thereof, a landlord, a custodian, or another person shall submit the ongoing certification to the appropriate committees of Congress.
Section 2703 of title 18, United States Code, is amended—
in subsection (a)—
in the subsection heading, by striking Contents of wire or electronic communications
and inserting Location information, web browsing records, search query records, or contents of wire or electronic communications
; and
in the first sentence, by inserting location information, a web browsing record, a search query record, or
before the contents of a wire
; and
in subsection (c)(1), in the matter preceding subparagraph (A), by inserting location information, a web browsing record, a search query record, or
before the contents
.
Section 2711 of title 18, United States Code, is amended—
in the matter preceding paragraph (1), by inserting (a) In general.—
before As used
;
in subsection (a), as so designated—
andat the end;
in paragraph (4), by striking the period at the end and inserting a semicolon; and
by adding at the end the following:
the term location information means information derived or otherwise calculated from the transmission or reception of a radio signal that reveals the approximate or actual geographic location of a customer, subscriber, user, or device;
the term web browsing record—
means a record that reveals, in part or in whole, the identity of a service provided by an online service provider, or the identity of a customer, subscriber, user, or device, for any attempted or successful communication or transmission between an online service provider and such a customer, subscriber, user, or device;
includes a record that reveals, in part or in whole—
the network traffic generated by an attempted or successful communication or transmission between a service provided by an online service provider and a customer, subscriber, user, or device; and
does not include a record that reveals information about an attempted or successful communication or transmission between a known service and a particular known customer, subscriber, user, or device, if the record is maintained by the known service and is limited to revealing additional identifying information about the particular known customer, subscriber, user, or device; and
the term search query record—
means a record that reveals a query term or instruction submitted, in written, verbal, or other format, by a customer, subscriber, user, or device to any service provided by an online service provider, including a search engine, voice assistant, chat bot, or navigation service; and
includes a record that reveals the response provided by any service provided by an online service provider to a query term or instruction by a customer, subscriber, user, or device.
by adding at the end the following:
Nothing in this section or section 2510 shall be construed to mean that a record may not be more than 1 of the following types of record:
The contents of a communication.
Section 3117 of title 18, United States Code, is amended—
Mobile tracking devicesand inserting
Tracking orders for Federal departments and agencies;
No officer or employee of a governmental entity may install or direct the installation of a tracking device, except pursuant to a warrant issued using the procedures described in the Federal Rules of Criminal Procedure (or, in the case of a State court, issued using State warrant procedures and, in the case of a court-martial or other proceeding under chapter 47 of title 10 (the Uniform Code of Military Justice), issued under section 846 of that title, in accordance with regulations prescribed by the President) by a court of competent jurisdiction.
Subject to paragraph (2), the prohibition under subsection (a) does not apply in an instance in which an investigative or law enforcement officer reasonably determines that—
in the subsection heading, by striking In general
and inserting Jurisdiction
;
or other order;
mobile;
by striking such order
and inserting such warrant
; and
by adding at the end the following: For purposes of this subsection, the installation of a tracking device occurs within the jurisdiction in which the device is physically located when the installation is complete.
; and
by adding at the end the following:
As used in this section—
the term computer has the meaning given that term in section 1030(e);
the term court of competent jurisdiction has the meaning given that term in section 2711;
the term governmental entity—
does not include a department or agency of a State or a political subdivision thereof.
the term installation of a tracking device means, whether performed by an officer or employee of a governmental entity or by a provider at the direction of a governmental entity—
the term tracking device means an electronic or mechanical device which permits the tracking of the movement of a person or object, including a phone, wearable device, connected vehicle, or other computer owned, used, or possessed by the target of surveillance.
Section 2703 of title 18, United States Code, is amended by adding at the end the following:
A governmental entity may require the prospective disclosure by an online service provider of a web browsing record only pursuant to a warrant issued using the procedures described in subsection (a).
A warrant requiring the prospective disclosure by an online service provider of web browsing records may require disclosure of web browsing records for only a period as is necessary to achieve the objective of the disclosure, not to exceed 30 days from issuance of the warrant. Extensions of such a warrant may be granted, but only upon satisfaction of the showings necessary for issuance of the warrant in the first instance.
A governmental entity may require the prospective disclosure by an online service provider of location information only pursuant to a warrant issued using the procedures described in subsection (a), that satisfies the restrictions imposed on warrants for tracking devices imposed by section 3117 of this title and rule 41 of the Federal Rules of Criminal Procedure.
Section 2703(c)(2)(C) of title 18, United States Code, is amended by striking local and long distance telephone connection records, or
.
This section may be cited as the Email Privacy Act
.
Section 2702 of title 18, United States Code, is amended—
in subsection (a)—
in paragraph (1)—
by striking divulge
and inserting disclose
; and
by striking while in electronic storage by that service
and inserting that is in electronic storage with or otherwise stored, held, or maintained by that service
;
in paragraph (2)—
by striking to the public
;
by striking divulge
and inserting disclose
; and
by striking which is carried or maintained on that service
and inserting that is stored, held, or maintained by that service
; and
in paragraph (3)—
by striking divulge
and inserting disclose
; and
by striking a provider of
and inserting a person or entity providing
;
in subsection (b)—
in the matter preceding paragraph (1)—
by striking divulge
and inserting disclose
; and
wire or electronicbefore
communication;
by amending paragraph (1) to read as follows:
to an originator, addressee, or intended recipient of such communication, to the subscriber or customer on whose behalf the provider stores, holds, or maintains such communication, or to an agent of such addressee, intended recipient, subscriber, or customer;
by amending paragraph (3) to read as follows:
with the lawful consent of the originator, addressee, or intended recipient of such communication, or of the subscriber or customer on whose behalf the provider stores, holds, or maintains such communication;
in subsection (c)—
by striking divulge
and inserting disclose
; and
by inserting wire or electronic
before communications
; and
by amending paragraph (2) to read as follows:
with the lawful consent of the subscriber or customer;
in subsection (a), in the first sentence—
by striking A governmental entity
and inserting Except as provided in subsections (l) and (m), a governmental entity
;
by striking pursuant to
and inserting if the governmental entity obtains
; and
by a court of competent jurisdiction.and inserting
that is issued by a court of competent jurisdiction and that may indicate the date by which the provider must make the disclosure to the governmental entity. In the absence of a date on the warrant indicating the date by which the provider must make disclosure to the governmental entity, the provider shall promptly respond to the warrant.;
in subsection (c)—
in the matter preceding subparagraph (A)—
A governmental entityand inserting
Except as provided in subsections (l) and (m), a governmental entity; and
by striking only when the governmental entity—
and inserting only—
;
obtains a warrant issuedand inserting
if the governmental entity obtains a warrant;
by striking by the President) by a court
and inserting the following: “by the President) that—
by inserting and
after jurisdiction;
; and
by adding at the end the following:
may indicate the date by which the online service provider must make the disclosure to the governmental entity;
in subparagraph (B), by inserting if the governmental entity
before obtains
;
in subparagraph (C), by striking has the consent of the subscriber or customer to such disclosure;
and inserting with the lawful consent of the subscriber or customer; or
;
by striking subparagraph (D);
by redesignating subparagraph (E) as subparagraph (D); and
in subparagraph (D), as so redesignated, by striking seeks information
and inserting as otherwise authorized
; and
in paragraph (2)—
, in response to an administrative subpoena authorized by Federal or State statute, a grand jury, trial, or civil discovery subpoena, or any means available under paragraph (1),after
shall; and
in the matter following subparagraph (F), by striking of a subscriber
and all that follows and inserting of a subscriber or customer of such online service provider.
;
in subsection (d)—
by striking the contents of a wire or electronic communication, or
;
by striking sought,
and inserting sought
; and
by striking section
and inserting subsection
; and
by adding after subsection (j), as added by section 601(c) of this Act, the following:
Nothing in this section or in section 2702 shall modify the authorities for a governmental entity to obtain a wire or electronic communication (including the contents of that communication) from a provider of a remote computing service or electronic communication service if—
the originator, addressee, or intended recipient of such communication is an officer, director, employee, or agent of the provider acting in their capacity as such an officer, director, employee, or agent; or
the communication—
advertises or promotes a product or service; and
has been made readily available to the general public.
Section 2703 of title 18, United States Code, is amended—
in subsection (a)—
by striking , that is in electronic storage in an electronic communications system for one hundred and eighty days or less,
; and
in subsection (d) by striking (b) or
.
Subsection (a) of section 2711 of title 18, United States Code, as so designated and amended by section 601 of this Act, is amended by adding at the end the following:
the term online service provider means a provider of electronic communication service, a provider of remote computing service, or a provider of an interactive computer service (as defined in section 230(f) of the Communications Act of 1934 (47 U.S.C. 230(f))); and
Section 2703 of title 18, United States Code, is amended—
in subsection (a), in the first sentence, by striking a provider of electronic communication service
and inserting an online service provider
;
in subsection (c)—
a provider of electronic communication service or remote computing serviceand inserting
an online service provider; and
A provider of electronic communication service or remote computing serviceand inserting
An online service provider; and
in subsection (g), by striking a provider of electronic communications service or remote computing service
and inserting an online service provider
.
Chapter 206 of title 18, United States Code, is amended—
for an application submitted by an attorney for the Government, a certification by the applicant providing specific and articulable facts showing there are reasonable grounds to believe that the information likely to be obtained is relevant and material to an ongoing criminal investigation being conducted by that agency; or
in section 3123(a)(1), in the first sentence—
the court shall enterand inserting
the court may enter; and
by striking certified to the court that the information likely to be obtained by such installation and use is relevant
and inserting submitted a certification providing specific and articulable facts showing there are reasonable grounds to believe that the information likely to be obtained by such installation and use is relevant and material
.
Section 2703(c)(2) of title 18, United States Code, is amended, in the matter following subparagraph (F), as amended by section 603(c) of this Act, by inserting with respect to whom the governmental entity identifies the name, address, temporarily assigned network address, or account identifier (such as a user name)
before the period at the end.
limit, to the greatest extent possible, the acquisition, use, and dissemination of the contents of communication and records and other information to that which is required for the specific purpose for which the disclosure was intended;
to the greatest extent possible, remove personally identifiable information prior to acquisition;
to the extent personally identifiable information cannot be removed prior to acquisition, mask such information prior to its use or dissemination, consistent with the purpose for which the disclosure was intended; and
ensure that no contents of communications or records or other information are retained by the agency to which the disclosure was made, or any agency to which the contents of communications or records or other information were disclosed, after the completion of the investigation or action for which the disclosure was intended.
Section 2703 of title 18, United States Code, as amended by section 603 of this Act, is amended by adding at the end the following:
In this subsection, the terms covered personal data
and covered organization
have the meanings given such terms in section 2702(e).
Unless a governmental entity obtains an order in accordance with paragraph (3), the governmental entity may not require a covered organization that is not an online service provider to disclose covered personal data if a court order would be required for the governmental entity to require an online service provider to disclose such covered personal data that is a record of a customer or subscriber of the online service provider.
A court may only issue an order requiring a covered organization that is not an online service provider to disclose covered personal data on the same basis and subject to the same limitations as would apply to a court order to require disclosure by an online service provider.
For purposes of subparagraph (A), a court shall apply the most stringent standard under Federal statute or the Constitution of the United States that would be applicable to a request for a court order to require a comparable disclosure by an online service provider of comparable records of a customer or subscriber of the online service provider.
Subsection (a) of section 2711 of title 18, United States Code, as so designated and amended by sections 601 and 604 of this Act, is amended by adding at the end the following:
the term intermediary or ancillary service provider means an entity or facilities owner or operator that directly or indirectly delivers, transmits, stores, or processes communications or any other covered personal data (as defined in section 2702(e) of this title) for, or on behalf of, an online service provider.
Section 2702(a) of title 18, United States Code, is amended—
in paragraph (1), by striking and
at the end;
in paragraph (2)(B), by striking and
at the end;
in paragraph (3), by striking the period at the end and inserting ; and
; and
by adding at the end the following:
an intermediary or ancillary service provider may not knowingly disclose—
to any person or entity the contents of a communication while in electronic storage by that intermediary or ancillary service provider; or
to any governmental entity a record or other information pertaining to a subscriber to or customer of, a recipient of a communication from a subscriber to or customer of, or the sender of a communication to a subscriber to or customer of, the online service provider for, or on behalf of, which the intermediary or ancillary service provider directly or indirectly delivers, transmits, stores, or processes communications or any other covered personal data (as defined in subsection (e)).
Section 2703 of title 18, United States Code, as amended by section 608 of this Act, is amended by adding at the end the following:
In January of each year, any judge who has issued an order under this section or a warrant to obtain records described in this section, or who has denied approval of an application under this section during the preceding year, shall report to the Administrative Office of the United States Courts—
the fact that the order or warrant was applied for;
the type of records sought in the order or warrant;
whether the order or warrant was—
granted as applied for;
granted as modified; or
denied;
the subsection of this section under which the application for the order or warrant was filed;
the nature of the offense or criminal investigation that was the basis for the application for the order or warrant;
the name of each provider of electronic communication service or remote computing service served with the order or warrant, if so granted; and
the investigative or law enforcement agency that submitted the application.
In June of each year, the Director of the Administrative Office of the United States Courts shall publish on the website of the Administrative Office of the United States Courts and include in the report required under section 2519(3)—
a full and complete report concerning the number of applications for orders or warrants requiring the disclosure of, during the preceding calendar year—
the contents of wire or electronic communications in electronic storage under subsection (a); and
records concerning electronic communication service or remote computer service under subsection (c);
the number of orders and warrants granted or denied under this section during the preceding calendar year; and
a detailed summary and analysis of each category of data required to be filed with the Administrative Office of the United States Courts under paragraph (1).
Not later than 180 days after the date of enactment of the
Government Surveillance Reform Act of 2026
, the Director of the Administrative Office of the United States Courts shall, in consultation with the National Institute of Standards and Technology, the Administrator of General Services, the Electronic Public Access Public User Group, private entities offering electronic case management software, the National Center for State Courts, and the National American Indian Court Judges Association, publish a machine readable form that shall be used for any report required under paragraph (1).The Director of the Administrative Office of the United States Courts may issue binding regulations with respect to the content and form of the reports required under paragraph (1).
Section 2519(3) of title 18, United States Code, is amended, in the first sentence, by inserting publish on the website of the Administrative Office of the United States Courts and
before transmit
.
Section 3126 of title 18, United States Code, is amended to read as follows:
In January of each year, any judge who has issued an order (or an extension thereof) under section 3123 that expired during the preceding year, or who has denied approval of an installation and use of a pen register or trap and trace device during that year, shall report to the Administrative Office of the United States Courts—
the fact that an order or extension was applied for;
the kind of order or extension applied for;
the fact that the order or extension was granted as applied for, was modified, or was denied;
the period of installation and use of a pen register or trap and trace device authorized by the order, and the number and duration of any extensions of the order;
the offense specified in the order or application, or extension of an order;
the precise nature of the facilities affected and the precise nature of the information sought; and
the investigative or law enforcement agency that submitted the application.
In June of each year, the Director of the Administrative Office of the United States Courts shall publish on the website of the Administrative Office of the United States Courts and include in the report required under section 2519(3)—
a full and complete report concerning—
the number of applications for orders authorizing or approving the installation and use of a pen register or trap and trace device pursuant to this chapter; and
the number of orders and extensions granted or denied pursuant to this chapter during the preceding calendar year; and
a detailed summary and analysis of each category of data required to be reported under subsection (a).
Not later than 180 days after the date of enactment of the
Government Surveillance Reform Act of 2026
, the Director of the Administrative Office of the United States Courts shall, in consultation with the National Institute of Standards and Technology and the Administrator of General Services, private entities offering electronic case management software, the National Center for State Courts, and the National American Indian Court Judges Association, publish a machine readable form that shall be used for any report required under subsection (a).The Director of the Administrative Office of the United States Courts may issue binding regulations with respect to the content and form of the reports required under subsection (a).
Section 2702(d) of title 18, United States Code, is amended—
emergencyand inserting
voluntary;
in the matter preceding paragraph (1), by inserting and publish on the website of the Department of Justice
after Senate
;
the Department of Justiceand inserting
each Federal agency; and
subsection (b)(8)and inserting
paragraph (5) or (8) of subsection (b) or paragraph (3) or (4) of subsection (c), broken down by each such paragraph;
in paragraph (2)(A)—
Department of Justiceand inserting
Federal agency; and
subsection (b)(8)and inserting
paragraph (5) or (8) of subsection (b) or paragraph (3) or (4) of subsection (c); and
by striking paragraph (3).
Section 2702 of title 18, United States Code, is amended by adding after subsection (g), as added by section 201 of this Act, the following:
The prohibitions in subsection (a) shall not apply to disclosures to a State or local governmental entity.
Except as provided in paragraphs (3) and (4)—
a person or entity providing an electronic communication service to the public shall not knowingly divulge to a department or agency of a State or local government the contents of a communication while in electronic storage by that service;
a person or entity providing remote computing service to the public shall not knowingly divulge to a department or agency of a State or local government the contents of any communication which is carried or maintained on that service—
on behalf of, and received by means of electronic transmission from (or created by means of computer processing of communications received by means of electronic transmission from), a subscriber or customer of such service; and
solely for the purpose of providing storage or computer processing services to such subscriber or customer, if the provider is not authorized to access the contents of any such communications for purposes of providing any services other than storage or computer processing; and
a provider of remote computing service or electronic communication service to the public shall not knowingly divulge a record or other information pertaining to a subscriber to or customer of such service (not including the contents of communications covered by subparagraph (A) or (B)) to a department or agency of a State or local government.
A provider described in paragraph (2) may divulge the contents of a communication—
to an addressee or intended recipient of such communication or an agent of such addressee or intended recipient;
as otherwise authorized in section 2517, 2511(2)(a), or 2703A of this title;
with the lawful consent of the originator or an addressee or intended recipient of such communication, or the subscriber in the case of remote computing service;
to a person employed or authorized or whose facilities are used to forward such communication to its destination;
as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider of that service;
to a law enforcement agency of a State or local government, if the contents—
were inadvertently obtained by the service provider; and
appear to pertain to the commission of a crime; or
to a department or agency of a State or local government, if the provider, in good faith, believes that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay of communications relating to the emergency.
A provider described in paragraph (2) may divulge a record or other information pertaining to a subscriber to or a customer of such service (not including the contents of communications covered by subparagraph (A) or (B) of paragraph (2))—
as otherwise authorized in section 2703A;
with the lawful consent of the customer or subscriber;
as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider of that service; or
to a department or agency of a State or local government, if the provider, in good faith, believes that an emergency involving danger of death or serious physical injury to any person requires disclosure without delay of information relating to the emergency.
Section 2703 of title 18, United States Code is amended—
to Federal departments and agenciesat the end; and
Notwithstanding section 2711, in this section, the term governmental entity—
does not include a department or agency of a State or a political subdivision thereof.
Chapter 121 of title 18, United States Code, is amended by inserting after section 2703 the following:
A governmental entity may require the disclosure by a provider of electronic communication service of the contents of a wire or electronic communication, that is in electronic storage in an electronic communications system for one hundred and eighty days or less, only pursuant to a warrant issued using the procedures described in the Federal Rules of Criminal Procedure (or, in the case of a State court, issued using State warrant procedures and, in the case of a court-martial or other proceeding under chapter 47 of title 10 (the Uniform Code of Military Justice), issued under section 846 of that title, in accordance with regulations prescribed by the President) by a court of competent jurisdiction. A governmental entity may require the disclosure by a provider of electronic communications services of the contents of a wire or electronic communication that has been in electronic storage in an electronic communications system for more than one hundred and eighty days by the means available under subsection (b) of this section.
A governmental entity may require a provider of remote computing service to disclose the contents of any wire or electronic communication to which this paragraph is made applicable by paragraph (2) of this subsection—
without required notice to the subscriber or customer, if the governmental entity obtains a warrant issued using the procedures described in the Federal Rules of Criminal Procedure (or, in the case of a State court, issued using State warrant procedures and, in the case of a court-martial or other proceeding under chapter 47 of title 10 (the Uniform Code of Military Justice), issued under section 846 of that title, in accordance with regulations prescribed by the President) by a court of competent jurisdiction; or
with prior notice from the governmental entity to the subscriber or customer if the governmental entity—
uses an administrative subpoena authorized by a Federal or State statute or a Federal or State grand jury or trial subpoena; or
obtains a court order for such disclosure under subsection (d) of this section;
except that delayed notice may be given pursuant to section 2705 of this title.
Paragraph (1) is applicable with respect to any wire or electronic communication that is held or maintained on that service—
on behalf of, and received by means of electronic transmission from (or created by means of computer processing of communications received by means of electronic transmission from), a subscriber or customer of such remote computing service; and
solely for the purpose of providing storage or computer processing services to such subscriber or customer, if the provider is not authorized to access the contents of any such communications for purposes of providing any services other than storage or computer processing.
A governmental entity may require a provider of electronic communication service or remote computing service to disclose a record or other information pertaining to a subscriber to or customer of such service (not including the contents of communications) only when the governmental entity—
obtains a warrant issued using the procedures described in the Federal Rules of Criminal Procedure (or, in the case of a State court, issued using State warrant procedures and, in the case of a court-martial or other proceeding under chapter 47 of title 10 (the Uniform Code of Military Justice), issued under section 846 of that title, in accordance with regulations prescribed by the President) by a court of competent jurisdiction;
obtains a court order for such disclosure under subsection (d) of this section;
has the consent of the subscriber or customer to such disclosure;
submits a formal written request relevant to a law enforcement investigation concerning telemarketing fraud for the name, address, and place of business of a subscriber or customer of such provider, which subscriber or customer is engaged in telemarketing (as such term is defined in section 2325 of this title); or
seeks information under paragraph (2).
A provider of electronic communication service or remote computing service shall disclose to a governmental entity the—
name;
address;
local and long distance telephone connection records, or records of session times and durations;
length of service (including start date) and types of service utilized;
telephone or instrument number or other subscriber number or identity, including any temporarily assigned network address; and
means and source of payment for such service (including any credit card or bank account number),
of a subscriber to or customer of such service when the governmental entity uses an administrative subpoena authorized by a Federal or State statute or a Federal or State grand jury or trial subpoena or any means available under paragraph (1).
A governmental entity receiving records or information under this subsection is not required to provide notice to a subscriber or customer.
A court order for disclosure under subsection (b) or (c) may be issued by any court that is a court of competent jurisdiction and shall issue only if the governmental entity offers specific and articulable facts showing that there are reasonable grounds to believe that the contents of a wire or electronic communication, or the records or other information sought, are relevant and material to an ongoing criminal investigation. Such a court order shall not issue if prohibited by the law of the applicable State. A court issuing an order pursuant to this section, on a motion made promptly by the service provider, may quash or modify such order, if the information or records requested are unusually voluminous in nature or compliance with such order otherwise would cause an undue burden on such provider.
No cause of action shall lie in any court against any provider of wire or electronic communication service, its officers, employees, agents, or other specified persons for providing information, facilities, or assistance in accordance with the terms of a court order, warrant, subpoena, statutory authorization, or certification under this chapter.
A provider of wire or electronic communication services or a remote computing service, upon the request of a governmental entity, shall take all necessary steps to preserve records and other evidence in its possession pending the issuance of a court order or other process.
Records referred to in paragraph (1) shall be retained for a period of 90 days, which shall be extended for an additional 90-day period upon a renewed request by the governmental entity.
Notwithstanding section 3105 of this title, the presence of an officer shall not be required for service or execution of a search warrant issued in accordance with this chapter requiring disclosure by a provider of electronic communications service or remote computing service of the contents of communications or records or other information pertaining to a subscriber to or customer of such service.
Notwithstanding section 2711, in this section, the term governmental entity—
does not include a department or agency of the United States.
Chapter 205 of title 18, United States Code, is amended by inserting after section 3117 the following:
If a court is empowered to issue a warrant or other order for the installation of a mobile tracking device, such order may authorize the use of that device by a department or agency of a State or a political subdivision of a State within the jurisdiction of the court, and outside that jurisdiction if the device is installed in that jurisdiction.
As used in this section, the term tracking device means an electronic or mechanical device which permits the tracking of the movement of a person or object.
Section 3122(b)(2) of title 18, United States Code, as amended by section 605(1) of this Act, is amended by inserting after subparagraph (A) the following:
for an application submitted by a State law enforcement or investigative officer, a certification by the applicant that the information likely to be obtained is relevant to an ongoing criminal investigation being conducted by that agency.
A department or agency of the United States may not obtain or acquire any communications, data, records, or other information, or any evidence derived therefrom, from a department or agency of a State or a political subdivision thereof that was obtained or acquired by the department or agency of a State or political subdivision thereof in a manner that would be a violation of Federal law if obtained or acquired by the department or agency of the United States, or in a manner that would not satisfy the legal standards applicable to the department or agency of the United States.
Communications, data, records, other information, or evidence obtained or acquired in violation of paragraph (1), and any evidence derived therefrom, may not be used, received in evidence, or otherwise disseminated by, on behalf of, or upon a motion or other action by a department or agency of the United States in any investigation, trial, hearing, or other proceeding by, in, or before any court, grand jury, department, officer, agency, regulatory body, legislative committee, or other authority of the United States, a State, or a political subdivision thereof.
Nothing in paragraph (2) shall be construed to limit the use of any information by a person aggrieved of a violation of paragraph (1) in connection with any action relating to such a violation.
The Homeland Security Act of 2002 (6 U.S.C. 101 et seq.) is amended—
section 2702(b)and inserting
subsection (b) or (h) of section 2702, as applicable,; and
in section 2220C(e) (6 U.S.C. 665i(e)), by striking section 2702
and inserting subsection (b) or (h) of section 2702, as applicable,
.
Chapter 110 of title 18, United States Code, is amended—
or subparagraphs (C) through (G) of section 2702(h)(3), as applicableafter
section 2702(b); and
in section 2258B—
sections 2258A, 2258C, 2702, or 2703and inserting
section 2258A, section 2258C, subsection (b) or (h) of section 2702 (as applicable), or section 2703 or 2703A (as applicable); and
in subsection (d)(2)(B)(iii)(II), by striking sections 2258A, 2258C, 2702, or 2703
and inserting section 2258A, section 2258C, subsection (b) or (h) of section 2702 (as applicable), or section 2703 or 2703A (as applicable)
.
in section 2701(c)(3), by striking section 2703
and inserting section 2703 or 2703A (as applicable)
;
in section 2705—
section 2703(b)each place it appears and inserting
section 2703A(b);
in subsection (a)(4), by striking section 2703
and inserting section 2703 or 2703A, as applicable,
; and
section 2703and inserting
section 2703 or 2703A, as applicable,; and
section 2703(b)(1)and inserting
section 2703A(b)(1);
section 2702, 2703, or 2704 of this titleand inserting
subsection (b) or (h) of section 2702 (as applicable), section 2703 or 2703A (as applicable), or section 2704; and
in subsection (c), by striking section 2703 of this title
and inserting section 2703 or 2703A, as applicable
; and
in section 2707—
section 2703(e),and inserting
section 2703(e) or section 2703A(e), as applicable,;
in subsection (e)(1), by striking section 2703(f) of this title
and inserting section 2703(f) or section 2703A(f), as applicable
; and
in subsection (g), by striking section 2703 of this title,
and inserting section 2703 or 2703A, as applicable,
.
Section 2510(12)(C) of title 18, United States Code, is amended to read as follows:
in the case of a department or agency of the United States, a communication from a lawfully installed tracking device (as defined in section 3117 of this title), if—
the tracking device is physically placed; or
the tracking software or functionality of the tracking device is remotely activated and the communication is transmitted by the tracking software or functionality as a result of the remote activation; or
in the case of a department or agency of a State or a political subdivision thereof, any communication from a tracking device (as defined in section 3117A of this title); or
Section 2704 of title 18, United States Code, is amended—
in subsection (a)—
section 2703(b)(2)and inserting
section 2703A(b)(2); and
in paragraph (5), by striking section 2703
and inserting section 2703A
; and
by adding at the end the following:
Notwithstanding section 2711, in this section, the term governmental entity—
does not include a department or agency of the United States.
In this chapter:
The term consent—
means an affirmative, express, and voluntary agreement that—
specifies the time period of the covered vehicle data to be accessed;
does not involve sanctions or the threat of sanctions for withholding consent; and
does not include consent obtained through agreement to a generic privacy policy or a terms of service agreement.
The term covered vehicle data—
means all onboard and telematics data generated by, processed by, or stored on a noncommercial vehicle using computing, storage and communication systems installed, attached to, or carried in the vehicle, including diagnostic data, entertainment system data, navigation data, images or data captured by onboard sensors, or cameras, including images or data used to support automated features or autonomous driving, internet access, and communication to and from vehicle occupants;
includes data gathered by event data recorders; and
does not include—
automotive software installed by the manufacturer, as defined by applicable industry standards or regulations;
any data subject to chapter 119 of this title or section 104 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1804); or
data that is collected from outside the vehicle, including speed data and geolocation data, for purposes of traffic, law enforcement, or toll collection.
The term event data recorder has the meaning given the term in section 563.5 of title 49, Code of Federal Regulations (as in effect on March 5, 2019).
The term noncommercial vehicle has the meaning given the term non-CMV in section 383.5 of title 49, Code of Federal Regulations.
The term vehicle operator means—
a person who controls the operation of a vehicle at the time consent is sought; and
with respect to a vehicle that is not classified as a highly autonomous vehicle by the Secretary of Transportation, the driver of the vehicle.
no passenger 14 years of age or older objects to the access.
If the vehicle operator cannot be located with reasonable effort, the vehicle owner or, in the case of a leased vehicle, the lessee, may provide consent under this paragraph.
No individual may provide or withhold consent under this paragraph or object to another individual accessing covered vehicle data if the individual—
is the vehicle operator who is in unlawful possession of the vehicle; or
is a passenger who unlawfully obtained access to the vehicle.
Consent provided under this paragraph shall be in writing unless—
If the vehicle operator is not the owner of the vehicle and provides consent under this paragraph, the consent is valid only with respect to covered vehicle data generated during the lawful possession and use of the vehicle by the vehicle operator.
A Federal investigative or law enforcement officer, the Attorney General, the Deputy Attorney General, or the Associate Attorney General may access covered vehicle data if—
such officer reasonably determines that an emergency situation exists that—
involves immediate danger of death or serious physical injury to any person; and
requires access to covered vehicle data before such officer can, with due diligence, obtain a warrant;
Nothing in this section shall be interpreted to require the transmission or storage of data that is not otherwise transmitted or stored, or the retrieval of data that is not generally retrievable.
Section 24302 of the Driver Privacy Act of 2015 (49 U.S.C. 30101 note) is amended—
in subsection (b), in the matter preceding paragraph (1), by striking Data
and inserting Except as provided in subsection (c), data
; and
by adding at the end the following:
A Federal investigative or law enforcement officer (as defined in section 2730 of title 18, United States Code), may only access or retrieve data recorded or transmitted by an event data recorder described in subsection (a) in accordance with chapter 124 of title 18, United States Code.
Section 603(a)(1) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1873(a)(1)) is amended—
in subparagraph (F), by striking ; and
and inserting a semicolon;
in subparagraph (G), by striking the period at the end and inserting a semicolon; and
by adding at the end the following:
the number of certifications by the Foreign Intelligence Surveillance Court pursuant to section 103(j);
the number of petitions to certify a question made by an amicus curiae pursuant to section 103(i)(7)(A);
the number of hearings or rehearings by the Foreign Intelligence Surveillance Court en banc pursuant to section 103(a)(2), disaggregated by hearings or rehearings by such court en banc pursuant to clause (i) or (ii) of such section; and
Subsection (b) of section 603 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1873(b)) is amended—
in paragraph (2)(C), by striking the semicolon and inserting ; and
;
statistics revealing the number of persons and identifiers targeted under section 702(a), disaggregated by certification under which the person or identifier was targeted;
the total number of directives issued pursuant to section 702(i)(1), disaggregated by each type of electronic communication service provider described in each of the subparagraphs of section 701(b)(4);
by adding at the end the following:
the total number of disseminated intelligence reports derived from collection pursuant to section 702 containing the identities of United States persons regardless of whether the identities of the United States persons were openly included or masked;
the total number of disseminated intelligence reports derived from collection pursuant to section 702 containing the identities of United States persons in which the identities of the United States persons were masked;
the total number of disseminated intelligence reports derived from collection outside the authorities provided by this Act containing the identities of United States persons in which the identities of the United States persons were masked;
the total number of disseminated intelligence reports derived from collection pursuant to section 702 containing the identities of United States persons in which the identities of the United States persons were openly included; and
the total number of disseminated intelligence reports derived from collection outside the authorities provided by this Act containing the identities of United States persons in which the identities of the United States persons were openly included;
the number of queries conducted in an effort to find communications or information of or about a covered person that required a warrant pursuant to section 302 of the
Government Surveillance Reform Act of 2026
; andthe number of queries conducted in an effort to find communications or information of or about a covered person that did not require a warrant pursuant to section 302 of the
Government Surveillance Reform Act of 2026
; andthe number of criminal proceedings in which the Federal Government or a government of a State or political subdivision thereof entered into evidence or otherwise used or disclosed in a criminal proceeding any information obtained or derived from an acquisition conducted for foreign intelligence purposes outside the authorities provided by this Act, regardless of whether such acquisition occurred inside or outside the United States.
by redesignating paragraph (3) as paragraph (2).
Subsection (d)(1) of such section is amended by striking paragraphs (3), (5), or (6)
and inserting paragraph (6), (8), or (9)
.
Section 603 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1873) is amended—
by redesignating subsections (f) and (g) as subsections (g) and (h), respectively; and
by inserting after subsection (e) the following:
In April each year, the Attorney General shall submit to the appropriate committees of Congress and publish on the website of the Department of Justice, subject to a declassification review, a report setting forth, with respect to the preceding calendar year, the following:
A summary of all accuracy or completeness reviews of applications for court orders submitted to the Foreign Intelligence Surveillance Court by the Federal Bureau of Investigation under this Act.
The total number of such applications reviewed for accuracy or completeness.
The total number of material errors or omissions identified during such reviews.
The total number of nonmaterial errors or omissions identified during such reviews.
The total number of instances in which facts contained in an application were not supported by documentation that existed in the applicable file being reviewed at the time of the review.
An explanation for any increase or decrease in the number of errors identified under subparagraphs (C) and (D), and in the event of an increase in the number of errors, a description of any action taken by the Department to improve compliance and accuracy.
In addition to conducting audits under section 501 of the
Government Surveillance Reform Act of 2026
, the Inspector General of the Department of Justice shall—A semiannual report that aggregates the number of orders, directives, or national security letters with which the person was required to comply into separate categories of—
the number of national security letters received, reported—
for the first 1,000 national security letters received, in bands of 200 starting with 1–200; and
for more than 1,000 national security letters received, the precise number of national security letters received;
the number of customer selectors targeted by national security letters, reported—
for the first 1,000 customer selectors targeted, in bands of 200 starting with 1–200; and
for more than 1,000 customer selectors targeted, the precise number of customer selectors targeted;
the number of orders or directives received, combined, under this Act for contents—
reported—
for the first 1,000 orders and directives received, in bands of 200 starting with 1–200; and
for more than 1,000 orders and directives received, the precise number of orders received; and
disaggregated by whether the order or directive was issued under section 105, 402, or 702;
the number of customer selectors targeted under orders or directives received, combined, under this Act for contents—
reported—
for the first 1,000 customer selectors targeted, in bands of 200 starting with 1–200; and
for more than 1,000 customer selectors targeted, the precise number of customer selectors targeted; and
disaggregated by whether the order or directive was issued under section 105, 402, or 702;
the number of orders or directives received under this Act for noncontents—
reported—
for the first 1000 orders or directives received, in bands of 200 starting with 1–200; and
for more than 1,000 orders or directives received, the precise number of orders received; and
disaggregated by whether the order or directive was issued under section 105, 402, or 702; and
the number of customer selectors targeted under orders or directives under this Act for noncontents—
reported—
for the first 1,000 customer selectors targeted, in bands of 200 starting with 1–200; and
for more than 1,000 customer selectors targeted, the precise number of customer selectors targeted; and
disaggregated by whether the order or directive was issued under section 105, 402, or 702.
by redesignating paragraph (4) as paragraph (2).
Such section is amended—
by redesignating subsections (b) through (d) as subsections (c) through (e), respectively; and
by inserting after subsection (a) the following:
A person who publicly reports information under subsection (a) may also publicly report, using a semiannual report, information relating to the previous 180 days that indicates whether the person was or was not required to comply with an order, directive, or national security letter issued under each of sections 105, 402, and 702 and the provisions listed in section 603(f)(3).
Subsection (c) of such section, as redesignated by subsection (b)(1) of this section, is amended—
or (2);
by striking paragraph (2);
by redesignating paragraph (3) as paragraph (2); and
in paragraph (2), as so redesignated, by striking (4)
and inserting (2)
.
Not later than 1 year after the date of the enactment of this Act, the Privacy and Civil Liberties Oversight Board shall make publicly available and submit to the appropriate committees of Congress a report on the use of activities and protected classes described in subsection (b) in—
applications for orders made by the United States Government under the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801 et seq.); and
investigations for which such orders are sought.
The activities and protected classes described in this subsection are the following:
Activities and expression protected by the First Amendment to the Constitution of the United States.
Race, ethnicity, national origin, and religious affiliation.
In addition to the report made publicly available and submitted under subsection (a), the Board may submit to the appropriate committees of Congress a classified annex.
Not later than 90 days after the date of the enactment of this Act, the Director of National Intelligence shall publish a good faith estimate of—
the number of United States persons whose communications are collected under section 702 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1881a); or
the number of communications collected under such section to which a party is a person located in the United States at the time of communication.
Section 105(e)(6) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1805(e)(6)) is amended by striking shall assess compliance
and inserting shall not less frequently than annually assess compliance
.
Section 108(a)(2) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1808(a)(2)) is amended—
in subparagraph (C), by striking ; and
and inserting a semicolon;
in subparagraph (D), by striking section 301(e).
and inserting section 304(e); and
; and
by adding at the end the following:
the annual assessment conducted pursuant to section 105(e)(6).
Section 304(e)(6) of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1824(e)(6)) is amended by striking shall assess compliance
and inserting shall not less frequently than annually assess compliance
.
Section 306 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1826) is amended—
in paragraph (3), by striking ; and
and inserting a semicolon;
in paragraph (4), by striking the period and inserting ; and
; and
by adding at the end the following:
the annual assessment conducted pursuant to section 304(e)(6).
Nothing in this Act, or an amendment made by this Act, shall be construed to modify the authorities or affect the procedures for the acquisition of records by any department or agency of a State or a political subdivision thereof as in effect on the day before the date of the enactment of this Act.
If any provision of this Act, an amendment made by this Act, or the application of such a provision or amendment to any person or circumstance, is held to be unconstitutional, the remaining provisions of and amendments made by this Act, and the application of the provision or amendment held to be unconstitutional to any other person or circumstance, shall not be affected thereby.
The Attorney General may, in coordination with the Director of National Intelligence as may be appropriate, delay implementation of a provision of this Act or an amendment made by this Act for a period of not more than 1 year upon a showing to the appropriate committees of Congress that the delay is necessary—