US Courts to Disclose Spyware Authorizations for Wiretapping

The Administrative Office of the U.S. Courts (AO) will begin disclosing how often judges authorize spyware for wiretapping suspected criminals, starting with the 2028 report, scheduled for publication in 2029. This new "spyware/hacking" category, internally referred to as Network Investigating Techniques (NITs), will specifically track instances where spyware intercepts real-time communications, such as phone calls and messages on platforms like Signal or WhatsApp. Critically, this disclosure will not include cases where malware is used to remotely access and obtain stored information like photos, documents, or location data, as those operations fall under different legal processes, such as search warrants. This initiative marks a significant step towards transparency, given that the FBI has reportedly utilized hacking tools since at least 1998 without any public data on their frequency.

This newfound transparency holds substantial implications. First, it introduces unprecedented accountability for law enforcement agencies and the judiciary by providing concrete data on a powerful, often clandestine, surveillance tool. This data will empower civil liberties organizations and privacy advocates, who have long campaigned for greater oversight, to engage in more informed public debate regarding the necessity, proportionality, and ethical boundaries of government spyware use. For individual users, the disclosure offers a clearer picture of the extent to which their digital communications might be subject to state intrusion, potentially increasing awareness about digital privacy and encouraging the adoption of more secure communication practices. Furthermore, the initiative could significantly influence the spyware industry, subjecting vendors and their products to greater public and governmental scrutiny regarding capabilities and ethical deployment. It might also spur innovation in privacy-enhancing technologies as a counter-measure.

The AO already publishes annual wiretap reports, mandated by Title III of the Omnibus Crime Control and Safe Streets Act of 1968, which detail traditional wiretap authorizations by federal and state authorities, locations, and crime types. For instance, in 2025, 1,735 wiretaps were authorized, marking a 24% decrease from 2024, with 873 federal and 862 state authorizations. The 2024 report indicated 2,297 authorized wiretaps, a 9% increase from 2023. Narcotics investigations consistently dominate these statistics, accounting for 49% of intercepts authorized in 2024. Encryption presents an increasing challenge; in 2025, 296 federal wiretaps encountered encryption, with 269 remaining undeciphered. The new spyware category will augment this established reporting, focusing on a more technologically advanced and often controversial method of surveillance.

This development is distinct from surveillance conducted under Section 702 of the Foreign Intelligence Surveillance Act (FISA), which pertains to foreign intelligence collection and is subject to separate transparency reports from the Office of the Director of National Intelligence (ODNI). Section 702 has been a focal point of debate concerning its impact on the privacy of U.S. persons, particularly regarding the FBI's use of U.S. person identifiers to query the Section 702 database. However, the new disclosure from the AOUSC specifically addresses domestic criminal investigations, not foreign intelligence operations. The distinction between wiretapping real-time communications and accessing stored data is critical; while the former will be reported, the latter, often involving invasive malware for extracting photos or location data, remains opaque within this new framework. This selective transparency highlights a potential blind spot, allowing a significant portion of government hacking activities to continue without public disclosure under this specific reporting mechanism.

Historically, the use of sophisticated hacking tools by federal agencies like the FBI has operated largely in the shadows, reportedly dating back to 1998 without any public metrics. While traditional wiretaps under Title III have had reporting requirements for decades, offering a degree of historical comparison, spyware represents a new technological frontier with distinct capabilities and privacy implications that necessitate its own transparent accounting. The current reporting on traditional wiretaps illustrates the scale of existing surveillance, with thousands of authorizations annually and a persistent challenge from encryption, where hundreds of federal wiretaps each year yield undecipherable communications. This context underscores the growing complexity of modern surveillance and the critical need for targeted transparency measures.

Looking ahead, the publication of the first "spyware/hacking" report in 2029 will be a pivotal moment, establishing an initial baseline for this category of surveillance. It is highly probable that civil liberties groups will escalate their advocacy, pressing for an expansion of disclosure to encompass all forms of government hacking, including the use of malware for data extraction that is currently excluded from this reporting. This initial transparency could catalyze legislative efforts aimed at establishing clearer legal frameworks for government hacking and implementing more robust oversight mechanisms, moving beyond mere numerical reporting to include details such as the specific types of spyware employed, the duration of surveillance, and the outcomes or success rates of these operations. The Administrative Office of the U.S. Courts' decision could also set a precedent, influencing other federal agencies or even state-level judiciaries to adopt similar transparency measures for advanced surveillance technologies, thereby fostering a broader shift towards greater public accountability in the realm of digital surveillance. The enduring challenge posed by end-to-end encryption will undoubtedly remain a central theme, shaping both the public debate and future policy decisions regarding the balance between national security, law enforcement effectiveness, and individual privacy.