ExecutiveOrdersEO
EO 14086Executive OrderBiden · D Quiet signal

Executive Order 14086

Enhancing Safeguards for United States Signals Intelligence Activities

This executive order establishes enhanced privacy and civil liberties safeguards for U.S. signals intelligence activities, including a new redress mechanism allowing individuals in designated "qualifying states" to file complaints about alleged violations. It creates a two-tier review process involving the Civil Liberties Protection Officer and a new Data Protection Review Court, while codifying limits on bulk collection and prohibiting intelligence collection for purposes like suppressing dissent or advantaging U.S. companies commercially.

Federal Register Open PDF 87 FR 62283

Impact dates

  1. First 5-year declassification review by Secretary of Commerce

  2. Annual PCLOB review of redress process; 30-day report and 180-day response cycle

  3. PCLOB review of updated policies/procedures completed; 180-day implementation window begins

  4. Intelligence Community heads update PPD-28 policies/procedures and release publicly

  5. Director establishes process for submission of qualifying complaints

  6. Attorney General promulgates regulations establishing Data Protection Review Court

Key directives

  • Signals intelligence must be necessary and proportionate to validated intelligence priorities
  • Bulk collection prioritized only when targeted collection infeasible; limited to 6 specified objectives
  • Non-U.S. persons' personal information subject to minimization, dissemination limits, and comparable retention as U.S. persons
  • Intelligence Community heads must update PPD-28 policies within 1 year and release publicly to maximum extent
  • CLPO must assess NIPF priorities for legitimacy, prohibited objectives, and privacy considerations before presidential presentation
  • Attorney General must establish Data Protection Review Court via regulations within 60 days
  • Director must establish qualifying complaint submission process within 60 days
  • PCLOB encouraged to conduct annual review of redress mechanism; recipients must respond to recommendations within 180 days
  • Attorney General authorized to designate/revoke qualifying states based on reciprocal safeguards and commercial data transfer criteria

Who is ordered

Timeline

Immediate

  • EO takes effect; principles for signals intelligence activities binding
  • Qualifying state designation authority becomes active

Near term (90d)

  • Process for qualifying complaints due (60 days)
  • Data Protection Review Court regulations due (60 days)
  • Intelligence Community policies/procedures updates due (1 year)
  • Public release of updated policies/procedures due (1 year)

Long term

  • First PCLOB annual review of redress process
  • 5-year declassification review cycle begins
  • Ongoing compliance with safeguards and oversight requirements

Risks & tensions

  • Binding effect of CLPO and Court determinations on IC may create operational friction with national security imperatives
  • Qualifying state designation ties intelligence safeguards to commercial data flows, creating leverage but potential instability if revoked
  • Court operates ex parte with classified records; complainants never confirm/deny targeting, limiting transparency
  • 'Appropriate deference' to national security officials in CLPO review may weaken redress effectiveness in practice
  • Vague: 'to the maximum extent possible' for public release of policies allows broad withholding
  • Dual-hat tension: CLPO is ODNI official yet directed to be independent from Director removal except for cause
Executive Order 14086: Enhancing Safeguards for United States Signals Intelligence Activities · Executive Orders