U.S. Courts to Publicly Track Spyware Use in Wiretap Reports Starting in 2029

The U.S. judiciary will begin disclosing how often judges authorize the use of spyware in wiretaps, starting with the 2028 Wiretap Report, set to be published in 2029. This marks a significant shift in transparency regarding the FBI’s use of hacking techniques, specifically network investigative techniques, or NITs, which have been employed since at least 1998 without prior public accountability.

The Administrative Office of the U.S. Courts has been releasing annual Wiretap Reports for nearly two decades. These reports provide detailed statistics on wiretaps authorized each year, including whether they were ordered by federal or state judges, the states involved, and the types of crimes investigated. Wiretaps enable law enforcement to access real-time communications, including phone calls and messages, but judges require substantial evidence of criminal activity before authorization is granted.

Historically, wiretaps are issued less frequently than search warrants but can still capture vast amounts of communication data. For example, a single wiretap previously facilitated a large-scale operation that collected millions of text messages over a three-month period. The reports categorize wiretap types, including audio wiretaps, oral taps using physical eavesdropping devices, and electronic tapping of digital communications as they traverse service provider networks.

Senator Ron Wyden received confirmation from the Administrative Office of the U.S. Courts this week regarding the new category for spyware and hacking in the Wiretap Report. A spokesperson explained that changes in reporting forms and procedures will be necessary before including this new data.

It is crucial to clarify that the forthcoming statistics will only reflect when spyware has been used to intercept communications, such as calls and messages on platforms like Signal and WhatsApp. They will not account for instances where authorities remotely hack into devices to extract stored data, a distinctly different legal process.

Wyden, who has long advocated for transparency in electronic surveillance, expressed gratitude for the decision to publish data on hacking. “The American people remain largely in the dark about the different ways that the government is spying on them,” he stated, urging Congress to pass the Government Surveillance Transparency Act to bolster accountability.

Privacy experts hailed this move as a significant victory. Eva Galperin, Director of Cybersecurity at the Electronic Frontier Foundation, noted that publicizing these statistics will enhance governmental accountability for potential misuse of spyware, making it more difficult for authorities to deny the use of such tools. “It’s hard to say that you’re using spyware as a surgical tool when you’ve deployed it tens of thousands of times,” she added.

Brett Max Kaufman, a senior counsel at the ACLU’s Center for Democracy, called the change “an important and long-overdue step forward for transparency around government hacking.” He believes it should pave the way for better-informed policy and legislative action on such issues moving forward.

Other nations, such as Italy, already maintain comprehensive records on spyware usage, reporting 4,321 targets in 2023 alone. This international precedent underscores the growing demand for similar transparency in the United States.