FISA expressly bans bulk data collection on US citizens, but the government simply buys it from private companies instead — no warrant, no court order required. An amendment to close this loophole failed on a tie vote, and the following year it wasn't even allowed to reach the floor.