The Receipt You Didn't Sign: FISA, Data Brokers, and AI in the Week Before the Deadline

Section 702 expires April 30, 2026. This analysis was last updated April 25, 2026. There are six days left.

In the United States, the Fourth Amendment protects people from unreasonable searches and seizures by the government. It does not, on its current interpretation, protect them from the government buying data that a private company has already collected. That gap, between what the Constitution prohibits the state from taking and what the state is allowed to purchase, is the entire fight happening in Congress right now. Section 702 of the Foreign Intelligence Surveillance Act expires on April 30. There are five days left. And the debate is no longer really about FISA at all.

What it is about is two connected questions. First: when federal agencies buy bulk records about Americans, location histories, browsing logs, purchase records, communications metadata, from the same data brokers that advertisers use, does that purchase count as a search under the Fourth Amendment? Current statutory law says no. A growing bipartisan coalition in Congress says it should. Second: now that artificial intelligence systems can synthesize those purchased records at a scale that human analysts never could, does the old answer still hold?

Elizabeth Goitein of the Brennan Center, the country's most consequential Section 702 scholar, has been testifying on this for months. A coalition of 133 civil society organizations signed an open letter on March 19 insisting that FISA reauthorization must close what they call the data broker loophole. The Government Surveillance Reform Act, introduced by Senator Ron Wyden and Senator Mike Lee, would do exactly that. Speaker Mike Johnson and the White House have preferred a clean reauthorization that does not. On April 17, in the early morning hours, a bipartisan majority of the House rejected both Johnson's five-year proposal and the administration's 18-month clean extension, passing only a ten-day emergency patch to keep the authority from lapsing. The patch is what runs out on April 30.

Why this matters now. The ten-day window was created by members of Congress who wanted reform but did not have the votes to pass reform. They chose a short extension instead of a long one specifically so that constituents would have time to reach them. That time is almost gone.

I. What's actually being asked for

The two loopholes: Section 702 and the data broker workaround

There are two distinct legal shortcuts at stake in the current debate, and conflating them is exactly how proponents of clean reauthorization have kept the argument confusing. It's worth separating them.

The first is the backdoor search loophole. Section 702 authorizes the NSA to collect the communications of foreigners located outside the United States without an individualized warrant. Because foreigners routinely communicate with Americans, by email, phone, text, messaging app, the program inevitably sweeps in large volumes of American communications as well. These are labeled "incidentally collected." The backdoor search loophole is the practice of FBI, CIA, and NSA analysts searching that incidentally collected pile for American names, email addresses, and other identifiers, without getting a warrant first. A federal court has called the practice unconstitutional. The searches keep happening anyway.

The second is the data broker loophole. This one does not involve FISA at all, strictly speaking. It works like this: private data brokers, firms most Americans have never heard of, compile enormous databases by purchasing the output of the advertising ecosystem. Location pings from the weather app on your phone. Browsing records from sites with embedded trackers. Device identifiers from app SDKs. They sell all of this to anyone who will pay. The federal government is one of those buyers. And because the government is purchasing data rather than compelling its production, existing doctrine treats the acquisition as something other than a search. No warrant required. The 2015 USA Freedom Act explicitly prohibited bulk domestic data collection under FISA. The data broker loophole is what you get when that prohibition runs into an advertising economy willing to sell the same data commercially.

But using these systems for mass domestic surveillance is incompatible with democratic values. AI-driven mass surveillance presents serious, novel risks to our fundamental liberties. To the extent that such surveillance is currently legal, this is only because the law has not yet caught up with the rapidly growing capabilities of AI. For example, under current law, the government can purchase detailed records of Americans' movements, web browsing, and associations from public sources without obtaining a warrant, a practice the Intelligence Community has acknowledged raises privacy concerns and that has generated bipartisan opposition in Congress. Powerful AI makes it possible to assemble this scattered, individually innocuous data into a comprehensive picture of any person's life-automatically and at massive scale.

Dario Amodei, CEO of Anthropic, Statement on the Department of War, 2026.

These two loopholes operate in tandem, and together they produce a very specific and very dangerous result: an intelligence and law enforcement apparatus that can learn almost anything it wants to learn about almost any American, by combining one category of data that is explicitly authorized by Congress (Section 702 incidentals) with a second category that Congress explicitly prohibited but that the executive branch has found a way to purchase anyway. The formal legal architecture of the Fourth Amendment remains intact. What it protects against, in practice, continues to shrink.

II. What AI changes

The Anthropic standoff: why scale is now a civil liberties issue

For most of the history of surveillance law, the practical limits on what the state could do with bulk data were not really legal, they were computational and human. You can collect a trillion records. Making sense of a trillion records is another matter entirely. Pre-AI, the binding constraint on mass surveillance was always analyst time. You could hoover up everything, and you did, but turning it into actionable intelligence required humans sitting at terminals writing queries, and there were never enough of them.

Large language models remove that constraint. This is not speculative. It is already the basis of an active commercial dispute between the Department of Defense and Anthropic.

According to reporting by CBS News and others, the Pentagon wanted Anthropic to help it collect and analyze unclassified, commercial bulk data on Americans, including geolocation and web browsing data. Anthropic refused. The company demanded that its AI not be used for mass domestic surveillance, and a week after negotiations broke down, the Pentagon designated Anthropic a supply chain risk, a label typically reserved for foreign companies that pose a threat to national security. President Trump ordered federal agencies to stop using Anthropic products. The standoff has since eased, and as of this week the administration is publicly signaling that a deal is possible again. That does not change the underlying fact pattern. The executive branch has now stated, in contractual negotiations, that it wants exactly this capability.

The Anthropic standoff in one paragraph. Anthropic signed a $200 million Pentagon contract in July 2025. When negotiations moved to how the model could be used on the Defense Department's GenAI.mil platform, two redlines emerged: no fully autonomous weapons, and no mass domestic surveillance of Americans. The DOD insisted on an "all lawful purposes" standard and rejected the restrictions. Anthropic walked away. OpenAI then stepped in and secured its own agreement, with prohibitions on "deliberate tracking, surveillance, or monitoring of U.S. persons." Privacy advocates have noted that the word "deliberate" does significant work: the existing legal framework treats the government's collection of Americans' data as incidental rather than intentional, which means a ban on deliberate surveillance arguably does not ban the kind of surveillance actually being conducted.

Here is the key point that has gotten lost in the coverage. Before AI, the data broker loophole was bad. It allowed the government to assemble profiles that the Fourth Amendment was designed to prevent. But the sheer volume of commercial data in the market limited the degree to which any single target could actually be profiled, and certainly limited how many targets could be profiled at once. Mass surveillance was theoretically possible and practically constrained.

After AI, the constraint is gone. As David Bader of the New Jersey Institute of Technology put it to The Hill: "Analyzing billions of data points to build profiles on millions of Americans used to be computationally impractical, but now it's trivial with AI, and the law hasn't caught up to that reality." Amodei's own framing is the more precise one: whether mass AI-driven commercial surveillance is technically legal right now depends on the question of whether the law has caught up with the technology. It hasn't. That is the gap Congress has five days to close.

III. The civil liberties case, unbundled

What is actually at stake beyond privacy as a concept

"Privacy" is a weak word for what the data broker loophole puts at risk, and part of why this issue has struggled politically is that defenders of the status quo have been allowed to frame the debate as a tradeoff between privacy and security. That framing collapses the moment you look at what is actually in a commercial data broker's file on the average American.

Argument 1: The Fourth Amendment is supposed to apply whether the government seizes the data or buys it. The Bill of Rights does not contain an exemption for government acquisition through commercial channels. The Founders required warrants before the state could search "persons, houses, papers, and effects." The fact that those effects are now held by a third-party data broker does not repeal the underlying constitutional principle. If the FBI cannot lawfully enter your house without a warrant, it should not be able to purchase your location history, which reveals where you sleep, which doctor you see, which church you attend, which lawyer you meet, without one either.

Argument 2: What Congress explicitly prohibited in 2015 is now happening through a purchasing workaround. The USA Freedom Act of 2015, passed after Edward Snowden's disclosures, banned bulk domestic data collection under FISA. It was a deliberate, bipartisan statutory limit on the surveillance state. The data broker loophole is the mechanism by which that limit has been quietly circumvented. If Congress's 2015 vote is to mean anything, this reauthorization has to close the workaround.

Argument 3: This is a gun rights issue, a religious liberty issue, and a free association issue, not only a "privacy" issue. Purchased location data reveals which gun stores, ranges, and sporting goods shops a phone has visited. Purchased financial data reveals every ammunition purchase. Purchased browsing data reveals which religious services a person attends, which political organizations they donate to, which medical providers they consult. Representatives Lauren Boebert and Eric Burlison have written that the government is building "a gun registry and just not calling it that." That framing is not hyperbole. The same logic applies to every other constitutionally protected activity that produces a digital footprint.

Argument 4: AI-powered analysis of commercial data is not a continuation of existing surveillance. It is a qualitatively new capability. The legal frameworks governing domestic surveillance were designed around the assumption that making sense of bulk data required human analysts. That assumption is now false. Large language models can generate comprehensive behavioral profiles of tens of millions of Americans simultaneously, at negligible marginal cost. A law that was acceptable when analyst time was the binding constraint is not acceptable when that constraint has been removed. This is the specific point on which CEO Dario Amodei and a growing coalition of AI researchers have been most public.

Argument 5: The surveillance apparatus outlasts the administration that builds it. Every civil liberties protection that is not embedded in statute depends on executive branch self-restraint. Every capability that is built is available to whoever controls the executive branch next. A data broker surveillance infrastructure approved today under one administration's stated intentions will be inherited, intact, by every subsequent administration. The Russian case, the Hungarian case, the Turkish case: every modern example of democratic erosion shows the same pattern. Surveillance architecture assembled under one justification is repurposed by its successors against whoever the next set of enemies turns out to be.

Argument 6: Public opinion is already here. Congress is the lagging institution. A 2023 YouGov poll, cited by the Project On Government Oversight and the 133-organization coalition letter, found that roughly 80 percent of Americans think the government should be required to obtain warrants before purchasing location information, internet records, and other sensitive data about people in the U.S. The polling is not fresh, but no subsequent survey has shown the consensus weakening. It is the view of Americans across the political spectrum, and it is reflected in the genuinely bipartisan coalition of legislators pushing reform: Wyden and Warren on one side, Lee and Lummis on the other, Lofgren and Davidson in the House, along with the Freedom Caucus members who helped block the clean extension.

IV. The bills on the table

Which legislation actually closes the loopholes

If a member of Congress tells a constituent that they support "FISA reform," the right follow-up question is: which bill do they support, and does it close the data broker loophole? Here is what's in front of them.

The pattern is clear. Three separate bills, one of them bipartisan and bicameral, would close both loopholes and reauthorize Section 702 in a form that actually has the votes to pass. The administration's preferred approach is a reauthorization that keeps both loopholes open, which is precisely why it keeps failing in the House. The question for any congressional office between now and April 30 is not whether to support "reform" in the abstract. It is whether to support a specific bill that does the specific things the Constitution is supposed to require.

Find your representatives

Before you read the call script and letter template below, find the people you'll be contacting. All three sites take a ZIP code and return your House member, your two senators, and their Washington office contact information.

• U.S. House: house.gov/representatives/find-your-representative
• U.S. Senate: senate.gov/senators/senators-contact.htm
• 5 Calls (current FISA / Section 702 action with scripts and direct phone numbers): 5calls.org/issue/fisa-section-702-fbi-surveillance/
• Capitol Switchboard (transfers to any office): 202-224-3121

V. Talking to your representative

A script for the call, optimized for an older listener

Congressional staff keep tallies of constituent calls by issue. Those tallies go to the member of Congress at the end of each day. If the member is on the fence, and on this vote, more members are on the fence than most people realize, the tally matters. A call takes about ninety seconds. Here is how to make the ninety seconds count, particularly when talking to an older representative who may not instinctively parse "AI" or "data broker" as meaningful threats but who will absolutely parse "the government searching your effects without a warrant."

The call. U.S. Capitol Switchboard: 202-224-3121. Ask to be transferred to your House member and each of your two senators.

Step 1: Identify yourself as a constituent. Say: "Hi, my name is [Name], I live in [Town], and I'm a constituent of Representative/Senator [Name]. I'm calling about the FISA vote before April 30th." Why this matters: staff only log calls from actual constituents. If you don't say your town, the call may not be counted.

Step 2: Frame the issue in terms the office already understands. Say: "I'm asking the Representative/Senator to oppose any reauthorization of Section 702 that does not close the data broker loophole and require a warrant for searches of Americans' communications. The Fourth Amendment says the government needs a warrant to search our personal records. Buying those records from a private company is not a workaround that the Constitution recognizes." Why: this is the core ask. For an older listener, lead with "Fourth Amendment" and "warrant" rather than "AI" or "data brokers." The constitutional framing lands; the technology framing often doesn't.

Step 3: Name a specific bill. Say: "I support the Government Surveillance Reform Act, which is a bipartisan bill from Senator Wyden and Senator Lee. It reauthorizes Section 702 but closes both the backdoor search loophole and the data broker loophole. That's the version I want the Representative/Senator to vote for." Why: naming a specific bill is the single most effective thing a constituent can do. "I'm concerned about surveillance" is a data point. "I support the Wyden-Lee bill" is a vote.

Step 4: Anticipate the deflection. Say: "I understand the argument that Section 702 is important for counterterrorism. I'm not asking for it to be killed; I'm asking for it to be reauthorized with the reforms that a bipartisan House majority already voted for on April 17. A clean reauthorization won't pass, and everyone in the building knows it. Please use the next five days to get to a bill that will." Why: staff are trained to present the choice as reform vs. national security. The real choice is reform vs. the authority lapsing. Naming that out loud shuts down the scripted reply.

Step 5: Ask for a commitment and hang up. Say: "Can you tell me whether the Representative/Senator has taken a position yet? And please record my call as opposing any FISA reauthorization that doesn't close the data broker loophole. Thank you." Why: do not argue with the staffer. The staffer is not the member. You are there to be counted.

If the person you're calling is an octogenarian representative. Members of Congress in their late seventies and eighties are, on average, more responsive to constitutional and procedural arguments than to technological ones. "The government is using AI to analyze data from brokers" may register as abstract. "The government is searching citizens' private records without a warrant by buying them from a middleman" registers as something the Fourth Amendment was written specifically to prevent.

Ground every argument in: (1) the warrant requirement, (2) what the 2015 USA Freedom Act was supposed to prohibit, and (3) the fact that a bipartisan majority of the House already rejected the no-reform version on April 17. If the representative served in the Senate or House during the post-Snowden debates, they voted for the 2015 reforms. Remind them.

VI. If you prefer to write

A short letter that covers the same ground

Calls are weighted more heavily than emails by most offices, but a letter, physical or emailed through the office web form, creates a written record and is more likely to be read by a legislative staffer rather than a front-desk intern. If you have ten minutes and would rather write, here is a template. Replace the bracketed material.

Template letter (to representative, senator, or committee office)

Dear Representative/Senator [Name],

I am writing as a constituent in [Town, State] about the vote on reauthorizing Section 702 of the Foreign Intelligence Surveillance Act before the April 30 deadline.

I am asking you to oppose any reauthorization that does not (1) require a warrant before federal agencies may search Americans' communications collected under Section 702, and (2) close the data broker loophole that allows federal agencies to purchase the bulk personal data, location histories, browsing records, financial records, that the USA Freedom Act of 2015 prohibited them from collecting directly.

The Fourth Amendment was written to require a warrant before the government searches our "persons, houses, papers, and effects." That principle should apply whether the government seizes the data or purchases it from a middleman. The current practice is a workaround to a 2015 bipartisan law that Congress explicitly passed to stop it.

Three bills on offer, the Government Surveillance Reform Act (Wyden-Lee-Davidson-Lofgren), the Protect Liberty and End Warrantless Surveillance Act (Biggs), and the SAFE Act (Durbin-Lee), would reauthorize Section 702 with these protections. A bipartisan House majority on April 17 rejected the administration's proposals that did not include them.

I ask that you vote for reauthorization only in a form that closes both loopholes, and that you say so publicly before April 30. Please record this letter as constituent opposition to any clean reauthorization.

Thank you for your time.

Sincerely, [Your name] [Your full address]

Need addresses? House offices: house.gov/representatives/find-your-representative. Senate offices: senate.gov/senators/senators-contact.htm. Both list the Washington office mailing address and a contact form for direct email.

What is actually being decided this week

The vote before Congress in the next five days is not, at its core, a vote about terrorism. It is a vote about whether the executive branch is permitted to build a domestic surveillance capability by purchase that it would not be permitted to build by seizure. Everything else (the specific bill language, the procedural fights, the Section 702 reauthorization timing) follows from how that underlying question is answered.

The Russian case, the Hungarian case, and the comparative work of Levitsky, Way, and Ziblatt all converge on a single observation about how surveillance states actually get built in countries that used to be democracies. They do not get built in a single dramatic moment. They get built incrementally, through procedurally correct legislation, under defensible justifications: counterterrorism, child protection, public health emergency, sovereignty. Each of these legitimizes a piece of infrastructure that outlasts the justification that built it. By the time the pattern is visible, the institutions capable of reversing it have usually been weakened by the same sequence.

A system able to monitor the online activities of millions of citizens and ready to be deployed at whatever target a future government decides is undesirable.

What the 130-organization coalition letter describes; what the Russian surveillance apparatus became; what U.S. AI-plus-commercial-data surveillance would be.

That is the significance of the data broker loophole and the AI capabilities now being built on top of it. Not that any particular person in the current government will definitely use these powers for particular political purposes. The significance is structural. A capability of this kind, once built, does not stay unused for long, and does not belong exclusively to whoever built it. Closing the loophole while it can still be closed is substantially easier than dismantling the infrastructure after the fact. Russia and Hungary show what the "after the fact" looks like.

Section 702 will be reauthorized. It has been reauthorized every time it has come up for a vote since 2008, and it will be reauthorized this time too. The only question is what gets attached to the reauthorization. Congress has historically made this kind of course correction (the USA Freedom Act of 2015 was exactly that kind of correction, produced by the same kind of constituent pressure) and it can make it again. What is required is for the representatives who are currently on the fence to hear from enough of the people who elected them that holding the line on clean reauthorization is politically untenable. That is what the ten-day window was created to enable. The window closes April 30. That is today plus five.

Sources & Further Reading

• Brennan Center for Justice: Section 702 of FISA: 2026 Resource Page (Elizabeth Goitein)
• Coalition of 133 Organizations, Letter Urging Congressional Leadership to Close Data Broker Loophole (March 19, 2026)
• EPIC: "Government AI Is Coming for Your Data" (Jeramie D. Scott, April 14, 2026)
• Government Surveillance Reform Act of 2026, bill text on Congress.gov and Wyden one-pager / section-by-section
• TIME: "Your Data Is at the Heart of the Pentagon's Battle with Anthropic" (March 16, 2026)
• MIT Technology Review: "Is the Pentagon allowed to surveil Americans with AI?" (March 6, 2026)
• The Hill: "Anthropic clash with Pentagon fuels government surveillance fears" (March 2026)
• NPR: "Your data is everywhere. The government is buying it without a warrant" (March 25, 2026)
• NPR: "House extends surveillance powers for 10 days" (April 17, 2026)
• Nextgov/FCW: "House passes 10-day FISA extension after prospects of long-term deal collapse" (April 17, 2026)
• POGO: "Closing the Data Broker Loophole: A Q&A With a Privacy Expert" (April 17, 2026)
• POGO: Fact Sheet on closing the data broker loophole
• Al Jazeera: "US Congress extends controversial surveillance power under FISA for 10 days" (April 17, 2026)
• Anthropic: Department of Defense partnership announcement (July 2025)
• Anthropic: Statement on the Department of War (Dario Amodei, 2026), the source of the pull quote in Section I
• CBS News: Anthropic Pentagon supply-chain risk lawsuit coverage
• OpenAI: Agreement with the Department of War (with the "deliberate tracking, surveillance, or monitoring" carveout)
• American Prospect: "Himes Fact-Checked on 'Misleading' Claims About Warrantless Spying" (April 6, 2026)
• Boebert & Burlison: "They're Spying on Gun Owners and Congress Has Until April 30 to Do Something About It" (April 23, 2026)

Civic action:

• house.gov/representatives/find-your-representative
• senate.gov/senators/senators-contact.htm
• 5calls.org/issue/fisa-section-702-fbi-surveillance/
• U.S. Capitol Switchboard: 202-224-3121

Part of a series on how surveillance and authoritarian infrastructure is assembled in democratic and semi-democratic contexts. See also, in reading order: The Blacklist Machine: How Russia Built a Surveillance State, The Gavel, Not the Gun: How Viktor Orbán Dismantled Hungary's Democracy, A Gift from God: How Erdoğan Turned a Failed Coup Into an Authoritarian State, The Autocracy Ratchet: Scoring America's Democratic Erosion Quarter by Quarter, The Permission Slip: Palantir's Manifesto and the Architecture Already in Place, Protect the Children: The Global Surveillance Playbook, Child Safety as a Backdoor to the Surveillance State.