The Reforming Intelligence and Securing America Act (RISAA) has today been signed into law in the United States, reauthorising Section 702 of the Foreign Intelligence Surveillance Act (FISA) for two years.
Key points
- Section 702 allows US intelligence agencies to target non-US persons outside the US by compelling US providers to disclose communications.
- The Act extends the programme until April 2026.
- The definition of “electronic communication service provider” is broadened, potentially covering more businesses with access to communications equipment.
- New limits apply to FBI queries of data relating to US persons.
Section 702 is central to the assessment of transfers of personal data to the US under UK and EU data protection law. UK organisations should keep their transfer risk assessments for US providers up to date.
Source: Reforming Intelligence and Securing America Act, Public Law 118-49 (GovInfo)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.