WASHINGTON (AP) — The National Security Agency declassified three secret U.S. court opinions Wednesday showing how it scooped up as many as 56,000 emails and other communications by Americans with no connection to terrorism annually over three years, how it revealed the error to the court and changed how it gathered Internet communications.
Director of National Intelligence James Clapper authorized the release.
The opinions show that when the NSA reported its inadvertent gathering of American-based Internet traffic to the court in 2011, the Foreign Intelligence Surveillance Court ordered the agency to find ways to limit what it collects and how long it keeps it.
Three senior U.S. intelligence officials said Wednesday that national security officials realized the extent of its inadvertent collection of Americans' data from fiber optic cables in September 2011. One of the officials said the problem became apparent during internal discussions between NSA and Justice Department officials about the program's technical operation.
"They were having a discussion and a light bulb went on," the official said.
The problem, according to the officials, was that the top secret Internet-sweeping operation, which was targeting metadata contained in the emails of foreign users, was also amassing thousands of emails that were bundled up with the targeted materials. Because many web mail services use such bundled transmissions, the official said, it was impossible to collect the targeted materials without also sweeping up data from innocent domestic U.S. users.
The officials did not explain, however, why they did not prepare for that possibility when the surveillance program was created and why they discovered it only after the program was well under way.
Officials said that when they realized they had an American communication, the communication was destroyed. But it was not clear how they determined whom an email belonged to and whether any NSA analyst had actually read the content of the email. The officials said the bulk of the information was never accessed or analyzed.
As soon as the extent of the problem became clear, the officials said, the Obama administration provided classified briefings to both Senate and House intelligence committees within days. At the same time, officials also informed the secret Foreign Intelligence Surveillance Court, which later issued the three 2011 rulings released Wednesday — with redactions — as part of the government's latest disclosure of documents.
The officials said the NSA realized that when it was gathering up bundled Internet communications from fiber optic cables, with the cooperation of telecommunications providers like AT&T, it often was collecting thousands of emails or other Internet transactions by Americans who had no connection to the intended terror target being tracked.
The officials briefed reporters on condition of anonymity because they were not authorized to describe the program publicly.
The documents were declassified to help the Obama administration explain some of the most recent disclosures made by The Washington Post after it published classified documents provided by former NSA systems analyst Edward Snowden.
One of the intelligence officials briefing reporters said the newly declassified documents should help explain " the reasons why people shouldn't go into a panic over articles they read in the press."
The documents were to be posted later in the day on Tumblr, a trendy blogging service which is particularly popular among teenagers and young adults.
While the NSA is allowed to keep the metadata — the address or phone number and the duration, but not the content, of the communication — of Americans for up to five years, the court ruled that when it gathered up such large packets of information, they included actual emails between American citizens, thereby violating the Constitution's ban against unauthorized search and seizure.
In the opinion by the Foreign Intelligence Surveillance Court denouncing the practice, the judge wrote that the NSA had advised the court that "the volume and nature of the information it had been collecting is fundamentally different than what the court had been led to believe," and went on to say the court must consider "whether targeting and minimization procedures comport with the 4th Amendment."
For instance, two senior intelligence officials said, when an American logged into an email server and looked at the emails in his or her inbox, that screen shot of the emails could be collected, together with Internet transactions by a terrorist suspect being targeted by the NSA — because that suspect's communications were being sent on the same fiber optic cable by the same Internet provider, in a bundled packet of data.
These interceptions of innocent Americans' communications were happening when the NSA accessed Internet information "upstream," meaning off of fiber optic cables or other channels where Internet traffic traverses the U.S. telecommunications system.
The NSA disclosed that it gathers some 250 million internet communications each year, with some 9 percent from these "upstream" channels, amounting to between 20 million to 25 million emails a year. The agency used statistical analysis to estimate that of those, possibly as many as 56,000 Internet communications collected were sent by Americans or persons in the U.S. with no connection to terrorism.
Under court order, the NSA resolved the problem by creating new ways to detect when emails by people within the U.S. were being intercepted, and separated those batches of communications. It also developed new ways to limit how that data could be accessed or used. The agency also agreed to only keep these bundled communications for possible later analysis for a 2-year period, instead of the usual 5-year retention period.
The agency also, under court order, destroyed all the bundled data gathered between 2008, when the FISA Court first authorized the collection under section 702 of the Patriot Act, and 2011 when the new procedures were put in place.
The newly released court opinions revealed the court signed off on the new procedures, deeming them constitutionally acceptable.
White House spokesman Josh Earnest said the White House still contends there is no domestic surveillance program despite new revelations about the scope of U.S. emails and Internet communications that can get swept up by the NSA. He said the program is specifically to gather foreign intelligence, adding that the fact that the extent of incidental American surveillance has been documented is proof positive that accountability measures are working properly.
"The reason that we're talking about it right now is because there are very strict compliance standards in place at the NSA that monitor for compliance issues, that tabulate them, that document them and that put in place measures to correct them when they occur," Earnest said.