Sponsors (4)
The bill significantly strengthens privacy, warrant protections, and transparency for U.S. persons and limits government purchase/use of commercial and biometric/location data, but does so at the cost of added administrative burdens, compliance costs, potential delays in implementation, and risks of constraining time‑sensitive intelligence and law‑enforcement activities.
People in the U.S. (taxpayers, immigrants, patients, vehicle owners) get stronger warrant-like protections and limits on warrantless access to content, location, web-browsing/search, and vehicle EDR data — agencies generally must obtain judicial authorization or meet narrow emergency exceptions.
The public, Congress, and oversight bodies (taxpayers, state/local governments, Congress) gain substantially more transparency and independent review — IG audits, public posting of unclassified reports, FISC declassification timelines, and expanded congressional reporting increase visibility into surveillance programs.
Individuals in the U.S. (vulnerable populations and all consumers) are protected from federal purchase and downstream use of commercial data brokers' profiles and from government use of biometric/location data that is uniquely identifying, reducing government access to sensitive commercial profiles.
Federal agencies, intelligence programs, and private providers (taxpayers, federal employees, tech companies) will face substantial new compliance, logging, auditing, reporting, and legal processes that increase administrative costs, staffing needs, and risk of operational delays.
Intelligence and law‑enforcement operations (FBI, CIA, NSA, NCTC, state/local investigators) may be impeded in time‑sensitive or emergency contexts because narrowed query/access rules, strict retention/destruction, reporting requirements, and broader judicial/amicus procedures can slow or constrain collection and use of intelligence.
The Attorney General's and DNI's authority to delay implementation (and preservation of prior State/local authorities) could postpone privacy protections for the public and centralize timing power in the executive branch, delaying benefits and reducing near-term oversight.
Based on analysis of 11 sections of legislative text.
Creates definitions for "covered" persons/info/queries, restricts federal warrantless queries and purchases of data broker personal data, expands ECPA protections, and increases oversight and reporting.
Creates new limits on federal intelligence and law enforcement access to communications, location, web browsing, search query, and certain commercial personal data for people in the United States. It defines a new category of "covered persons/covered information/covered queries," bars many warrantless queries and purchases of commercial personal data from data brokers, requires warrants or specified exceptions for access, and adds auditing, reporting, and inspector general oversight requirements. The bill also revises FISA and ECPA language across multiple statutes, removes several existing Title VII FISA sections, and expands annual public reporting by courts and intelligence agencies to increase transparency about targeting, certifications, queries, and use of foreign-intelligence collection. The law creates detailed exceptions (emergencies, existing warrants/orders, consent, defensive cybersecurity) with procedural safeguards (14-day notifications, minimization, destruction rules), extends privacy protections to state and local processes in some respects, strengthens Inspector General and PCLOB roles, and delays or narrows some FISA authorities previously available to federal agencies. It is a complex, wide-ranging rewrite of surveillance and electronic‑privacy law with significant operational, compliance, transparency, and civil‑liberties implications for federal and state actors and for providers and data brokers.
Official title: Implement reforms relating to foreign intelligence surveillance authorities, and for other purposes.
Introduced March 12, 2026 by Ronald Lee Wyden · Last progress March 12, 2026