Senator Wyden Just Warned That the NSA Is Doing Something Stunning Under Section 702 — And Most Americans Have No Idea

I have this awful habit of reading congressional transcripts at 2 AM. My wife, Sandra, calls it my "insomnia fuel." Last Tuesday, while she was asleep and our dog was giving me that judgmental look from the couch, I stumbled across Senator Ron Wyden's latest warning about Section 702 of the Foreign Intelligence Surveillance Act. And honestly? I haven't slept well since.

Wyden — who has sat on the Senate Intelligence Committee for over two decades and has access to classified briefings most of us will never see — went on record saying that Americans would be "stunned" if they knew what the NSA is currently doing under Section 702 authority. Not "concerned." Not "troubled." Stunned.

What Section 702 Actually Allows (And Why You Should Care)

Section 702 was originally designed to let intelligence agencies collect communications of foreign targets located outside the United States. Sounds reasonable, right? The problem is that when a foreign target communicates with an American, that American's data gets swept up too. The intelligence community calls this "incidental collection." Privacy advocates call it a backdoor warrantless search of American communications.

Here's where it gets uncomfortable: the FBI conducted an estimated 3.4 million warrantless searches of Americans' Section 702 data in 2021 alone, according to the Office of the Director of National Intelligence. That number dropped to around 119,000 after reforms in 2023, but Wyden's latest statements suggest that the actual scope of surveillance may be far broader than even those numbers indicate.

The Wyden Pattern — And Why This Time Feels Different

My colleague Derek, who covers policy for a think tank in D.C. (and who I owe $47 from a lunch bet about whether CISA would get its budget cut — he was right), pointed out something important: Wyden has done this before. He warned about bulk phone metadata collection years before Snowden confirmed it. He flagged problems with CIA search tools before the Inspector General validated his concerns.

"The pattern is always the same," Derek told me over a call that lasted 43 minutes because neither of us could stop speculating. "Wyden drops a cryptic warning, everyone ignores it, and then 18 months later we find out he was right all along."

This time, TechDirt reports that Wyden's warning specifically references how the NSA is interpreting its authority under the renewed Section 702 — not necessarily violating the letter of the law, but potentially stretching its spirit beyond what Congress intended when it reauthorized the program.

What We Know (And What We Don't)

The frustrating reality is that because we're dealing with classified programs, the public is left piecing together breadcrumbs. Here's what the breadcrumbs suggest:

• Expanded definitions of "electronic communication service providers" — The 2023 reauthorization broadened who can be compelled to assist with surveillance. Some legal scholars argue this could include data centers, cloud providers, and even certain businesses that offer Wi-Fi.
• Commercial data purchases — A declassified report from the ODNI in 2023 revealed that intelligence agencies were purchasing commercially available data about Americans, effectively bypassing Fourth Amendment protections. Wyden has been pushing for legislation to close this loophole.
• Query procedures under scrutiny — Despite reforms, the FISA Court has repeatedly found compliance issues with how agencies query Section 702 databases for information about U.S. persons.

The "So What" for Regular People

Tom, my neighbor who works in IT security for a regional hospital (and who I trade terrible cybersecurity puns with over the fence — his latest: "I told my wife she was drawing her eyebrows too high. She looked surprised."), asked me the question most people have: "Does this actually affect me?"

The honest answer: probably yes, but you'll never know for certain. If you've ever emailed, called, texted, or video-chatted with someone outside the United States, your communications could have been collected under Section 702. The EFF estimates that the NSA intercepts over 250 million internet communications annually under this authority.

What You Can Actually Do

I'm not going to pretend that individual action solves systemic surveillance problems. That would be like telling someone to use a stronger password while the NSA has a fiber-optic tap on the internet backbone. But there are practical steps:

1. Use end-to-end encrypted messaging — Signal remains the gold standard. WhatsApp uses the Signal protocol but is owned by Meta, which is its own privacy conversation.
2. Support organizations fighting for reform — The EFF, ACLU, and Brennan Center for Justice are all actively litigating and advocating on Section 702 issues.
3. Contact your representatives — Section 702 comes up for reauthorization periodically. Congressional pressure is one of the few things that has historically produced reforms.
4. Use a VPN — It won't protect you from targeted surveillance, but it adds a layer of complexity to bulk collection.

The Bigger Picture

What keeps me up at night (besides Sandra's insistence that I stop reading FISA Court opinions on my phone in bed) is the structural problem. We have a surveillance apparatus that operates largely in secret, overseen by a court that meets in secret, with details classified from the very people being surveilled. Senator Wyden can warn us, but he can't tell us the specifics without breaking the law.

Rachel, a former DOJ attorney I interviewed for a piece last year (she left government in 2024 and now teaches constitutional law at Georgetown, where she assigns her students the full text of the FISA Amendments Act as "light reading"), put it this way: "The problem isn't any single program. The problem is that we've built a system where the public has to trust that everything is fine because they're not allowed to know otherwise."

Section 702 was reauthorized in April 2024 with a two-year sunset. That means it comes up again in 2026. If Wyden's warnings are accurate — and his track record suggests they are — the debate over reauthorization could be one of the most consequential privacy battles of the decade.

I'll be watching from my couch at 2 AM, reading transcripts with the dog. Someone has to.

Related Reading

The surveillance debate extends beyond Section 702. See how Montana's new Right to Compute Act is reshaping digital privacy rights, and learn about the emerging covert data transfer technologies that could make surveillance even harder to detect. For a broader look at threat patterns, our analysis of multi-vector attacks shows how security gaps are exploited across systems.

Need expert cybersecurity consulting for your organization? Wardigi provides tailored security solutions for businesses of all sizes.