4. Does the NSA have to get prior court approval for each query?
No. Rep. Adam Schiff, D-Calif., asked, “Every time you make the query, does that have to be approved by the court?” Cole answered, “We do not have to get separate court approval for each query. … We don't go back to the court each time.” Cole noted that the judges, up front, “set out the standards for us to use,” including the “reasonable suspicion” standard. But “we don't give the reasonable suspicion to the court ahead of time.”
Rep. Mike Rogers, R-Mich., the chairman of the House Intelligence Committee, didn’t like the oversight gap Schiff had exposed. Rogers has repeatedly assured Americans that the data are kept in a “lockbox.” To shore up this story, Rogers stepped in with a friendly question for Cole: “My understanding, though, is that every access is already pre-approved; that the way you get into the system is court-approved. Is that correct?” Cole replied: “That's correct. The court sets out the standards which have to be applied to allow us to make the query in the first place.”
In other words, the court categorically pre-approves all queries that meet the “reasonable, articulable suspicion” standard. The NSA then applies that standard as it sees fit. No presentation of evidence to the court is required.
5. What restrictions does the court prescribe for all searches?
We don’t know. The “reasonable, articulable suspicion” standard, on its face, is vague. Cole testified that a secret, unpublished court order “goes into, in great detail, what we can do with that metadata, how we can access it, how we can look through it, what we can do with it once we have looked through it.” He said the order includes “restrictions on who can access it” as well as “minimization procedures” to protect innocent people from investigation. The order might resemble documents, published yesterday by the Guardian, that outline such rules for the NSA’s Internet surveillance program. But when lawmakers asked whether the administration would release the court order governing phone metadata, Litt said only that his office was working on it. Until then, descriptions of what’s in the order are just assertions.
6. Does the NSA submit each query for court review afterward?
No. Schiff asked: “Does the court scrutinize, after you present back to the court, ‘These are the occasions where we found reasonable and articulable facts’? Do they scrutinize your basis for conducting those queries?” Cole replied, “Yes, they do.” But a few minutes later, Cole corrected himself: “The FISC does not review each and every ‘reasonable, articulable suspicion’ determination. What does happen is they are given reports every 30 days in the aggregate. And if there are any compliance issues, if we found that it wasn't applied properly, that's reported separately to the court.”
Schiff pressed for clarification: “I just want to make sure I understood what you just said. A prior court approval is not necessary for a specific query, but when you report back to the court about how the order has been implemented, you do set out those cases where you found reasonable, articulable facts and made a query. Do you set out those with specificity, or you just say, ‘On 15 occasions we made a query'?’” Cole answered: “It's more the latter, the aggregate number where we've made a query. And if there's any problems that have been discovered, then we, with specificity, report to the court those problems.”
Cole and other officials said the queries are tightly documented and reviewed by the Department of Justice. But the bottom line is that the executive branch reports to the court only those cases which the administration itself has flagged as possible abuses.
7. Does the court provide any meaningful resistance?
Litt testified that it does:
“People point to the fact that the FISA court ultimately approves almost every application that the government submits to it. But this does not recognize the actual process … When we prepare an application for a FISA … we first submit to the court what's called a read copy, which the court's staff will review and comment on. And they will almost invariably come back with questions, concerns, problems that they see, and there's an iterative process back and forth between the government and the FISA court to take care of those concerns, so that at the end of the day we're confident that we're presenting something that the FISA court will approve. That is hardly a rubber stamp.”
That sounds great. But where’s the evidence of all this back and forth? What Litt is describing wouldn’t even be discernible in the court orders.
The Obama administration deserves credit for adding layers of oversight to the phone records program (which began under President Bush) and for answering questions about it in open hearings. We know more now than we did before. But part of what we’ve learned is that the judicial oversight is lax. The NSA doesn’t have to get court approval for each query. Its searches are collectively “pre-approved,” based on vague standards that the agency itself gets to interpret. Nor does it have to justify each query afterward. It reports to the court only those queries which the administration acknowledges were problematic. Officials tell us there are detailed demands and rules, issued by the court, that limit how the NSA can use the data. But they haven’t shown us any documentation of those demands or rules.
In short, the NSA, having collected everyone’s phone records, can and does search them without specific warrants. Its case-by-case decisions aren’t closely scrutinized by any other branch of government. That’s unacceptable.
William Saletan's latest short takes on the news, via Twitter: