On June 5, 2013, the Guardian newspaper published a secret court order that required the phone company Verizon to hand the National Security Agency records of all calls on its network, every day, including calls entirely within the United States. The source was Edward Snowden, a contractor who had copied a large trove of NSA documents. Over the following months the world learned how far government surveillance had grown in the years after the attacks of September 11, 2001, and a long argument about security and liberty began again.
From 9/11 to bulk collection
The 9/11 Commission found that agencies had held scattered clues before the attacks but failed to share or connect them. The USA PATRIOT Act, passed in October 2001, expanded government powers to gather information. One part, Section 215, let the FBI seek "business records" relevant to an investigation. In secret, a special court interpreted it to allow the NSA to collect the phone records of nearly every American in bulk.
These were records of metadata: who called whom, when and for how long, but not what was said. Officials stressed that no one was listening to calls. Analysts could search the database using a number linked to a suspect and follow chains of contacts outward: the suspect's contacts, then their contacts, a process measured in "hops," each one a step outward along the chain.
A second program, called PRISM, collected the communications of foreign targets from major internet companies under Section 702 of the FISA Amendments Act of 2008. Section 702 targets non-Americans abroad, but the messages of Americans who talk to those targets are swept in too, and the FBI can later search them. Critics call these backdoor searches, because they reach Americans' communications without an individual warrant.
Why metadata matters
It is tempting to think metadata is harmless. Researchers at Stanford tested this by collecting phone records from volunteers. From call patterns alone they could infer sensitive facts: calls to a cardiologist and a pharmacy suggested a heart condition, calls to a gun shop and a lock maker suggested a purchase. Metadata is structured and easy for computers to sort, which makes it ideal for aggregation. In short, metadata can reveal sensitive facts such as health, religion and relationships without anyone hearing a word.
The case for these programs
Defenders made serious arguments. After 9/11, the danger of failing to connect the dots was vivid. Intelligence officials have credited Section 702 with providing information on terrorist plots, cyberattacks and foreign spying, and point out that foreign targets abroad are not protected by the US Constitution. Every program was approved by a court and briefed to congressional committees. Mass casualty attacks are rare but catastrophic, and many citizens accept some intrusion to reduce that risk.
The reviews
The public debate allowed the evidence to be tested. In January 2014 the Privacy and Civil Liberties Oversight Board, an independent federal agency, reported that it could not find a single case in which the phone records program had made a concrete difference to the outcome of a counterterrorism investigation. In short, an independent federal board found the phone records program had not been essential to stopping any attack. In 2015 a federal appeals court ruled in ACLU v. Clapper that the program went beyond what Section 215 actually allowed.
Congress responded with the USA FREEDOM Act of 2015, which ended bulk collection of phone records by the government. Records stayed with phone companies, and the government had to request specific numbers with a court's approval. The replacement program proved troublesome and was shut down a few years later. Section 702, by contrast, has been renewed several times, each time after fierce debate over warrants for searches of Americans' data.
Beyond the United States
Many democracies expanded surveillance in the same years. The United Kingdom's Investigatory Powers Act of 2016 put bulk powers on a legal footing with judges approving warrants; critics nicknamed it the "Snoopers' Charter." Authoritarian states went much further. In China's Xinjiang region, human rights researchers documented checkpoints, phone scanning apps and a data platform used to flag Uyghurs for detention.
Accuracy matters here too. Western reports often imagine a single score that rates every Chinese citizen. Careful researchers describe China's "social credit system" as a patchwork of blacklists and ratings, not one national score. It mostly targets businesses and people who ignore court orders, though it can still punish people harshly. Exaggeration makes real abuses easier to dismiss.
Worked example: three phone calls
Daniel makes three calls one afternoon. The first is to an HIV testing clinic and lasts two minutes. The second, an hour later, is to the same clinic and lasts twenty minutes. The third is to a support hotline, late that night, and lasts forty minutes.
No one recorded a word, yet the story is plain. This is why metadata collection is not a minor matter. Now add contact chaining: if Daniel's pharmacist once called a number linked to a suspect, Daniel might be two hops away and fall into the search results. A defender would answer that analysts were bound by rules and that searching was limited to cases with reasonable suspicion. A critic would ask how anyone outside the program could check, which is exactly the question the oversight board and the courts eventually answered.