The Fourth Circuit Remands Wikimedia’s Suit Against the NSA Back to District Court – Lawfare (blog)
In March of 2015, the Wikimedia foundation joined together with eight other non-profits in a challenge to NSAs mass surveillance program. This week, the U.S. Court of Appeals for the Fourth Circuit permitted the suit to move forward, but in the process, peeled off all plaintiffs other than Wikimedia itself.
The case comes to the Fourth Circuit as an appeal from the the U.S. District Court of Maryland. In October 2015, the District Court dismissed the case for lack of standing, basing its decision on Supreme Courts 2013 ruling in Clapper v. Amnesty International USA. In Clapper, the Court upheld the dismissal of a similar challenge from human rights groups because their complaint was speculative, alleging only a reasonable likelihood that their communications would be intercepted, not actual or imminent injury. Lacking concrete information about government programs, the Clapper plaintiffs failed to properly plead an injury in fact, and so lacked Article III standing. The same logic, held Judge Ellis of the Maryland District Court, should apply to Wikimedias challenge. This week, however, the Fourth Circuit rejected this comparison. Unlike Clapper, the court explained, the injuries alleged by the plaintiffs in this case are not speculative, but current, actual, and based on particularized allegations.
But the Fourth Circuit didnt stop there and just vacate the entirety of Judge Ellis judgement. Instead, it distinguished between Wikimedias claim of injury and those of the other plaintiffs: Because Wikimedias claim of injury by NSAs Upstream collection is based on particularized facts and sound inferences--construed in the light most favorable to Wikimedia for the purpose of the motion--it survives a motion to dismiss. By contrast, because the other plaintiffs allegation of injury (based on the allegation that NSA is intercepting, copying, and reviewing substantially all textbased communications entering and leaving the United States, including their own) is unsupported by enough well-pleaded facts, the District Courts dismissal was proper.
Below, we first summarize the Fourth Circuits reasoning with respect to Wikimedia, and then turn to its analysis of the other eight plaintiffs claim of injury.
The Wikimedia Allegation: Not Speculative,and Well-pleaded
The factual assertions in the Wikimedia Allegation are based on a combination of public information about the operation of Section 702, PCLOB reports about what NSA is doing, as well as technical analysis how NSA must be accomplishing what PCLOB reports.
Under Section 702 of the Foreign Intelligence Surveillance Act, the government is permitted to target for surveillance non-US persons reasonably believe to be outside the United States. The procedures for making such determinations are reviewed and approved by the FISC. According to the plaintiffs, NSA conducts this surveillance by installing surveillance devices on at least some of the 49 international submarine cables that carry communication in and out of the United States which comprise the internet backbone. NSA, the plaintiffs suggest, lacks the technical capability to sift the communication prior to collection. It therefore must collect and copy substantially all international text-based communicationsand many domestic ones as they flow across this backbone in the United States. Only after this initial collection, can NSA attempt[] to filter out and discard some wholly domestic communications, and then review and retain only those copied communications for that contain targeted selectors (such as specific IP or email addresses).
The essence of the Wikimedia allegation is that because of the technical realities of this Upstream collection, and because of the sheer volume of Wikimedias communications, the NSA has almost certainly collected at least some of the organizations communications. Wikimedia reasons that because Upstream surveillance requires the NSA to copy even wholly domestic communications before filtering them out and discarding them, and because Wikimedia engages in more than one trillion international communications each year, with individuals who are located in virtually every country on earth, the NSA must necessarily be intercepting, copying, and reviewing some of Wikimedias communications.
Declassified documents show that a single service provider facilitates upstream surveillance at seven major international chokepoints in the United States. But given the quantity of its communication, even if the NSA is only collecting communication from a single Internet backbone link, Wikimedia asserts its communications must have been intercepted. Thus, Wikimedias acute privacy interest in its communications, are implicated by NSA programs.
The Fourth Circuit largely accepted Wikimedias arguments for the purpose of the motion. In order to establish Article III standing, a plaintiff must show an injury in fact. And in order to survive a motion to dismiss, a complaint must have sufficient factual matter in the complaint, such that the contents were accepted as true, it would state a claim of relief that is plausible on its face. Following the Third Circuits decision in Schuchardt v. President of the United States, the Fourth Circuit analyzed plaintiffs claims in two steps: first, it analyzed whether the allegations were sufficiently particularized to satisfy the injury-in-fact requirement and second, it analyzed whether the allegations contain sufficient detail to be credited as true for the purpose of resolving a facial challenge to a complaint. Wikimedias claims, ruled the Court, met both criteria.
The court lays out what it sees as three presumptively key facts from Wikimedias allegation:
Taken together, these three points indicate that Wikimedia has plausibly alleged that its communications travel all of the roads that a communication can take, and that the NSA seizes all the communications along at least one of those roads, and therefore may have violated Wikimedias Fourth Amendment rights. Its allegations are thus predicated on specific asserted facts and directly implicate the potential interests of Wikimedia in a concrete and particularized manner.
Unlike the speculation and guesswork of Clapper, Wikimedias combination of technical assertions and government documents amounted to a properly pleaded complaint. And unlike Clapper, the Wikimedia case concerns a motion to dismiss rather than a motion for summary judgment, dictating greater deference to complainant's account of facts.
While acknowledging that Wikimedias probability calculation (even if one assumes a 0.00000001% chance . . . of the NSA copying and reviewing any particular communication, the odds of the government copying and reviewing one of Wikimedias communication in a one year period would be greater than 99.999999999%), was incomplete and riddled with assumptions, the court concluded that it wasnt relevant for standing purposes. Importantly, given the motion to dismiss stage, the court also declined to consider the governments evidence (in the form of expert affidavits) disputing plaintiffs technical statements about NSA must operate. Without the opportunity to dispute the factual basis of the expert dispute, the government had little leg to stand on.
The Dragnet Allegation: Speculative, and Not Well-Pleaded
The other eight plaintiffs joined with Wikimedia in making the second allegation, which the court terms the Dragnet Allegation. The plaintiffs alleged that in the course of conducting Upstream surveillance the NSA is intercepting, copying, and reviewing substantially all text-based communications entering and leaving the United States, including their own. The core of the allegation is the assertion that due to the technical functionality of the internet, the NSA must be intercepting, copying, and reviewing information from most backbone chokepoints in order to engage effectively in Upstream collection. And if NSA is surveilling most backbone chokepoints, then it is likely that the plaintiffs communications have been examined. The plaintiffs allege that they have had to take burdensome and sometimes costly measures to protect themselves from this surveillance.
As with the Wikimedia Allegation, the district court dismissed the Dragnet Allegation under Clapper. The circuit court affirmed the dismissal, but on a different rationale, departing from the district courts reliance on Clapper for the reasons expressed above.
While the court writes that its analysis of standing for the Wikimedia Allegation applies also to the Dragnet Allegation as far as the presence of a particularized and cognizable ongoing injury, traceability, and redressability go (hence why Clapper is not controlling), it ultimately finds that the plaintiffs lack standing due to their failure to plausibly state a claim. The court considers the Wikimedia Allegation plausible, but the broader claims made in the Dragnet Allegation are harder for it to swallow:
In the Dragnet Allegation, Plaintiffs must plausibly establish that the NSA is intercepting substantially all text-based communications entering and leaving the United States, whereas its sufficient for purposes of the Wikimedia Allegation to show that the NSA is conducting Upstream surveillance on a single backbone link.
The plaintiffs pointed to the same evidence for the Dragnet Allegation as they do for the Wikimedia Allegation, with the addition of one New York Times article on Upstream surveillance: in other words, the mechanical details of how the internet functions and the NSAs stated goals of using Upstream collection to acquire information to, from, and about targets. But in the Wikimedia Allegation, the plaintiffs used that information to speculate about the way the NSA does what we know it to be doing (that is, engaging in Upstream collection). In contrast, in the Dragnet Allegation, the plaintiffs are using technical information and guesswork about NSAs incentives to speculate about the scope of NSA activities. Furthermore, the allegations fall short of the level of detail in Schuchardt, in which the Third Circuit found that the plaintiffs had demonstrated the sheer scale of the collection suggested a dragnet
This is a bridge too far for the court, which finds this claim implausible and therefore holds that the plaintiffs lack standing on Fourth Amendment grounds. Following this logic, the court also dismisses the plaintiffs First Amendment claims of chilled speech and their effort to establish standing on the grounds of their burdensome efforts to avoid surveillance, finding that in the absence of a plausible claim, these concerns constitute fears of hypothetical future harm such as are inadequate to provide standing under Clapper.
The plaintiffs creatively cite Fourth Circuit precedent in the form of a two-year-old antitrust case, SD3, LLC v. Black & Decker, as evidence that motive is an important factor in establishing standingpointing to NSAs alleged incentive to establish a dragnet. The court dismisses this assertion, saying that while it should come as not surprise that motive is an important factor in establishing an antitrust conspiracy, that the court had never intended to have the case stand for the broad proposition that motivation is always of special significance in plausibly pleading an injury. The court also distinguishes SD3 based on the level of detail provided by the plaintiffs on the existence of the boycott, which the court concludes were by and large absent, from the plaintiffs complaint here.
The court concludes by addressing Judge Andre Daviss dissent in part, specifically his assertion that the court need not have separately considered the non-Wikimedia plaintiffs standing. Given that the complaint rests upon the premise that the NSA is seizing each Plaintiffs unique communications, the questions of standing and relief for the Wikimedia and non-Wikimedia plaintiffs are also individualized and must be considered separately.
Judge Andre Daviss Dissent-in-Part
Judge Davis, while concurring with courts finding that Clapper is not controlling and that Wikimedia has standing, dissented on the grounds that the non-Wikimedia plaintiffs do as well.
Davis explains that while he agrees with the majoritys decision to accept as plausible Wikimedias factual allegation, he disagrees with the majoritys assertion that the other plaintiffs have not plausibly alleged in the Dragnet Allegation that the NSA is surveilling most backbone links. He gives greater credence to the plaintiffs citation of the New York Times report to bolster their allegation, which the majority dismissed as essentially a restatement of the original allegation. More importantly, he argues that because of the technical functionality of the internet to which the plaintiffs point, NSA cannot know which link the communications it targets will traverse when they enter or leave the United States, and therefore the only way it can comprehensively acquire its targets communications is by surveilling virtually every backbone link. In his view, this allegation is a logical extension of the Wikimedia Allegation, and is therefore plausible as well.
In a footnote, Davis also criticizes the majoritys decision to assess the standing of the non-Wikimedia plaintiffs separate from that of Wikimedia. Quoting the Supreme Courts decision in Horne v. Flores, he argues that in all standing inquiries, the critical question is whether at least one petitioner has alleged such a personal stake in the outcome of the controversy as to warrant his invocation of federal-court jurisdiction.
See more here:
The Fourth Circuit Remands Wikimedia's Suit Against the NSA Back to District Court - Lawfare (blog)
- Confused about which VPN is right, US senator asks the NSA for guidance - Ars Technica - September 4th, 2026 [September 4th, 2026]
- Former NSA cybersecurity official: Pro-China 'influence operations' and 'cognitive warfare' work in protests against data centers and Flock cameras -... - September 4th, 2026 [September 4th, 2026]
- Can the county home to the NSA and US Cyber Command ban data centers? - The Baltimore Banner - September 4th, 2026 [September 4th, 2026]
- Family proud of her work for poor: DU students father after HC quashes NSA case - The Times of India - September 4th, 2026 [September 4th, 2026]
- Man who cut down Flock camera in St. Johns County claimed he was working with the NSA - Action News Jax - September 4th, 2026 [September 4th, 2026]
- Lucknow journalist Satyam Verma to move Allahabad high court after fellow NSA accused Aakriti gets relief - The Times of India - September 4th, 2026 [September 4th, 2026]
- NSA Board Dissolution: Olympic, Paralympic representation expected to remain on new board - 3News - September 4th, 2026 [September 4th, 2026]
- NSA Joins FBI in Issuing Warning about Chinese Hacking Group QTFY Cyber Activity - National Security Agency (.gov) - September 2nd, 2026 [September 2nd, 2026]
- NSA and FBI Warn Chinese Hackers Are Actively Targeting US Critical Infrastructure - LinkedIn - September 2nd, 2026 [September 2nd, 2026]
- UP firecracker blast toll climbs to 13; NSA invoked against accused - Daily Pioneer - September 2nd, 2026 [September 2nd, 2026]
- Man Accused of Impersonating Chief Justice Roberts, NSA Agent - Bloomberg Law News - August 25th, 2026 [August 25th, 2026]
- I Worked For The NSA For Years. Here's What Happened To My Life After Donald Trump And DOGE Showed Up Last Year. - HuffPost - August 25th, 2026 [August 25th, 2026]
- NSA isnt complying with federal laws on whistleblower protections, IG finds - Federal News Network - August 25th, 2026 [August 25th, 2026]
- NSA Doval says India-China ties 'returning to normalcy' as he holds key talks with Wang Yi on border issue - The New Indian Express - August 25th, 2026 [August 25th, 2026]
- 4 Ways Tim Kosiba and the NSA Are Countering the Chinese Intelligence Threat - GovCon Wire - August 25th, 2026 [August 25th, 2026]
- Man charged with forging Chief Justice John Robertss signature, impersonating NSA agent - Yahoo - August 25th, 2026 [August 25th, 2026]
- NSA Doval to visit China on Monday to attend Special Representatives talks with FM Wang - The Economic Times - August 25th, 2026 [August 25th, 2026]
- Audit Finds Lack of Oversight of NDAs at NSA - FEDweek - August 25th, 2026 [August 25th, 2026]
- Redefining India-China Relations: NSA Dovals Visit to Beijing May Provide the Breakthrough - Raksha Anirveda - August 25th, 2026 [August 25th, 2026]
- NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology - The Record from Recorded Future News - August 25th, 2026 [August 25th, 2026]
- NSA Doval meets Chinese Vice President Han Zheng ahead of border talks - The Tribune - August 25th, 2026 [August 25th, 2026]
- India-China ties normalised by peace on border, says NSA Doval at talks with Wang Yi - Firstpost - August 25th, 2026 [August 25th, 2026]
- NSA Ajit Doval holds 25th India-China border talks with Wang Yi - timesofindia.indiatimes.com - August 25th, 2026 [August 25th, 2026]
- NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs - Security Affairs - August 25th, 2026 [August 25th, 2026]
- NSA Ajit Doval arrives in Beijing, set for border talks with Chinas Wang Yi on August 25 - The Hindu - August 25th, 2026 [August 25th, 2026]
- NSA, FBI Warn of AI-Powered Attacks on Industrial Systems Targeting Siemens PLCs - finance.biggo.com - August 25th, 2026 [August 25th, 2026]
- NSA Ajit Doval holds talks with Chinese FM Wang Yi on boundary issue - News On AIR - August 25th, 2026 [August 25th, 2026]
- NSA Doval in Beijing for Talks with Chinese FM - Kashmir Observer - August 25th, 2026 [August 25th, 2026]
- NSA Ajit Doval to hold India-China boundary talks with Wang Yi in Beijing - The New Indian Express - August 25th, 2026 [August 25th, 2026]
- NSA Ajit Doval to hold border talks with Chinese Foreign Minister Wang on Tuesday - The Tribune - August 25th, 2026 [August 25th, 2026]
- Ayitey Powers Arrested Over Alleged Death Threat Against NSA Boss - Modern Ghana - August 25th, 2026 [August 25th, 2026]
- NSA Doval arrives in Beijing for talks with Chinese FM Wang Yi on boundary issue - ThePrint - August 25th, 2026 [August 25th, 2026]
- Police arrest former boxer Ayitey Powers over alleged death threat on NSA boss - Ghanaian Times - August 25th, 2026 [August 25th, 2026]
- NSA Ajit Doval in Beijing for boundary talks - Awaz The Voice - August 25th, 2026 [August 25th, 2026]
- ID Based on Anonymous Informant, Sudden Reference to 2009 Home Ministry Notification: Why NSA Case Against Satyam Verma Is Unconvincing - TheWire.in - August 16th, 2026 [August 16th, 2026]
- NSA Ajit Doval: India's Strength Infused with Tolerance Amid Military Actions - India News Network - August 16th, 2026 [August 16th, 2026]
- NSA Ajit Doval Reveals Operation Sindoor Strategy in New Discovery Docuseries - Daily Pioneer - August 16th, 2026 [August 16th, 2026]
- NSA Ajit Doval on Operation Sindoor: 'India can hit hard, irrespective of consequences' - wionews.com - August 16th, 2026 [August 16th, 2026]
- Indias generosity, tolerance should not be mistaken for weakness: NSA Ajit Doval on Op Sindoor - The Tribune - August 14th, 2026 [August 14th, 2026]
- 'Don't mistake India's generosity with weakness': NSA Ajit Doval on Operation Sindoor - The Times of India - August 14th, 2026 [August 14th, 2026]
- India's generosity, tolerance should not be mistaken for weakness: NSA Ajit Doval on Operation Sindoor - The Hindu - August 14th, 2026 [August 14th, 2026]
- Former NSA Chief Gen. Paul Nakasone: AI Is Changing the Cyber Battlefield - The Cipher Brief - August 14th, 2026 [August 14th, 2026]
- NSA Doval says Indias restraint should not be mistaken for weakness - Awaz The Voice - August 14th, 2026 [August 14th, 2026]
- NSA Ajit Doval says India can hit hard irrespective of consequences in first post-Sindoor interview - The Economic Times - August 14th, 2026 [August 14th, 2026]
- Man claiming to be undercover agent of NSA Ajit Doval arrested in Bihar - The Hindu - August 14th, 2026 [August 14th, 2026]
- Indias tolerance should not be mistaken for weakness; can take risks, hit hard: NSA Doval on Op Sindoor - The Kashmir Horizon - August 14th, 2026 [August 14th, 2026]
- Indias Tolerance Not a Sign of Weakness: NSA Ajit Doval on Operation Sindoor - The CSR Journal - August 14th, 2026 [August 14th, 2026]
- NSA Joins FBI and Others in Releasing Guidance to Defend Against Gunra Ransomware - National Security Agency (NSA) (.gov) - August 12th, 2026 [August 12th, 2026]
- Your router is probably vulnerable to the same attacks the NSA just warned about - MakeUseOf - August 12th, 2026 [August 12th, 2026]
- Trump has to accept hes going to lose Iran war: Former deputy NSA - MS NOW - August 12th, 2026 [August 12th, 2026]
- NSA installs DHS lawyer as new general counsel - The Record from Recorded Future News - August 12th, 2026 [August 12th, 2026]
- Manipur to invoke NSA against NH extortionists: Min - The Times of India - August 12th, 2026 [August 12th, 2026]
- Spymaster United States Joshua Rudd, US special forces officer nursing NSA back to health - Intelligence Online - July 7th, 2026 [July 7th, 2026]
- Capability, Not Compute: NSA Discretion in the Frontier AI EO - The Well News - July 7th, 2026 [July 7th, 2026]
- NSA partners with dog walking app to tackle livestock worrying - Agriland UK - July 1st, 2026 [July 1st, 2026]
- Youth Round Table Discussion: Youth round table discussion held at NSA - Myanmar International TV - July 1st, 2026 [July 1st, 2026]
- NSA welcomes Farming Roadmap 2050 and says farmers are ready to meet the challenge - Meat Management - July 1st, 2026 [July 1st, 2026]
- Crypto Executive Disputes Claims Anthropics Mythos Breached NSA Systems - Yahoo Tech - June 22nd, 2026 [June 22nd, 2026]
- Crypto Executive Disputes Claims Anthropics Mythos Breached NSA Systems - BeInCrypto - June 22nd, 2026 [June 22nd, 2026]
- Its more than Iran could have ever hoped for: Ex-US NSA John Bolton on US-Iran deal - Firstpost - June 22nd, 2026 [June 22nd, 2026]
- Manipur slaps NSA on youth already held under UAPA. Why HC quashed both cases, ordered his release - ThePrint - June 22nd, 2026 [June 22nd, 2026]
- Algorand Post-Quantum Security by 2027: 3 Years Ahead of NSA - The Cryptonomist - June 22nd, 2026 [June 22nd, 2026]
- China foreign minister set to attend Brics NSA meet in Delhi next week - The Times of India - June 22nd, 2026 [June 22nd, 2026]
- India to host BRICS NSA meet on June 2223: MEA - Awaz The Voice - June 22nd, 2026 [June 22nd, 2026]
- IDR Final Rule updates NSA dispute resolution | United States | Global law firm - Norton Rose Fulbright - June 16th, 2026 [June 16th, 2026]
- Where Is Edward Snowden Now? What to Know About the NSA Whistleblower's Life in Exile, 13 Years Later - People.com - June 16th, 2026 [June 16th, 2026]
- Former NSA official: 'Timing couldn't have been worse' for FISA 702 to expire - WBFF - June 16th, 2026 [June 16th, 2026]
- SHAREHOLDER ALERT: The M&A Class Action Firm Continues to Investigate the Merger--CZNL, NSA, CNBN, and ESQ - PR Newswire - June 16th, 2026 [June 16th, 2026]
- Training, teamwork, and quick action save a life at NSA Philadelphia - MilitaryNews.com - June 12th, 2026 [June 12th, 2026]
- NSA Insurance celebrates 100 years of selling a promise on the East End - The Suffolk Times - June 12th, 2026 [June 12th, 2026]
- Ex Pakistan NSA Moeed Yusuf says fixing ties with India key to economic revival, regional trade ambitions - ThePrint - June 12th, 2026 [June 12th, 2026]
- RSABI's Carol McLaren wins NSA Silver Salver for her work in the industry - The Scottish Farmer - June 12th, 2026 [June 12th, 2026]
- Anthropic's Mythos model is reportedly powering NSA offensive cyber ops against China and Iran - the-decoder.com - June 7th, 2026 [June 7th, 2026]
- NSA taps three officials for top cybersecurity positions - Nextgov/FCW - June 7th, 2026 [June 7th, 2026]
- Anthropic is blacklisted by the Pentagon and being used by the NSA at the same time - TechSpot - June 7th, 2026 [June 7th, 2026]
- NSA said to be readying Anthropics Mythos for use in cyber operations - TechCrunch - June 5th, 2026 [June 5th, 2026]
- Former NSA John Bolton to plead guilty to retaining classified info - MS NOW - June 5th, 2026 [June 5th, 2026]
- Trump executive order on AI gives central role to NSA - Breaking Defense - June 5th, 2026 [June 5th, 2026]
- Anthropic Is Helping the NSA Hack China. It Also Wants Everyone to Pause AI - Yahoo - June 5th, 2026 [June 5th, 2026]
- NSA using Claude Mythos for 'offensive cyber operations,' report claims says 'half-a-dozen' Anthropic engineers embedded inside the agency - Tom's... - June 5th, 2026 [June 5th, 2026]