[Congressional Bills 118th Congress]
[From the U.S. Government Publishing Office]
[S. 3961 Introduced in Senate (IS)]

<DOC>






118th CONGRESS
  2d Session
                                S. 3961

 To amend the Foreign Intelligence Surveillance Act of 1978 to reform 
 certain authorities and to provide greater transparency and oversight.


_______________________________________________________________________


                   IN THE SENATE OF THE UNITED STATES

                             March 14, 2024

 Mr. Durbin (for himself, Mr. Lee, Ms. Hirono, Mr. Daines, Mr. Wyden, 
  Ms. Lummis, Ms. Baldwin, Mr. Heinrich, Ms. Warren, Mr. Markey, Mr. 
  Tester, Mr. Sanders, and Mr. Welch) introduced the following bill; 
  which was read twice and referred to the Committee on the Judiciary

_______________________________________________________________________

                                 A BILL


 
 To amend the Foreign Intelligence Surveillance Act of 1978 to reform 
 certain authorities and to provide greater transparency and oversight.

    Be it enacted by the Senate and House of Representatives of the 
United States of America in Congress assembled,

SECTION 1. SHORT TITLE; TABLE OF CONTENTS.

    (a) Short Title.--This Act may be cited as the ``Security And 
Freedom Enhancement Act of 2024'' or the ``SAFE Act''.
    (b) Table of Contents.--The table of contents for this Act is as 
follows:

Sec. 1. Short title; table of contents.
TITLE I--PROTECTIONS FOR UNITED STATES PERSONS WHOSE COMMUNICATIONS ARE 
 COLLECTED UNDER SECTION 702 OF THE FOREIGN INTELLIGENCE SURVEILLANCE 
                              ACT OF 1978

Sec. 101. Query procedure reform.
Sec. 102. Quarterly reports.
Sec. 103. Accountability procedures for incidents relating to queries 
                            conducted by the Federal Bureau of 
                            Investigation.
Sec. 104. Prohibition on reverse targeting of United States persons and 
                            persons located in the United States.
Sec. 105. FISA court review of targeting decisions.
Sec. 106. Repeal of authority for the resumption of abouts collection.
Sec. 107. Extension of title VII of FISA; expiration of FISA 
                            authorities; effective dates.
 TITLE II--ADDITIONAL REFORMS RELATING TO ACTIVITIES UNDER THE FOREIGN 
                 INTELLIGENCE SURVEILLANCE ACT OF 1978

Sec. 201. Application for an order under the Foreign Intelligence 
                            Surveillance Act of 1978.
Sec. 202. Criminal penalties for violations of FISA.
Sec. 203. Increased penalties for civil actions.
Sec. 204. Agency procedures to ensure compliance.
Sec. 205. Limit on civil immunity for providing information, 
                            facilities, or technical assistance to the 
                            Government absent a court order.
     TITLE III--REFORMS RELATING TO PROCEEDINGS BEFORE THE FOREIGN 
            INTELLIGENCE SURVEILLANCE COURT AND OTHER COURTS

Sec. 301. Foreign Intelligence Surveillance Court reform.
Sec. 302. Public disclosure and declassification of certain documents.
Sec. 303. Submission of court transcripts to Congress.
Sec. 304. Contempt power of FISC and FISCR.
            TITLE IV--INDEPENDENT EXECUTIVE BRANCH OVERSIGHT

Sec. 401. Periodic audit of FISA compliance by Inspector General.
Sec. 402. Intelligence community parity and communications with Privacy 
                            and Civil Liberties Oversight Board.
    TITLE V--PROTECTIONS FOR UNITED STATES PERSONS WHOSE SENSITIVE 
 INFORMATION IS PURCHASED BY INTELLIGENCE AND LAW ENFORCEMENT AGENCIES

Sec. 501. Limitation on intelligence acquisition of United States 
                            person data.
Sec. 502. Limitation on law enforcement purchase of personal data from 
                            data brokers.
Sec. 503. Consistent protections for demands for data held by 
                            interactive computing services.
Sec. 504. Consistent privacy protections for data held by data brokers.
Sec. 505. Protection of data entrusted to intermediary or ancillary 
                            service providers.
                         TITLE VI--TRANSPARENCY

Sec. 601. Enhanced reports by Director of National Intelligence.
              TITLE VII--LIMITED DELAYS IN IMPLEMENTATION

Sec. 701. Limited delays in implementation.

TITLE I--PROTECTIONS FOR UNITED STATES PERSONS WHOSE COMMUNICATIONS ARE 
 COLLECTED UNDER SECTION 702 OF THE FOREIGN INTELLIGENCE SURVEILLANCE 
                              ACT OF 1978

SEC. 101. QUERY PROCEDURE REFORM.

    (a) Mandatory Audits of United States Person Queries Conducted by 
Federal Bureau of Investigation.--
            (1) In general.--The Department of Justice shall conduct an 
        audit of a significant representative sample of covered 
        queries, as defined in paragraph (6) of section 702(f) of the 
        Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 
        1881a(f)), as redesignated and amended by subsection (b) of 
        this section, conducted during the 180-day period beginning on 
        the date of enactment of this Act, and during each 180-day 
        period thereafter.
            (2) Completion of audit.--Not later than 90 days after the 
        end of each 180-day period described in paragraph (1), the 
        Department of Justice shall complete the audit described in 
        such paragraph with respect to such 180-day period.
    (b) Restrictions Relating to Conduct of Certain Queries by Federal 
Bureau of Investigation.--Section 702(f) of the Foreign Intelligence 
Surveillance Act of 1978 (50 U.S.C. 1881a(f)) is amended--
            (1) by redesignating paragraph (3) as paragraph (6);
            (2) by inserting before paragraph (6) the following:
            ``(5) Querying procedures applicable to federal bureau of 
        investigation.--For any procedures adopted under paragraph (1) 
        applicable to the Federal Bureau of Investigation, the Attorney 
        General, in consultation with the Director of National 
        Intelligence, shall include the following requirements:
                    ``(A) Training.--A requirement that, prior to 
                conducting any query, and on an annual basis thereafter 
                as a prerequisite for continuing to conduct queries, 
                personnel of the Federal Bureau of Investigation 
                successfully complete training on the querying 
                procedures.
                    ``(B) Additional prior approvals for sensitive 
                queries.--A requirement that, absent exigent 
                circumstances, prior to conducting certain queries, 
                personnel of the Federal Bureau of Investigation 
                receive approval, at minimum, as follows:
                            ``(i) Approval from the Deputy Director of 
                        the Federal Bureau of Investigation if the 
                        query uses a query term reasonably believed to 
                        identify a United States elected official, an 
                        appointee of the President or the governor of a 
                        State, a United States political candidate, a 
                        United States political organization or a 
                        United States person prominent in such 
                        organization, or a United States media 
                        organization or a United States person who is a 
                        member of such organization.
                            ``(ii) Approval from an attorney of the 
                        Federal Bureau of Investigation if the query 
                        uses a query term reasonably believed to 
                        identify a United States religious organization 
                        or a United States person who is prominent in 
                        such organization.
                            ``(iii) Approval from an attorney of the 
                        Federal Bureau of Investigation for 2 or more 
                        queries conducted together as a batch job.
                    ``(C) Prior written justification.--A requirement 
                that--
                            ``(i) prior to conducting a covered query, 
                        personnel of the Federal Bureau of 
                        Investigation generate a written statement of 
                        the specific factual basis to support the 
                        reasonable belief that such query meets the 
                        standards required by the procedures adopted 
                        under paragraph (1); and
                            ``(ii) for each covered query, the Federal 
                        Bureau of Investigation shall keep a record of 
                        the query term, the date of the conduct of the 
                        query, the identifier of the personnel 
                        conducting the query, and such written 
                        statement.
                    ``(D) Affirmative election to include section 702 
                information in queries.--Any system of the Federal 
                Bureau of Investigation that stores unminimized 
                contents or noncontents obtained through acquisitions 
                authorized under subsection (a) together with contents 
                or noncontents obtained through other lawful means 
                shall be configured in a manner that--
                            ``(i) requires personnel of the Federal 
                        Bureau of Investigation to affirmatively elect 
                        to include such unminimized contents or 
                        noncontents obtained through acquisitions 
                        authorized under subsection (a) when running a 
                        query; or
                            ``(ii) includes other controls reasonably 
                        expected to prevent inadvertent queries of such 
                        unminimized contents or noncontents.''; and
            (3) in paragraph (6), as so redesignated--
                    (A) by redesignating subparagraph (B) as 
                subparagraph (C); and
                    (B) by inserting after subparagraph (A) the 
                following:
                    ``(B) The term `covered query' means a query 
                conducted--
                            ``(i) using a term associated with a United 
                        States person or a person reasonably believed 
                        to be located in the United States at the time 
                        of the query or the time of the communication 
                        or creation of the information; or
                            ``(ii) for the purpose of finding the 
                        information of a United States person or a 
                        person reasonably believed to be located in the 
                        United States at the time of the query or the 
                        time of the communication or creation of the 
                        information.''.
    (c) Prohibition on Warrantless Access to the Communications and 
Other Information of United States Persons and Persons Located in the 
United States.--Section 702(f) of the Foreign Intelligence Surveillance 
Act of 1978 (50 U.S.C. 1881a(f)) is amended--
            (1) in paragraph (1)(A) by inserting ``and the limitations 
        and requirements in paragraph (2)'' after ``Constitution of the 
        United States'';
            (2) by striking paragraph (2) and inserting the following:
            ``(2) Prohibition on warrantless access to the 
        communications and other information of united states persons 
        and persons located in the united states.--
                    ``(A) In general.--Except as provided in 
                subparagraphs (B) and (C), no officer or employee of 
                the United States may access communications content, or 
                information the compelled disclosure of which would 
                require a probable cause warrant if sought for law 
                enforcement purposes inside the United States, acquired 
                under subsection (a) and returned in response to a 
                covered query.
                    ``(B) Exceptions for concurrent authorization, 
                consent, emergency situations, and certain defensive 
                cybersecurity queries.--
                            ``(i) In general.--Subparagraph (A) shall 
                        not apply if--
                                    ``(I) the person to whom the query 
                                relates is the subject of an order or 
                                emergency authorization authorizing 
                                electronic surveillance, a physical 
                                search, or an acquisition under this 
                                section or section 105, section 304, 
                                section 703, or section 704 of this Act 
                                or a warrant issued pursuant to the 
                                Federal Rules of Criminal Procedure by 
                                a court of competent jurisdiction;
                                    ``(II)(aa) the officer or employee 
                                accessing the communications content or 
                                information has a reasonable belief 
                                that--
                                            ``(AA) an emergency exists 
                                        involving an imminent threat of 
                                        death or serious bodily harm; 
                                        and
                                            ``(BB) in order to prevent 
                                        or mitigate the threat 
                                        described in subitem (AA), the 
                                        communications content or 
                                        information must be accessed 
                                        before authorization described 
                                        in subclause (I) can, with due 
                                        diligence, be obtained; and
                                    ``(bb) not later than 14 days after 
                                the communications content or 
                                information is accessed, a description 
                                of the circumstances justifying the 
                                accessing of the query results is 
                                provided to the Foreign Intelligence 
                                Surveillance Court, the congressional 
                                intelligence committees, the Committee 
                                on the Judiciary of the House of 
                                Representatives, and the Committee on 
                                the Judiciary of the Senate;
                                    ``(III) such person or, if such 
                                person is incapable of providing 
                                consent, a third party legally 
                                authorized to consent on behalf of such 
                                person, has provided consent for the 
                                access on a case-by-case basis; or
                                    ``(IV)(aa) the communications 
                                content or information is accessed and 
                                used for the sole purpose of 
                                identifying targeted recipients of 
                                malicious software and preventing or 
                                mitigating harm from such malicious 
                                software;
                                    ``(bb) other than malicious 
                                software and cybersecurity threat 
                                signatures, no communications content 
                                or other information are accessed or 
                                reviewed; and
                                    ``(cc) the accessing of query 
                                results is reported to the Foreign 
                                Intelligence Surveillance Court.
                            ``(ii) Limitations.--
                                    ``(I) Use in subsequent 
                                proceedings.--No communications content 
                                or information accessed under clause 
                                (i)(II) or information derived from 
                                such access may be used, received in 
                                evidence, or otherwise disseminated in 
                                any trial, hearing, or other proceeding 
                                in or before any court, grand jury, 
                                department, office, agency, regulatory 
                                body, legislative committee, or other 
                                authority of the United States, a 
                                State, or political subdivision 
                                thereof, except in a proceeding that 
                                arises from the threat that prompted 
                                the query.
                                    ``(II) Assessment of compliance.--
                                Not less frequently than annually, the 
                                Attorney General shall assess 
                                compliance with the requirements under 
                                subclause (I).
                    ``(C) Matters relating to emergency queries.--
                            ``(i) Treatment of denials.--In the event 
                        that communications content or information 
                        returned in response to a covered query are 
                        accessed pursuant to an emergency authorization 
                        described in subparagraph (B)(i)(I) and the 
                        subsequent application to authorize electronic 
                        surveillance, a physical search, or an 
                        acquisition pursuant to section 105(e), section 
                        304(e), section 703(d), or section 704(d) of 
                        this Act is denied, or in any other case in 
                        which communications content or information 
                        returned in response to a covered query are 
                        accessed in violation of this paragraph--
                                    ``(I) no communications content or 
                                information acquired or evidence 
                                derived from such access may be used, 
                                received in evidence, or otherwise 
                                disseminated in any investigation by or 
                                in any trial, hearing, or other 
                                proceeding in or before any court, 
                                grand jury, department, office, agency, 
                                regulatory body, legislative committee, 
                                or other authority of the United 
                                States, a State, or political 
                                subdivision thereof; and
                                    ``(II) no communications content or 
                                information acquired or derived fro