USA PATRIOT Act and USA Freedom Act

USA PATRIOT Act and USA Freedom Act: A Comprehensive Guide for CIPP/US Exam Preparation

Why This Topic Is Important

The USA PATRIOT Act and the USA Freedom Act are foundational pieces of U.S. legislation that govern how the government accesses private-sector data for national security and intelligence purposes. For CIPP/US candidates, understanding these laws is critical because they sit at the intersection of privacy rights, government surveillance, and the obligations of private-sector organizations. These laws define the boundaries of government authority to compel disclosure of personal information held by businesses, telecommunications companies, internet service providers, and financial institutions. Questions on these topics appear frequently in the CIPP/US exam, particularly within the domain of Government and Court Access to Private-Sector Information.

What Is the USA PATRIOT Act?

The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act (USA PATRIOT Act) was enacted on October 26, 2001, in the immediate aftermath of the September 11 terrorist attacks. Its primary purpose was to enhance the ability of U.S. law enforcement and intelligence agencies to detect, investigate, and prevent terrorism.

Key provisions of the USA PATRIOT Act include:

• Section 206 – Roving Wiretaps: Authorized roving surveillance orders under the Foreign Intelligence Surveillance Act (FISA), allowing intelligence agencies to monitor a target across multiple communication devices and platforms without having to obtain a new court order for each device.

• Section 215 – Business Records (the "Library Records" Provision): Expanded the government's ability to obtain "any tangible things" (including business records, library records, and other documents) relevant to an authorized investigation to protect against international terrorism or clandestine intelligence activities. This provision required a court order from the Foreign Intelligence Surveillance Court (FISC). It was this provision that was later revealed to have been used to justify the NSA's bulk collection of telephone metadata.

• Section 505 – National Security Letters (NSLs): Expanded the FBI's authority to issue National Security Letters, which are administrative subpoenas that compel the production of certain categories of records (such as telephone and electronic communications records, financial records, and credit reports) without judicial approval. NSLs include a gag order prohibiting the recipient from disclosing the existence of the NSL.

• Section 206 and 207 – FISA Amendments: Extended the duration of FISA surveillance orders and expanded their applicability.

• Enhanced Information Sharing: Broke down the "wall" between intelligence agencies and law enforcement, allowing greater sharing of foreign intelligence information.

• Pen Register and Trap and Trace Provisions: Extended pen register and trap and trace authority to cover electronic communications (email, internet activity) in addition to telephone communications.

What Is the USA Freedom Act?

The Uniting and Strengthening America by Fulfilling Rights and Ensuring Effective Discipline Over Monitoring Act (USA Freedom Act) was enacted on June 2, 2015. It was passed in direct response to the Edward Snowden revelations about the NSA's bulk collection of Americans' telephone metadata under Section 215 of the PATRIOT Act.

The USA Freedom Act reformed several provisions of the PATRIOT Act while reauthorizing others. Key provisions include:

• End of Bulk Metadata Collection: The most significant reform was the prohibition of bulk collection of telephone metadata by the NSA. Instead of the government collecting and storing this data, the records remain with the telecommunications providers. The government must now make a specific query to the FISC using a specific selection term (such as a phone number associated with a suspected terrorist) to obtain targeted records.

• Specific Selection Term Requirement: The Act requires that government requests under Section 215, pen register/trap and trace orders, and NSLs must use a specific selection term to narrowly limit the scope of tangible things sought. This term must specifically identify a person, account, address, or personal device in a way that limits the scope of the request.

• FISC Reforms: The Act introduced greater transparency and adversarial process to the FISC. It created a panel of amici curiae (friends of the court) — independent advocates who can be appointed to argue for privacy and civil liberties interests in significant FISC proceedings. Previously, FISC proceedings were entirely ex parte (only the government appeared before the court).

• Transparency Reporting: The Act allowed and required greater public reporting. It permitted companies to publish transparency reports with more detail about the number and types of national security orders they receive. The government is also required to declassify significant FISC opinions.

• Reauthorization of Key Provisions: The Act reauthorized roving wiretaps (Section 206), the "lone wolf" provision (which allows surveillance of non-U.S. persons engaged in international terrorism who are not necessarily connected to a recognized terrorist group), and a modified version of Section 215.

• NSL Reforms: While NSLs were retained, the Act added judicial review mechanisms and allowed recipients to challenge gag orders more effectively.

How These Laws Work in Practice

Understanding the operational framework is essential:

1. Government Identifies a Target: A U.S. intelligence or law enforcement agency identifies a person or entity suspected of involvement in terrorism or espionage.

2. Application to FISC: For FISA orders (including Section 215 orders), the government applies to the FISC, which operates in secret. Under the USA Freedom Act, these applications must include a specific selection term.

3. FISC Review: The FISC reviews the application. For novel or significant questions of law, an amicus curiae may be appointed under the USA Freedom Act reforms.

4. Order Issued to Private-Sector Entity: If approved, the order is served on the relevant private-sector entity (telecom company, ISP, financial institution, etc.), compelling production of the specified records.

5. Nondisclosure/Gag Orders: The recipient is typically prohibited from disclosing the existence of the order to the target or to the public, though the USA Freedom Act provides improved mechanisms to challenge these gag orders.

6. Compliance by Private Sector: The private-sector entity must comply with the order and produce the requested records. Companies may challenge orders they believe are unlawful.

7. Transparency Reporting: Under the USA Freedom Act, companies may publish aggregate statistics about the national security orders they receive within certain bands (e.g., 0-249, 250-499).

Key Differences Between the USA PATRIOT Act and USA Freedom Act

Understanding the evolution from one to the other is vital for exam success:

• Bulk vs. Targeted Collection: The PATRIOT Act (as interpreted by the government) allowed bulk collection of metadata. The Freedom Act ended bulk collection and requires specific selection terms.

• FISC Transparency: The PATRIOT Act kept FISC proceedings entirely secret and one-sided. The Freedom Act introduced amici curiae and required declassification of significant opinions.

• Corporate Transparency: The PATRIOT Act severely restricted companies from disclosing anything about national security orders. The Freedom Act expanded transparency reporting rights for companies.

• Oversight: The Freedom Act significantly increased oversight mechanisms compared to the original PATRIOT Act framework.

Important Context: Expiration and Reauthorization

Several key provisions of the USA Freedom Act expired on March 15, 2020, including the call detail records program (Section 215), roving wiretaps, and the lone wolf provision. Congress has not reauthorized these provisions as of the relevant exam period. However, existing orders may continue, and the legal framework remains important for understanding U.S. surveillance law. Candidates should be aware that the NSA had already voluntarily shut down the call detail records program in 2019 due to technical and compliance issues.

Connection to Other Privacy Frameworks

These laws connect to several other important CIPP/US topics:

• Fourth Amendment: The constitutional foundation for privacy protections against unreasonable government searches and seizures. The Third-Party Doctrine (established in Smith v. Maryland) has historically limited Fourth Amendment protections for records held by third parties, though Carpenter v. United States (2018) began narrowing this doctrine for digital records.

• FISA (Foreign Intelligence Surveillance Act): The USA PATRIOT Act and USA Freedom Act both amend FISA. Understanding FISA's framework is essential context.

• Electronic Communications Privacy Act (ECPA): Works alongside FISA to govern government access to electronic communications.

• Executive Order 12333: Governs intelligence collection activities conducted outside the United States and complements the statutory framework.

• EU-U.S. Data Transfers: U.S. surveillance laws, including the PATRIOT Act and FISA Section 702, have been central to challenges against transatlantic data transfer mechanisms (e.g., Schrems I and Schrems II decisions by the CJEU).

---

Exam Tips: Answering Questions on USA PATRIOT Act and USA Freedom Act

1. Know the Timeline and Context
Remember the sequence: PATRIOT Act (2001) → Snowden revelations (2013) → USA Freedom Act (2015). Many exam questions test whether you understand why the Freedom Act was enacted and what it changed.

2. Focus on Section 215 and Its Reform
Section 215 is the most heavily tested provision. Know that it originally allowed collection of "any tangible things" relevant to an investigation, that it was used to justify bulk metadata collection, and that the Freedom Act reformed it to require specific selection terms.

3. Understand National Security Letters (NSLs)
NSLs are a favorite exam topic. Remember: NSLs are not court orders — they are administrative subpoenas issued by the FBI without judicial approval. They come with gag orders. The Freedom Act improved the ability of recipients to challenge them.

4. Distinguish Between FISA Orders and NSLs
FISA orders require FISC approval; NSLs do not. This is a common point of confusion that examiners test.

5. Remember the Specific Selection Term
This is a key concept introduced by the USA Freedom Act. If you see a question about what changed regarding the scope of government data requests, the answer likely involves the requirement for a specific selection term.

6. Know the FISC Reforms
The introduction of amici curiae and increased transparency are signature reforms of the USA Freedom Act. Questions may ask what mechanism was introduced to provide an adversarial voice in FISC proceedings.

7. Transparency Reporting
Know that the USA Freedom Act allowed companies to publish aggregate data about national security requests in specified numerical bands. This was a significant shift from the prior complete secrecy requirement.

8. Watch for Distractor Answers
Common distractors include: confusing the PATRIOT Act with the Freedom Act, attributing Freedom Act reforms to the original PATRIOT Act, confusing FISA Section 702 (which governs collection targeting non-U.S. persons abroad) with Section 215, and confusing NSLs with FISA orders.

9. Apply the "Before and After" Method
When facing a question about government surveillance authorities, ask yourself: Was this before or after the USA Freedom Act? This helps you determine whether bulk collection was permitted or whether specific selection terms were required.

10. Connect to Broader Themes
The exam may present scenario-based questions where you need to identify which legal authority applies. Remember that these laws specifically address government access to private-sector data for national security purposes — not law enforcement access for ordinary criminal investigations (which is governed by ECPA, the Stored Communications Act, and the Fourth Amendment).

11. Practice Elimination
For multiple-choice questions, eliminate answers that suggest the government can conduct warrantless bulk collection post-2015 (the Freedom Act ended this). Also eliminate answers suggesting NSLs require court approval (they do not, though they can be challenged in court).

12. Remember Key Terms
Memorize these terms and their definitions: specific selection term, amici curiae, tangible things, gag order, roving wiretap, lone wolf provision, pen register, trap and trace, and metadata. These terms frequently appear in exam questions and understanding them precisely will help you select the correct answer.

By mastering the distinctions between the USA PATRIOT Act and the USA Freedom Act, understanding their operational mechanics, and applying focused exam strategies, you will be well-prepared to answer questions on this critical area of U.S. privacy law.