Controversial FISA spying law expires tonight. The spying will continue.

The expiration of Title VII of the Foreign Intelligence Surveillance Act at midnight represents a significant moment in the ongoing debate over American surveillance powers, yet the event carries far less dramatic consequence than political rhetoric suggests. Congress has failed to pass an extension of this controversial provision, allowing it to lapse after years of contentious debate between civil liberties advocates and national security officials. However, the operational reality proves more complex than the statutory sunset implies. The Foreign Intelligence Surveillance Court has already issued a yearlong certification under Section 702 of FISA dated March 17, 2026, meaning that surveillance activities will continue uninterrupted through March 2027 regardless of tonight's legislative failure. This structural arrangement underscores a fundamental tension in modern surveillance law: the gap between statutory authority and practical operational continuity, where the machinery of intelligence gathering persists even when the formal legal mechanism expires.

The history of FISA's evolution illuminates why this moment matters for technology policy and digital rights today. Originally enacted in 1978 following revelations of extensive government surveillance abuses, FISA established a framework requiring courts to authorize foreign intelligence surveillance operations. Section 702, added through the Protect America Act of 2007 and subsequently refined, represented a significant expansion of surveillance capabilities following the September 11 attacks, permitting the government to conduct surveillance targeting non-Americans located abroad without obtaining individual warrants. The provision has remained one of the most contested mechanisms in American surveillance law, regularly sparking fierce disagreements between national security agencies seeking broad interpretive authority and civil liberties organizations arguing that the law enables unconstitutional collection of Americans' communications without adequate judicial oversight. The current debate reflects deeper anxieties about the balance between security and privacy in an interconnected digital environment where communications flow across borders seamlessly and metadata collection can reveal intimate details about individuals' lives and associations.

The specific mechanics of how Section 702 continues operating after tonight's expiration deserve careful examination, as they reveal intentional design choices embedded in surveillance law. The Brennan Center for Justice clarified that the Foreign Intelligence Surveillance Court's certification mechanism permits ongoing surveillance operations under existing authorizations even if the underlying statute expires. The current certification, issued on March 17, 2026, remains valid through March 2027, establishing a fourteen-month period during which intelligence agencies can continue collecting communications under Section 702 protocols without requiring new congressional authorization. This arrangement reflects what Congress explicitly built into the legislation as a contingency mechanism, anticipating scenarios where political gridlock might prevent timely reauthorization. The certification system operates independently from statutory reauthorization, creating what amounts to institutional continuity despite the formal lapse of legislative authority, demonstrating how certification procedures can maintain surveillance operations across what might otherwise appear as meaningful legal discontinuities.

For technology sector participants and digital rights stakeholders, this development carries immediate practical significance that extends beyond abstract constitutional questions. The continuation of Section 702 surveillance means that the government's ability to access digital communications flowing through American technology infrastructure remains unchanged through at least March 2027, regardless of congressional action tonight. Internet service providers, technology platforms, and communications companies must continue complying with FISA Court orders and government directives under Section 702, maintaining the technical infrastructure that facilitates surveillance of foreign intelligence targets while inevitably capturing American citizens' communications in the process. For technology executives concerned about user privacy and corporate liability, the certification structure offers no relief whatsoever; operational compliance requirements persist identically whether the statute remains active or lapses. This reality contradicts rhetoric from surveillance advocates claiming that letting Section 702 expire would create a dangerous gap in intelligence capabilities, when in fact the legal and operational framework ensures uninterrupted surveillance authority through existing certifications independent of congressional reauthorization.

This episode reveals a broader pattern in how American surveillance law has evolved toward institutional resilience that insulates intelligence operations from normal democratic accountability mechanisms. Rather than permitting surveillance authority to lapse when Congress fails to reauthorize statutes, the certification system creates alternative pathways for operational continuity that bypass legislative oversight. The structure reflects a systematic trend across surveillance law where intelligence agencies have built redundancy and procedural continuity into their legal frameworks, ensuring that even formal statutory expirations do not translate into actual operational gaps. This architectural approach fundamentally shifts the burden of restricting surveillance from agencies that might resist such limitations onto civil liberties advocates and reform-minded legislators who must affirmatively achieve legislative victories to constrain intelligence activities. By contrast, surveillance continuation occurs through default, requiring no affirmative congressional action and proceeding through judicial certification that operates largely outside public view. The pattern demonstrates how surveillance law has evolved toward what might be termed "structural permanence," where legal authorities persist through embedded institutional mechanisms even when explicit democratic renewal fails.

Technology stakeholders and digital rights advocates should closely monitor two specific developments in coming months. First, observers should track whether the intelligence community requests new statutory authority before the existing March 2027 certification expires, and if so, whether that reauthorization process incorporates meaningful reforms addressing warrantless surveillance of Americans' communications. Second, civil liberties organizations and technology companies should examine whether the Brennan Center and allied groups pursue legal challenges to Section 702 surveillance under the certification mechanism itself, potentially arguing that FISA Court certifications cannot constitutionally authorize surveillance activities that lack explicit current statutory authorization. The certification procedure, while providing institutional continuity, may also represent a vulnerability in the surveillance regime's legal foundation if courts ultimately determine that certifications cannot substitute for active congressional authorization of intelligence activities. These developments will substantially shape whether Section 702 surveillance remains substantially unchanged through 2027 or whether legal or legislative pressures produce meaningful constraints on warrantless government access to Americans' digital communications before existing certifications expire.