2 cissp ® Official Study Guide Eighth Edition

145
USA PATRIOT Act of 2001 
Congress passed the Uniting and Strengthening America by 
Providing Appropriate Tools Required to Intercept and Obstruct Terrorism (USA PATRIOT) 
Act of 2001 in direct response to the September 11, 2001, terrorist attacks in New York City 
and Washington, DC. The PATRIOT Act greatly broadened the powers of law enforcement 
organizations and intelligence agencies across a number of areas, including when monitoring 
electronic communications.
One of the major changes prompted by the PATRIOT Act revolves around the way government 
agencies obtain wiretapping authorizations. Previously, police could obtain warrants for only 
one circuit at a time, after proving that the circuit was used by someone subject to monitoring. 
Provisions of the PATRIOT Act allow authorities to obtain a blanket authorization for a person 
and then monitor all communications to or from that person under the single warrant.
Another major change is in the way the government deals with Internet service providers 
(ISPs). Under the terms of the PATRIOT Act, ISPs may voluntarily provide the government 
with a large range of information. The PATRIOT Act also allows the government to obtain 
detailed information on user activity through the use of a subpoena (as opposed to a wiretap).
Finally, the USA PATRIOT Act amends the Computer Fraud and Abuse Act (yes, another 
set of amendments!) to provide more severe penalties for criminal acts. The PATRIOT Act 
provides for jail terms of up to 20 years and once again expands the coverage of the CFAA.
The PATRIOT Act has a complex legislative history. Many of the key provisions of the
PATRIOT Act expired in 2015 when Congress failed to pass a renewal bill. However, Congress 
later passed the USA Freedom Act in June 2015, which restored key provisions of the 
PATRIOT Act that will remain in force until they expire in December 2019, unless they are 
once again renewed by Congress.