Nine days
At midnight on April 20, 2026, Section 702 of the Foreign Intelligence Surveillance Act expires. Congress is in recess until Monday. When lawmakers return on April 13, they will have roughly four legislative days to decide the fate of the most powerful warrantless surveillance authority in the federal government's toolkit.
Section 702 authorizes the NSA to collect the communications of non-U.S. persons located abroad through compelled cooperation from internet backbone providers — AT&T, Verizon, Google, Microsoft, Apple. The collection happens on American soil, on American servers, through American companies. And because the internet does not sort conversations by citizenship, the database inevitably contains the emails, texts, and phone calls of millions of Americans who were never targeted.
The FBI can search that database for Americans' communications without a warrant. It did so 7,413 times in 2025 — a 35 percent increase from the year before, according to a transparency report signed by acting FBI Assistant Director Ted Groves. The Privacy and Civil Liberties Oversight Board — now a one-member body after President Trump fired its three Democratic members in 2025 — issued a staff report on April 2 finding 98.5 percent compliance with the new query rules, and noting that two-thirds of the President's Daily Brief in 2025 contained 702-derived intelligence.
Both of those numbers are true. Neither of them settles the argument.
The math that doesn't work
Speaker Mike Johnson plans to bring an 18-month clean extension to the House floor the week of April 14. The problem is arithmetic.
The Congressional Progressive Caucus has whipped 98 House Democrats into a binding position against any reauthorization without "dramatic reforms" — the first time in CPC history the caucus has taken this stance on a surveillance vote. Ranking Judiciary member Jamie Raskin sent a letter to all colleagues urging opposition: "Times have changed. The safeguards put in place in 2024 have been badly eroded by the Trump Administration."
On the other side, roughly 12 Republican members — led by Reps. Lauren Boebert, Anna Paulina Luna, and Freedom Caucus members — are threatening to block the rule vote. Boebert has tied her vote to passage of the SAVE Act. Luna told Axios that Speaker Johnson confronted her on the House floor on March 27, telling her she would bear responsibility for "thousands of American deaths." Luna's version: "I was getting a spanking on the floor."
Johnson can lose one Republican on the procedural rule vote without Democratic help. He currently faces twelve defections. A clean extension would likely pass on the floor with bipartisan support — ranking Intelligence Committee member Jim Himes is lobbying Democrats to vote yes — but the rule vote is the chokepoint.
Jim Jordan, the 2024 warrant-amendment champion who voted against reauthorization when his own amendment failed, reversed his position in mid-March and now backs the clean extension, citing the Iran conflict and calling it a "short-term" measure. Darrell Issa followed. The institutional GOP is consolidating behind extension. The Freedom Caucus is not.
The gun-registry argument nobody expected
On April 10, 2026, the Washington Times published an op-ed co-authored by Bob Goodlatte — former House Judiciary chairman, now of the Project for Privacy and Surveillance Accountability — and Brandon Combs, president of the Firearms Policy Coalition. Their argument: Section 702 data, combined with commercially purchased location and transaction data, and processed by AI, creates the conditions for a de facto federal firearms registry — something Congress has explicitly prohibited since 1986.
The argument is not hypothetical. The ATF conducted 549 Clearview AI facial recognition searches on gun owners between 2019 and 2022 with no policy, no risk assessment, and no training. The ATF holds approximately one billion digitized firearm transaction records. The FBI holds $27 million in Babel Street Locate X licenses — 5,000 seats — capable of geofencing gun shops, ranges, and FFLs. And on March 18, FBI Director Kash Patel told the Senate Intelligence Committee under oath that the FBI purchases commercial location data and declined to commit to stopping.
Senator Wyden pressed him: "Will you commit to not buying Americans' location data?" Patel declined, saying the FBI "uses all tools" and purchases "commercially available information that's consistent with the Constitution."
This is the constituency the privacy movement has never been able to reach. The gun-registry frame pulls Second Amendment conservatives into the reform camp. The Goodlatte-Combs op-ed was published the same day as a letter from approximately 50 former national security officials — including former DNI James Clapper, former CIA Director John Brennan, and former FBI Director Christopher Wray — urging a clean extension. Senator Mike Lee responded: "Warrantless government spying on American citizens has been used by the deep state to target President Trump's campaign and associates, members of Congress, and hardworking, law-abiding Americans alike."
The data broker loophole
The FBI's commercial data purchases are not a side issue. They are the structural reason the 702 reform debate exists.
On April 9, 2026, Citizen Lab published "Uncovering Webloc" — a report documenting a geolocation surveillance system built on advertising data that tracks up to 500 million mobile devices. Webloc, developed by Israeli firm Cobwebs Technologies and now sold by Penlink, harvests device identifiers and GPS coordinates from the real-time bidding ecosystem that powers mobile advertising. It can track a device's movements up to three years into the past and de-anonymize the owner by inferring home and work addresses.
Known customers include ICE, the U.S. military, the Texas Department of Public Safety, New York City district attorneys, and police departments in Los Angeles, Dallas, and Baltimore. When Senator Wyden's office scheduled a briefing with ICE about the contract, ICE cancelled it the day before with no explanation and no offer to reschedule.
The mechanism is the same one that feeds the FBI's Babel Street licenses and the DHS's $1 billion Palantir blanket purchase agreement finalized in February 2026. Every time a mobile app displays an advertisement, a bid request containing the device's precise GPS location, its advertising ID, and its device type is broadcast to dozens or hundreds of companies in milliseconds. Surveillance firms participating in the bidding process siphon the data even without winning the ad. Data brokers aggregate it. The government buys it.
No warrant. No probable cause. No court oversight. The Fourth Amendment, which requires a warrant to search a person's property, is treated as inapplicable because a commercial transaction intervenes between the surveillance and the government.
The Wyden-Lee Government Surveillance Reform Act (S.4082), introduced March 12, 2026, would close this loophole for the first time. It would ban federal agencies from purchasing Americans' data from brokers without a warrant, require warrants for FBI queries of U.S. persons' communications under 702, restore PCLOB independence, and narrow the expanded definition of "electronic communication service provider" that the 2024 RISAA law introduced. It is endorsed by 130+ civil society organizations. It is the only bipartisan, bicameral reform vehicle on the table.
The filtering collision
On March 17, 2026, a judge on the Foreign Intelligence Surveillance Court issued a classified ruling finding that the intelligence community's proposed approach for filtering 702 data "could present deficiencies." The problem is not limited to the FBI. The FISC found issues across the entire intelligence community — the filtering tools that analysts use to sift through raw Section 702 data are not working as claimed. The FBI had discontinued its old "Advanced Filter Function" after earlier compliance problems, but is now, per the court, "using another tool with the same functionality."
The White House has until April 16 to respond to the FISC's ruling — four days before the statute sunsets. This collision is not accidental. Congress must decide whether to extend a surveillance authority whose own oversight court has just warned of deficiencies in its filtering, during the same week that the executive branch must explain how it plans to address them.
Separately, the FISC renewed 702 certifications for another year, as notified to Congress on April 10. This means the court's authorization for collection continues — but the authorization is meaningless if Congress does not renew the underlying statute.
The network that's already compromised
The security hawks' strongest argument for extension is Salt Typhoon — a Chinese espionage campaign that has compromised at least 200 telecom companies worldwide and, by the FBI's own assessment, is "still very much present". AT&T and Verizon — two of the largest 702 collection partners — have blocked the release of Mandiant's security assessment to Congress. Senator Cantwell said there is "no reason to think that the attack has been completely remediated."
The former national security officials' letter is explicit: "We cannot afford to let our Intelligence Community lose this tool that helps keep our nation safe, even for a day."
But there is a structural irony the letter does not address. Section 702 collection runs through the same telecom infrastructure that Salt Typhoon compromised. The government is surveilling a pipe that a foreign adversary has already tapped. Every queried communication traverses networks that China may still be monitoring. The premise of 702 — that you can collect intelligence from a secure domestic network and query it with adequate controls — is undermined by the fact that the network is not secure and the controls could, per the FISC's own finding, present deficiencies.
Neither extending the statute nor letting it lapse addresses this. The question is whether Congress will use the nine-day window to fix the architecture, or whether it will extend a broken framework for eighteen more months because fixing it is harder than extending it.
The sky does not fall on April 21
Ranking member Raskin's letter to colleagues includes a fact that the extension advocates consistently omit: "FISA explicitly allows existing certifications to continue past a sunset."
If Section 702 expires on April 20, the FISC's renewed certifications — issued April 10, valid for one year — allow ongoing collection to continue under those specific certifications until they expire. The intelligence community does not go blind on April 21. New certifications could not be issued, and new targets could not be added, but the existing surveillance architecture remains operational.
The Cato Institute published an analysis in April 2026 showing that the legal and technical conditions now exist for the FBI to use AI to launder predicates from FBI Assessments into 702 queries — and that three of four oversight mechanisms designed to detect such abuse have been "eliminated or politically compromised since January 2025." Director Patel disbanded the Office of Internal Auditing in May 2025.
What the next nine days are actually about
The 50 former national security officials want a clean extension. The 130 civil society organizations want reform. The Progressive Caucus wants dramatic reform or nothing. The Freedom Caucus wants the SAVE Act attached. The Speaker can lose one vote. The President wants clean extension and also wants SAVE.
The Wyden-Lee GSRA would do four things: require a warrant for FBI queries of Americans' 702 data, close the data broker loophole, restore PCLOB independence, and narrow RISAA's expanded provider definition. It has bipartisan sponsors in both chambers. It has 130+ endorsements. It is not on the floor schedule.
What is on the floor schedule is an 18-month clean extension that does not close the data broker loophole, does not require a warrant, and does not address the FISC's March 17 filtering finding. It extends a statute whose own oversight mechanisms have been systematically dismantled — the PCLOB gutted, the OIA disbanded, the FISC's classified rulings redacted — for another year and a half, on the theory that the threats are too urgent to reform.
The threats are real. Salt Typhoon is real. The two-thirds of the PDB that uses 702 intelligence is real. But the data broker purchases are also real, and the warrantless queries are also real, and the filtering tools the FISC flagged are also real, and the fact that the same telecoms that collect 702 data are currently compromised by a Chinese espionage campaign that nobody can confirm has been remediated is also real.
The network is compromised in both directions. Extending the statute without fixing the architecture is not security. It is continuity.
What you can do before Monday
Congress returns April 13. The House Rules Committee could add FISA to its calendar as early as April 14. Call your representative's office before Monday morning and tell them you support the Wyden-Lee Government Surveillance Reform Act (S.4082) — or at minimum, a warrant requirement for FBI queries of Americans' data and closure of the data broker loophole. The EFF maintains a tool for identifying your representative and their current position.
The nine days start now.
Further reading
- Wyden-Lee Government Surveillance Reform Act, S.4082, introduced March 12, 2026.
- EFF, "We Need You: Our Privacy Cannot Afford a Clean Extension of Section 702".
- Citizen Lab, "Uncovering Webloc" (April 9, 2026).
- Cato Institute, "AI-Assisted Predicate Laundering" (April 2026).
- Washington Times, "Will Section 702 become a backdoor gun registry?" (April 10, 2026).
- Nextgov, "FISC renews procedures for 702 program that could soon lapse" (April 2026).
- CPC press release, binding opposition to clean reauthorization (March 2026).
URnetwork is building the whole-internet encryption layer between you and the public network. ur.io.