What the FISA Section 702 Expiration Really Means for Surveillance and Your Data

Congress failed to extend Section 702 of the Foreign Intelligence Surveillance Act before its June 12 deadline, but the government’s ability to collect foreign intelligence will not end tonight. A year-long certification approved by the Foreign Intelligence Surveillance Court in March 2026 remains valid until March 17, 2027. This means surveillance programs authorized under that certification can continue operating even as the underlying statute lapses. Privacy advocates argue this technicality is being exploited to pressure lawmakers into passing a renewal without meaningful reforms, warning that the public should not be misled into believing surveillance will “go dark.”

How Section 702 Surveillance Actually Works

Section 702 allows U.S. intelligence agencies to collect communications of non-U.S. persons located outside the country without a warrant, even if those communications involve Americans. The program relies on directives issued to electronic communication service providers, requiring them to hand over data such as emails, text messages, and browsing activity that transit their networks. These directives are tied to annual certifications reviewed and approved by the Foreign Intelligence Surveillance Court (FISC). Once a certification is in place, surveillance activities authorized under it can continue for up to a year, regardless of whether the statute itself is reauthorized by Congress.

Critics point out that this structure creates a disconnect between public perception and reality. When lawmakers warn that surveillance will “go dark” if Section 702 is not renewed, they are referring to the legal authority to issue new certifications and directives—not the immediate shutdown of existing surveillance. The Cato Institute’s Patrick Eddington has emphasized that acquisitions authorized by certifications and directives already in effect can continue until those certifications expire. This means the government can keep collecting data under the March 2026 certification through March 2027, even if Section 702 is not renewed.

Why the Expiration Is More Symbolic Than Substantive

The expiration of Section 702 at midnight is largely symbolic because the surveillance apparatus remains intact through existing legal mechanisms. Intelligence agencies have confirmed that their collection activities will not halt overnight. Instead, the gap between expiration and renewal creates a procedural limbo that could have long-term implications for oversight and accountability. Privacy organizations argue that this limbo is being used to manufacture urgency, pushing Congress to reauthorize the law without addressing concerns about warrantless surveillance of Americans’ communications.

The Brennan Center for Justice at NYU School of Law has warned that this pressure tactic risks sidestepping necessary reforms. Surveillance hawks have framed the expiration as a crisis, claiming that lapses would cripple national security. However, the legal framework already allows for continuity under existing certifications. This raises questions about why a rushed reauthorization is being prioritized over substantive debate about privacy protections and transparency.

What Changes (and Doesn’t) After June 12

After the June 12 sunset, the most immediate change is procedural: Congress no longer has the authority to issue new Section 702 certifications or expand surveillance programs. However, existing certifications and directives remain legally valid until their expiration dates. This means intelligence agencies can continue collecting data under the March 2026 certification without interruption. The only practical difference is that no new surveillance programs can be launched under Section 702 until Congress acts.

This distinction is critical for understanding the stakes. While some lawmakers argue that the lapse creates a dangerous gap in intelligence capabilities, the reality is that existing programs are grandfathered in. The risk is not operational—it is political. A rushed reauthorization could lock in current surveillance practices without addressing concerns about overreach, lack of warrants, or the incidental collection of Americans’ data.

The Privacy Implications for Americans

One of the most contentious aspects of Section 702 is its incidental collection of Americans’ communications. Even though the law targets non-U.S. persons abroad, communications involving Americans or people in the U.S. can be swept up and retained if they are relevant to foreign intelligence investigations. This “incidental” collection has led to concerns about warrantless surveillance of U.S. citizens and legal residents. Privacy advocates argue that the current system lacks sufficient safeguards to prevent abuse or ensure accountability.

The expiration of Section 702 does not immediately change this dynamic, but it opens a window for Congress to revisit the program’s scope and introduce reforms. Potential changes could include stricter minimization procedures to limit the retention and dissemination of Americans’ data, mandatory warrants for queries that access such data, or increased transparency about how surveillance is conducted. Without these reforms, the surveillance status quo remains intact despite the expiration.

The Role of the FISA Court and Oversight Gaps

The Foreign Intelligence Surveillance Court plays a central role in approving Section 702 certifications and overseeing surveillance activities. However, critics argue that the court’s role is largely reactive and lacks the capacity to meaningfully challenge government requests. The court operates in secret, and its rulings are rarely made public. This opacity makes it difficult for the public to assess whether the court is effectively balancing national security needs with privacy protections.

Even with the expiration, the FISA Court’s existing certifications remain in force, meaning oversight mechanisms are not disrupted. However, the lapse highlights longstanding concerns about the court’s role in a surveillance landscape that has evolved significantly since Section 702 was first enacted. The lack of public accountability and the court’s reliance on government-provided evidence raise questions about whether current oversight is sufficient to prevent abuses.

What to Watch in the Coming Months

The next critical date is March 17, 2027, when the current Section 702 certification expires. Until then, Congress has time to debate reforms, but the pressure to reauthorize the law without changes remains high. Privacy advocates are urging lawmakers to reject short-term extensions and instead pursue meaningful reforms, such as requiring warrants for accessing Americans’ data or limiting the retention of incidentally collected communications.

Another area to monitor is the impact of the expiration on technology companies and service providers. While existing directives remain valid, companies may face legal uncertainty about their obligations if Section 702 is not renewed. Some providers have already expressed concerns about the lack of clarity and the potential for conflicting legal requirements. This uncertainty could lead to delays in compliance or even litigation as companies navigate the gap between expiration and renewal.

Practical Takeaways for Individuals and Organizations

For individuals concerned about privacy, the expiration of Section 702 does not immediately change the risk of surveillance. However, it underscores the importance of using end-to-end encrypted communication tools, virtual private networks (VPNs), and secure messaging apps to minimize exposure. While these tools do not eliminate the possibility of incidental collection, they can reduce the amount of sensitive data that is vulnerable to surveillance.

For organizations, particularly those in technology, healthcare, or finance, the lapse highlights the need to review data-handling practices and ensure compliance with existing privacy laws. Companies should assess whether their data retention policies align with minimization requirements and consider implementing additional safeguards for sensitive communications. The uncertainty surrounding Section 702 also serves as a reminder to stay informed about legislative developments and advocate for stronger privacy protections.

Why This Moment Matters for the Future of Surveillance Law

The expiration of Section 702 is more than a technicality—it is a test of whether Congress can prioritize oversight and reform over expediency. Privacy advocates warn that a quick reauthorization without addressing core issues could entrench surveillance practices for years to come. The debate over Section 702 reflects broader tensions between national security and individual rights, with implications for how digital privacy is protected in an era of ubiquitous data collection.

As the March 2027 deadline approaches, the outcome will shape not only the future of Section 702 but also the trajectory of surveillance law in the United States. Will Congress seize the opportunity to introduce meaningful reforms, or will it default to the status quo? The answer will determine whether the expiration of Section 702 is a fleeting moment of accountability—or the first step toward a more intrusive surveillance regime.