Approved for pubc reease as redacted by the ODN 20160811 3 BE JJ&J[LJ/TFON. :. : "" \ t -.. :_:.... #.::.. :.. ;... c :\: :;:;;:,:. ;; -. -...,., :. G -.YF t EXHBTB [pr:: t:pr 1,_,.., u- 1.,....,J ;_ 0 r f1 3= t 8 MNMZATON PROCEDURES USED BY THE NATONAL SECURTY; N<;::.V _N CONNECTON WTH ACQUSTONS OF FOGN NTELLGEf :..; ::.,. ::... : :-.,.,...L NFORMATON PURSUANT TO SECON 702 OF THE FOREGN NTEL:6ENCE, UUF; T SURVELLANCE ACT OF 1978, AS AMENDED.. (U) Secton 1 - ApJjcabty and Scope (0) These Natona Securty Agency (NSA) mnmzaton procedures appy to the acquston, retenton, use, and dssemnaton of nformaton, ncudng non-pubcy avaabe nformaton cocernngunconsentng Unted.States persons, that s acqured by targetng non-unted States persons reasonaby be.eved to be ocated outsde the Unted States n accordance -wth secton 702 of the Foregn ntegence Surveance Act of 1978, as amended (FSA or the Act 11 ). (U) fnsa determnes that t must take acton n apparent departure from these mnmzaton procedures to protect aganst an mmedate threat to human fe (e.g., force protecton or hostage stuatons) and that t s not feasbe to obt_n a tmey modfcaton of these procedures, NSA may take such acton mmedatey. NSA w report the acton taken to the Offce of the Drector ofnatona ntegence and to the Natona Securty Dvson of the Department of Justce, whch.w prompty notfy the Foregn ntegence Surveance Court of such actvty. (fv 1 J Nothng :n these procedures sha restrct NSAs perfbnnance of awfu oversght functons of ts personne or systems, or avr.fu oversght functons of the Department of Justces Natona Securty Dvson, Offce of the Djrector of Natona ntdgence, or the appcabe Offces of the nspectors GeneraL Smary, nothng n these procedures shan prohbt the retenton, processng, or dssemnaton of 11forrnaton reasonaby necessary to compy wth specfc consttutona, jud ca, or egsatve mandates. Addtonay, nothng n these procedures sha restrct NSAs abty to conduct vunerabty or network assesents usng nfonnat011 acqured pursuant to secton 702 of the Act n order to ensure that NSA systems are not 01 have not been compromsed. Notwthstandng any other secton n these procedures, nformaton used by NSA to conduct vunerabty or network assessments may be retaned for one year soey for that mted purpose. Any_nformaton retaned for ths purpose may be dssemnated ony n accordance wth the appcabe provsons of these procedures. (U) For the purposes of these procedures, the terms. "Natona Securty Agency" and "NSA personne" refer to any empoyees of the Natona Securty Agency/Centra Securty Servce ("NSA/CSS or "NSA") and any other personne enga.ge< n Sgnas ntegence (SGNT) operatons authorzed pursuant to secton 702 of the Act f such operatons are executed under the drectoq., authorty, or contro of the Drector, NSA/Chef, CSS (DRNSA). fb SELREJJSCOFO&t t::sdf d s: Tk tt s Q ad 1 LEd d LL H ro OJ Sf F2 p - :B-eeJs s a r o oo 1 Q@jQ?Ot- 22?3 22 ZC)
Approved for pubc reease as redacted by the ODN 20160811 (U) Secton 2 - Defntons OJ SLL REf)) 9fJJH8P8N (U) n addton to the defntons n sectons 01 and 701 of the Act, the foowng defntons w appy to these procedm:es: (a) (U) Acquston means the coecton by NSA or the Federa Bureau of nvestgaton (FB) through. eectronc means of a non-ptbc communcaton to whch t s not an ntended party. (b) (U) Communcat)ons concernng a Unted Stats peson ncude a communcatons n whch a Unted States person s dscussed or mentoned, except where such communcatons revea ony pubcy avaabe nformaton about the person. (c) (U) Commwcatons of a Unted States person ncude a communcatons to whch a Unted States person s a party. (d) (U) Consent s the agreement by a person or organzaton to permt the NSA to take partcuar actons that affect the person or oganzaton. To be effectve, consent must be gven by the affected person or organzaton Wth suffcent knowedge to understand the Jtcton that may be taken and the possbe consequences of that acton. Consent by an organzaton w be deemed vad f gven on behaf of the organzaton by an offca or governng body determned by the Genera Counse, NSA. to have actua or apparent authorty to make such an agreement (e) (U) Foregn communcaton means a communcaton that has at east one communcant outsde of the Unted States. A other communcatons ncudng communcatons n whch the sender and a ntended recpents are reasonaby beeved to be ocated n fhe Unted States at the tme of acquston, are domestc comm\catons. t f j 1 G, " ; j : r f j j. 1 ; (f) (U) dentfcaton ofa Unted States person means (1) the name, unque tte, or address of a Unted States person; or (2) other persona dentfers of a Unted States person.when appearng n the context of actvtes conducted by that person or actvtes conducted by others that are reated to that person. A reference to a product by brand name, or manufacturers name or the 1:1se of a name jn a descrptve sense, e.g., "Monroe Doctrne," s not an dentfcaton of a Unted States person. (g) (SHSLH ftc nternet transacton, for purposes of these procedures, means an nternet communcaton that s acqured through NSAs upstream coecton technques. An nternet transacton may contan nformaton or data representng ether a dscrete communcaton or mutpe dscrete communcatons (h) (U) Processed or processng means any step necessary to convert a communcaton nto an ntegbe form ntended for human nspecton., 2
Approved for pubc reease as redacted by the ODN 20160811 fb SEL&JJBLJto SNf () (U) Pubcy avaabe nformaton means nformaton that a member of the pubc coud obtan on request, by research n pubc sources, or by casua observaton. (j) (U) Technca data base means nformatoj:) retan:ed for cryptanaytc, traffc anaytc, or sgna expotaton purposes. (k) (U) Unted States person means a Unted States person as defned. n the Act The fouor\ng gudenes appy n determnng whether a person whose status s unknown s a Unted States person: (1) (u) A person known to be currenty n the Unted States wj be treated as a Unted States person uness postvey dentfed as an aen who has not been admtted for permanent re."dence, or uness the nature or c.rcumsta:nces of the persons communcatons gve rse to a reasonabe beef that such person s not a Unted States person. (2) (U) A person known to be currenty outsde the Unted States, or whose ocaton s unknown, w not be treated as a Unted States person uness such person can be postvey dentfed as such. or the nature or crcumstances of the persons communcatons gve se to a reasonabe beef that such person s a Unted States erson. (3) (U) A person who at any tme has been k.no\\11. to have been an aen admtted for awfu pennancmt resdence s treated as a Unted States person. Any determnaton that a person who at one tme was a Unted States person (ncudng an aen admtted for awfu permanent resdence) s no onger a Unted States person must be made n consutaton wth the NSA Offce of Genera Counse. (4) (U) An unncorporated assocaton whose headquarters or prmary offce s ocated outsde the Unted States s presumed not to be a Unted States person \m.ess there s. nforoaton ndcatng that a substanta nmnber of ts members a:r.e ctzens of the Unted States or aens awfuy admtted for permanent resdence. (U) Secton 3 - Acquston and Handng - Genera (a) (U) Acquston (U) The acquston of nformaton by targetng non-unted States persons reasonaby beeved to be ocated outsde tb.e Unted States pursuant to secton 702 of the Act w be effected n acc.ordance wth an authorzaton made by the Attorney Genera and Drector of Natona ntegence pursuant to subsecton 702(a) oft4e Act and w be conducted n a manner desgned, to 1he greatest extent reasonaby feasbe, to mnmze the acquston of nformaton not reevant to the authorzed purpose of the acquston. 1 OD OFTfSTf?$Ra py 3
Approved for pubc reease as redacted by the ODN 20160811 (b) (U) Montorng, Recordng, and Handng (1) (U) Personne w exercse reasonabe judgment n detennnng whether nformaton acqured must be mnmzed and w destroy nadvertenty acqured communcatons of or concernng a Unted States person at the earest practcabe pont at whch such connnuncaton can be dentfed ether: as ceary not reevant to the authorzed purpose of the acquston (e.g., the communcaton does not contan foregn ntegence nformaton); 01, as not contanng evdence o.f a crme whch may be dssemnated under these procedures. Except as provded for n subsecton 3(c) beow, such nadve.rtenty acqured communcatons of or concernng a Unted States person may be retaned no onger than fve years from the expraton date of the certfcaton authorzng the coecton n any event. (2) (U) Communcatons of or concernng Unted States persons that may be reated to the authorzed purpose of the acquston may be forwarded to anaytc personne responsbe for producng ntegence nformaton from the coected data. Such communcatons or nformaton may be retaned and dssemnated ony n accordance wth Sectons 3, 4, 5, 6, and 8 of these procedures. (3) (U/ 1 066) sa communcaton s revewed, NSA anayst(s) w determne whether t s a domestc or foregn communcaton to, from, or about a target and s reasonaby beeved to contan foregn ntegence nformaton or evdence of a crme for purposes of asse.ng how the communcaton shoud be handed n accordance wth these procedures. ( 4) (U) Handng of nternet Transactons Acqured Tu:ough NSA Upstream Coecton Technques a. (fef/81{; fj NSA w take reasonabe steps post-acquston to d.ent.zy and segregate through technca means nternet transactons that cannot be reasonaby dentfed as contanng snge, dscrete communcatons where: the actve user of the transacton (.e., fue eectronc communcatons account/address/dentfer used to send or receve the ntet.net transacton to or from a servce provder) s reas.onaby beueved to be ocated n the Unted States; or the ocaton of the actve user s unknown. 1. (e/ethf) Notwthstandng subsecton 3(b)(4)a above, NSA may process nternet transactons acqured through NSA upstream coecton technques n order to render such transactons ntegbe to anaysts. 2. (F8/;8J/.t F) ntemet transactons that are dentfed and segregated pursuant to subsecton 3(b)(4)a. w be retaned n an access-controed repostory that : s accessbe ony to NSA anaysts "ho have been traned to revew such transactons for the purpose of dentfyng those that contan dscrete communcatons as to whch the sender and a ntended recpents are reasonaby be.eved to be ocated n the Unted Stutes. j t j [ 1 ; r 4
Approved for pubc reease as redacted by the ODN 20160811 (a) (FS//S,W, Of SECRE / 3 1 461 OM< Any nfoonaton contaned n a segregated nternet transacton (ncudng metadata) may not be moved or coped from the segregated repostory or otherwse used for foregn ntegence purposes uness t bas been dete.rmned that the transacton does not contan any dscrete communcaton as to whch the sender and a ntended.recpents arereasonabybeeved to be ocated n the Unted States. Any nternet transacton that s dentfed and segregated pursuant to subsecton 3 (b)( 4)a and s subsequenty detennned to contan a dscrete communcaton as to whch the sender and a ntended recpents ar.e reasonaby beeved to be ocated n the Unted States w be handed n accordance wth Secton 5 beow. (b) (U/fff:f8) Any nfomaton. moved or coped from the segregated repostory nto re-postores more generay accessbe to NSA anaysts w be handed n accordance wth subsecton 3(b )( 4)b beow and the other appcabe provsons of these procedures.. 1. t j t.. (c) (UNF@UO) Any nformaton moved or coped from the segreed repostory nto repostores more generay accessbe to NSA anaysts w be marked, tagged, or otherwse dentfed as havng been prevousy segregated pursuant to subsecton 3(b)(4)a. 3. ff8//8jhp) nternet tmnsactons that are not dentfed and segregated pursuant to ub secton 3(b)(4)a w be handed n accordance wth subsecton 3(b )( 4)b beow and the other appcabe provsons of these procedures. b. (U) NSA anaysts seekng to use (for exampe, n a FSA appcaton, ntegence report, or secton 702 targetng) a dscrete communcaton wthn an nternet transacton tha contans Utpe dscrete communcatons w assess whether the dscrete communcaton: 1) s a communcaton as to whch the sender and a ntended recpents are ocated n the Unted States; and 2) s to, frotp., or about a tasked seector, or ot11e1wse contans foregn ntegence nformaton... tys/181;1uf) Jf an NSA anayst seeks to use a dscrete communcaton \>vthn an nternet transacton that contans mutpe dscrete communcatons, tbe anayst w frst perfor:m checks to determne the-ocatons of the sender and ntended recpents of that dscrete communcaton to the extent reasonaby necessary to dcteanne whether the sender and a ntended recpents of that communcaton are ocated n the Unted States. f E anayst determnes that the sende-r and a ntended recpents of a dscrete communcaton wthn an nternet transacton are ocated n the Unted States, thentemet transacton w be handed n accordar.ce wth Secton 5 beow. 2. (U) f an NSA anayst seeks to use a dscrete communcaton wthn an futemet transacton that contans mutpe dscrete communcatons, the.. Of SEC&113fJJ HP8M f 5 ;
Approved for pubc reease as redacted by the ODN 20160811 O tf:eftt//sf;1f8f8@f anayst w assess whether the dscrete communcaton s to, from, or about a tasked seector, or otherv.rse contans foregn ntegence nformaton. (a) (U) f the dscrete communcaton s to, from, or about a tasked seector, any Unted States person nformaton n that communcaton w be handed n accordance wjh the appcabe provsons of these procedures. (b) (U) f the dscrete communcaton s not to, from, or about a tasked seector but otherwse contans foregn ntegence nformaton, and the dscrete communcaton s not to or from an dentfabe Unted State. person or a person reasonaby beeved to be ocated n the Unted States, that com1mmcat.on (ncudng any Unted States person nformat.ox1 theren) w be handed n accordance wfu the appcabe provsons of these procedures. (c) (U) fthe dscrete communcaton s not to, from, or about atasked seector but s to or from an dentfabe Unted States person, or a person reasonaby beeved to be ocated n the Unted States, the NSA anayst w document that determnaton n the reevant anaytcrepostory or. too f techncay possbe or reasonaby feasbe. Such dscrete. cou1muncaton cannot be used for any purpose other than to protect aganst an mmedate threat to human fe (e.g., force protecton or hostage stuatons). NSA w repott any such use to the Offce of the Drector of Natona ntegence and to the Natona Securty Dvsjon of the Department of Justce, whch w prompty notfy the Foregn ntegence Surveance Court of such use. 3. ( L3J/3Jf1Hf An NSA anayst seekng to use a Qscrete communcaton wthn an ntem.et transacton that contans mutpe dscrete communcatons n a FSA appcaton, ntejgence report, or secton 702 targetng must appropratey document the verfcatons requred by subsectons 3(b )( 4)b. 1 and 2 above. 4. (f3/j1:jf;;hf Notwthstandng subsecton 3(b)(4)b above, NSA may use mctadata extracted from Jntemet transactons acqured on or aft.er October 31, 201 1, that are not dentfed and segregated pursuant to subsecton 3(bX 4)a wthout frst assessng whether the metadata was extracted from: a) a dscrete communcaton as to whch the sender and a ntended recpents are ocated n the Unted States; or b) a dscrete communcaton to, from, or about a tasked seector. Any metadata extracted from nternet transactons that are not dentfed and segregated pursuant to subsecton 3 (b)( 4)a above w be handed n accordance wth the appcabe provsons of these procedures. Any metadata extracted from an nternet transacton subsequenty determned to contan a dscrete communcaton as to whch the sender and a ntended recpents are reasonaby beeved to be ocated nsde the Unted States sha be destroyed upon recognton. 6
Approved for pubc reease as redacted by the ODN 20160811 51 MJCMJ/OLVJOFONT (5) (U) Magnetc tapes or other storage meda contanng communcatons acqured pmsuant to secton 702 may be scanrted by computer to dentfy and seec..t communcatons for anayss. Computer seecton terms used for scannng, such as teephone numbers, key words or phrases, or other dscrmnators, w be mted to those seecton. terms reasonaby key to n::turn foregn ntegence nfonraton. dentfers of an dentfabe Unted )tates person may not be used as terns to dentfy and seect for nnatyss any nternet communcaton acqured through NSAs upstream coecton technques. Any use of Unted States person dentfers as terms to :dentfy and seect communcatons must frst be approved n accordance wth NSA procedures, whch must requre a statement of facts estabshng that the use of any such dentfer as a seecton tenn s reasoaby key to rettun foregn ntegence nfonna.ton, as defned n FSA. NSA w mantan records of a Unted States person dentfers approved for use as seecton terms. Tte Deparment of Justces Natona Securty Dvson and the Offce of the Drector of Natona ntegence w conduct oversght of NSAs actvtes wth respect to Unted States persons that are conducted pursuant to ths paragraph. (6) (U) Further handng, retenton, and dssemnaton of foregn communcatons w be made n accordance wth Sectons 4, 6, 7, and 8 as appcabe, beow. F"Qrther handng storage, and dssemnaton of :nadvertenty acqured domestc comrmmcatons w be made n accordance wth Sectons 4, 5, and & beow. (c) (U) Destructon of Raw Data (1) esmnsy Teephony communcatons and nternet communcatons acqured by or wth the assstance of the FB from nternet Servce Provders that do not meet the retenton standards set forth n these procedures and that are kn.ow to contan communcatons of or concernng Untec States persons w be destroyed upon recognton. Teephony communcatons and ntcmet communcatons acqured by or wth the assstance of the FB from nternet SerVce Provders may not be retaned onger tha. fve years from the expraton date of the certfcaton authorzng the coecton uness NSA specfcay determnes that each such communcaton meets the retenton standards n these procedures. (2) ( BL 3 t ) nternet transactons acqured through NSA s upstream coecton tecmques that do not contan any nformaton that meets the retenton standards set forth n these procedures and that are known to contan communcatons of or concernng Unted States persons w be destroyed upon recognton. An nternet transacton may not be retaned onger than two years from the expraton date of the cettfcaton authorzng the coecton uness NSA spet,"fcay detem.nes that at east one dscrete communcaton wthn the. nternet transacton meets te retenton standards n these procedures and that each dscrete communcaton wthn the trd1sacton ether: (a) s to, from, or about a tasked seector; or (b) s not to, from, or about a tasked seector and s aso not to or from an dentfabe Unted States person or person reasonaby beeved to be n the Unted States. The nternet transactons that may be retaned ncude those that were acqured because of mtatons on NSAs f8 P SE OMf?#Ss/JfQFQUT 7., r 1 ( j j r
Approved for pubc reease as redacted by the ODN 20160811 fb SEC&3b1. 81 ON.f abty to fter communcatons. Any nternet communcatons acqured through NSAs upstream coecton technques that are retaned n accordance v..>fu ths subsecton may be revewed and handed ony n accordance wth the standards set forth above n subsecton 3(b )( 4) of these procedures. (3) ( 9;)18 ;1..-, Any nternet transactons acqured through NSAs upstream coecton technques pror to October 31; 2011, w be destroyed upon recognton. (4) (f/h} h addton, NSA w foow the foowng procedures: a. (H"" Notwthstandng the destmcton requrements set forth n these :mnmzaton procedures, NSA may retan specfc secton 702-acqured nformaton f the Department of Jstce advses NSA n wrtng that suoh nfonnaton s subject to a preservaton obgaton n pendng or antcpated admnstratve, cv, or crmna tgaton. The Department of Justce w dentfy n wrtng the specfc nformaton to be retaned (ncudng, but not mted to, the target(s) or seector(s) whose nformaton must be preserved and the reevant tme perod at ssue n the tgaton), and the partcuar tgaton for whch the nformaton w be retaned. n order to restrct access to nformaton beng retaned pursuant to ths provson, personne not workng on the partcuar tgaton matter sha not access the secton 702-acqured nformaton preserved punmant to a wrtten preservaton notce from the Department of Justce that woud otherwse have been destroyed pursuant to these procedures. Other personne shau ony access the nformaton beng retaned for tgaton-reated reasons on?- case-:by-case bass after consutaton wth the Department of Justce. The Department of Justce sha notfy NSA n wrtng once the secton 702- acqured nformaton s no onger requred to be preserved for such tgaton matters, and then NSA sha prompty destroy the secton 702-acqured nfoonaton as otherwse requred by these procedures. f t 1. (S/J {P Each year, NSA w provde tte Department of Justces Natona Securty Dvson wth a summary of: (a) a, adtnnstrat ve, cv, or crmna tgaton matters necesstatng preservaton of secton 702-acqured data that woud otherwse be subject to age off pursuant to these procedures> (b) a desctpton of the secton 702acqured nformaton preserved for each such tgaton matter, and (c) f possbe based on the nformatod, avaabe to NSA, a descrpton of the status of each such tgaton matter. 2. (/,f} n certan drcumstaoces, NSA may receve wrtten notce from the Department of Justce advsng NSA to preserve secton 702-acqured nformaton that woud otherwse be subject to a destructon requrement under Sectons 3(b)(), 3(b)(4), 3(c)(3), 3(d)(2), 3(e), 4, or 5. NSA w prompty provde the Department of Justces Natona Securty Dvson wth a summary of: (a) a admnstratve, cv, or crmna tgaton matters necesstatng preservaton of secton 702-acqured nformaton that woud otherwse be subject to destructon purswnt to Sectons 3(b )(1 ), 3(b)( 4), 8
Approved for pubc reease as redacted by the ODN 20160811 U SEC<EtnSbJHMeftt 3(c)(3), 3(d)(2), 3 (e) 4, or 5, (b) a descrptonofthesecton 702-acqured nformaton preserved for each such tgaton matter, and (c) f possbe based. on the nformaton avaabe to NSA. a descrpton of the status of each S\Ch tgaton matter. Vthen such crcumstances arse, the Department of Justces Natona Securty Dvson w prompty notfy the FSC. b. (81/HF) The Department of Justce may advse NSA to retan specfc secton 702-acqured nfonnaton subject to a destructon requrement other than those specfed above n ths secton because such nformaton s subject to a preservaton obgaton n pendng or antcpated admnstratve, cv, or crmna tgaton. NSA w provde the Department of Justces Natona Securty Dvson wth a summary of: (a) a admnstratve, cv, or crmna tgaton. matters necesstatng preservaton of secton 702-acqured nformaton that woud othernse be subject to destructon, (b) a descrpton of the secton 702-acqured. jnformaton preserved for each such tgaton matter, and (c) f possbe, based on the nformaton avaabe to NSA, a descrpton of the status of each such tgaton matter. The Department of Justces Natona Secunty Dvson w prompty notfy and subsequenty seek authorzaton from the FSC to retan the mata as approprate and consstent wth aw. NSA w restrct access to and retan such nformaton n the manner descrbed n subparagraph 4(a), at the drecton of the Department of Justce unt ether the FSC denes a government request for autbor.zaton to retan the nformaton or the Department of Justce notfes NSA n wrtng that the nformaton s no onger requred to be preserved for such tgaton matters. After recevng such notce, NSA sha prompty destroy the secton 702-acqured nformaton as otherwse requred by these procedures. (d) (U) Change n Targets Locaton or Status (1) (U/11 606) n the event that NSA reasonaby beeves that a target s ocated outsde the Unted States and subsequenty earns that the person s sde the Unt States, or fnsa concudes that a target who at the tme oftargetng was beeved to be a non-unted States person s n fact a Unted States person at the tme of acquston, the acquston from that person w be tennnated wthout deay. (2) (U) Any conununcatons.acqured through the targetng of aperson who at the tme of targetng was reasonaby beeved to be ocated outsde the Unted States but s n fact ocated nsde the Unted StateS at the tme such communcatons were acqred, and any communcatons acqure.d by targetng a person who at the tme of targetng was beeved to be a non-unted States person but was n fact a Unted States person at the tme such communcatons were acqured, w be treated as. d9mestc communcatons under these procedures. (e) ts//hf) n the eve:nt that NSA seeks to use any nfonnaton acqured pursuant to secton 702 durrg a tme perod when there s oocertanty about the ocaton of the target of the acquston because the post-taskng checks descrbed n NSAs secton 7<Y fm " "e:th/t//s1/nejfejr?4 9 J t f e f j ;
Approved for pubc reease as redacted by the ODN 20160811 OP SEC&hSD/GUUMt targetng procedures were not fun<..onng propery, NSA w foow ts ntema procedures for detennnng whether such nfonnaton may be used (ncudng, but not mted to, n FSA appcatons, secton 702 targetng, and dssemnatons). Except as necessary to assess ocaton under ths provson, NSA may not use or dscose any nformaton acqured pursuant to seeton 702 durng such tme perod uness NSA determnes, based on the totaty of the crcumstances, that the target s reasonaby beeved to have been ocated outsde the Unted States at the tme the nfonnaton was acqured. fnsa determnes that the target s reasona,by beeved to have been ocated jnsde the Unted States at the tme the nformaton was acqured, such nformaton w not be used and w be prompty destroyed. (U) Secton 4 Acquston and Handng- Attorney-Cent Communcatons (U) Prveged Communcatons. NSA may receve WJmn1mzed communcatons, acqured pursuant to secton 702.ofFSA, to whch an attorney s a party. These provsons address the retenton, dssemnaton, and use of nformaton n such communcatons and appy when NSA personne handng a cmnmuncaton acqured pursuant to secton 702 offsa determne (based on the nformaton n that communcaton or other nformaton of whch the NSA personne are aware) that the communcaton s between an attorney (or any person who, based on the nformaton n the communcaton, appears ceary to be commwrcatng on behaf of an attorney, such as a paraega or admnstratve assstant) and a cent. (a) Q8t9 \fter dscoverng such a communcaton, fnsa personne handng a communcaton determne that the comrmmcaton does not contan foregn ntegence nformaton or evdence of a crme, the communcaton must be destroyed rrespectve o whether the communcaton contans nformaton protected by the attorney-cent prvege. fnsa personne handng such a communcaton determne that the communcaton appears to contan foregn ntegence nfonnaton or evdence of a crme, the pers01me handng the communcaton must brng the communcaton to the attenton ofnsas Offce of Genem Counse for acton as set forth beow. (b) HQdj prveged nformaton councaton shaj be segregated. 1 j g { f8p BE/S f/tqfqjut 10 ;
Approved for pubc reease as redacted by the ODN 20160811 1: prveged nfonrat)1 NSA sha be mted to procedures governng the dssemnaton of such prveged nformaton), accompaned by approprate handng contros, and sha ncude anguage advsng recpents (1) that the report contans nformaton obtaned from communcatons that may be subject to the attorney-cent prvege, (2) that use of the nformaton s provded for ntegence purposes ony and may not be used n any tra, hearng, or other proceedng absent express approva by.the Attorney Genera, and (3) that further dssemnaton s prohbted absent the ofthe Assstant Genera for Natona SecurtY or hs [ 51 SE 1JfN81/Jf8PBRff 11
Approved for pubc reease as redacted by the ODN 20160811 P8f 8E8M1/:81;JT9 9RtT keep a record of au dssemnatons outsde of the type descnbed n subparagraphs (c) and (e) above. (U) Secton 5 - Domestc Corrununcatons {fs//8/f.nf) A conununcaton dentfed as a domestc communcaton (and, f appcabe, the nternet transacton n whch t s contaned) w be prompty destroyed upon recognton uness the Drector (or Actng Drector) ofnsa specfcay determnes 1 n wrtng and on a comnuncaton-by-conununcaton bass, that the sender or ntended recpent of the domestc communcaton had been propery targeted under secton 702 of the Act, and the domestc communcaton satsfes one or more of the foowng condtons: (1) (JE::f:U:t ff) such domestc communcaton s reasonaby beeved to contan sgnfcant foregn ntegence nformaton. Such domestc communcaton (and, f appcabe, the transacton n whch t s contaned) may be retaned, handed, and dsse.mnated n accordance wth these procedures; (2) {f8/:tu> /W) such domestc communcaton does not contan foregn ntegence nformato.n but s reasonaby beeved to contan evdence of a crme that has been, s beng, or s about-to be commtted. Such domestc communcaton may be dssemnated (ncudng Unted States person denttes) to approprate Federa aw enforcement authortes, n accordance wth 50 U.S.C. 1806(b) and 1825(c), Executve Order No. 12333, and., where appcabe, the crmes reportng procedures set out n the August 1995 11 Memorandum of Understandng: Reportng of nformaton Concernng Federa Crmes," or any successor document. Such domestc communcaton (and,.. f appcabe, the transacton n whch t s contaned) may b retaned by NSA for a reasonabe perod of tme, not to exceed sx months uness extended n wrtng by the Attorney Genera, to penrt Jaw enforcement agences to detennne whether access to orgna recordngs of such communcaton s requred for aw enforcement purposes; (3) (B//Sb11fF such domestc communcaton s reasonaby beeved to contan technca data base nformaton, as defned n Secton 2G), or nformaton necessary to understand or assess a c.ommuncatons securty vunerabty. Such domestc comrnmcaton nay be provded to the FB and/or dssemnated to other eements of the Unted States Government. Such domestc communcaton (and, f appcabe, the transacton n whch t s contaned) may be retaned for a perod suffcent to aow a thorough expotaton and to pennt access to data that s, or s reasonaby beeved key to become, reevant to a current or future foregn ntegence requrement. Suffcent duraton may vary wth the nature of the expotaton. a. (UhfOUO} n the context of a cryptanaytc effort, mantenance of technca data bases requres retenton of a communcatons that are encphered or reasonaby beeyed to contan secret meanng, and suffct duraton may consst of any OJ tm-.tpjtoe?p? 12
Approved for pubc reease as redacted by the ODN 20160811 01 15Eet\9fW8Jf8t8Nf perod of tme durng whch encrypted matera s subject to, or of use n, cryptana1 yss. b. 8//81; n the case of communcatons that are not encphered or otherwse reasonaby beeved to contan secret meanng, suffcent duraton s fve years from expraton date of the certfcaton authorzng the coecton for teephony communcatons and nternet corru.nuneatons acqured by or wth the assstance of the FB from nternet Servce Provders, and two years from expraton date of the certfcaton authorzng the. coecton for nternet transactons acqured through NSAs upstream coecton technques, uness the Sgnantegence Drector, NSA, detemrnes n \Vrtng that retenton of a specfc communcaton for a onger perod s requred to respond to authorzed foregn ntegence or cotmterntehgence requrements; or ( 4) (U/;fQUQ) such domestc communcaton contans nformaton pertanng to an mmnent threat of serous harm to fe or property. Such nformaton may be retaned and dssemnated to the extent reasonaby necessary to counter su.ch threat. (:M} Notwthstandng the above, f a domestc communcaton ndcates that a target has tered the Unted States, NSA may prompty notfy the FB of that fact, as we as any nformaton concernng the targets ocaton that s contaned n the communcatn. NSA may aso use nformaton derved from domestc communcatons for coecton avodance purposes, and may provde such nfonnaton to the FB and CA for coecton avodance purposes. NSA may retan the communcaton from whch such nfonnaton s derved but sha restrct the further use or dssemnaton of the communcaton by pacng t on the Master Purge Lst (j\1pl).. (U) Secton 6- Foregn Communcatons of or Concernng Unted States Persons (a) (U) Retenton (U) Foregn communcatons of or concernng Unted States persons coected n the course of an acquston authorzed under secton 702 of the Act may be retaned ony: (1) (U) f necessary for the mantemmce of technca data bases. Retenton for ths purpose s permtted f.or a perod suffcent to aow a thorough expotaton and to permt acress to data that are, or are reasonaby beeved key to become, reevant to a current or fhture foregn ntegence requrement. Suffcent duraton may vary wth the nature of the e:x:potaton. a. (U) n the context of a cryptanaytc effort, mantenance of technca data bases requres retenton of a communcatons that are encphered or reasonaby beeved to contan secret meanng, and suffcent duraton may consst of any perod of tme dm-ng whch encrypted matera s subject to, or of use n, cryptanayss. t ; ter SetU9f/8f/;1f81?8WT 13
Approved for pubc reease as redacted by the ODN 20160811 b. EJC "63 o the case of communcatons that are not encphered or otherwse reasonaby beeved to contan secret meanng, suffdent duraton s fve years from expraton date of the certfcaton authorzng the coecton for teephony communcatons and nternet communcatons acqured by or wth the assstance. of the FB from ntemet Servce Provders, and two years from expraton date of the certfcaton atborzng the coecton for nternet transactons acqured through NSAs upstream coecton technques, uness the Sgr.as ntegence Drector, NSA, determnes n wrtng that retenton of a specfc category of communcatons for a onger perod s requred to respond to authorzed foregn ntegence or counterntegence requrements; (2) (U) f dssemnaton of such communcatons wth reference to such Unted St.ates persons woud be permtted under subsecton (b) beow; or (3) (U) f th nformaton s evdence of a crme that has been, s beng, or s about to be commtted and s provded to approprate federa aw enforcement authortes. (fsn6,tft?? Foregn communcatons of or concernng Unted States persons that may bo retaned under subsectons 6(a)(2) and (3) abov ncude dscrete communcatons contaned n nternet transactons, provded that NSA has specfcay determned, consstent wth subsecton 3(c)(2) above, that each dscrete communcaton wthn the nternet transacton ether: (a) s to, from, or about a tasked seector; or (b) s not to, from, or about a tasked seector and s aso not to or fro m an dentfabe Unted States person or person reasonaby beeved to be n the Unted States. (b) (U)_ Dsserh.naton (U) A dssemn.8ton based on communcatons of or concernng a Unted.States person may be n1ade n accordance wth Secton 7 or 8 beow f the dentty of the Unted States person s deeted and a generc term or symbo s substtuted so that the nformaton cannot reasonaby be connected wth an dentfabe Unted States person. Ofuerwse, dssemnaton of ntegence based on communcatons of or concernng a Unted States person may ony be made to a recpent requrng the dentty of such person for the performance of offca dutes but ony f at east one of the fuowng crtera s aso met: (1) (U) the Unted States person has consented to dssemnaton or the nformaton of or concernng the Unted States person s avaabe pubcy; (2) (U) the dentty of the Unted States person s necessary to understand foregn ntejgence nformaton or assess ts mportance, e.g., the dentty of a senor offca n the Executve Branch; (3) (U) the communcaton o1 nformaton ndcates that the Unted States person may be: a. an agent of a foregn power; 261 SEC&JBtPOUf 14
Approved for pubc reease as redacted by the ODN 20160811
Approved for pubc reease as redacted by the ODN 20160811 (2) (U) NSA may provde to the FB unmnmzed communcatons acqured pursuant to secton 702 of the Act. The FB w dentfy to NSA targets for whch NSA may provde unmnmzed communcatons to the FB. The FB w hande any such wmnmzed commtmcatons receved from NSA n accordance wth FB mnmzaton procedures adopted by th.e Attorney Genera, n consutaton wth the Drector of Natona ntegence> pursuant to subsecton 702(e) of the Act. (U) Secton 7 - Other Foregn Communcatons (U) Foregn communcatons of or concemng a non-unted States person may be retaned, used> and dssemnated n any form n accordance wth other appcabe aw, reguaton, and pocy. @98:;1]1;1 W) Foregn communcatons of or concernng a non-unted States person that may be retaned under ths subsecton ncude dscrete communcatons contaned n nternet transactons, provded that NSA has specfcay determned, consstent wth subsecton 3(c)(2) above> that each dscrete communcaton wthn the nternet transacton ether: (a) s to, from, or about a tasked seector; or (b) s not to, from, or about a tasked seector and s aso not to or from an dentfabe Unted States person or person reasonaby beeved to. be n the Unted States. (U;;F8@Jf.) Addtonay, foregn communcatons of or concernng a non-unted States person may be retaned for the same purposes and n the same manner as detaed n Secton 6(a)(), above. QJ) Secton 8 - Coaboratjon wth Foregn Govermnents (a) (U) Procedures for the dssemnaton of eyauated and mnmzed nfonnaton. Pursrumt to secton.7(c)(8) of Executve Order No. 12333, as amended, NSA conducts foregn cryptoogc ason reatoru3hps wth certan foregn governments. nf01maton acqured pursuant to secton 702 of the Act may be dssemnated to a foregn goverment. Except as provded beow n subsecton 8(b) of these procedures, any dssemnaton to a foregn government of nformaton of or concernng a Unted States person that s acqured pursuant to secton 702 may ony be done n a manner consstent wth sectoru3 6(b) and 7 of these NSA mnmzaton procedures. (b) (U) Procedures for technca or ngustc assstance. t s antcpated that NSA may obtan nformaton or communcat.ons that, because of ther technca or ngustc content, may requre further anayss by foregn governments to assst NSA n detennnng ther meanng or sgnfcance. Notwthstandng other provsons of these mnmzaton procedures, NSA may dssemnate computer dsks, tape recordngs, transcrpts, or other nformaton or tems ntanng tnmnmzed nfor1naton or communcatons acqured pursuant to sect.on 702 to foregn governments for further processng and anayss, under the foowng restrctons wth respect to any materas so dssemnated: 16 r f f f f > < *. : 1 1 } j f: j j f 1
Approved for pubc reease as redacted by the ODN 20160811 81 J8UtJY/8t;ff8F8NT (1) (U) Dssem1uaton to foregn governments w be soey tor transaton or anayss of such nfonnaton or comuncatons, and assstng foregn governments w make no use of any nformaton or any communcaton of or concernng any person except to provde technca and ngustc assstance to NSA. (2) (U) D1ssemnat.on w be ony to those personne wthn foregn governments nvoved n the transaton or anayss of such nformaton or communcatons. The number of such personne w. be resttcted to the extent feasbe. There w be no dssemnaton wthn foregn gove.rnments of ths Uwnmzed data. (3) (U) Foregn governments w me no pennanent agmcy record of nformaton or communcatons of or concernng any pen:on referred to or recorded 0 11 computer dsks, tape recordngs, transcrpts, or other tems dssemnated by NSA to foregn governments, provded that foregn governments may mantan such temporary records as are necessary to enabe them to assst NSA wth the transaton or mafyss of such nformaton. Records mantaned by foregn governments for ths purpose may not be dsse:mruted wthn the foregn governments, except to personne nvoved n provdng technca or ngustc assstance to NSA. ( 4) (U) Upon the concuson of such tehnca or ngustc assstance to NSA, computer dsks, tape recordngs, transcrpts, or other tems or nformaton dssemnated to foregn govemm.eats w efuer be retomed to NSA or be destroyed wth an accountng of such destructon made to NSA. (5) {U) Any nformaton that foregn governments prove to NSA as a resut of such technca or ngustc assstance may be dssemnated by NSA n accordance wth these mnmzaton procedures.. 1 ;.f JU t 0 2015 Date Loretta E. Lynch Attorney Genera of the Unte 17