Data transfers US under GDPR

Now publically released:

PPD-28 defines “bulk collection of signals intelligence” under ODNI components, rather than a direct order by the standing President or the SCI.

So it’s interesting wording, as usual. This puts SIGINT priorities and, more importantly, the capabilities of “bulk collection of signals intelligence”, directly into the hands of the Senate Select Committee on Intelligence. It avoids using the direction of PPD-28 deliberately, presumably as a means to sidestep its authority.