{"id":2254,"date":"2023-07-27T05:21:10","date_gmt":"2023-07-27T13:21:10","guid":{"rendered":"https:\/\/blog.mozilla.org\/netpolicy\/?p=2254"},"modified":"2023-07-27T06:20:12","modified_gmt":"2023-07-27T14:20:12","slug":"mozilla-calls-on-congress-to-reform-fisa","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/","title":{"rendered":"Mozilla Calls on Congress to Reform FISA"},"content":{"rendered":"<p>Section 702 of the Foreign Intelligence Surveillance Act (FISA) is set to expire at the end of the year. Amid the regular <a href=\"https:\/\/www.washingtonpost.com\/national-security\/fbi-and-nsa-violated-surveillance-law-or-privacy-rules-a-federal-judge-found\/2020\/09\/04\/b215cf88-eec3-11ea-b4bc-3a2098fc73d4_story.html\">drumbeat<\/a> <a href=\"https:\/\/www.nytimes.com\/2021\/04\/26\/us\/politics\/fbi-fisa-surveillance.html\">of<\/a> <a href=\"https:\/\/www.washingtonpost.com\/national-security\/2023\/05\/19\/fbi-digital-surveillance-misuse-jan6-blm\/\">revelations<\/a> regarding the abuses of the program, Mozilla calls on Congress to significantly reform FISA now.<\/p>\n<p><strong>FISA Reform is Critical for Civil Liberties and Human Rights<\/strong><\/p>\n<p>Mozilla has advocated through <a href=\"https:\/\/wiki.mozilla.org\/Netpolicy\/actions#Surveillance\">dozens<\/a> of <a href=\"https:\/\/blog.mozilla.org\/netpolicy\/2020\/02\/24\/goals-for-usa-freedom-reauthorization-reforms-access-and-transparency\/\">blog posts<\/a>, <a href=\"https:\/\/blog.mozilla.org\/netpolicy\/files\/2019\/12\/Mozilla-Comments-on-Australian-Ministry-of-Communications-Cyber-Safety-and-the-Arts-TCN-Guidance-1-1.pdf\">regulatory filings<\/a>, and <a href=\"https:\/\/blog.mozilla.org\/wp-content\/uploads\/2017\/08\/No.-16-402-ac-Technology-Companies1.pdf\">amicus briefs<\/a> for more transparency and due process in government surveillance in the United States. Our <a href=\"https:\/\/surveillance.mozilla.org\/\">Surveillance Principles for a Secure, Trusted Internet<\/a> have served as the guiding force of our advocacy in this space. These principles were created in the aftermath of the Snowden revelations of 2013 that showed the world the catastrophic breadth of US government surveillance. Our advocacy here also stems from Principle 4 of Mozilla\u2019s Manifesto: \u201cIndividuals\u2019 security and privacy on the internet are fundamental and must not be treated as optional.\u201d The status quo of US government surveillance <a href=\"https:\/\/www.theguardian.com\/commentisfree\/2022\/sep\/26\/us-courts-government-accountability-state-secrets\">violates<\/a> this principle and can threaten the human rights of journalists, dissidents, and even <a href=\"https:\/\/lahood.house.gov\/2023\/3\/lahood-addresses-violations-and-need-for-fisa-reform\">members<\/a> of <a href=\"https:\/\/www.axios.com\/2023\/07\/21\/fbi-improper-search-senator-court\">Congress<\/a>.<\/p>\n<p>The current FISA process is overbroad, restricted only by weak legislation and executive orders that, experience has shown, do not create real accountability. It has been clear for some time that any meaningful reform to FISA 702 would create accessible due process available to subjects of surveillance accompanied by effective oversight.<\/p>\n<p><b>FISA reform should focus on transparency, oversight, and due process.<\/b><\/p>\n<p><b>Transparency:<\/b> Subjects of surveillance should be appropriately notified when 702 intelligence is being used in a criminal case against them, unless a court certifies that doing so would have a material impact on a specific active investigation. Subjects of surveillance have a basic right to know how the government obtained otherwise private communications in a criminal case, and whether that information was obtained lawfully. Congress should also change the secrecy requirements behind 702 data requests to be time-bound and limited to the potential risks.<\/p>\n<p><b>Accountability:<\/b> Potential checks on inappropriate surveillance in FISA are not sufficiently independent or empowered. While the President\u2019s <a href=\"https:\/\/www.whitehouse.gov\/briefing-room\/statements-releases\/2022\/10\/07\/fact-sheet-president-biden-signs-executive-order-to-implement-the-european-union-u-s-data-privacy-framework\/\">recent executive order<\/a> makes some progress on this front, it does not go far enough \u2013 and any such protections should be codified into law. Additionally, the government has <a href=\"https:\/\/wikimediafoundation.org\/news\/2023\/02\/21\/u-s-supreme-court-declines-to-hear-wikimedia-foundations-challenge-to-nsa-mass-surveillance\/\">repeatedly<\/a> <a href=\"https:\/\/epic.org\/documents\/clapper-v-amnesty-intl-usa\/\">snuffed<\/a> lawsuits aimed at accountability by asserting that plaintiffs do not have standing to sue or that the lawsuit is incompatible with protections for state secrets. Congress should therefore make clear that FISA\u2019s dispute resolution procedures (i) preempt the state secrets privilege and (ii) allow suits challenging 702 surveillance outside of narrow contexts where the government is bringing a case using 702-derived evidence.<\/p>\n<p><b>Due process:<\/b> In its current form, Section 702 has operated as an end-run around the Fourth Amendment. Information should be collected on or queried for American citizens by intelligence agencies only after a showing of probable cause. Congress should furthermore prohibit intelligence agencies from buying information from data brokers to circumvent statutory and Constitutional guardrails. All Americans deserve the basic level of scrutiny aligned with Constitutional rights against unreasonable search and seizure. And for non-American citizens, Congress should require the necessity and proportionality of any collection, and codify enforceable remedies against missteps or abuses of power.<\/p>\n<p><strong>The Business Case for FISA Reform<\/strong><\/p>\n<p>FISA is not just a national security or civil liberties issue. Meaningful FISA reform would create critical operational certainty for businesses of all sizes.<\/p>\n<p>In July of 2020, the European Court of Justice (CJEU) <a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf?text=&amp;docid=228677&amp;pageIndex=0&amp;doclang=en&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=12312155\">ruled<\/a> that FISA does not provide adequate protections for European individuals\u2019 data transferred to the US. In so doing, the Court of Justice struck down the <a href=\"https:\/\/noyb.eu\/en\/faqs-cjeu-case\">EU-US Privacy Shield<\/a>, which thousands of US businesses used as a safe harbor to transfer data between the EU and the US.<\/p>\n<p>Data transfers between the US and EU are an essential part of doing business, and an American company that serves European customers must almost always transfer some data from the EU to the US. But FISA\u2019s flaws mean that those basic parts of doing business are in limbo, with significant legal risk for companies who get it wrong.<\/p>\n<p>The effects of the loss of Privacy Shield on small and medium-sized businesses were immediate. Thousands of US businesses which previously relied on Privacy Shield were <a href=\"https:\/\/edpb.europa.eu\/system\/files\/2021-06\/edpb_recommendations_202001vo.2.0_supplementarymeasurestransferstools_en.pdf\">forced<\/a> to do expensive case-by-case transfer impact assessments to evaluate the privacy risks for each transfer they did. In short, FISA\u2019s inadequate surveillance protections led to onerous business obligations \u2013 and increased legal risk \u2013 for <a href=\"https:\/\/www.privacyshield.gov\/list\">thousands of businesses<\/a>. And the decision has been accompanied by <a href=\"https:\/\/noyb.eu\/en\/noyb-win-first-major-fine-eu-1-million-using-google-analytics\">millions of dollars<\/a> in fines for companies.<\/p>\n<p>The Biden administration and EU have struck and <a href=\"https:\/\/www.reuters.com\/technology\/eu-announces-new-us-data-transfer-pact-challenge-ahead-2023-07-10\/\">finalized<\/a> a new deal, but this safe harbor, too, is <a href=\"https:\/\/noyb.eu\/en\/open-letter-future-eu-us-data-transfers\">expected to be challenged<\/a> in court with a significant likelihood of success. That is because some of the protections called for by the European Court of Justice can only truly be implemented legislatively. EU courts may therefore be unwilling to depend on an executive order as a guarantee for EU citizens. Another failed EU-US data transfer agreement could mean existential risk for thousands of US companies.<\/p>\n<p>If Congress makes the reforms we described above, the European Court of Justice is more likely to find that US surveillance practices respect the rights of Europeans. That is because each of these fundamental flaws in FISA were part of the CJEU\u2019s ruling that FISA does not provide surveillance targets with \u201csubstantially equivalent\u201d protections compared to European surveillance law.<\/p>\n<p>__________<\/p>\n<p>Congress has many competing priorities in the next six months. For businesses all over the US, and for the rights and dignity of all Americans and global citizens, Congress should spend its time on FISA 702 reform. With such intense bipartisan concern over the program, reauthorization without reform would be a missed opportunity to do right by Americans and American businesses.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Section 702 of the Foreign Intelligence Surveillance Act (FISA) is set to expire at the end of the year. Amid the regular drumbeat of revelations regarding the abuses of the &hellip; <a class=\"go\" href=\"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/\">Read more<\/a><\/p>\n","protected":false},"author":1932,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10137,847,10139,46877],"tags":[],"coauthors":[453000],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Mozilla Calls on Congress to Reform FISA - Open Policy &amp; Advocacy<\/title>\n<meta name=\"description\" content=\"Amid the regular drumbeat of revelations regarding the abuses of FISA, Mozilla calls on Congress to significantly reform it now.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Noam Kantor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/\",\"name\":\"Mozilla Calls on Congress to Reform FISA - Open Policy &amp; Advocacy\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#website\"},\"datePublished\":\"2023-07-27T13:21:10+00:00\",\"dateModified\":\"2023-07-27T14:20:12+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/efa6132074de03aea902ade49ea60ce9\"},\"description\":\"Amid the regular drumbeat of revelations regarding the abuses of FISA, Mozilla calls on Congress to significantly reform it now.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/netpolicy\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mozilla Calls on Congress to Reform FISA\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/netpolicy\/\",\"name\":\"Open Policy &amp; Advocacy\",\"description\":\"Mozilla&#039;s official blog on open Internet policy initiatives and developments\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/netpolicy\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/efa6132074de03aea902ade49ea60ce9\",\"name\":\"Noam Kantor\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/image\/04947ca0d74f1a7be9c456e99693ec44\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/baf3871c4471a1ea9e9a6ad1c01cdd01?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/baf3871c4471a1ea9e9a6ad1c01cdd01?s=96&d=mm&r=g\",\"caption\":\"Noam Kantor\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mozilla Calls on Congress to Reform FISA - Open Policy &amp; Advocacy","description":"Amid the regular drumbeat of revelations regarding the abuses of FISA, Mozilla calls on Congress to significantly reform it now.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/","twitter_misc":{"Written by":"Noam Kantor","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/","url":"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/","name":"Mozilla Calls on Congress to Reform FISA - Open Policy &amp; Advocacy","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/#website"},"datePublished":"2023-07-27T13:21:10+00:00","dateModified":"2023-07-27T14:20:12+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/efa6132074de03aea902ade49ea60ce9"},"description":"Amid the regular drumbeat of revelations regarding the abuses of FISA, Mozilla calls on Congress to significantly reform it now.","breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/netpolicy\/2023\/07\/27\/mozilla-calls-on-congress-to-reform-fisa\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/netpolicy\/"},{"@type":"ListItem","position":2,"name":"Mozilla Calls on Congress to Reform FISA"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#website","url":"https:\/\/blog.mozilla.org\/netpolicy\/","name":"Open Policy &amp; Advocacy","description":"Mozilla&#039;s official blog on open Internet policy initiatives and developments","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/netpolicy\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/efa6132074de03aea902ade49ea60ce9","name":"Noam Kantor","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/netpolicy\/#\/schema\/person\/image\/04947ca0d74f1a7be9c456e99693ec44","url":"https:\/\/secure.gravatar.com\/avatar\/baf3871c4471a1ea9e9a6ad1c01cdd01?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/baf3871c4471a1ea9e9a6ad1c01cdd01?s=96&d=mm&r=g","caption":"Noam Kantor"}}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts\/2254"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/users\/1932"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/comments?post=2254"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/posts\/2254\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/media?parent=2254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/categories?post=2254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/tags?post=2254"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/netpolicy\/wp-json\/wp\/v2\/coauthors?post=2254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}