The Surveillance Law That Could Affect Every American

House Speaker Mike Johnson has introduced a new proposal to reauthorize Section 702 of the Foreign Intelligence Surveillance Act (FISA) for another three years. The bill, which comes after two previous failed votes, is notably missing one thing that privacy advocates have long demanded: a requirement for federal law enforcement to obtain a warrant before searching through Americans' data collected under the program. With Section 702 set to expire on April 30, the clock is ticking on a debate that has significant implications for digital privacy in the United States.

If you care about who can access your personal communications and under what legal authority, this is a story worth following closely.

What Is Section 702, and Why Does It Matter?

Section 702 of FISA was originally designed as a foreign intelligence tool. It authorizes U.S. intelligence agencies to collect electronic communications from non-U.S. persons located outside the country, without a warrant. The targets are meant to be foreign nationals, not American citizens.

The problem, as privacy advocates have consistently pointed out, is that the internet does not respect legal boundaries. When the NSA, CIA, or FBI collects communications from a foreign target, those communications often include messages sent to or received from people inside the United States. This is commonly referred to as "incidental collection," though critics argue the word "incidental" understates just how frequently Americans' data gets swept up in the process.

Once that data is collected, federal law enforcement agencies can search through it. Under the current framework, and under Johnson's proposed reauthorization, they can do so without obtaining a warrant. This means your emails, messages, or voice communications could potentially be reviewed by government investigators without a judge ever signing off on it.

The Warrant Debate: Where the Fight Really Is

The core disagreement in Congress is not really about whether to renew Section 702. Most lawmakers agree the program serves legitimate national security purposes. The fight is over whether Americans deserve Fourth Amendment protections for their own data, even when that data is collected as a byproduct of targeting foreigners.

Privacy advocates, civil liberties organizations, and a bipartisan group of legislators have pushed for what is sometimes called a "U.S. person query warrant requirement." The idea is straightforward: if the government wants to search through a database that contains Americans' private communications, it should have to go to a judge first and show probable cause, just as it would for any other search.

Johnson's new proposal does not include that requirement. Supporters of the bill argue that adding a warrant requirement would slow down intelligence operations and potentially allow threats to go undetected. Critics counter that this reasoning sacrifices constitutional rights for the sake of administrative convenience.

What This Means For You

You do not have to be a foreign national or a terrorism suspect for Section 702 to touch your life. If you communicate with anyone outside the United States, whether for business, family, or personal reasons, your messages could be captured as part of foreign surveillance operations.

This is particularly relevant for anyone who uses encrypted messaging apps, cloud-based email, or other digital communication tools that route data through servers abroad. The technical architecture of the modern internet means that even purely domestic communications sometimes travel through international infrastructure, adding another layer of complexity to what "foreign surveillance" actually captures in practice.

VPNs are often discussed in the context of programs like Section 702, and for good reason. A VPN encrypts your internet traffic and routes it through servers in other locations, which can reduce some forms of exposure. However, it is important to be clear about what a VPN can and cannot do here. A VPN is not a shield against a lawful government intelligence program. If your communications are collected as part of a Section 702 operation, the fact that you used a VPN does not necessarily protect you from a subsequent search of that data. What a VPN does do is reduce your exposure to other forms of surveillance, data harvesting by third parties, and interception on unsecured networks.

The broader point is that technical tools and legal protections are both part of the privacy equation, and neither is sufficient on its own.

Actionable Takeaways

Whether Section 702 is renewed with or without a warrant requirement, there are practical steps you can take to think more clearly about your digital privacy.

  • Understand what you are communicating and where. If you regularly communicate with people outside the United States, your data has a higher probability of touching systems covered by foreign intelligence programs.
  • Use end-to-end encrypted messaging apps for sensitive conversations. Encryption means that even if data is collected at the network level, the content itself is much harder to read.
  • Follow the legislative process. Section 702 reauthorization is an ongoing debate with real consequences. Contacting your representatives is a direct way to make your views on warrant requirements known.
  • Think critically about privacy tools. No single tool provides complete protection. A layered approach, combining encryption, careful communication habits, and awareness of the legal environment, is more effective than relying on any one solution.

The FISA Section 702 debate is one of the most consequential privacy battles happening in Washington right now. How it resolves will shape the boundaries of government surveillance for years to come.