What happened
The Administrative Office of the U.S. Courts announced it will begin tracking and publicly disclosing how often federal judges authorize the use of spyware, officially called network investigative techniques, for wiretap operations. The new category will appear in the judiciary's existing annual Wiretap Report, which already breaks down authorized wiretaps by type, jurisdiction and crime category, and will specifically cover cases where investigators use spyware to intercept real-time communications on encrypted apps like Signal and WhatsApp rather than traditional phone taps. Data collection won't start immediately: it begins with the 2028 Wiretap Report, which will be published in 2029, to give courts time to update reporting forms and procedures nationwide. Senator Ron Wyden, who has pushed for this kind of transparency since 2017, said the American people remain largely in the dark about the different ways that the government is spying on them. Privacy researcher Eva Galperin said the public data will finally let outside observers measure how widely spyware is actually used, rather than relying on guesswork.
Why it matters for your business
This isn't a rule that affects most small businesses day to day, but it's a useful signal for any company that handles sensitive client data, works with government contracts, or operates in regulated industries like legal, healthcare or financial services. It confirms that government use of spyware to intercept encrypted app communications is common enough to warrant its own tracking category, and that the practice extends beyond suspects to whoever they're communicating with. Businesses working with federal contracts or handling data covered by compliance frameworks should treat encrypted messaging as a channel that can still be subject to lawful interception, not an automatic guarantee of privacy.
What to do
If your business handles regulated or sensitive client communications, don't assume an encrypted app is beyond legal reach. Keep your data handling and retention policies aligned with what's actually required for your industry, and talk to counsel if you're unsure what obligations apply to communications involving government contracts or investigations.