Upstream surveillance was first revealed in May 2013 by Edward Snowden, a former NSA analyst. A previous challenge by the ACLU, Clapper v. Amnesty International USA, failed for lack of standing. In the light of some of the leaks by Snowden, which included an above Top Secret NSA slide that specifically referred to Wikipedia as a target for HTTP surveillance, the Wikimedia Foundation pushed forward with a legal complaint against the NSA for violating its users' First and Fourth Amendment rights. Since Clapper, the government itself has confirmed many of the key facts about NSA's Upstream surveillance, including that it conducts suspicionless searches. ACLU attorney Patrick Toomey noted the lawsuit is particularly relevant as the plaintiffs engage in "hundreds of billions of international communications" annually. Any program of Upstream surveillance must necessarily sweep up a substantial part of these communications.
Litigation
On August 6, 2015, the defendants brought a motion to dismiss, arguing that the plaintiffs have not plausibly shown that they have been injured by Upstream collection of data and thus lack standing to sue. In response, the Electronic Frontier Foundation filed an amicus brief on behalf of a group of libraries and booksellers. Both sides presented oral arguments at a hearing on September 25, 2015. On October 23, 2015, the District Court for the District of Maryland dismissed the suit on grounds of standing. US District Judge T. S. Ellis III ruled that the plaintiffs could not plausibly prove they were subject to Upstream surveillance, echoing the 2013 decision in Clapper v. Amnesty International US. The Wikimedia Foundation said it expected to appeal the decision. The Foundation said its complaint had merit, and that there was no question that Upstream surveillance captured the communications of both its user community and the Wikimedia Foundation itself. The Electronic Frontier Foundation, who had filed an amicus brief in support of the plaintiffs, said it was perverse to dismiss a suit for lack of proof when the surveillance program complained of was secret, and urged federal courts to tackle the serious constitutional issues that Upstream surveillance presents. The plaintiffs filed an appeal with the United States Court of Appeals for the Fourth Circuit on February 17, 2016. On May 23, 2017, the Fourth Circuit Court of Appeals vacated the dismissal by the lower court of Wikimedia's complaints. The Court of Appeals ruled that the Foundation's allegations of the NSA's Fourth Amendment violations were plausible enough to "survive a facial challenge to standing", finding that the potential harm done by the NSA's collection of private data was not speculative. The court thereby remanded the suit by the Foundation and ordered the District Court of Maryland to continue the proceedings. The court inversely affirmed the dismissal by Ellis of the suits by the other plaintiffs; in its finding the court noted that the non-Wikimedia plaintiffs had not made a strong enough case that their operations were affected by Upstream's scope. On December 16, 2019, the District Court held that the Wikimedia Foundation did not have standing to proceed with its claims. On February 14, 2020, the Wikimedia Foundation filed a notice of appeal in this case before the Court of Appeals for the Fourth Circuit.