Government Surveillance Reform Act of 2026

Bill Number: S. 4082
Origin Chamber: Senate
Congress: 119th Congress, Session 2
Policy Area: Armed Forces and National Security
Status: Introduced
Latest Action: 2026-03-12: Read twice and referred to the Committee on the Judiciary.
Last Updated: 2026-06-26T11:45:51Z

AI-Generated Summary

Purpose

The Government Surveillance Reform Act of 2026 aims to strengthen privacy protections for U.S. persons (citizens and residents) and individuals in the U.S. by reforming surveillance laws, particularly under the Foreign Intelligence Surveillance Act (FISA) of 1978 and the Electronic Communications Privacy Act (ECPA) of 1986. It limits warrantless government access to communications and data, prohibits purchasing personal data from brokers, enhances oversight and transparency, and extends key FISA provisions while imposing new restrictions to balance national security with constitutional rights, such as the Fourth Amendment's protection against unreasonable searches.

Key Provisions

The bill is structured across nine titles, introducing targeted reforms to surveillance practices, data handling, and reporting.

Title I: Protections Under Section 702 of FISA
Requires warrants for querying communications of U.S. persons or those in the U.S. collected under Section 702 (warrantless foreign surveillance), with exceptions for emergencies, consent, or cybersecurity defense.
Limits use of such data in criminal, civil, or administrative proceedings without a warrant.
Prohibits "reverse targeting" (surveilling foreigners to obtain U.S. persons' data) unless justified by emergencies or consent.
Imposes 5-year data retention limits for non-foreign intelligence information.
Enhances court supervision of demands on tech providers and requires primary foreign intelligence purpose for collections.
Repeals expansions allowing broader definitions of service providers and querying rules for travelers.
Extends Section 702 authority for four years (until 2030).

Title II: Fourth Amendment Is Not for Sale Act
Prohibits federal law enforcement from buying personal data (e.g., location, biometrics, browsing history) from data brokers without a warrant, with exceptions for public data, emergencies, or employment checks.
Requires minimization procedures to limit acquisition and retention of U.S. persons' data.
Bans sharing illegally obtained data between agencies and restricts its use as evidence.

Title III: Additional FISA Reforms
Mandates warrants for targeting U.S. persons' communications, location, browsing, or search history under FISA.
Requires full disclosure of relevant information in FISA applications, including exculpatory facts.
Strengthens accuracy procedures for applications, with certifications and audits.
Clarifies that evidence "derived" from unlawful surveillance cannot be used, rejecting "inevitable discovery" claims.
Suns the grandfather clause for bulk records collection under Section 215 of the USA PATRIOT Act.
Mandates written records of Justice Department interactions with the FISA court.
Expands appointment of independent advocates (amici curiae) with privacy, civil liberties, and technical expertise; grants them review rights.
Requires declassification of significant court decisions.
Establishes standing for civil suits by those plausibly alleging surveillance harm.
Introduces accountability for federal employees violating rules, with escalating penalties up to termination.
Reforms "exclusive means" provisions to ensure FISA is the sole authority for certain domestic surveillance.

Title IV: Reforms for Non-FISA Surveillance
Applies warrant requirements to queries and targeting of U.S. persons' data under Executive Order 12333 (foreign intelligence outside FISA).
Prohibits reverse targeting and warrantless acquisition of domestic communications.
Bans intelligence agencies from acquiring datasets with U.S. persons' data without authorization.
Sets 5-year retention limits and requires reports on violations.

Title V: Independent Oversight
Mandates Inspector General audits of FISA applications and directives.
Enhances whistleblower protections for intelligence community members reporting to the Privacy and Civil Liberties Oversight Board (PCLOB).
Requires congressional notification of immunity grants for warrantless surveillance assistance.

Title VI: ECPA Reforms
Requires warrants for historical and real-time location data, web browsing records, and search queries.
Standardizes protections for phone/app call/text metadata.
Updates email privacy rules to require warrants for stored content over 180 days old and clarifies voluntary disclosures.
Extends warrant requirements to data from interactive computing services and data brokers.
Limits subpoenas to basic subscriber info and sets minimization standards for voluntary disclosures.
Modernizes reporting on surveillance warrants and pen registers/trap-and-trace devices.
Limits federal amendments to apply only to federal agencies, preserving state/local authority.

Title VII: Protection of Car Data
Prohibits warrantless federal access to vehicle-generated data (e.g., telematics, sensors, event recorders) from noncommercial vehicles, with exceptions for consent or emergencies.
Bars use of unlawfully obtained vehicle data as evidence.

Title VIII: Intelligence Transparency
Enhances annual reports on FISA court activities, including amicus appointments and en banc reviews.
Requires DNI reports on Section 702 targets, queries, and U.S. person data dissemination.
Mandates Attorney General reports on application accuracy.
Allows granular public reporting by tech companies on FISA orders.
Directs PCLOB report on surveillance of protected activities (e.g., First Amendment expression) and classes (e.g., race, religion).
Requires DNI estimate of U.S. persons affected by Section 702 collections.
Mandates annual compliance assessments for emergency surveillance.

Title IX: Severability and Implementation
Ensures provisions do not affect state/local law enforcement.
Declares severability if any part is unconstitutional.
Allows up to 1-year delay for technical or personnel needs.

Significant Changes to Existing Law

Warrant Expansion: Introduces warrants for previously warrantless activities, such as Section 702 "backdoor searches," data broker purchases, and non-FISA foreign intelligence queries—shifting from "significant purpose" to "primary purpose" for foreign intelligence.
Repeals and Limits: Repeals expansions of "electronic communication service provider" definitions (post-2024), traveler querying rules, and PATRIOT Act bulk collection grandfathering; caps data retention at 5 years.
Oversight Enhancements: Mandates routine amicus appointments, declassification of court rulings, employee accountability (e.g., termination for repeated violations), and public/granular reporting—replacing vague aggregation bands with precise numbers above thresholds.
ECPA Modernization: Eliminates 180-day rule for email warrants; adds warrants for browsing/search data, aligning with Fourth Amendment standards from cases like Carpenter v. United States (location data).
Non-FISA Coverage: First-time statutory limits on Executive Order 12333 surveillance, closing gaps for overseas U.S. person data collection.

Potential Impacts

Government Agencies: Intelligence and law enforcement (e.g., FBI, NSA, CIA) face stricter warrant processes, data minimization, and audits, potentially slowing operations but reducing errors (e.g., past FISA abuses like Carter Page). Tech compliance costs rise, but reimbursements continue.
Citizens: Enhances privacy for U.S. persons by curbing incidental collection, data sales, and vehicle tracking; enables easier civil suits for surveillance harms. Vulnerable groups (e.g., journalists, activists) gain protections against targeting based on protected activities.
International Relations: May complicate intelligence sharing with allies (e.g., Five Eyes) due to tighter U.S. person rules, but promotes U.S. leadership in global privacy standards, potentially influencing foreign data laws.

Main Stakeholders Affected

U.S. Persons and Residents: Primary beneficiaries through expanded privacy rights.
Intelligence and Law Enforcement Agencies: FBI, NSA, CIA, DOJ—must adapt to warrants and oversight, with accountability risks for employees.
Technology and Data Companies: Providers (e.g., Google, Verizon, data brokers) face new compliance but gain clarity on demands; car manufacturers (e.g., Tesla) restricted in data sharing.
Courts and Oversight Bodies: FISA Court, PCLOB, Inspectors General—expanded roles in reviews and reporting.
Congress: Gains detailed transparency reports for better supervision.
State/Local Governments: Unaffected directly, preserving their surveillance authorities.

Notable Legal, Constitutional, or Political Implications

Constitutional: Bolsters Fourth Amendment by mandating warrants for sensitive data (e.g., location, browsing), addressing Supreme Court concerns in Riley v. California and Carpenter; clarifies "injury in fact" for standing in surveillance suits, easing challenges to secret programs. Potential for reduced "state secrets" privilege barriers.
Legal: Codifies limits on non-FISA surveillance, potentially invalidating past practices; severability clause protects the whole if parts (e.g., warrants) are struck down. May spur litigation over "derived evidence" definitions.
Political: Bipartisan (introduced by Sens. Wyden, Lee, Warren, Lummis), reflects post-Snowden/Section 702 debates on privacy vs. security. Could polarize: privacy advocates praise reforms, while security hawks worry about intelligence gaps. Enhances public trust via transparency but requires funding for implementation.

This summary was generated by AI and may contain inaccuracies. Refer to the official source document for the authoritative text.

Sponsor

Sen. Wyden, Ron [D-OR]

Cosponsors (3)

Sen. Lee, Mike [R-UT], Sen. Warren, Elizabeth [D-MA], Sen. Lummis, Cynthia M. [R-WY]

Recent Actions

2026-03-12: Read twice and referred to the Committee on the Judiciary.
2026-03-12: Introduced in Senate

Bill Versions

Government Surveillance Reform Act of 2026 — issued 2026-03-12 — PDF (198 pages)