Newly-Released Documents Show NSA Claiming An Email Address Is A 'Facility,' Skirting Probable Cause Requirements

from the so,-you-know,-more-of-the-same dept

This order and opinion rests on an assumption, rather than a holding, that the surveillance at issue is 'electronic surveillance' as defined at 50 U.S.C. 1801(f), and that the application is within the jurisdiction of this Court.

Until recently, these were the only circumstances in which the government had sought, or this Court had entered, a FISA order authorizing electronic surveillance of the telephone or e-mail communications of suspected international terrorists. However, on December 13, 2006, in Docket No. [redacted], the government filed an application seeking an order that would authorize the electronic surveillance of telephone numbers and e-mail addresses thought to be used by international terrorists without a judge's making the probable cause findings described above, either before the initiation of surveillance of within the 72 hours specified in 1805(f)...

The acquisition of e-mail communications because they refer to a selector e-mail address does not appear to have been authorized under FISA prior to Docket [redacted] and is discussed further below.

(B) each of the facilities or places at which the electronic surveillance is directed is being used, or is about to be used, by a foreign power or an agent of a foreign power.

Underlying the government's position, therefore, is the premise that 1805(a)(3)(B) can be applied so variously that a FISA judge has great discretion in determining what "facilities" should be the subject of the judge's probable cause analysis.

Tellingly, none of the cited eases stand for the proposition on which this application rests that electronic surveillance is not 'directed' at particular phone numbers and e-mail addresses.

However, even if the statutory language were as elastic as the government contends, it would still be incumbent on me to apply the language in the manner that furthers the intent of Congress. In determining what interpretation would best further congressional intent, it is appropriate to consult legislative history. That legislative history makes clear that the purpose of pre-surveillance judicial review is to protect the fourth amendment rights of US persons. Congress intended the pre-surveillance "judicial warrant procedure," and particularly the judge's probable cause findings, to provide an "external check" on executive branch decisions to conduct surveillance.



Contrary to this intent of Congress, the probable cause inquiry proposed by the government could not possibly restrain executive branch decisions to direct surveillance at any particular individual, telephone number or e-mail address.



[...]



Thus, under the government's interpretation, the judge's probable cause findings have no bearing on the salient question: whether the communications to be acquired will relate to the targeted foreign powers. As discussed below, the government would have all of the probable cause findings bearing on that question made by executive branch officials, subject to after-the-fact reporting to the Court, through processes characterized by the government as minimization. That result cannot be squared with the statutory purpose of providing a pre-surveillance "external check" on surveillance decisions, or with the expectation of Congress that the role of the FISA judge would be the same as that of judges under existing law enforcement warrant procedures.

I am unable, on the basis of the facts submitted by the applicant, to find probable cause to believe that each of these facilities "is being used, or is about to be used, by a foreign power or an agent of a foreign power." The application contains no facts that would support such a finding.

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community. Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis. While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

If it's late Friday afternoon and the public's attention is focused elsewhere , it must mean it's time for another document release from James Clapper's office (ODNI). The heavily-redacted documents dumped by the ODNI deal with the precursors to the FISA Amendments Act (FAA): the Terrorist Surveillance Program (TSP) and 2007's interim legislation (Protect America Act or PAA) that bridged the gap between the TSP and the FAA.The most interesting document in the release is an April 3, 2007 order [ pdf link ] from the FISA court which contains some rare hesitation from a FISA judge (Roger Vinson) as he deals with the NSA's desire to capture communications without providing probable cause support for its actions.A footnote attached to the first paragraph of the order makes it clear Judge Vinson felt he was drifting into uncharted waters, with much of that being due to the NSA's shifting definitions of surveillance terms in its previous legal arguments Vinson's order points out that the NSA attempted to change the rules of its interception program, both in terms of the evidence it provides as well as its desire to collect communications of known US persons.The NSA claimed in its support memos that the probable cause finding was preventing the agency from working at maximum efficiency, causing it to fall behind a constantly moving terrorist threat. In addition, its January 2007 requests included one seeking permission to collect communications from known US persons, again without meeting even the lowered bar of probable cause required by the FISA court. While the court did hand down a number of stipulations, it allowed the NSA to use its proposed "emergency FISA application" to skirt probable cause requirements and the 72-hour notice period. It also granted this for rolling 90-day periods, subject to renewal. By doing this, the FISA court turned "emergency" surveillance into the new normal.Beyond that, the NSA also sought to expand its set of "selectors." Previously, email addresses and phone numbers known to be used by (or about to be used by) members or agents of "foreign powers" or other redacted terrorist organizations were the only ones allowed to be used as selectors when collecting communications. In these applications, the NSA wanted to start contact chaining -- tasking email addresses or phone numbers thatto previous selectors as new selectors. Judge Vinson's order notes that there's no way the NSA can hope to meet the probable cause requirement by doing this.The "further discussion" includes Vinson highlighting this relevant part of the FISA court's probable cause requirements.Because the NSA couldn't credibly claim that these new guilty-by-association selectors are being used by the targets it was authorized to collect from, the agency deployed a number of word games. Vinson points out that one memorandum of law defines "facilities" one way (more traditionally as an operations base), while the most recent one defined the word quite differently. (In particular, the NSA maintained that an email address or phone number is a "facility" in and of itself, simply because both "facilitate the transmission of communications." Footnote on page 32 .)Much of what follows is redacted, especially where further clarification would be extremely useful. Reading between the black blocks, it appears the NSA attempted to argue that the collection of communications was distinct from the term "electronic surveillance," except for the gathering of internet communications, which it claims is synonymous with the statutory definition. After reading through the government's multiple citations (most of which the judge deems irrelevant) in support of its seemingly contrary arguments, Vinson arrives at this conclusion.That would be the NSA's argument that a "facility" can be an email address, except for the times when the more traditional definition allows it to cast a wider net. Vinson further points out that accepting the NSA's arguments means discarding the intent of Congress and removing the court's ability to act as a check against executive branch overreach.He concludes:In this, we see the NSA behaving much like its spiritual brethren in law enforcement and investigative agencies -- seeking to route around probable cause requirements under the pretense that bad guys will always be at least one step ahead if the government is forced to follow the rules. Rather than stay within the confines, the NSA plays word games in an effort to bypass governing statutes. The agency has demonstrated repeatedly that it has little desire to work within the framework of the law and has on multiple occasions attempted to short-circuit the system by feeding the court bad information and pursuing elliptical legal arguments. The end result is the current surveillance framework, thanks to the FISA Amendments Act's codifying of the NSA's questionable collections under the Protect America Act.

Filed Under: 4th amendment, email, james clapper, nsa, odni, probable cause, surveillance