The Fourth Circuit Remands Wikimedia’s Suit Against the NSA Back to District Court – Lawfare (blog)
In March of 2015, the Wikimedia foundation joined together with eight other non-profits in a challenge to NSAs mass surveillance program. This week, the U.S. Court of Appeals for the Fourth Circuit permitted the suit to move forward, but in the process, peeled off all plaintiffs other than Wikimedia itself.
The case comes to the Fourth Circuit as an appeal from the the U.S. District Court of Maryland. In October 2015, the District Court dismissed the case for lack of standing, basing its decision on Supreme Courts 2013 ruling in Clapper v. Amnesty International USA. In Clapper, the Court upheld the dismissal of a similar challenge from human rights groups because their complaint was speculative, alleging only a reasonable likelihood that their communications would be intercepted, not actual or imminent injury. Lacking concrete information about government programs, the Clapper plaintiffs failed to properly plead an injury in fact, and so lacked Article III standing. The same logic, held Judge Ellis of the Maryland District Court, should apply to Wikimedias challenge. This week, however, the Fourth Circuit rejected this comparison. Unlike Clapper, the court explained, the injuries alleged by the plaintiffs in this case are not speculative, but current, actual, and based on particularized allegations.
But the Fourth Circuit didnt stop there and just vacate the entirety of Judge Ellis judgement. Instead, it distinguished between Wikimedias claim of injury and those of the other plaintiffs: Because Wikimedias claim of injury by NSAs Upstream collection is based on particularized facts and sound inferences--construed in the light most favorable to Wikimedia for the purpose of the motion--it survives a motion to dismiss. By contrast, because the other plaintiffs allegation of injury (based on the allegation that NSA is intercepting, copying, and reviewing substantially all textbased communications entering and leaving the United States, including their own) is unsupported by enough well-pleaded facts, the District Courts dismissal was proper.
Below, we first summarize the Fourth Circuits reasoning with respect to Wikimedia, and then turn to its analysis of the other eight plaintiffs claim of injury.
The Wikimedia Allegation: Not Speculative,and Well-pleaded
The factual assertions in the Wikimedia Allegation are based on a combination of public information about the operation of Section 702, PCLOB reports about what NSA is doing, as well as technical analysis how NSA must be accomplishing what PCLOB reports.
Under Section 702 of the Foreign Intelligence Surveillance Act, the government is permitted to target for surveillance non-US persons reasonably believe to be outside the United States. The procedures for making such determinations are reviewed and approved by the FISC. According to the plaintiffs, NSA conducts this surveillance by installing surveillance devices on at least some of the 49 international submarine cables that carry communication in and out of the United States which comprise the internet backbone. NSA, the plaintiffs suggest, lacks the technical capability to sift the communication prior to collection. It therefore must collect and copy substantially all international text-based communicationsand many domestic ones as they flow across this backbone in the United States. Only after this initial collection, can NSA attempt[] to filter out and discard some wholly domestic communications, and then review and retain only those copied communications for that contain targeted selectors (such as specific IP or email addresses).
The essence of the Wikimedia allegation is that because of the technical realities of this Upstream collection, and because of the sheer volume of Wikimedias communications, the NSA has almost certainly collected at least some of the organizations communications. Wikimedia reasons that because Upstream surveillance requires the NSA to copy even wholly domestic communications before filtering them out and discarding them, and because Wikimedia engages in more than one trillion international communications each year, with individuals who are located in virtually every country on earth, the NSA must necessarily be intercepting, copying, and reviewing some of Wikimedias communications.
Declassified documents show that a single service provider facilitates upstream surveillance at seven major international chokepoints in the United States. But given the quantity of its communication, even if the NSA is only collecting communication from a single Internet backbone link, Wikimedia asserts its communications must have been intercepted. Thus, Wikimedias acute privacy interest in its communications, are implicated by NSA programs.
The Fourth Circuit largely accepted Wikimedias arguments for the purpose of the motion. In order to establish Article III standing, a plaintiff must show an injury in fact. And in order to survive a motion to dismiss, a complaint must have sufficient factual matter in the complaint, such that the contents were accepted as true, it would state a claim of relief that is plausible on its face. Following the Third Circuits decision in Schuchardt v. President of the United States, the Fourth Circuit analyzed plaintiffs claims in two steps: first, it analyzed whether the allegations were sufficiently particularized to satisfy the injury-in-fact requirement and second, it analyzed whether the allegations contain sufficient detail to be credited as true for the purpose of resolving a facial challenge to a complaint. Wikimedias claims, ruled the Court, met both criteria.
The court lays out what it sees as three presumptively key facts from Wikimedias allegation:
Taken together, these three points indicate that Wikimedia has plausibly alleged that its communications travel all of the roads that a communication can take, and that the NSA seizes all the communications along at least one of those roads, and therefore may have violated Wikimedias Fourth Amendment rights. Its allegations are thus predicated on specific asserted facts and directly implicate the potential interests of Wikimedia in a concrete and particularized manner.
Unlike the speculation and guesswork of Clapper, Wikimedias combination of technical assertions and government documents amounted to a properly pleaded complaint. And unlike Clapper, the Wikimedia case concerns a motion to dismiss rather than a motion for summary judgment, dictating greater deference to complainant's account of facts.
While acknowledging that Wikimedias probability calculation (even if one assumes a 0.00000001% chance . . . of the NSA copying and reviewing any particular communication, the odds of the government copying and reviewing one of Wikimedias communication in a one year period would be greater than 99.999999999%), was incomplete and riddled with assumptions, the court concluded that it wasnt relevant for standing purposes. Importantly, given the motion to dismiss stage, the court also declined to consider the governments evidence (in the form of expert affidavits) disputing plaintiffs technical statements about NSA must operate. Without the opportunity to dispute the factual basis of the expert dispute, the government had little leg to stand on.
The Dragnet Allegation: Speculative, and Not Well-Pleaded
The other eight plaintiffs joined with Wikimedia in making the second allegation, which the court terms the Dragnet Allegation. The plaintiffs alleged that in the course of conducting Upstream surveillance the NSA is intercepting, copying, and reviewing substantially all text-based communications entering and leaving the United States, including their own. The core of the allegation is the assertion that due to the technical functionality of the internet, the NSA must be intercepting, copying, and reviewing information from most backbone chokepoints in order to engage effectively in Upstream collection. And if NSA is surveilling most backbone chokepoints, then it is likely that the plaintiffs communications have been examined. The plaintiffs allege that they have had to take burdensome and sometimes costly measures to protect themselves from this surveillance.
As with the Wikimedia Allegation, the district court dismissed the Dragnet Allegation under Clapper. The circuit court affirmed the dismissal, but on a different rationale, departing from the district courts reliance on Clapper for the reasons expressed above.
While the court writes that its analysis of standing for the Wikimedia Allegation applies also to the Dragnet Allegation as far as the presence of a particularized and cognizable ongoing injury, traceability, and redressability go (hence why Clapper is not controlling), it ultimately finds that the plaintiffs lack standing due to their failure to plausibly state a claim. The court considers the Wikimedia Allegation plausible, but the broader claims made in the Dragnet Allegation are harder for it to swallow:
In the Dragnet Allegation, Plaintiffs must plausibly establish that the NSA is intercepting substantially all text-based communications entering and leaving the United States, whereas its sufficient for purposes of the Wikimedia Allegation to show that the NSA is conducting Upstream surveillance on a single backbone link.
The plaintiffs pointed to the same evidence for the Dragnet Allegation as they do for the Wikimedia Allegation, with the addition of one New York Times article on Upstream surveillance: in other words, the mechanical details of how the internet functions and the NSAs stated goals of using Upstream collection to acquire information to, from, and about targets. But in the Wikimedia Allegation, the plaintiffs used that information to speculate about the way the NSA does what we know it to be doing (that is, engaging in Upstream collection). In contrast, in the Dragnet Allegation, the plaintiffs are using technical information and guesswork about NSAs incentives to speculate about the scope of NSA activities. Furthermore, the allegations fall short of the level of detail in Schuchardt, in which the Third Circuit found that the plaintiffs had demonstrated the sheer scale of the collection suggested a dragnet
This is a bridge too far for the court, which finds this claim implausible and therefore holds that the plaintiffs lack standing on Fourth Amendment grounds. Following this logic, the court also dismisses the plaintiffs First Amendment claims of chilled speech and their effort to establish standing on the grounds of their burdensome efforts to avoid surveillance, finding that in the absence of a plausible claim, these concerns constitute fears of hypothetical future harm such as are inadequate to provide standing under Clapper.
The plaintiffs creatively cite Fourth Circuit precedent in the form of a two-year-old antitrust case, SD3, LLC v. Black & Decker, as evidence that motive is an important factor in establishing standingpointing to NSAs alleged incentive to establish a dragnet. The court dismisses this assertion, saying that while it should come as not surprise that motive is an important factor in establishing an antitrust conspiracy, that the court had never intended to have the case stand for the broad proposition that motivation is always of special significance in plausibly pleading an injury. The court also distinguishes SD3 based on the level of detail provided by the plaintiffs on the existence of the boycott, which the court concludes were by and large absent, from the plaintiffs complaint here.
The court concludes by addressing Judge Andre Daviss dissent in part, specifically his assertion that the court need not have separately considered the non-Wikimedia plaintiffs standing. Given that the complaint rests upon the premise that the NSA is seizing each Plaintiffs unique communications, the questions of standing and relief for the Wikimedia and non-Wikimedia plaintiffs are also individualized and must be considered separately.
Judge Andre Daviss Dissent-in-Part
Judge Davis, while concurring with courts finding that Clapper is not controlling and that Wikimedia has standing, dissented on the grounds that the non-Wikimedia plaintiffs do as well.
Davis explains that while he agrees with the majoritys decision to accept as plausible Wikimedias factual allegation, he disagrees with the majoritys assertion that the other plaintiffs have not plausibly alleged in the Dragnet Allegation that the NSA is surveilling most backbone links. He gives greater credence to the plaintiffs citation of the New York Times report to bolster their allegation, which the majority dismissed as essentially a restatement of the original allegation. More importantly, he argues that because of the technical functionality of the internet to which the plaintiffs point, NSA cannot know which link the communications it targets will traverse when they enter or leave the United States, and therefore the only way it can comprehensively acquire its targets communications is by surveilling virtually every backbone link. In his view, this allegation is a logical extension of the Wikimedia Allegation, and is therefore plausible as well.
In a footnote, Davis also criticizes the majoritys decision to assess the standing of the non-Wikimedia plaintiffs separate from that of Wikimedia. Quoting the Supreme Courts decision in Horne v. Flores, he argues that in all standing inquiries, the critical question is whether at least one petitioner has alleged such a personal stake in the outcome of the controversy as to warrant his invocation of federal-court jurisdiction.
See more here:
The Fourth Circuit Remands Wikimedia's Suit Against the NSA Back to District Court - Lawfare (blog)
- Securus Technologies Supports Expansion of Sheriff-Led NSA I.G.N.I.T.E. Initiative to Improve Jail Safety and Reentry Outcomes - PR Newswire - February 7th, 2026 [February 7th, 2026]
- NSA set to deal with defiant parties, politicians, supporters on integrity of democratic process - ThePointNG - February 7th, 2026 [February 7th, 2026]
- Where NSA zero trust guidance aligns with enterprise reality - Help Net Security - February 4th, 2026 [February 4th, 2026]
- UNG third in Division 1 of NSA cyber event - University of North Georgia - February 4th, 2026 [February 4th, 2026]
- Green Beret Lieutenant General Joshua Rudd Tapped To Lead NSA and US Cyber Command - SOFREP - February 4th, 2026 [February 4th, 2026]
- SC Flags Health Concerns, Urges Rethink on Sonam Wangchuks NSA Detention - The Morning Voice - February 4th, 2026 [February 4th, 2026]
- What security teams need to know about the NSA's new zero trust guidelines - IT Pro - February 4th, 2026 [February 4th, 2026]
- 'India won't be bullied': NSA Ajit Doval told Marco Rubio that New Delhi would wait out Trump term for trade deal: Report - theweek.in - February 4th, 2026 [February 4th, 2026]
- When Protest becomes a Threat: Inside the Supreme Court hearing on Sonam Wangchuks NSA detention - SabrangIndia - February 4th, 2026 [February 4th, 2026]
- If NSA Commits Database Query Violations, But Nobody Audits Them, Do They Really Happen? - emptywheel - February 4th, 2026 [February 4th, 2026]
- Army general tapped to lead NSA vows to follow the law if confirmed - Military Times - February 1st, 2026 [February 1st, 2026]
- Overturned tractor-trailer shuts portion of Route 32 near NSA - WBAL-TV - February 1st, 2026 [February 1st, 2026]
- Nominee to lead NSA backs controversial spying law - Defense One - February 1st, 2026 [February 1st, 2026]
- NSA pick champions foreign spying law as nomination advances - The Record from Recorded Future News - February 1st, 2026 [February 1st, 2026]
- NSA Releases Phase One and Phase Two of the Zero Trust Implementation Guidelines - National Security Agency (.gov) - February 1st, 2026 [February 1st, 2026]
- Army General Tapped to Lead NSA Said He Doesnt Know Much About the Biggest NSA Controversy - The Intercept - February 1st, 2026 [February 1st, 2026]
- Trump's pick to lead the NSA vows to follow the law if confirmed - ABC News - February 1st, 2026 [February 1st, 2026]
- Trump's pick to lead the NSA vows to follow the law if confirmed - Oskaloosa Herald - February 1st, 2026 [February 1st, 2026]
- Trump's pick to lead the NSA vows to follow the law if confirmed - The Derrick - February 1st, 2026 [February 1st, 2026]
- Overturned tractor-trailer shuts westbound Maryland Route 32 near NSA exit, police say - WBAL News Radio - February 1st, 2026 [February 1st, 2026]
- SC to hear plea against Sonam Wangchuks NSA detention on February 2 - The New Indian Express - February 1st, 2026 [February 1st, 2026]
- Powys sheep sector to hear from Llyr Gruffydd at NSA meeting - County Times - February 1st, 2026 [February 1st, 2026]
- NSA calls for consultation on castration and tail docking to involve sheep farmers - cravenherald.co.uk - January 24th, 2026 [January 24th, 2026]
- NSA launches 13th annual survey for insight into cases of sheep worrying by dogs - Yahoo News UK - January 24th, 2026 [January 24th, 2026]
- NSA Ajit Doval says he doesn't use phone or internet. Here's why - MSN - January 14th, 2026 [January 14th, 2026]
- NSA Ajit Doval says he doesnt use phone or internet; shares views on Indias future and youth - WION - January 11th, 2026 [January 11th, 2026]
- Liberia: NSA Director's Special Assistant Suspended Amid Alleged Gang Sodomy of 15-Year-Old; Authorities Remain Silent - FrontPageAfrica - January 11th, 2026 [January 11th, 2026]
- 'Wars happen because some countries want to impose their will on others': NSA Ajit Doval - Deccan Herald - January 11th, 2026 [January 11th, 2026]
- We have to avenge our history: NSA Ajit Doval urges youth to make India great in every aspect - The Indian Express - January 11th, 2026 [January 11th, 2026]
- CISA, NSA, and Canadian Cyber Centre update Brickstorm analysis with new Rust-based variants - Industrial Cyber - January 11th, 2026 [January 11th, 2026]
- ROVER communication terminals approved for international use by NSA - Military Embedded Systems - January 9th, 2026 [January 9th, 2026]
- L3Harris ROVER and TNR systems gain NSA approval enabling secure coalition interoperability - Defence Industry Europe - January 9th, 2026 [January 9th, 2026]
- Former NSA insider Kosiba brought back as spy agencys No. 2 - The Record from Recorded Future News - January 9th, 2026 [January 9th, 2026]
- Trumps tariff threat to India self-inflicted wound: Former US NSA John Bolton - The Indian EYE - January 9th, 2026 [January 9th, 2026]
- NSA Scotland demands support for sheep farmers ahead of Holyrood elections - Farmers Guardian - January 9th, 2026 [January 9th, 2026]
- Announcing tariffs for purchasing Russian oil unfortunate: Former US NSA backs closer relationship with India - Punjab News Express - January 9th, 2026 [January 9th, 2026]
- NSA Ajit Doval likely to be part of Indian delegation at WEF in Davos - The New Indian Express - January 9th, 2026 [January 9th, 2026]
- "A lot of hot air": Former NSA John Bolton on Trump's remarks on possible action beyond Venezuela - ANI News - January 9th, 2026 [January 9th, 2026]
- NSA employee sues Trump administration over order on transgender rights and two 'immutable' genders - Yahoo - December 22nd, 2025 [December 22nd, 2025]
- NSA employee sues the Trump administration over transgender rights and 'immutable' genders - AP News - December 22nd, 2025 [December 22nd, 2025]
- Senior official at Indo-Pacific Command is set to be Trumps pick to lead Cyber Command, NSA - The Record from Recorded Future News - December 22nd, 2025 [December 22nd, 2025]
- NSA employee sues the Trump administration over transgender rights and 'immutable' genders - Temple Daily Telegram - December 22nd, 2025 [December 22nd, 2025]
- Potential NSA, Cyber Command leader nomination transmitted to Senate - Nextgov/FCW - December 22nd, 2025 [December 22nd, 2025]
- After Eight Months, White House Names Nominee To Head NSA And CYBERCOM - Defense Daily - December 22nd, 2025 [December 22nd, 2025]
- Fubara Hosts NSA, Says Tinubu Happy With Rivers Governor - TVC News - December 22nd, 2025 [December 22nd, 2025]
- CISA, NSA warn of Chinas BRICKSTORM malware after incident response efforts - The Record from Recorded Future News - December 10th, 2025 [December 10th, 2025]
- CISA and NSA Warn of BRICKSTORM Malware Attacking VMware ESXi and Windows Environments - CybersecurityNews - December 10th, 2025 [December 10th, 2025]
- NSA, CISA, and Others Release Guidance on Integrating AI in Operational Technology - National Security Agency (.gov) - December 4th, 2025 [December 4th, 2025]
- NSA has met 2,000-person workforce reduction goal, people familiar say - Nextgov/FCW - December 4th, 2025 [December 4th, 2025]
- NSA Doval, Thai Foreign Minister Phuangketkeow discuss maritime security, threats of online scams - The Indian EYE - December 4th, 2025 [December 4th, 2025]
- NSA Doval, Thai FM discuss maritime security, threats of online scams - Awaz The Voice - December 4th, 2025 [December 4th, 2025]
- All-clear issued about 2 hours after NSA Naples schools evacuated over potential threat - Stars and Stripes - November 18th, 2025 [November 18th, 2025]
- 'Dhurandhar': R Madhavan reveals Aditya Dhar's little trick that perfected his NSA-inspired look for the - The Times of India - November 18th, 2025 [November 18th, 2025]
- Army officer with Indo-Pacific experience emerges as potential Cyber Command, NSA pick - The Record from Recorded Future News - November 18th, 2025 [November 18th, 2025]
- NSA Dr Rahman to attend Security Conclave in New Delhi - United News of Bangladesh - November 18th, 2025 [November 18th, 2025]
- Man claims NSA told him to shatter glass at AT&T building with hatchet, Nashville police say - WSMV - November 18th, 2025 [November 18th, 2025]
- How the heartbreaking lack of a confirmed leader is impacting CYBERCOM and NSA - Breaking Defense - November 7th, 2025 [November 7th, 2025]
- Goa invokes NSA for three months to tackle anti-socials - The Times of India - November 7th, 2025 [November 7th, 2025]
- CISA, NSA and other unveil security blueprint to harden Microsoft Exchange servers - Homeland Preparedness News - November 7th, 2025 [November 7th, 2025]
- NSA Shares Q3 Revenue Results Below Expectations - GuruFocus - November 7th, 2025 [November 7th, 2025]
- Filipinos aware of civilian supremacy over military NSA Ao - Philippine News Agency - October 28th, 2025 [October 28th, 2025]
- Sonam Wangchuk says his words were twisted to justify his NSA detention - The Statesman - October 26th, 2025 [October 26th, 2025]
- Nokia and stc pioneer the first commercial 5G NSA Cloud RAN deployment in the MEA region - ZAWYA - October 26th, 2025 [October 26th, 2025]
- China accuses NSA of multi-year hack targeting its national time systems - Nextgov/FCW - October 23rd, 2025 [October 23rd, 2025]
- Cybersecurity News: AWS outage, NSA hacking accusations, High risk WhatsApp automation - CISO Series - October 23rd, 2025 [October 23rd, 2025]
- Hackers Say They Have Personal Data of Thousands of NSA and Other Government Officials - Homeland Security Today - October 23rd, 2025 [October 23rd, 2025]
- AWS outage, NSA hacking accusations, High risk WhatsApp automation - LinkedIn - October 23rd, 2025 [October 23rd, 2025]
- Palestinian President Mahmoud Abbas: No Concessions Were Made In The Oslo Accords 1.85 Million Palestinians Returned To Their Homeland;... - October 23rd, 2025 [October 23rd, 2025]
- NSA to partner JKG to drive sports technology through Artificial Intelligence - GhanaWeb - October 23rd, 2025 [October 23rd, 2025]
- China claims NSA hacked its national timing systems using 42 "special cyber weapons" - TechSpot - October 23rd, 2025 [October 23rd, 2025]
- US NSA alleged to have launched a cyber attack on a Chinese agency - csoonline.com - October 21st, 2025 [October 21st, 2025]
- Hackers Say They Have Personal Data of Thousands of NSA and Other Government Officials - 404 Media - October 21st, 2025 [October 21st, 2025]
- China says it has foiled a series U.S. cyberattacks on its critical infrastructure Ministry of State Security says it has 'irrefutable evidence' NSA... - October 21st, 2025 [October 21st, 2025]
- China claims the NSA conducted cyberattacks on its national time center - Engadget - October 21st, 2025 [October 21st, 2025]
- China claims the US NSA conducted cyberattacks on its national time center - TechRadar - October 21st, 2025 [October 21st, 2025]
- Donald Trump's ex-NSA John Bolton indicted; charged over mishandling classified information; Trump calls - Times of India - October 19th, 2025 [October 19th, 2025]
- Trump critic and former NSA adviser John Bolton indicted on classified documents charges - MLive.com - October 19th, 2025 [October 19th, 2025]
- NSA Accused of Stealing Secrets from Chinas National Time Centre - Modern Diplomacy - October 19th, 2025 [October 19th, 2025]
- Ex-Donald Trump NSA John Bolton Indicted: All About The 18 Charges - NDTV - October 19th, 2025 [October 19th, 2025]
- Explained: What are the charges against ex-US NSA John Bolton? What next? - Firstpost - October 19th, 2025 [October 19th, 2025]