NSA officials leveraged Section 702 of the Foreign Intelligence Surveillance Act to launch a global monitoring campaign that captured daily traffic from millions. Edward Snowden’s 2013 leaks exposed the program’s reach, revealing that the agency could harvest every email, text, and web click without court orders. This operation underscored the gap between privacy promises and state practice.

PRISM granted the NSA direct access to major cloud providers—Microsoft, Google, Facebook, Apple, and others—allowing it to pull emails, photos, chats, and search histories en masse. Upstream let the agency tap into the backbone of carriers like AT&T, inserting monitoring hardware into routers. Together, these tools enabled near‑unlimited data harvesting across borders without judicial oversight.

Mass surveillance erodes civil liberties, turning ordinary citizens into data points. The revelations illustrate how unchecked state power can infiltrate everyday digital life, compromising privacy and autonomy. Companies denied involvement, yet their systems became conduits for government snooping. The NSA’s reach, enabled by Section 702, remains a stark reminder that robust legal safeguards are essential for protecting individual rights.

Legal frameworks like Section 702 renew every five years, yet reforms stall amid national security arguments. Whistleblowers like Snowden expose the disjunction between policy rhetoric and practice, yet public awareness rarely translates into policy shifts. Without judicial oversight, data collection scales unchecked, threatening democratic accountability. The NSA’s architecture—combining PRISM, Upstream, and XKeyscore—demonstrates that technical capability can outpace ethical safeguards, making surveillance a persistent threat.