For the first time in nearly two decades, one of the U.S. government’s broadest surveillance powers is — on paper — switched off. Section 702 of the Foreign Intelligence Surveillance Act lapsed in mid-June 2026 after Congress failed to reach a reauthorization deal before the deadline. The Electronic Frontier Foundation, which has fought the program for years, called it a victory. It is one — but a heavily qualified one, and it’s worth understanding exactly what did and didn’t happen.

What Section 702 does

Section 702 lets the government collect the communications — emails, messages, calls — of foreigners located abroad, without a warrant, by compelling U.S. companies like email and phone providers to hand over data. That’s the stated purpose. The controversy is what privacy advocates call the “backdoor search” problem: because Americans constantly communicate with people overseas, enormous numbers of Americans’ messages get swept into the 702 database. Agencies including the FBI have then searched that database for Americans’ communications — again, without a warrant. Reform advocates across the political spectrum have spent years trying to close that loophole.

Why it lapsed

The authority was on a short leash to begin with. After earlier fights, it had been extended only in two-year and then 45-day increments, forcing repeated showdowns. This time, the sticking point wasn’t only the surveillance reforms — it was a nomination fight. President Trump’s pick to serve as acting Director of National Intelligence became a flashpoint, with lawmakers who normally back the intelligence community refusing to reauthorize 702 while that appointment stood, citing fears the authority could be turned against political targets. A last-ditch clean extension failed in the House, and the clock ran out.

The uncomfortable part: the spying doesn’t just stop

Here’s the catch that keeps this from being a clean win. Collection under Section 702 is authorized on an annual basis by the FISA Court. Under the way the law works, an existing court certification can keep collection running for the duration of that authorization — even after the statute itself has lapsed. In plain terms: the legal authority expired, but the machinery keeps turning until the current court certification runs out, expected to stretch into 2027. Companies can still be compelled to hand over data in the meantime.

So “702 expired” does not mean the surveillance ended overnight. It means the program is running on borrowed time, in a legal gray zone, while Congress argues.

What it means for you

Realistically, for an ordinary person, day-to-day life doesn’t change this week. But there are two takeaways that do matter:

  • This is a rare moment of leverage. A lapsed authority is far easier to reform than a renewed one. If you care about warrant requirements for Americans’ data, this is the window to tell your representatives so.
  • Don’t rely on the law to protect your messages — rely on math. Section 702 compels providers to turn over data. The communications it can’t read are the ones that are end-to-end encrypted, where the provider itself doesn’t hold the keys. This is the whole case for using encrypted messaging (Signal and the like) and encrypted email for anything sensitive. Legal protections come and go with the political weather; encryption doesn’t.

We’re tracking the reauthorization fight — and whether any reforms actually make it into a renewed bill — on our law and news tracker. The short version for now: the authority has lapsed, the pressure is on, and the outcome is genuinely unsettled.