Page 285 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

Intercept and Obstruct Terrorism (USA PATRIOT) Act of 2001 in
direct response to the September 11, 2001, terrorist attacks in New

York City and Washington, DC. The PATRIOT Act greatly broadened
the powers of law enforcement organizations and intelligence agencies
across a number of areas, including when monitoring electronic
communications.

One of the major changes prompted by the PATRIOT Act revolves
around the way government agencies obtain wiretapping

authorizations. Previously, police could obtain warrants for only one
circuit at a time, after proving that the circuit was used by someone
subject to monitoring. Provisions of the PATRIOT Act allow
authorities to obtain a blanket authorization for a person and then
monitor all communications to or from that person under the single
warrant.

Another major change is in the way the government deals with

Internet service providers (ISPs). Under the terms of the PATRIOT
Act, ISPs may voluntarily provide the government with a large range of
information. The PATRIOT Act also allows the government to obtain
detailed information on user activity through the use of a subpoena (as
opposed to a wiretap).

Finally, the USA PATRIOT Act amends the Computer Fraud and
Abuse Act (yes, another set of amendments!) to provide more severe

penalties for criminal acts. The PATRIOT Act provides for jail terms of
up to 20 years and once again expands the coverage of the CFAA.

The PATRIOT Act has a complex legislative history. Many of the key
provisions of the PATRIOT Act expired in 2015 when Congress failed
to pass a renewal bill. However, Congress later passed the USA
Freedom Act in June 2015, which restored key provisions of the
PATRIOT Act that will remain in force until they expire in December

2019, unless they are once again renewed by Congress.

Family Educational Rights and Privacy Act The Family
Educational Rights and Privacy Act (FERPA) is another specialized
privacy bill that affects any educational institution that accepts any
form of funding from the federal government (the vast majority of
schools). It grants certain privacy rights to students older than 18 and