Protect America Act of 2007

The bill amended FISA to substitute the requirement of a warrant to conduct surveillance with a system of NSA (National Security Agency) internal controls.[10]

The bill required notification to the FISA Court of warrantless surveillance within 72 hours of any authorization. The bill also required that "a sealed copy of the certification" be sent which would "remain sealed unless the certification is needed to determine the legality of the acquisition."[10]

The bill allowed the monitoring of all electronic communications of "Americans communicating with foreigners who are the targets of a U.S. terrorism investigation" without a court's order or oversight, so long as it is not targeted at one particular person "reasonably believed to be" inside the country.[2][11][12]

The Act removed the requirement for a FISA warrant for any communication which was foreign-related, even if the communication involved a U.S. location on the receiving or sending end of communication; all foreign-foreign communications were removed from warrant requirements, as well.[11]

Experts claimed that this deceptively opened the door to domestic spying, given that many domestic U.S. communications passed via non-US locations, by virtue of old telephony network configurations.[13]

In the bill, the monitoring of data related to Americans communicating with persons (U.S citizens and non-citizens) outside the United States who are the targets of a U.S. government intelligence information gathering efforts was addressed. The Protect America Act differed from the FISA in that no discussion of actions or character judgment of the target was required for application of the statute (i.e., to receive a FISA surveillance warrant, a FISC foreign agent definition was required). This data could be monitored only if intelligence officials acted in the context of intelligence information gathering.

No mention of foreign agent status is made in the Protect America Act of 2007. Under prior FISA rules, persons targeted for surveillance must have been declared as foreign agents before a FISA warrant would be accorded by the FISC court.[14]

Vastly marketed by U.S. federal and military agencies as a law to prevent terror attacks, the Protect America Act was actually a law focused on the 'acquisition' of desired intelligence information, of unspecified nature.[15] The sole requirement is geolocation outside the United States at time of Directive invocation; pursuant to Authorization or Order invocation, surveillance Directives can be undertaken towards persons targeted for intelligence information gathering. Implementation of Directives can take place inside the United States or outside the United States.

No criminal or terrorism investigation of the person need be in play at time of the Directive. All that need be required is that the target be related to an official desire for intelligence information gathering for actions on part of persons involved in surveillance to be granted full immunity from U.S. criminal or civil procedures, under Section 105B(l) of the Act.[11]

Under the bill, the director of national intelligence and the attorney general could authorize the surveillance of all communications involving persons outside the United States (U.S. citizens and non-U.S. citizens). The Foreign Intelligence Surveillance Court, normally the venue for intelligence-related warrants, was limited in power by the Protect America Act to an accept or reject power for government guidelines related to persons (U.S. and non-U.S. citizens) targeted for intelligence information gathering.[10]

The most significant of five points, comprising guidelines for Authorizing Certain Acquisitions Concerning Persons Outside the United States was that:

• A significant purpose of the acquisition is to obtain foreign intelligence information.

One of the five points referred to minimization procedures (how information was collected)

• the minimization procedures to be used with respect to such acquisition activity meet the definition of minimization procedures under section 101(h).

Any person or company could be enjoined and requested, on a compulsory basis, to assist with the intelligence information gathering.

• The acquisition involves obtaining the foreign intelligence information from or with the assistance of a communications service provider, custodian, or other person (including any officer, employee, agent, or other specified person of such service provider, custodian, or other person) who has access to communications, either as they are transmitted or while they are stored, or equipment that is being or may be used to transmit or store such communications;

But the most striking aspect of the Protect America Act was the notation that any information gathering did not comprise electronic surveillance. This wording had the effect of removing FISA-related strictures from Protect America Act 2007-related Directives, serving to remove a number of protections for persons targeted, and requirements for persons working for U.S. intelligence agencies.

• The acquisition does not constitute electronic surveillance

The removal of the term electronic surveillance from any Protect America Act Directive implied that the FISC court approval was no longer required, as FISA warrants were no longer required. In the place of a warrant was a certification, made by U.S. intelligence officers, which was copied to the Court. In effect, the FISC became less of a court than a registry of pre-approved certifications.

Certifications (in place of FISA warrants) were able to be levied ex post facto, in writing to the Court no more than 72 hours after it was made. The Attorney General was to transmit as soon as possible to the Court a sealed copy of the certification that would remain sealed unless the certification was needed to determine the legality of the acquisition.[10]

Assuring that the person targeted for intelligence information gathering was outside U.S. there are reasonable procedures in place for determining that the acquisition of foreign intelligence information under this section concerns persons reasonably believed to be located outside the United States, and such procedures will be subject to review of the Court pursuant to section 105C of this Act;

The Attorney General would report to Congress semi-annually with:

• Reporting incidents of corporation non-cooperation. A description of any incidents of non-compliance with a directive issued.[10]
• Reporting incidents of non-cooperative persons. Incidents of noncompliance by a specified person to whom the Attorney General and Director of National Intelligence issued a directive.[10]
• The number of certifications and directives. Issued in the preceding six months.[10]
• Reporting procedural failures. Incidents of non-compliance with the guidelines or procedures established for determining that the acquisition concerns persons outside the United States by any entity of the Intelligence Community.[10]

Section 404 (Transition Procedures) allows for continuance of Protect America Act Sections 105A, 105B and 105C for all existing orders. So for authorizations for intelligence information and directives issued under such authorizations, Protect America Act application continues to apply.

Section 404(a)2(A) subject to paragraph (3), section 105A of such Act, as added by section 2 of the Protect America Act of 2007 (Public Law 110-55; 121 Stat. 552), shall continue to apply to any acquisition conducted pursuant to an order, authorization, or directive referred to in paragraph (1); and

Section 404(a)2(B) sections 105B and 105C of the Foreign Intelligence Surveillance Act of 1978, as added by sections 2 and 3, respectively, of the Protect America Act of 2007, shall continue to apply with respect to an order, authorization, or directive referred to in paragraph (1) until the later of--

• (i) the expiration of such order, authorization, or directive; or
• (ii) the date on which final judgment is entered for any petition or other litigation relating to such order, authorization, or directive.

Section 404 (Continuance Procedures) allows for continued authorizations and directives to be renewed under same circumstances indefinitely; It also allowed for continuance of Immunities for persons and corporations (including but not limited to telecoms) under FISA 2008 Amendments.

Section 404(a)7(B) CONTINUATION OF EXISTING ORDERS - If the Attorney General and the Director of National Intelligence seek to replace an authorization made pursuant to section 105B of the Foreign Intelligence Surveillance Act of 1978, as added by section 2 of the Protect America Act of 2007 (Public Law 110-55; 121 Stat. 522), by filing a certification in accordance with subparagraph (A), that authorization, and any directives issued thereunder and any order related thereto, shall remain in effect, notwithstanding the expiration provided for in subsection (a) of such section 105B, until the Foreign Intelligence Surveillance Court (as such term is defined in section 701(b)(2) of the Foreign Intelligence Surveillance Act of 1978 (as so added)) issues an order with respect to that certification under section 702(i)(3) of such Act (as so added) at which time the provisions of that section and of section 702(i)(4) of such Act (as so added) shall apply.