The 9/11 surveillance state.

Ashcroft delivered the Justice Department's draft the week of September 19, 2001 and demanded passage within a week. Many provisions were recycled from DOJ and FBI wishlists Congress had rejected before 9/11. The final bill reached the House floor the same day it was introduced — during the anthrax attacks, with congressional office buildings closed and members voting with two copies of the bill available on one side of the aisle. There was no conference report and essentially no hearings on the final text.

What it changed: §215 replaced FISA's “specific and articulable facts” standard with mere relevance and reached “any tangible thing” — the hook later stretched into bulk collection of every American's call records. §206 created roving “John Doe” wiretaps naming neither target nor facility. §213 codified sneak-and-peek searches for any federal crime. §216 extended pen-register authority to internet metadata. §505 put National Security Letters — no judge, categorical gag order — in the hands of every FBI field office.

The abuse arrived on schedule. The DOJ Inspector General found 143,074 NSL requests in 2003–05 — up from ~8,500 a year before the Act — with legal violations in 22% of files examined and 700+ “exigent letters” falsely claiming emergencies, a practice so “casual, routine, and unsupervised” that phone-company employees sometimes drafted the letters for agents to sign. Sneak-and-peek grew from 47 requests (2001–03) to ~20,000 a year by FY2020 — more than 70% of them drug cases, about 0.5% terrorism.

At every renewal the ratchet tightened: fourteen of sixteen sunsetted provisions made permanent in 2006; a clean extension signed by autopen in 2011; the 2015 USA FREEDOM Act's half-reform, whose replacement regime collected 434 million records from 11 targets, had to delete ~685 million it was never authorized to receive, and was quietly abandoned. Section 215 finally lapsed in 2020 — through congressional gridlock, not choice.

In January 2002 DARPA stood up the Information Awareness Office under John Poindexter — Reagan's national security adviser, convicted on five Iran-Contra felonies (overturned on appeal). Its goal, in Poindexter's own words: treat “the world-wide, distributed, legacy data bases as if they were one centralized data base.” Its components read like a roadmap for the modern surveillance stack: Genisys (a “virtual, centralized grand database” of transactions), EELD (link analysis), HumanID (face and gait recognition at a distance), TIDES (mass text mining) — roughly $317M across FY2001–03.

Safire's November 2002 column “You Are a Suspect” detonated the program. Congress restricted funding, Wyden and Dorgan exposed FutureMAP (a prediction market that would have let traders bet on assassinations), Poindexter resigned, and in September 2003 Congress directed “that the Office be terminated immediately.”

The same law contained the escape hatch: TIA-style tools described in the classified annex could continue, funded through the National Foreign Intelligence Program. The core projects moved to ARDA — the intelligence community's research arm at NSA headquarters, Fort Meade. Genoa II became “Topsail.” The Information Awareness Prototype System became “Basketball.” Funding “remained intact, sometimes under the same contracts.” When Wyden asked in 2006 whether TIA components had moved to other agencies, NSA director Michael Hayden asked to answer in closed session.

The kill was cosmetic in a second sense: a May 2004 GAO survey found 199 federal data-mining efforts already operational or planned. The states got MATRIX — data-broker “High Terrorist Factor” scoring that handed 120,000 top-scoring Americans to federal agents. Rumsfeld's own advisory committee concluded that killing TIA had simply left the same activities running without oversight.

On October 4, 2001, Bush signed the first authorization of STELLAR WIND: four baskets of warrantless collection — international call and email content, bulk telephony metadata, bulk internet metadata — reauthorized every 30–45 days on his sole authority, bypassing the FISA Court entirely. Its illegality nearly decapitated the Justice Department: when DOJ refused to recertify in March 2004, Gonzales and Card went to Ashcroft's hospital bed to extract a signature; Ashcroft refused; Bush reauthorized anyway, then relented only when Comey, Mueller, and some thirty officials threatened to resign en masse. Over the following years each basket was laundered into legal process — pen-register orders, §215, and finally §702.

The dissent inside NSA predated all of it. Binney, Wiebe, and Loomis had built ThinThread, a $3.2M system that encrypted and anonymized U.S.-person data by design. Hayden rejected it for Trailblazer, a SAIC-led program that consumed ~$1.2B and never produced a deployable system — and when ThinThread components were reused, the privacy protections were stripped out. The whistleblowers' homes were raided; Thomas Drake, who gave unclassified waste evidence to the Baltimore Sun, was charged under the Espionage Act in a case that collapsed to a single misdemeanor.

June 2013 turned allegation into record: the Verizon order compelling all call records “including local telephone calls” on an ongoing daily basis; PRISM's slide-documented onboarding of Microsoft, Yahoo, Google, Facebook, YouTube, Skype, AOL, and Apple; XKeyscore's searchable front-end across 700+ servers; MUSCULAR's tap on Google and Yahoo's private inter-datacenter fiber — outside FISA entirely, under EO 12333; CO-TRAVELER's five billion phone-location records a day.

When oversight finally looked, its verdicts were unambiguous. The FISA Court found the government had “substantially misrepresented” a major program three times in three years. PCLOB could identify “no instance” in which bulk metadata “made a concrete difference in the outcome of a counterterrorism investigation.” Judge Leon called it “almost Orwellian”; the Second Circuit held it exceeded the statute; the Ninth Circuit held it violated FISA. The only structural consequence was the USA FREEDOM Act's half-reform — whose replacement regime failed of its own overcollection.

Palantir is the type specimen: incorporated 2003–04 by Peter Thiel and Alex Karp on the premise of adapting PayPal's fraud detection to counterterrorism, seeded with ~$2M from the CIA's venture arm In-Q-Tel — and from 2005 to 2008 the CIA was its only customer. From that seed: ~$435M in ICE contracts, LAPD and NYPD deployments arranged through police foundations to bypass council approval, and a secret 2012–18 predictive-policing experiment in New Orleans that even city council members didn't know about. By late 2025 its quarterly U.S. government revenue was $486M.

Booz Allen Hamilton is the revolving door in one company: ~99% government revenue, Carlyle-owned, employer of DNIs McConnell and Clapper — and of Edward Snowden. Intelligence outsourcing consumes roughly 70% of the intelligence budget; the Washington Post's Top Secret America investigation counted 1,931 private companies working top-secret programs and 854,000 people holding top-secret clearances — “a hidden world, growing beyond control.”

The telecoms were partners, not conscripts: NSA documents describe AT&T's “extreme willingness to help” — equipment in at least 17 U.S. internet hubs, help wiretapping the United Nations. The countercase proves the rule: Qwest's CEO refused the NSA in February 2001, before 9/11, and was subsequently prosecuted. The ~40 lawsuits against the cooperating carriers were all extinguished by retroactive immunity in 2008.

The post-Snowden generation made the model the default: Amazon's $600M CIA cloud; Anduril's AI border towers; Clearview's 30 billion scraped faces; Flock's ~90,000 license-plate readers; and data brokers — Venntel, Babel Street, Fog Data Science — selling phone-location data to DHS, IRS, FBI, and local police for as little as $7,500 a year. ODNI's own declassified report concedes the intelligence community buys large amounts of Americans' data, doesn't fully know how much, and acknowledges it could “be used to identify every person who attended a protest or rally.”

The Homeland Security Act merged 22 agencies into DHS; TSA was stood up in ten weeks. The watchlists grew without brakes: the No Fly List went from 16 names on 9/11 to ~47,000 by 2013; more than 40% of the 680,000-person Terrorist Screening Database was flagged in the government's own documents as having “no recognized terrorist group affiliation.” The leaked Watchlisting Guidance allowed nomination without “concrete facts.” A federal judge found the redress process unconstitutional in 2014.

DHS built ~77 fusion centers. The bipartisan Senate investigation found their reporting “oftentimes shoddy, rarely timely, sometimes endangering citizens' civil liberties... and more often than not unrelated to terrorism,” and could identify no reporting that uncovered a terrorist threat or disrupted a plot. DHS couldn't say whether it had spent $289 million or $1.4 billion on them. What they demonstrably did do is monitor Occupy, Black Lives Matter, and Standing Rock.

The FBI's leash was serially loosened: Mukasey's 2008 guidelines created “assessments” permitting physical surveillance, database searches, and informant tasking with no factual predicate at all. The CIA seconded an officer to the NYPD to build the Demographics Unit that mapped Muslim neighborhoods across New York and New Jersey — which, per its own chief's sworn deposition, never generated a single lead in six years.

Meanwhile the quieter machinery scaled: the CIA ran bulk collection sweeping in Americans' data under EO 12333, “entirely outside the statutory framework”; NCTC got authority to copy entire federal databases and hold innocent Americans' data five years; the FBI's Next Generation Identification became the world's largest biometric database; local police collected $35B+ in DHS surveillance grants plus $7.4B in military equipment.

Hemisphere: since at least 2007, the White House drug-policy office has paid AT&T to embed employees with DEA and police units, giving them query access to AT&T's own switch data — call records back to 1987, roughly four billion added daily, trillions in total, dwarfing the NSA's database. The leaked training deck orders users to conceal it: results must be re-attributed to a routine “AT&T subpoena,” and “all requestors are instructed to never refer to Hemisphere in any official document.” Exposed in 2013, it was renamed Data Analytical Services and resumed; Wyden's 2023 letter confirmed it still operates, warrantless in most uses.

Parallel construction: the DEA's Special Operations Division — partnered with NSA, CIA, FBI, and IRS — funnels intelligence tips to field agents trained to “recreate” the investigative trail, hiding the tip's origin from defense lawyers, prosecutors, and judges. Internally it was nicknamed “the dark side”; departing agents got Darth Vader keychains. And the blueprint predates 9/11: the DEA logged virtually every call from the U.S. to up to 116 countries from 1992 to 2013 — the precedent DOJ cited to bless the NSA's program. 9/11 didn't invent the dragnet; it nationalized it.

The rest of the iceberg: stingrays sold to 75+ agencies under FBI NDAs instructing prosecutors to drop cases rather than disclose the device; USPS photographing ~160 billion pieces of mail a year while its iCOP unit monitored protest organizers; geofence warrants to Google growing from 982 (2018) to 11,554 (2020); the FBI running up to 3.4 million warrantless §702 queries of Americans in one year — 278,000+ improper, including January 6 suspects, George Floyd protest arrestees, and 19,000 donors to a congressional campaign.

And after the Supreme Court's Carpenter ruling required warrants for phone-location history, agencies simply bought equivalent data from brokers — ICE and CBP from Venntel, the Secret Service via Babel Street's Locate X, dozens of local departments from Fog Data Science — on the theory that purchased data needs no warrant. A federal court finally held in 2025 that §702 backdoor searches require a warrant.