EO 14086Executive OrderBiden · D Quiet signal

Executive Order 14086

Enhancing Safeguards for United States Signals Intelligence Activities

In simple terms

This executive order establishes enhanced privacy and civil liberties safeguards for U.S. signals intelligence activities, including a new redress mechanism allowing individuals in designated "qualifying states" to file complaints about alleged violations. It creates a two-tier review process involving the Civil Liberties Protection Officer and a new Data Protection Review Court, while codifying limits on bulk collection and prohibiting intelligence collection for purposes like suppressing dissent or advantaging U.S. companies commercially.

Record & deadlines

  1. Signed

    Signed by the President

  2. FR published

    Published in the Federal Register · 87 FR 62283

  3. First 5-year declassification review by Secretary of Commerce

  4. Annual PCLOB review of redress process; 30-day report and 180-day response cycle

  5. PCLOB review of updated policies/procedures completed; 180-day implementation window begins

  6. Intelligence Community heads update PPD-28 policies/procedures and release publicly

  7. Director establishes process for submission of qualifying complaints

  8. Attorney General promulgates regulations establishing Data Protection Review Court

Key directives

  • Signals intelligence must be necessary and proportionate to validated intelligence priorities
  • Bulk collection prioritized only when targeted collection infeasible; limited to 6 specified objectives
  • Non-U.S. persons' personal information subject to minimization, dissemination limits, and comparable retention as U.S. persons
  • Intelligence Community heads must update PPD-28 policies within 1 year and release publicly to maximum extent
  • CLPO must assess NIPF priorities for legitimacy, prohibited objectives, and privacy considerations before presidential presentation
  • Attorney General must establish Data Protection Review Court via regulations within 60 days
  • Director must establish qualifying complaint submission process within 60 days
  • PCLOB encouraged to conduct annual review of redress mechanism; recipients must respond to recommendations within 180 days
  • Attorney General authorized to designate/revoke qualifying states based on reciprocal safeguards and commercial data transfer criteria

Who is ordered

Prior policy

  • otherPPD-28 policies and procedures

Related orders

What to expect

Immediate

  • EO takes effect; principles for signals intelligence activities binding
  • Qualifying state designation authority becomes active

Near term (90d)

  • Process for qualifying complaints due (60 days)
  • Data Protection Review Court regulations due (60 days)
  • Intelligence Community policies/procedures updates due (1 year)
  • Public release of updated policies/procedures due (1 year)

Long term

  • First PCLOB annual review of redress process
  • 5-year declassification review cycle begins
  • Ongoing compliance with safeguards and oversight requirements

Risks & tensions

  • Binding effect of CLPO and Court determinations on IC may create operational friction with national security imperatives
  • Qualifying state designation ties intelligence safeguards to commercial data flows, creating leverage but potential instability if revoked
  • Court operates ex parte with classified records; complainants never confirm/deny targeting, limiting transparency
  • 'Appropriate deference' to national security officials in CLPO review may weaken redress effectiveness in practice
  • Vague: 'to the maximum extent possible' for public release of policies allows broad withholding
  • Dual-hat tension: CLPO is ODNI official yet directed to be independent from Director removal except for cause
Executive Order 14086: Enhancing Safeguards for United States Signals Intelligence Activities · Executive Orders