EFF calls this bill "a real first step because it creates meaningful change to NSA surveillance right now, while paving the way for the public to get more information about what the NSA is doing." They've got a quick analysis of what it does and doesn't do is at [1]<p>Marcy Wheeler sees it as an improvement over the bill the House passed (which isn't hard) but isn't sure it's an improvement over the status quo. See [2] and [3] for her concerns<p>[1] <a href="https://www.eff.org/deeplinks/2014/07/new-senate-usa-freedom-act-first-step-towards-reforming-mass-surveillance" rel="nofollow">https://www.eff.org/deeplinks/2014/07/new-senate-usa-freedom...</a><p>[2] <a href="http://www.emptywheel.net/2014/07/29/leahy-freedom-act-permits-fbis-continued-uncounted-use-of-back-door-searches/" rel="nofollow">http://www.emptywheel.net/2014/07/29/leahy-freedom-act-permi...</a><p>[3] <a href="http://www.emptywheel.net/2014/07/29/leahy-usa-freedoms-bulky-corporate-persons/" rel="nofollow">http://www.emptywheel.net/2014/07/29/leahy-usa-freedoms-bulk...</a>
Call me unconvinced. It follows entirely the flawed US gov interpretation of "collection", which means collect everything, and only call it "collect" when if you search through it.<p>How should this convince the global business that using US IT, telecom and cloud services is trustworthy and legally safe? There are still massive holes in a number of public laws and who knows in how many secret laws and interpretations, not talking about illegal practices. Without a 2nd Church Committee nothing will change.
This is the one that got watered down a lot, right? Which would explain its "wide support", including from the White House.<p><a href="http://www.washingtonpost.com/blogs/the-switch/wp/2014/05/22/why-76-lawmakers-just-voted-against-their-own-bill-to-reform-the-nsa/" rel="nofollow">http://www.washingtonpost.com/blogs/the-switch/wp/2014/05/22...</a>
The article doesn't mention it ... but can they still get around it by (what I believe is called) traffic shaping? Where you force the traffic to leave the US, then collect all the "foreign" data, and then send it on its merry way again?