Surveillance Privacy and Oversight

Summary#

This bill, the Government Surveillance Reform Act of 2026, changes many U.S. surveillance laws. It tightens limits on warrantless searches and queries of communications involving U.S. persons or people in the United States. It also adds new reporting, court review, oversight, and transparency rules, and updates the rules for law enforcement use of commercial data.

Key changes:

• Limits warrantless queries and “reverse targeting” — agencies generally cannot query or target communications to find information about U.S. persons or people in the U.S. without a warrant or narrow exceptions (emergency, consent, defensive cybersecurity, or concurrent court authorization).
• New warrant rules for domestic targeting — acquiring content, location, web browsing, or search-history from people in the U.S. generally requires a warrant (with limited emergency exceptions).
• Data retention limits — covered intelligence-collected information about U.S. persons or people in the U.S. must be destroyed within 5 years unless kept for litigation or ongoing investigation.
• Court supervision of provider assistance — technical assistance demands to communication providers must be shown necessary, narrowly tailored, and approved by the Foreign Intelligence Surveillance Court (FISC).
• Ban on federal purchase of data from data brokers — federal law enforcement generally may not buy personal data about people in the U.S. from private data brokers, with a few specific exceptions.
• ECPA updates and device protections — requires warrants for location, web browsing, and search-query records in many cases; strengthens rules for tracking devices and car data (vehicle telematics).

What it means for you#

• General public / U.S. persons

  • Your private communications, location data, browsing history, and some device data get stronger legal protection against warrantless collection.
  • Some information collected about you for foreign intelligence may be deleted within 5 years unless needed for an ongoing case.

• People who travel or live in the U.S. but are not U.S. citizens

  • The bill defines “covered persons” to include people reasonably believed to be in the United States. They gain the same search/query protections as U.S. persons under many provisions.

• Tech and online service companies

  • Companies cannot be forced to provide technical assistance to intelligence agencies unless the assistance is approved by the FISC and shown to be necessary and not unduly burdensome.
  • Providers must follow new reporting and data-disclosure rules for warrants and orders. Some earlier broadened provider definitions are repealed (narrowing who counted as an “electronic communication service provider”).

• Federal intelligence agencies (e.g., NSA, CIA, FBI)

  • Agencies must document and justify queries (what was searched, who ran it, why it was likely to yield foreign intelligence).
  • New audits, inspector general reviews, and annual reporting requirements apply.
  • Agencies face new limits on acquiring datasets that include information about people in the U.S., unless done under FISA orders, consent, safety exceptions, or other narrow exceptions.

• Federal law enforcement

  • Buying personal data from data brokers for U.S.-based people is mostly banned. Evidence derived from data obtained in violation of the ban may be excluded.
  • Many kinds of historical and prospective location, browsing, and search-query data generally require a warrant.

• State and local law enforcement

  • The bill preserves existing state and local authorities as they stood immediately before enactment. It also creates reporting rules if state/local agencies obtain covered personal data in ways that would violate the federal ban when done by federal agencies.

• Drivers and vehicle owners

  • Federal officers generally must get a warrant to access car telematics and onboard data. Consent and narrow emergency exceptions apply.

• Courts and legal actors

  • The FISC gains expanded roles: more supervision of provider directives, appointments of amici (privacy and technical experts), and rules to declassify significant court decisions quickly.

Expenses#

No publicly available information.

This could mean:

• Agencies will likely need new IT systems and recordkeeping to log queries and accesses. That could raise administrative, staffing, and technology costs.
• Courts and the FISC may face added workload from more oversight, amicus participation, and declassification reviews.
• Providers may face compliance and legal-cost burdens when responding to new court-ordered processes or reporting requirements.
• Implementation delays of up to one year are allowed to build needed systems or train staff.

Proponents' View#

The bill appears intended to increase privacy, oversight, and transparency. Possible arguments in favor include:

• It could strengthen constitutional protections by limiting warrantless searches and requiring warrants for many kinds of domestic content and sensitive data.
• It could reduce incidental collection and retention of Americans’ data through clearer limits and a 5-year destruction rule for evaluated data.
• It could increase accountability through inspector general audits, annual reports, and measures for employee discipline when violations occur.
• It could improve public transparency by requiring faster declassification or public release of significant court decisions and more detailed reporting about surveillance use.
• It could curb law enforcement reliance on commercial data purchases by prohibiting most federal purchases from data brokers.

Opponents' View#

The bill’s design raises some practical concerns and trade-offs:

• One concern is that stricter query rules and extra court review could slow time-sensitive intelligence or law enforcement work, especially for complex or cross-border investigations.
• The increased need for documentation, audits, and FISC approvals could raise operational costs and staff burden for agencies and providers.
• Emergency exceptions remain, but it may be unclear how quickly agencies can use them and then obtain later authorization without losing vital evidence.
• Some technical details are left to agency procedures and court rules (for example, exactly how providers will implement court-approved assistance or how “covered data” is segregated). This could create uncertainty during implementation.
• There may be tension with ongoing classified or programmatic authorities; how the new transparency and declassification deadlines will balance protection of sources and methods is not fully spelled out.

What is unclear:

• No cost estimates or fiscal notes are included in the text provided.
• Practical rules for certain thresholds (for example, when data are “reasonably segregable” before acquisition) will depend on later procedures and court guidance.