Lawmakers Probe VPN Surveillance Risks
Coverage from WIRED, TechRadar, and others
Articles
9
Active Days
77
The Topic

Six Democratic lawmakers asked Director of National Intelligence Tulsi Gabbard to clarify whether commercial VPN users could be treated as having an unknown or foreign location under FISA Section 702 and Executive Order 12333. The concern is that VPN routing can obscure a user’s actual location, potentially complicating the application of privacy protections intended for Americans while traffic is collected under foreign-intelligence authorities. The issue matters for millions of VPN users, journalists, and privacy-conscious consumers, particularly as Congress debates Section 702 renewal and agencies face questions about transparency and safeguards.
First Article: 03/26/26
Latest Article: 06/10/26
Summary
- Six Democratic lawmakers asked DNI Director Tulsi Gabbard to explain how VPN use affects Americans’ privacy rights.
- The inquiry focuses on FISA Section 702 and Executive Order 12333, which authorize foreign-intelligence collection but can incidentally capture U.S. communications.
- Declassified guidance cited by lawmakers presumes a person of unknown location is non-U.S. unless contrary information is available.
- Commercial VPN servers can mix traffic from users in multiple countries, making apparent network location an imperfect indicator of citizenship or residence.
- The lawmakers did not claim that Americans’ VPN traffic has been collected under these authorities; they requested public clarification.
- The debate coincides with congressional consideration of Section 702 renewal.
- Journalists and other high-risk users are advised to treat VPNs as one security tool rather than a complete privacy solution.
History
The story has shifted from a broad surveillance-policy discussion to a specific congressional inquiry asking DNI Tulsi Gabbard to clarify how VPN-obscured locations are treated under Section 702 and EO 12333. The current version adds concrete legal guidance concerns and ties the issue more directly to the ongoing Section 702 renewal debate.
The story has become more explicit about the mechanism of concern: VPN traffic may be classified as foreign or unknown-location traffic under U.S. intelligence rules, rather than merely raising a general privacy risk. It also broadens from a narrower congressional clarification push to a wider debate involving lawmakers, privacy advocates, and surveillance transparency.
