The NSA PRISM Programme — How America Built a Surveillance State and Lied About It

The Question He Already Knew the Answer To

On 12 March 2013, Senator Ron Wyden sat in an open session of the Senate Intelligence Committee and asked James Clapper, the Director of National Intelligence, a question about the NSA PRISM programme. Snowden had not yet leaked a single document.

Wyden asked whether the NSA collected any type of data at all on millions of Americans.

Clapper said no. “No, sir.” Then, after a pause:

“Not wittingly. There are cases where they could inadvertently, perhaps, collect, but not wittingly.”

The hearing moved on. After it ended, Wyden offered Clapper the opportunity to amend his answer on the official record. Clapper declined.

Eighty-five days later, the first of Edward Snowden’s documents appeared in The Guardian. What the NSA PRISM Programme documents showed — what Clapper had known when he said no — is the subject of this article.


What the Public Was Told

The official position of the United States government, maintained consistently in the years before June 2013, was straightforward: the NSA’s surveillance activities targeted foreign nationals abroad, operated under robust judicial oversight, and did not sweep up the communications of ordinary Americans without legal justification.

TThe NSA PRISM Programme had existed since 2007, authorised under the Protect America Act during the Bush administration and subsequently operating under the Foreign Intelligence Surveillance Act. The NSA PRISM Programme’s existence was unknown to the public. What the government said publicly about surveillance in general was that it was targeted, lawful, and supervised.

When pressed — as Wyden pressed Clapper — officials deflected, declined to answer in open session, or, as in Clapper’s case, gave a direct denial.

The nine technology companies whose servers PRISM accessed — Microsoft, Yahoo, Google, Facebook, PalTalk, YouTube, AOL, Skype and Apple, enrolled between 2007 and 2012 — all denied any knowledge of the programme when it became public. Several denied providing direct server access to any government agency. The companies’ statements and the government’s statements told the same story: there was nothing to see, everything was legal, and the suggestion that ordinary Americans were being surveilled without cause was false.

Both sets of statements were, in material respects, untrue.


The Cracks

Wyden had been warning about this for years. Not in terms the public could understand — he was bound by classification — but in terms specific enough that anyone paying attention could sense the shape of what he knew. What he could not say publicly was what the NSA PRISM Programme was actually collecting.

In 2012, Wyden and fellow senator Mark Udall wrote a public letter warning of a “secret interpretation” of the Patriot Act that, if the American public knew about it, they would find deeply troubling. They could not say what the interpretation was. They could say it existed. The letter produced little reaction.

Civil liberties organisations including the ACLU had filed legal challenges to the NSA’s bulk collection under Section 215 of the Patriot Act. The challenges kept failing at the threshold stage: the plaintiffs could not prove they were being surveilled, because the surveillance was classified. You could not challenge a programme whose existence you were not allowed to know about.

Then came 12 March 2013. Wyden’s question had been submitted in writing the day before. He knew what the honest answer was. He asked anyway, in public, on camera, under oath — because the only way to surface a lie in a classified system is to force it into the open and watch what the official does with it.

Clapper said no. He declined to correct the record afterwards.

It was not, as Clapper would later attempt to suggest, a misunderstanding. Wyden’s question was precise. The question had been provided in advance. The opportunity to amend was extended and refused. What happened in that hearing room on 12 March 2013 was a senior official of the United States government choosing, under oath, to tell Congress and the public something he knew to be false.

Three days later, Edward Snowden — a 29-year-old IT systems administrator working as an NSA contractor in Hawaii for Booz Allen Hamilton — applied for a new position that would give him access to the documents he needed. He had been working inside the surveillance apparatus for years. He had watched Clapper lie. He had decided that the lie could not stand.


What the Documents Actually Showed

In April 2013, the Foreign Intelligence Surveillance Court issued an order to Verizon. The order was stamped TOP SECRET. It directed Verizon to hand over, to the FBI for transfer to the NSA, the call records of every single customer — who called whom, from where, for how long — on an “ongoing, daily basis.” Not suspected customers. Not customers under investigation. Every customer. The order carried a gag clause: Verizon could not tell anyone it had received it.

This was the first document Edward Snowden handed to journalists. The Guardian published it on 5 June 2013.

The following day, The Guardian and The Washington Post published the NSA PRISM Programme slides.

The slides were an internal NSA PRISM Programme PowerPoint presentation. They showed PRISM’s architecture, its enrolled companies, and its operational scale. On 5 April 2013 — eight weeks before publication — the system logged 117,675 active surveillance targets. The slides described PRISM internally as

“the number one source of raw intelligence used for NSA analytic reports.”

An NSA analyst with access to the system could query emails, voice calls, file transfers, video chats, stored data and live communications. The threshold for targeting a foreign national was described as “51 percent confidence” — a standard that, as the Washington Post’s annotators noted, offered no meaningful protection against the incidental collection of American communications from anyone in contact with a target.

The programme had been running for six years. Every enrolled company denied knowledge of it when the slides appeared.

Alongside PRISM, Snowden’s documents revealed a companion programme called UPSTREAM, which tapped data directly from fibre-optic cables without company involvement. A joint NSA-GCHQ operation called MUSCULAR collected data at roughly twice PRISM’s daily volume by the same method — pure interception, no co-operation required. The surveillance architecture was not a single programme. It was a system.

Britain’s own parliamentary oversight body found out about its share of that system the same way the public did.

In a Westminster Hall debate on 31 October 2013, Intelligence and Security Committee member George Howarth MP confirmed on the parliamentary record that the ISC — the body that existed specifically to scrutinise Britain’s intelligence services — had not been briefed on GCHQ’s Tempora mass surveillance programme before The Guardian published its story. The committee that was supposed to know had been kept in the dark. [For the full documented record of GCHQ’s parallel Tempora programme, see [INTERNAL LINK PLACEHOLDER — GCHQ Tempora article].]

GCHQ had been intercepting fibre-optic cable traffic at 10 gigabits per second — 110 CDs of data every minute — storing the content of communications for three days and metadata for 30. One internal document stated the operating principle plainly:

“we pull in everything we see.”


The Reckoning That Didn’t Come

In July 2013, James Clapper wrote a letter to Senator Dianne Feinstein, the chair of the Senate Intelligence Committee. He described his testimony of 12 March as “clearly erroneous.” The explanation he offered was that he had “simply didn’t think of” the call record collection when Wyden asked the question.

In a separate MSNBC interview the same month, he offered a different explanation. He had chosen to give the “least untruthful” answer, he said, because the question was unanswerable in an open session with a simple yes or no.

Two different explanations. One confirmed lie. No prosecution.

On the day the statute of limitations for charging Clapper with perjury expired — March 2018 — Edward Snowden posted publicly:

“Congratulations to former Director of National Intelligence James Clapper, who has officially escaped felony charges for lying under oath.”

No charges were ever filed.

In August 2013, agents from GCHQ attended The Guardian’s London offices and supervised the physical destruction of hard drives containing Snowden documents. Guardian journalists used angle grinders and drills under GCHQ supervision. The Guardian’s editor Alan Rusbridger later described the scene in parliamentary testimony. The documents already existed in multiple other locations — in the hands of journalists in the United States, Brazil and Germany. The destruction achieved nothing in terms of suppressing the material. It was a demonstration of what the British state was willing to do to a free press.

Snowden was charged under the Espionage Act on 21 June 2013. He has lived in Russia since August 2013, where he was granted citizenship in 2022. He has never been tried.

The Privacy and Civil Liberties Oversight Board — the federal body established to assess surveillance programmes — concluded its review of the bulk phone records collection with a finding that has never been adequately reckoned with: “we have not identified a single instance involving a threat to the United States in which the program made a concrete difference in the outcome of a counterterrorism investigation.”

The NSA PRISM Programme that senior officials had lied to Congress to protect had not, by the government’s own oversight board’s assessment, stopped a single attack.


The Architecture Remains

The USA Freedom Act, passed in June 2015, ended the bulk collection of phone records under Section 215 of the Patriot Act. It was described as reform. Civil liberties organisations noted what it did not touch: Section 702 of the Foreign Intelligence Surveillance Act, the legal authority that undergirds the NSA PRISM Programme, was reauthorised unchanged.

What happened under Section 702 in the years after Snowden’s disclosures is documented. According to the FBI’s own Annual Statistical Transparency Report, the agency conducted 3.4 million warrantless searches of Americans’ Section 702 data in 2021 alone. The Privacy and Civil Liberties Oversight Board found in its 2023 report that close to 5 million such searches had been conducted between 2019 and 2022, with little justification provided for the relative value of the results. In January 2025, a federal court in United States v. Hasbajrami ruled that these warrantless backdoor searches violated the Fourth Amendment.

The debate Snowden forced into the open was real. The reforms were partial. The architecture he revealed has not been dismantled. The NSA PRISM Programme was not the first time the American government had turned its surveillance apparatus on its own people — the FBI’s COINTELPRO operation had done so decades earlier, targeting civil rights leaders and political dissidents with methods that Congress had also been kept in the dark about. The NSA PRISM Programme’s legal foundation remains intact.

What Snowden’s documents proved was not simply that the NSA had built a mass surveillance system. They proved that when Congress tried to exercise its constitutional function of oversight, the official responsible for the programme looked a senator in the eye and said no.

Section 702 of the Foreign Intelligence Surveillance Act — the legal authority that undergirds PRISM — was reauthorised by Congress in April 2024. Edward Snowden remains in Russia.

The Documents

  1. Foreign Intelligence Surveillance Court. Section 215 Primary Order — Verizon Business Network Services. 25 April 2013. Published by The Guardian, 5 June 2013. theguardian.com/world/interactive/2013/jun/06/verizon-telephone-data-court-order
  2. National Security Agency. PRISM Collection Slides (PowerPoint presentation, internal). April 2013. Published by The Washington Post and The Guardian, 6 June 2013. Archive copies available: archive.org/details/NSA-PRISM-Slides
  3. United States Senate Select Committee on Intelligence. Hearing transcript, 12 March 2013. Clapper-Wyden exchange. Full hearing index available at: intelligence.senate.gov
  4. Clapper, James R. Letter to Senator Dianne Feinstein. July 2013. Reported by NPR, 2 July 2013. npr.org/sections/thetwo-way/2013/07/02/198118060/clapper-apologizes-for-answer-on-nsas-data-collection
  5. Privacy and Civil Liberties Oversight Board. Report on the Telephone Records Program Conducted under Section 215 of the USA PATRIOT Act. 23 January 2014. pclob.gov/reports/report-215/
  6. Privacy and Civil Liberties Oversight Board. Report on the Surveillance Program Operated Pursuant to Section 702 of FISA. 28 September 2023. documents.pclob.gov/prod/Documents/OversightReport/054417e4-9d20-427a-9850-862a6f29ac42/2023%20PCLOB%20702%20Report%20(002).pdf
  7. House of Commons. Westminster Hall Debate — Intelligence and Security Services. 31 October 2013. Hansard official record: hansard.parliament.uk/Commons/2013-10-31/debates/13103154000001/IntelligenceAndSecurityServices
  8. Office of the Director of National Intelligence. Annual Statistical Transparency Report Regarding Use of National Security Surveillance Authorities — Calendar Year 2021. Published April 2022. Full report index and download available at: intel.gov/ic-on-the-record-database/results/statistical-transparency-report
  9. United States v. Hasbajrami. US District Court for the Eastern District of New York. Opinion issued 21 January 2025. Case documentation and ACLU summary: aclu.org/documents/section-702-memorandum-and-order-u-s-v-hasbajrami-11-cr-00623-ldh

Go Deeper

No Place to Hide by Glenn Greenwald (Picador, 2014) — written by the journalist who received Snowden’s documents directly in Hong Kong, it remains the primary first-hand account of the disclosures, with reproductions of key NSA slides and a detailed account of the surveillance architecture they revealed.

Scroll to Top