Doe v. Ashcroft: NSLs, the Patriot Act, and Lifting the Gag

Doe v. Ashcroft was the 2004 federal lawsuit that produced the first court ruling to strike down a surveillance provision of the USA PATRIOT Act. Brought by the ACLU on behalf of an anonymous internet service provider who had received a National Security Letter, the case ended the FBI’s power to issue self-authorizing, permanently secret demands for customer records and set in motion the statutory and judicial reforms that now govern how NSLs work.

The Letter That Started the Case

In February 2004, Nicholas Merrill, president of a small New York ISP called Calyx Internet Access, was handed a National Security Letter by an FBI agent.¹ Calyx had roughly 200 customers. The letter, issued under 18 U.S.C. § 2709 as expanded by Section 505 of the Patriot Act, ordered Merrill to turn over names, addresses, and communications records tied to one of them.²

Two features of the demand became the heart of the litigation. The FBI needed no court order, no warrant, and no probable cause. An agent had only to certify that the information was relevant to an authorized international terrorism or clandestine intelligence investigation, a lower bar than the pre-Patriot Act standard that had required “specific and articulable facts” linking the target to a foreign power.³⁴ And the letter came with a permanent gag order barring Merrill from telling anyone he had received it, potentially including an attorney.⁵

How the Lawsuit Was Filed

Merrill became the first person to challenge a National Security Letter in court.⁶ On April 6, 2004, the ACLU and the New York Civil Liberties Union filed suit in the U.S. District Court for the Southern District of New York. Because the gag order prohibited Merrill from identifying himself, the complaint used the pseudonym “John Doe,” and the case was captioned against then-Attorney General John Ashcroft.²

The complaint raised three constitutional claims. The permanent gag was a prior restraint under the First Amendment. The demand itself was an unreasonable search under the Fourth Amendment because no judicial review was available. And the absence of any judicial process before the government seized private records violated Fifth Amendment due process.⁵

The 2004 Ruling

On September 28, 2004, U.S. District Judge Victor Marrero issued a 120-page opinion striking down 18 U.S.C. § 2709 in its entirety. It was the first federal ruling to invalidate any surveillance provision of the Patriot Act.⁷⁸

On the Fourth Amendment, Judge Marrero found that NSLs functioned as coercive searches “effectively immune from any judicial process.” Administrative subpoenas, he wrote, are constitutional only when subject to judicial supervision, and § 2709 provided no mechanism for a recipient to contest a letter before a neutral tribunal.³ The combination of secrecy and official letterhead, in his view, pushed recipients into immediate compliance.⁹

On the First Amendment, he held the permanent, automatic gag was not narrowly tailored. He called the statute “inimical to democratic values,” wrote that “democracy abhors undue secrecy,” and warned that mandatory silence could be “turned on ourselves as a weapon of self-destruction.”⁷ The court also noted that the internet records at stake were “inextricably intertwined with protected speech,” because they could reveal what a person read, whom they contacted, and what groups they joined online.¹⁰

Finding the gag inseverable from the rest of the statute, Judge Marrero struck the NSL provision down entirely and enjoined the government from issuing new letters under it. He stayed the ruling for 90 days to permit an appeal.⁷

How Congress Rewrote the NSL Statute

The government appealed to the Second Circuit. While the appeal was pending, Congress rewrote the NSL provisions as part of the USA PATRIOT Improvement and Reauthorization Act of 2005, signed into law on March 9, 2006.¹¹

The new law, codified at 18 U.S.C. § 3511, created a formal way to challenge NSLs. A court could modify or quash a letter if compliance would be “unreasonable, oppressive, or otherwise unlawful,” and a recipient could petition to lift the gag. The blanket permanent gag was replaced with one tied to specific harms: a senior FBI official had to certify that disclosure could endanger national security, interfere with an investigation or diplomatic relations, or endanger a life. The revised statute also made clear that recipients could consult a lawyer without violating the gag.¹²

The Second Ruling and the Mukasey Appeal

The Second Circuit vacated Judge Marrero’s 2004 decision and sent the case back to evaluate the amended statute. It was restyled Doe v. Gonzales. On September 6, 2007, Judge Marrero again struck down the nondisclosure provisions, finding the revised § 2709(c) still not narrowly tailored and the § 3511 review mechanism inadequate under separation-of-powers principles because it limited a court’s ability to assess the need for a gag.¹³

The government appealed, and on December 15, 2008, the Second Circuit issued its decision in John Doe, Inc. v. Mukasey, 549 F.3d 861. Judge Jon O. Newman wrote the opinion.¹⁴ The court affirmed in part and reversed in part, and its holdings set the rules that still govern NSL gag orders:

The statute was unconstitutional to the extent it forced the recipient to initiate court review. When a recipient objects to a gag, the government must go to court to enforce it.¹⁵
Provisions in § 3511(b)(2) and (b)(3) treating a senior FBI official’s certification as conclusive were struck down. The government must persuade a judge that disclosure would cause specific harm to an authorized terrorism or intelligence investigation.¹⁴
Any justification for secrecy must tie to a specific authorized investigation, not to generalized national security concerns.¹⁴

The Second Circuit quoted the district court on the underlying point: “The fiat of a governmental official, though senior in rank and doubtless honorable in the execution of official duties, cannot displace the judicial obligation to enforce constitutional requirements.”⁵ With those requirements in place, the FBI could keep issuing NSLs.¹⁶

Settlement and Merrill Coming Forward

The FBI had already withdrawn its demand for Calyx’s customer data in 2006.¹⁷ On July 30, 2010, the parties filed a stipulation of dismissal. The FBI agreed to let “John Doe” identify himself publicly and permitted the ACLU to publish a redacted version of the original letter. The United States paid $225,000 in attorney’s fees and costs.²

On August 10, 2010, six years after receiving the letter, Nicholas Merrill went public. He said the FBI should not have the power to “secretly demand that ISPs turn over constitutionally protected information about their users without a court order.”⁶

Lifting the Gag in Full

Even after identifying himself, Merrill still could not disclose the attachment that listed exactly what records the FBI had wanted. Represented by the Media Freedom and Information Access Clinic at Yale Law School, he went back to court. On September 15, 2015, Judge Marrero ruled that the eleven-year-old gag should be lifted entirely; the FBI conceded that the underlying investigation had been closed and chose not to appeal.¹⁸ On November 30, 2015, the gag dissolved in full. It was the first time an NSL gag order had been completely lifted since the Patriot Act expanded NSL authority in 2001.¹⁷

What the letter had actually sought could now be described. The FBI had asked for the customer’s account number, dates the account was opened or closed, associated addresses and phone numbers, cell-tower location data for calls, screen names, email addresses, billing records, and records relating to merchandise orders. Merrill described the NSL process as the government “printing its own search warrant” without a judge’s signature.¹⁷

What the Case Changed

Before Doe v. Ashcroft, an NSL was self-authorizing, permanently secret, and unreviewable. After the litigation and the statutory rewrite it forced, recipients can challenge both the demand and the gag, the government must justify continued secrecy rather than assume it, and courts cannot treat an FBI certification as the last word.²

The reasoning traveled. In 2013, a federal judge in the Northern District of California relied on the Second Circuit’s Mukasey analysis to strike down the NSL nondisclosure provisions again as overbroad under First Amendment standards drawn from Freedman v. Maryland.¹⁹ The same ACLU team used the framework to challenge a gag against a Connecticut library consortium that wanted to join the public debate over Patriot Act reauthorization.²⁰ Scholars have placed the case within a judicial pattern of protecting civil liberties as surveillance technology grows, even during periods when national security arguments would otherwise favor broader government authority.²¹

1
U.S. News & World Report. Internet Provider Gagged for Decade Reveals What FBI Wanted Without Warrant
2
Civil Rights Litigation Clearinghouse. Doe v. Ashcroft
3
Thomson Reuters Practical Law. Doe v. Ashcroft, 334 F.Supp.2d 471
4
U.S. House Judiciary Committee. Hearing on National Security Letters
5
NYCLU. Doe v. Holder – Challenging Patriot Act’s National Security Letter Provision and Associated Gag
6
ACLU. National Security Letter Recipient Can Speak Out for First Time
7
NYCLU. Federal Court Strikes Down Portion of Patriot Act as Unconstitutional
8
ACLU. Court Unseals More Documents on FBI’s Use of Controversial National Security Letters
9
Boston University Law Review. Doe v. Ashcroft Analysis
10
EFF. ACLU Doe v. Ashcroft – The Good Bits
11
GovInfo. USA PATRIOT Improvement and Reauthorization Act of 2005
12
Every CRS Report. National Security Letters in Foreign Intelligence Investigations
13
CaseMine. Doe v. Gonzales, 500 F.Supp.2d 379
14
LSU Biotech Law Center. John Doe, Inc. v. Mukasey, 549 F.3d 861
15
Stanford Center for Internet and Society. Second Circuit Partially Invalidates National Security Letters Section of Patriot Act
16
EFF. Second Circuit Rules Against National Security Letters
17
PBS Frontline. Gag Order Gone – Secrets of a National Security Letter Are Revealed
18
Yale Law School. Gag Order Lifted – Nicholas Merrill Through MFIA Clinic Case Win
19
EPIC. In re National Security Letter
20
ACLU. FBI Uses Patriot Act to Demand Information With No Judicial Approval
21
University of Pittsburgh School of Law. Doe v. Ashcroft and Its Place in the Judicial Trend