Sponsors (4)
Introduced March 12, 2026 by Ronald Lee Wyden · Last progress March 12, 2026
The bill trades significantly stronger privacy, logging, and oversight protections for U.S. persons and tighter limits on commercial data use against added operational constraints, legal ambiguity, and material compliance costs for intelligence agencies, law enforcement, and private providers.
Most U.S. persons who use communications and internet services gain stronger privacy protections: the bill narrows warrantless queries, requires logging of queries/access, limits retention (generally five years), and creates warrant-like protections for content, location, browsing, and biometric data.
The bill substantially increases oversight and transparency: mandatory query/access logging, Inspectors General audits, expanded congressional notifications, public posting of unclassified IG reports, and procedures for declassification and amicus participation give courts, oversight bodies, and the public more visibility into surveillance practices.
Federal use of commercially brokered personal data and certain uniquely identifying information is restricted: the bill bars agencies from purchasing specified brokered datasets, keeps biometrics and location data covered even if publicly available, and forbids downstream use of improperly obtained brokered data in proceedings.
Federal intelligence and law-enforcement operations could be slowed or impaired: tighter targeting rules, narrower query/access allowances, retention/destruction mandates, expanded judicial/amicus participation, and reporting timelines may reduce timely access to intelligence or hinder emergency responses and investigations.
Agencies and private providers face substantial new administrative and compliance costs: mandatory logging, reporting, IG audits, minimization procedures, hiring/training, system upgrades, preservation and declassification duties will require resources and could divert funds from operations.
Evidence and investigative capacity may be reduced: mandatory destruction rules, bans on using information from denied emergency acquisitions, and constrained emergency carve-outs risk loss of evidence for ongoing or long-running investigations and could lead to excluded or unusable evidence in prosecutions.
Based on analysis of 11 sections of legislative text.
Limits federal warrantless access to certain surveillance queries and third‑party brokered data about U.S. persons, expands oversight and reporting, and extends ECPA procedures to state/local agencies.
Places new limits on federal access to certain foreign-intelligence and third‑party data about U.S. persons and people in the United States, creates new definitions for queries and protected categories, and expands oversight and public reporting. It also adds parallel privacy procedures for state and local agencies under ECPA, requires warrants for most tracking-device installs and limits federal access to vehicle event data, and strengthens inspector general and Privacy and Civil Liberties Oversight Board review and reporting.