Justice & Civil Liberties

Surveillance & Privacy

1978— present

The legal machinery of mass surveillance was built one crisis at a time — and rarely dismantled.

Modern government surveillance traces to the 1978 FISA law, expanded dramatically by the 2001 Patriot Act and exposed by the 2013 Snowden disclosures — and now overtaken by a private data economy that tracks people more thoroughly than any agency could. This traces the legal arc from FISA to today, what the government and companies actually collect, how the courts and Congress have (barely) constrained it, and why security and privacy keep trading places.

Since FISA was enacted

years — the 1978 law is still the frame (ODNI/DOJ)

FISA Court approval rate

>99.9%

~11 denials in ~41,000 applications since 1979 (DOJ)

Data brokers registered

~750

across state registries; hundreds more unregistered (CPPA)

Accounts named by govt

~2M

demanded from the big four tech firms, 2023 (Surfshark)

Feel they’ve lost control

73%

of Americans, over data companies collect (Pew, 2023)

Surveillance law · 1975 — present

Hover any milestone for context.

Statute enactedExpansion / misuseCourt ruling / reform

It was built one crisis at a time

Modern surveillance law is not one design — it is a sediment of reactions. FISA (1978) was the response to the Church Committee’s exposure of decades of warrantless spying. The Patriot Act (2001) was the response to 9/11. Section 702 (2008) legalised, after the fact, warrantless collection the NSA had already been running. Each expansion arrived in an emergency, on a fast clock, with the security argument in the ascendant.

The contractions are rarer and smaller. Only once since 1978 has a statute actually narrowed surveillance — the USA FREEDOM Act (2015), which ended one bulk program after Snowden forced it into the open. The asymmetry is the story: crises ratchet the apparatus up; almost nothing ratchets it back down.

The FISA Court, in one number

The secret court that FISA created has approved surveillance applications at a rate above 99.9% — roughly eleven outright denials across some 41,000 applications between 1979 and 2012. Defenders say the number misleads, because the government narrows applications before filing and the court often forces modifications. Critics call it a rubber stamp. The chart below is that history: a slow climb, a post-9/11 surge to a 2007 peak, and a steep decline as bulk collection under §702 replaced individual warrants.

FISA probable-cause applications to the FISC1979 = earliest year

Source: DOJ annual reports to Congress (1979–2017) via EPIC; recent Title I/III order counts (2018–2021) via Lawfare. 1979 is the FISC’s first year. The metric shifts slightly from applications to orders after 2017, but the arc is continuous — the decline is real, driven by §702 displacing individual warrants. Denials across the whole period number in the low double digits.

The four authorities that do the work

Section 702

Warrantless targeting of non-U.S. persons abroad; the NSA’s workhorse. Americans are collected incidentally — and the FBI can search that data.

Title I / III FISA

Individual probable-cause wiretaps and physical searches approved by the FISC. The original 1978 mechanism, now a few hundred a year.

Section 215 (lapsed 2020)

The Patriot Act "business records" power behind bulk phone-metadata collection. Ended by USA FREEDOM and allowed to expire.

National Security Letters

FBI record demands with no judge and a gag order. Tens of thousands a year; ~143,000 in 2003–2005 alone.