NSA slides explain the PRISM data-collection program
The top-secret PRISM program allows the U.S. intelligence community to gain access from nine Internet companies to a wide range of digital information, including e-mails and stored data, on foreign targets operating outside the United States.
Context & Ripple Effects
Reporting on June 8 had described PRISM as drawing data from technology firms’ servers, while a June 15 account characterized the collection as broader still. The newly released materials put a more concrete operating frame around that earlier account of PRISM’s mechanics and report of wider data seizure.
By tying the program to nine Internet companies and to foreign targets’ email and stored data, the disclosures make major consumer platforms a visible part of the boundary between cross-border digital services and U.S. intelligence collection.
First-order effects
- The NSA and other U.S. intelligence agencies have a documented route through nine Internet companies to obtain email and stored data associated with foreign targets outside the United States.
- The nine providers become public intermediaries in the PRISM debate, placing their handling of government data requests alongside the services they provide to users.
Second-order effects
- Foreign users and business customers gain a reason to weigh a provider’s U.S. legal exposure when deciding where to place email and stored data.
- Internet providers serving cross-border users face pressure to explain the boundary between their systems, user data, and government collection requests, making disclosure practices a trust issue.
Third-order effects
- If intelligence collection continues to depend on major platforms, data jurisdiction—not only product features—will shape how cross-border Internet services are evaluated.
- Concentration of user data at a limited set of providers raises the policy stakes of access rules governing those platforms.
The trend: Cross-border digital services are becoming inseparable from the surveillance and jurisdiction rules attached to the platforms that host them.