Wikimedia v. NSA: Claims, Standing, and Court Rulings

Wikimedia v. NSA was an eight-year lawsuit, filed in March 2015, in which the Wikimedia Foundation and eight other organizations tried to shut down the National Security Agency’s “upstream” surveillance program, which copies and searches internet traffic flowing through fiber-optic cables inside the United States. The case ended in February 2023, when the Supreme Court declined to hear it. No court at any level ruled on whether the surveillance was constitutional. The government won by convincing judges that litigating the case would expose state secrets, and that argument alone was enough to end it.

The Surveillance Wikimedia Was Challenging

The NSA runs two main collection programs under Section 702 of the Foreign Intelligence Surveillance Act. “Downstream” collection, once known as PRISM, involves requesting user data directly from companies like Google, Facebook, and Yahoo. “Upstream” collection is different, and it was the target of the lawsuit. Rather than asking a company for a specific user’s data, the NSA taps directly into the high-capacity fiber-optic cables that carry internet traffic into and out of the country and searches that traffic for communications tied to foreign intelligence targets.

The agency filters using “selectors” associated with those targets, but the mechanics require copying and scanning enormous volumes of communications belonging to people who are not targets at all. Until 2017, the NSA also collected communications that merely mentioned a target, even when neither sender nor recipient was one. The agency called these “abouts” communications and stopped the practice after internal compliance problems surfaced.¹ The 2024 reauthorization of Section 702 made that ban permanent.²

Section 702, codified at 50 U.S.C. § 1881a, lets the Attorney General and the Director of National Intelligence jointly authorize surveillance of non-U.S. persons reasonably believed to be located outside the United States, for the purpose of gathering foreign intelligence. The statute forbids intentionally targeting anyone known to be in the United States, targeting U.S. persons anywhere in the world, and “reverse targeting,” where a foreigner is surveilled as a pretext for collecting on an American.³ Wikimedia argued the actual operation of upstream collection blew past those limits.

Why Wikimedia Thought It Could Win

The lawsuit had ten original plaintiffs, including Amnesty International USA, Human Rights Watch, and The Nation. The ACLU and the Knight First Amendment Institute represented them. After the first round of litigation, only Wikimedia was found to have plausible standing. The others were dismissed because they could not sufficiently demonstrate that their specific communications had been intercepted.⁴

Wikimedia’s standing argument rested on scale. Wikipedia is one of the most visited websites on earth, and its international traffic is enormous. The foundation argued it was virtually certain that at least some of its communications passed through the cables the NSA was tapping. The harm, Wikimedia said, was a chilling effect on its global community of readers and editors. A 2016 study by Jon Penney in the Berkeley Technology Law Journal found that traffic to Wikipedia articles on terrorism-related topics dropped roughly 20 percent after the June 2013 Snowden revelations, even as overall Wikipedia traffic kept growing, and the decline held across the 32-month study period.

The Three Legal Claims

Wikimedia advanced three theories.

The First Amendment claim was that mass surveillance discourages people from reading, writing, and editing articles on sensitive topics, undermining the open-encyclopedia premise. The traffic data suggested it was already happening.

The Fourth Amendment claim went at the mechanics of the program. Copying and searching the contents of communications, without individualized suspicion and without a warrant, amounted to a suspicionless search on a massive scale.⁴

The statutory claim was that upstream collection exceeded Section 702’s own limits. The statute permits targeting only non-U.S. persons abroad and requires that collection be conducted consistently with the Fourth Amendment.³ Bulk interception and scanning of communications belonging to millions of non-targets, Wikimedia argued, was not what Congress authorized.

How the Government Defeated the Case

The government never had to answer any of those three claims on the merits. Two procedural arguments were enough.

The first was standing. To sue in federal court, a plaintiff must show a concrete injury traceable to the defendant. The government argued Wikimedia could not prove its communications were actually intercepted. That argument had already succeeded in Clapper v. Amnesty International USA, where in 2013 the Supreme Court held that other organizations challenging Section 702 could not establish standing because their theory of injury rested on a “speculative chain of possibilities” about future surveillance.⁵ Fear of surveillance and the costs of avoiding it were not enough. Wikimedia tried to distinguish itself by pointing to the volume of its traffic, arguing interception was not speculative but essentially guaranteed.

The government’s second and stronger weapon was the state secrets privilege, rooted in the 1953 Supreme Court decision United States v. Reynolds. In Reynolds, the Court recognized that the government may refuse to produce evidence in civil litigation when disclosure would harm national security.⁶ Here, the government argued that litigating Wikimedia’s claims would require confirming or denying how its surveillance systems work, whose communications get intercepted, and by what methods. Even if Wikimedia had standing, the government said, the evidence needed to try the case was classified. That turned a rule about withholding specific documents into a tool for ending the case entirely.

The Path Through the Courts

The case moved between the U.S. District Court for the District of Maryland and the Fourth Circuit Court of Appeals twice.

In October 2015, the district court dismissed the entire case, agreeing that all plaintiffs, Wikimedia included, lacked standing.⁴ In May 2017, the Fourth Circuit partially reversed, finding Wikimedia’s allegations plausible enough to survive dismissal at that stage. The other plaintiffs stayed out.

Back in district court, the government invoked the state secrets privilege. In 2018, the court dismissed again, holding both that Wikimedia still lacked standing and that state secrets barred further litigation.⁴

Wikimedia appealed once more. On September 15, 2021, a divided Fourth Circuit panel actually agreed with Wikimedia on standing, finding it had presented enough evidence to create a genuine factual dispute about whether its communications were being intercepted. But the majority affirmed dismissal anyway on state secrets grounds.⁴

Judge Motz dissented in part. She wrote that the majority had adopted “a sweeping proposition: A suit may be dismissed under the state secrets doctrine, after minimal judicial review, even when the Government premises its only defenses on far-fetched hypotheticals.” She said the majority had relegated the judiciary to “the role of bit player in cases where weighty constitutional interests ordinarily require us to cast a more skeptical eye.”⁴

On February 21, 2023, the Supreme Court denied Wikimedia’s petition for review without comment. The Fourth Circuit ruling became the final word.

What the Case Left Unresolved

The government has publicly acknowledged the existence of upstream surveillance, described how it works in broad terms, and even announced changes to it. Yet when a plaintiff tried to challenge the program in court, the government successfully argued the same subject was too secret to litigate. The result is a system in which the executive operates surveillance programs under statutory authority from Congress and secret oversight from the Foreign Intelligence Surveillance Court, while the federal courts, the venue where affected parties would normally test constitutionality, can be closed off by the state secrets privilege before any claim is heard.

No court ruled on whether upstream collection violates the First Amendment, the Fourth Amendment, or Section 702. What Wikimedia v. NSA produced instead is a clear record of how difficult it is to get such a ruling. Clapper‘s narrow standing rules and an expansive use of the state secrets privilege leave the people most affected by mass surveillance with the least ability to challenge it in court, and that structural problem is what the next lawsuit will run into.

1
National Security Agency. NSA Stops Certain Foreign Intelligence Collection Activities Under Section 702
2
Congress.gov. FISA Section 702 and the 2024 Reforming Intelligence and Securing America Act
3
Office of the Law Revision Counsel. 50 U.S. Code 1881a – Procedures for Targeting Certain Persons Outside the United States
4
Justia. Wikimedia Foundation v. National Security Agency, No. 20-1191 (4th Cir. 2021)
5
Justia U.S. Supreme Court Center. Clapper v. Amnesty International USA, 568 U.S. 398 (2013)
6
Justia U.S. Supreme Court Center. United States v. Reynolds, 345 U.S. 1 (1953)