Under Seal v. Jefferson Sessions ( 2022 )


Menu:
  •                 FOR PUBLICATION
    UNITED STATES COURT OF APPEALS
    FOR THE NINTH CIRCUIT
    IN RE NATIONAL SECURITY LETTER,         No. 16-16067
    D.C. No.
    UNDER SEAL,                            3:11-cv-02173-SI
    Petitioner-Appellant,
    v.
    JEFFERSON B. SESSIONS III, Attorney
    General,
    Respondent-Appellee.
    IN RE NATIONAL SECURITY LETTER,         No. 16-16081
    D.C. No.
    UNDER SEAL,                            3:13-mc-80089-
    Petitioner-Appellant,         SI
    v.
    JEFFERSON B. SESSIONS III, Attorney
    General,
    Respondent-Appellee.
    2            IN RE NATIONAL SECURITY LETTER
    IN RE NATIONAL SECURITY LETTER,            No. 16-16082
    D.C. No.
    UNDER SEAL,                              3:13-cv-01165-SI
    Petitioner-Appellant,
    v.                      ORDER AND
    AMENDED
    JEFFERSON B. SESSIONS III, Attorney          OPINION
    General,
    Respondent-Appellee.
    Appeal from the United States District Court
    for the Northern District of California
    Susan Illston, District Judge, Presiding
    Argued and Submitted March 22, 2017
    San Francisco, California
    Filed July 17, 2017
    Amended May 11, 2022
    Before: Mary H. Murguia, Chief Judge, and Sandra S.
    Ikuta and N. Randy Smith, Circuit Judges.
    Order;
    Opinion by Judge Ikuta;
    Concurrence by Chief Judge Murguia
    IN RE NATIONAL SECURITY LETTER                           3
    SUMMARY*
    Civil Rights
    The panel (1) amended its opinion affirming the district
    court’s orders denying petitions brought by electronic
    communication service providers pursuant to 
    18 U.S.C. § 3511
    (a) to set aside information requests and nondisclosure
    requirements in National Security Letters issued to them by
    the Federal Bureau of Investigation; (2) denied a petition for
    rehearing; (3) denied a petition for rehearing en banc on
    behalf of the court, noting that a judge requested a vote on
    whether to rehear the matter en banc, but the matter failed to
    receive a majority of votes of the nonrecused active judges in
    favor of en banc consideration; and (4) ordered that no further
    petitions would be entertained.
    A National Security Letter is an administrative subpoena
    issued by the FBI to a wire or electronic communication
    service provider requiring the provider to produce specified
    subscriber information that is relevant to an authorized
    national security investigation. 
    18 U.S.C. § 2709
    (a). By
    statute, a National Security Letter may include a requirement
    that the recipient not disclose the fact that it has received such
    a request. In this case, recipients of National Security Letters
    alleged that the nondisclosure requirement violated their First
    Amendment rights.
    The panel held that § 2709(c)’s nondisclosure
    requirement imposes a content-based restriction that was
    *
    This summary constitutes no part of the opinion of the court. It has
    been prepared by court staff for the convenience of the reader.
    4            IN RE NATIONAL SECURITY LETTER
    subject to, and withstood, strict scrutiny. The panel further
    held that, assuming the nondisclosure requirement was the
    type of prior restraint for which the procedural safeguards set
    forth in Freedman v. Maryland, 
    380 U.S. 51
     (1965) were
    required, the National Security Letters law provided those
    safeguards. The panel concluded that the nondisclosure
    requirement did not run afoul of the First Amendment.
    Concurring, Chief Judge Murguia agreed that the NSL
    law’s nondisclosure requirement—which prohibits an
    electronic communication service provider from disclosing
    that the Federal Bureau of Investigation has sought or
    obtained information from the provider pursuant to an
    administrative subpoena, 
    18 U.S.C. § 2709
    (c)(1)(A)—did not
    violate the First Amendment. The law passed constitutional
    muster because it was narrowly tailored to serve compelling
    national security interests and because it provided the
    government “narrow, objective, and definite standards” which
    limited its ability to prohibit disclosure as well as sufficiently
    robust procedural safeguards, including prompt judicial
    review. Chief Judge Murguia wrote separately, however,
    merely to make explicit that the panel’s conclusions rested on
    the assumption that the NSL law’s nondisclosure requirement
    was a prior restraint of speech.
    COUNSEL
    Andrew Crocker (argued), Nathan Cardozo, Lee Tien, Kurt
    Opsahl, Jennifer Lynch, David Greene, Cindy Cohn, and
    Aaron Mackey, Electronic Frontier Foundation, San
    Francisco, California; Richard Wiebe, Law Office of Richard
    R. Wiebe, San Francisco, California; for Petitioner-
    Appellants.
    IN RE NATIONAL SECURITY LETTER                   5
    Lewis S. Yelin (argued), Scott R. McIntosh, and Douglas N.
    Letter, Appellate Staff; Brian Stretch, United States Attorney;
    Benjamin C. Mizer, Principal Deputy Assistant Attorney
    General; Civil Division, United States Department of Justice,
    Washington, D.C.; for Respondent-Appellee.
    Jonathan Manes, University at Buffalo School of Law, The
    State University of New York, Buffalo, New York; Hannah
    Bloch-Wehba and John T. Langford, Floyd Abrams Institute
    for Freedom of Expression, Yale Law School, New Haven,
    Connecticut; for Amici Curiae Abrams Institute for Freedom
    of Expression and First Amendment Scholars.
    Bruce D. Brown, Caitlin Vogus, and Selina MacLaren, The
    Reporters Committee for Freedom of the Press, Washington,
    D.C., for Amici Curiae The Reporters Committee for
    Freedom of the Press and 20 Media Organizations.
    ORDER
    The opinion filed July 17, 2017, and appearing at
    
    863 F.3d 1110
    , is hereby amended as follows:
    On page 1121, part III, the seventh sentence should be
    amended as follows:
    Accordingly, we analyze the recipients’
    challenge as an as-applied challenge.
    On page 1129, part III, the following footnote 22 should be
    added after 
    22. Contrary to Chief Judge Murguia’s
    concurrence, the Supreme Court does not
    refer to every law that bars speech in advance
    of its occurrence as a prior restraint. Conc. at
    1. The Supreme Court has upheld the
    governmental confidentiality requirements
    discussed above, and of course, many other
    opinions uphold laws barring future speech,
    see, e.g., Holder v. Humanitarian Law
    Project, 
    561 U.S. 1
    , 36 (2010) (upholding a
    law criminalizing communications that
    provide material support to a foreign terrorist
    organization); Rust v. Sullivan, 
    500 U.S. 173
    ,
    192–94 (1991) (upholding regulations barring
    certain federally funded facilities from
    advocating abortion as a method of family
    planning). Although these cases considered
    laws preventing speech in advance of its
    occurrence, Conc. at 1, the Supreme Court did
    not use the term “prior restraint” nor require
    the procedural safeguards set forth in
    Freedman.
    Further, Chief Judge Murguia’s attached concurrence
    shall be appended to the opinion.
    With this amendment, the petition for rehearing en banc,
    filed October 2, 2017, is DENIED. The panel has voted to
    deny appellant’s petition for rehearing. The full court has
    been advised of the petition for rehearing en banc. A judge
    requested a vote on whether to rehear the matter en banc.
    IN RE NATIONAL SECURITY LETTER                    7
    The matter failed to receive a majority of votes of the
    nonrecused active judges in favor of en banc consideration.
    Fed. R. App. P. 35(g). Judge Miller and Judge Koh did not
    participate in the deliberations or vote in this case. No further
    petitions for rehearing or rehearing en banc will be
    entertained.
    OPINION
    IKUTA, Circuit Judge:
    In this case, we consider challenges to the
    constitutionality of the law authorizing the Federal Bureau of
    Investigation (FBI) to prevent a recipient of a national
    security letter (NSL) from disclosing the fact that it has
    received such a request. 
    18 U.S.C. § 2709
    (c). An NSL is an
    administrative subpoena issued by the FBI to a wire or
    electronic communication service provider which requires the
    provider to produce specified subscriber information that is
    relevant to an authorized national security investigation. 
    Id.
    § 2709(a). By statute, the NSL may include a requirement
    that the recipient not “disclose to any person that the Federal
    Bureau of Investigation has sought or obtained access to
    information or records” under the NSL law.                  Id.
    § 2709(c)(1)(A). Both the information request and the
    nondisclosure requirement are subject to judicial review. See
    id. § 3511. (Because § 2709 and § 3511 work together, we
    refer to them collectively as “the NSL law.”)
    Certain recipients of these NSLs claim that the
    nondisclosure requirement violates their First Amendment
    rights. We hold that the nondisclosure requirement in
    
    18 U.S.C. § 2709
    (c) is a content-based restriction on speech
    8             IN RE NATIONAL SECURITY LETTER
    that is subject to strict scrutiny, and that the nondisclosure
    requirement withstands such scrutiny. Accordingly, we
    affirm.
    I
    We begin by reviewing the statutory framework under
    which NSLs are issued. The law authorizing the FBI to send
    an information request to a wire or electronic communication
    service provider was originally enacted as part of the
    Electronic Communications Privacy Act of 1986. Pub. L.
    No. 99-508, § 201, 
    100 Stat. 1848
    , 1867. The law was
    extensively amended in 2006, as part of the USA Patriot
    Improvement and Reauthorization Act of 2005. Pub. L. No.
    109-177, §§ 115, 116(a), 
    120 Stat. 192
    , 211–17 (2006). The
    letters received by the recipients here were issued under the
    2006 version of the NSL law. Subsequently, Congress
    enacted the USA FREEDOM Act of 2015, Pub. L. No. 114-
    23, 
    129 Stat. 268
    , which further amended the NSL law
    effective June 2, 2015.1
    The NSL law is best understood as a form of
    administrative subpoena. Congress may authorize federal
    agencies to issue administrative subpoenas without court
    authorization for any purpose within Congress’s
    constitutional power. See Okla. Press Publ’g Co. v. Walling,
    
    327 U.S. 186
    , 208–09 (1946); see also ICC v. Brimson,
    
    154 U.S. 448
    , 472–73 (1894), overruled on other grounds by
    Bloom v. Illinois, 
    391 U.S. 194
    , 198–200 (1968). But while
    1
    Where necessary to differentiate between the 2006 and 2015
    versions of the NSL law, we refer to the former as the “2006 NSL law”
    and the latter as the “2015 NSL law.” Unless otherwise noted, a reference
    to 
    18 U.S.C. § 2709
     or 
    18 U.S.C. § 3511
     refers to the 2015 NSL law.
    IN RE NATIONAL SECURITY LETTER                       9
    an agency may issue a subpoena without prior judicial
    approval, it must invoke the aid of a federal court to enforce
    it. See, e.g., United States v. Sec. State Bank & Trust,
    
    473 F.2d 638
    , 641–42 (5th Cir. 1973); see also Shasta
    Minerals & Chem. Co. v. SEC, 
    328 F.2d 285
    , 286 (10th Cir.
    1964). The “power to punish is not generally available to
    federal administrative agencies,” and so enforcement must be
    sought “by way of a separate judicial proceeding.” Shasta
    Minerals, 
    328 F.2d at 286
    .
    Sections 2709 and 3511 follow the statutory framework
    typically used to authorize administrative subpoenas.
    Compare 
    18 U.S.C. §§ 2709
    , 3511, with, e.g., 
    21 U.S.C. § 876
    (a). Section 2709 authorizes the FBI to make an
    information request to “[a] wire or electronic communication
    service provider” for “subscriber information and toll billing
    records information, or electronic communication
    transactional records in its custody or possession,” and
    provides that the recipient “shall comply” with the request.
    
    18 U.S.C. § 2709
    (a).2 In order to issue such a request, the
    FBI Director or a sufficiently high-ranking designee of the
    Director must “specifically identif[y] a person, entity,
    telephone number, or account as the basis for a request,” and
    must certify that the “records sought are relevant to an
    authorized investigation to protect against international
    2
    
    18 U.S.C. § 2709
    (a) provides:
    Duty to Provide. — A wire or electronic
    communication service provider shall comply with a
    request for subscriber information and toll billing
    records information, or electronic communication
    transactional records in its custody or possession made
    by the Director of the Federal Bureau of Investigation
    under subsection (b) of this section.
    10                IN RE NATIONAL SECURITY LETTER
    terrorism or clandestine intelligence activities” and that the
    investigation “is not conducted solely on the basis of
    activities protected by the first amendment to the Constitution
    of the United States.” 
    Id.
     § 2709(b)(1)–(2).3 The NSL must
    3
    
    18 U.S.C. § 2709
    (b) provides:
    Required Certification. — The Director of the Federal
    Bureau of Investigation, or his designee in a position
    not lower than Deputy Assistant Director at Bureau
    headquarters or a Special Agent in Charge in a Bureau
    field office designated by the Director, may, using a
    term that specifically identifies a person, entity,
    telephone number, or account as the basis for a request
    —
    (1) request the name, address, length of service, and
    local and long distance toll billing records of a person
    or entity if the Director (or his designee) certifies in
    writing to the wire or electronic communication service
    provider to which the request is made that the name,
    address, length of service, and toll billing records
    sought are relevant to an authorized investigation to
    protect against international terrorism or clandestine
    intelligence activities, provided that such an
    investigation of a United States person is not conducted
    solely on the basis of activities protected by the first
    amendment to the Constitution of the United States; and
    (2) request the name, address, and length of service of
    a person or entity if the Director (or his designee)
    certifies in writing to the wire or electronic
    communication service provider to which the request is
    made that the information sought is relevant to an
    authorized investigation to protect against international
    terrorism or clandestine intelligence activities, provided
    that such an investigation of a United States person is
    not conducted solely upon the basis of activities
    IN RE NATIONAL SECURITY LETTER                          11
    include notice of the availability of judicial review under 
    18 U.S.C. § 3511
    . 
    Id.
     § 2709(d).
    The NSL law contemplates that in some cases, a
    recipient’s disclosure of the fact that it has received an FBI
    request for specific information may result in one of four
    enumerated harms: “(i) a danger to the national security of
    the United States; (ii) interference with a criminal,
    counterterrorism, or counterintelligence investigation; (iii)
    interference with diplomatic relations; or (iv) danger to the
    life or physical safety of any person.” Id. § 2709(c)(1)(B).4
    If the FBI Director or a sufficiently high-ranking designee of
    the Director issues a certification “that the absence of a
    prohibition of disclosure under this subsection may result” in
    protected by the first amendment to the Constitution of
    the United States.
    4
    
    18 U.S.C. § 2709
    (c)(1)(B) provides:
    Certification. — The requirements of subparagraph (A)
    shall apply if the Director of the Federal Bureau of
    Investigation, or a designee of the Director whose rank
    shall be no lower than Deputy Assistant Director at
    Bureau headquarters or a Special Agent in Charge of a
    Bureau field office, certifies that the absence of a
    prohibition of disclosure under this subsection may
    result in —
    (i) a danger to the national security of the United States;
    (ii) interference with a criminal, counterterrorism, or
    counterintelligence investigation;
    (iii) interference with diplomatic relations; or
    (iv) danger to the life or physical safety of any person.
    12               IN RE NATIONAL SECURITY LETTER
    one of these harms, 
    id.,
     and the government gives the
    recipient notice of the availability of judicial review pursuant
    to § 3511, see id. § 2709(d)(2), the government may prohibit
    the recipient from disclosing that it has received the NSL, see
    id. § 2709(c)(1)(A),5 subject to such judicial review.
    There are three statutory exceptions to the nondisclosure
    requirement. See id. § 2709(c)(2).6 First, a recipient “may
    5
    
    18 U.S.C. § 2709
    (c)(1)(A) provides:
    In general. — If a certification is issued under
    subparagraph (B) and notice of the right to judicial
    review under subsection (d) is provided, no wire or
    electronic communication service provider that receives
    a request under subsection (b), or officer, employee, or
    agent thereof, shall disclose to any person that the
    Federal Bureau of Investigation has sought or obtained
    access to information or records under this section.
    6
    
    18 U.S.C. § 2709
    (c)(2) provides:
    (A) In general. — A wire or electronic communication
    service provider that receives a request under
    subsection (b), or officer, employee, or agent thereof,
    may disclose information otherwise subject to any
    applicable nondisclosure requirement to —
    (i) those persons to whom disclosure is necessary in
    order to comply with the request;
    (ii) an attorney in order to obtain legal advice or
    assistance regarding the request; or
    (iii) other persons as permitted by the Director of the
    Federal Bureau of Investigation or the designee of the
    Director.
    IN RE NATIONAL SECURITY LETTER                        13
    disclose information otherwise subject to any applicable
    nondisclosure requirement” to “those persons to whom
    disclosure is necessary in order to comply with the request.”
    
    Id.
     § 2709(c)(2)(A)(i). Second, the recipient may disclose
    such information to “an attorney in order to obtain legal
    advice or assistance regarding the request.”                 Id.
    § 2709(c)(2)(A)(ii). Third, if the recipient wants to provide
    the information to other individuals, it may do so if it obtains
    the permission of the FBI Director or the designee of the
    Director. Id. § 2709(c)(2)(A)(iii). The recipient must also
    inform those persons receiving the information that they are
    subject to the same nondisclosure requirement applicable to
    the initial recipient, id. § 2709(c)(2)(C).
    As is typical in the administrative subpoena context,
    § 2709 does not contain any penalty provision either for
    (B) Application. — A person to whom disclosure is
    made under subparagraph (A) shall be subject to the
    nondisclosure requirements applicable to a person to
    whom a request is issued under subsection (b) in the
    same manner as the person to whom the request is
    issued.
    (C) Notice. — Any recipient that discloses to a person
    described in subparagraph (A) information otherwise
    subject to a nondisclosure requirement shall notify the
    person of the applicable nondisclosure requirement.
    (D) Identification of disclosure recipients. — At the
    request of the Director of the Federal Bureau of
    Investigation or the designee of the Director, any
    person making or intending to make a disclosure under
    clause (i) or (iii) of subparagraph (A) shall identify to
    the Director or such designee the person to whom such
    disclosure will be made or to whom such disclosure
    was made prior to the request.
    14                IN RE NATIONAL SECURITY LETTER
    failure to comply with the information request or for failure
    to comply with the nondisclosure requirement. Only a court
    has authority to enforce the information request or the
    nondisclosure requirement. See id. § 3511. If a recipient fails
    to comply with an information request, the government “may
    invoke the aid” of a district court “to compel compliance with
    the request.” Id. § 3511(c).7 The court may “issue an order
    requiring the person or entity to comply with the request,”
    and “[a]ny failure to obey the order of the court may be
    punished by the court as contempt thereof.”                 Id.
    Alternatively, the recipient of an NSL may petition the
    district court “for an order modifying or setting aside the
    request,” and the district court may do so “if compliance
    7
    
    18 U.S.C. § 3511
    (c) provides:
    In the case of a failure to comply with a request for
    records, a report, or other information made to any
    person or entity under section 2709(b) of this title,
    section 626(a) or (b) or 627(a) of the Fair Credit
    Reporting Act, section 1114(a)(5)(A) of the Right to
    Financial Privacy Act, or section 802(a) of the National
    Security Act of 1947, the Attorney General may invoke
    the aid of any district court of the United States within
    the jurisdiction in which the investigation is carried on
    or the person or entity resides, carries on business, or
    may be found, to compel compliance with the request.
    The court may issue an order requiring the person or
    entity to comply with the request. Any failure to obey
    the order of the court may be punished by the court as
    contempt thereof. Any process under this section may
    be served in any judicial district in which the person or
    entity may be found.
    IN RE NATIONAL SECURITY LETTER                          15
    would be unreasonable, oppressive, or otherwise unlawful.”
    
    Id.
     § 3511(a).8
    Whenever a nondisclosure requirement under § 2709(c)
    is imposed on a recipient, the recipient may challenge the
    requirement in one of two ways. First, the recipient may “file
    a petition for judicial review in any court described in
    [§ 3511(a)].” Id. § 3511(b)(1)(A).9 Second, the recipient
    8
    
    18 U.S.C. § 3511
    (a) provides, in relevant part:
    The recipient of a request for records, a report, or other
    information under section 2709(b) of this title . . . may,
    in the United States district court for the district in
    which that person or entity does business or resides,
    petition for an order modifying or setting aside the
    request. The court may modify or set aside the request
    if compliance would be unreasonable, oppressive, or
    otherwise unlawful.
    9
    
    18 U.S.C. § 3511
    (b)(1) provides:
    (A) Notice. — If a recipient of a request or order for a
    report, records, or other information under section 2709
    of this title . . . wishes to have a court review a
    nondisclosure requirement imposed in connection with
    the request or order, the recipient may notify the
    Government or file a petition for judicial review in any
    court described in subsection (a).
    (B) Application. — Not later than 30 days after the date
    of receipt of a notification under subparagraph (A), the
    Government shall apply for an order prohibiting the
    disclosure of the existence or contents of the relevant
    request or order. An application under this
    subparagraph may be filed in the district court of the
    United States for the judicial district in which the
    recipient of the order is doing business or in the district
    16                IN RE NATIONAL SECURITY LETTER
    “may notify the Government” that it desires judicial review,
    
    id.,
     in which case “[n]ot later than 30 days after the date of
    receipt of a notification [from the recipient], the Government
    shall apply [to the district court] for an order prohibiting”
    disclosure, 
    id.
     § 3511(b)(1)(B).           The government’s
    application for a nondisclosure order (or for an extension of
    such an order), must include a certification from the FBI
    Director or a sufficiently high-ranking designee “containing
    a statement of specific facts indicating that the absence of a
    prohibition of disclosure under [§ 3511(b)] may result in” one
    of the four harms enumerated in § 2709(c)(1)(B). Id.
    § 3511(b)(2).10 The nondisclosure requirement remains in
    court of the United States for any judicial district within
    which the authorized investigation that is the basis for
    the request is being conducted. The applicable
    nondisclosure requirement shall remain in effect during
    the pendency of proceedings relating to the
    requirement.
    (C) Consideration. — A district court of the United
    States that receives a petition under subparagraph (A)
    or an application under subparagraph (B) should rule
    expeditiously, and shall, subject to paragraph (3), issue
    a nondisclosure order that includes conditions
    appropriate to the circumstances.
    10
    
    18 U.S.C. § 3511
    (b)(2) provides:
    An application for a nondisclosure order or extension
    thereof or a response to a petition filed under paragraph
    (1) shall include a certification from the Attorney
    General, Deputy Attorney General, an Assistant
    Attorney General, or the Director of the Federal Bureau
    of Investigation, or a designee in a position not lower
    than Deputy Assistant Director at Bureau headquarters
    or a Special Agent in Charge in a Bureau field office
    designated by the Director, or in the case of a request
    IN RE NATIONAL SECURITY LETTER                         17
    effect while the district court considers the recipient’s
    challenge or the government’s application for a nondisclosure
    order. 
    Id.
     § 3511(b)(1)(B).
    A court receiving a recipient’s petition for judicial review
    of a nondisclosure requirement or the government’s
    application for a nondisclosure order “should rule
    expeditiously.” Id. § 3511(b)(1)(C). The court “shall issue
    a nondisclosure order or extension thereof . . . if the court
    determines that there is [good] reason to believe that
    disclosure of the information subject to the nondisclosure
    requirement during the applicable time period may result in”
    one of the four enumerated harms. Id. § 3511(b)(3).11 In
    by a department, agency, or instrumentality of the
    Federal Government other than the Department of
    Justice, the head or deputy head of the department,
    agency, or instrumentality, containing a statement of
    specific facts indicating that the absence of a
    prohibition of disclosure under this subsection may
    result in [the four harms enumerated in 
    18 U.S.C. § 2709
    (c)(1)(B)].
    Under the 2006 NSL law, the government was not required to provide a
    statement of specific facts supporting its certification. Rather, “such
    certification shall be treated as conclusive unless the court finds that the
    certification was made in bad faith.” 
    18 U.S.C. § 3511
    (b)(2) (2006).
    11
    
    18 U.S.C. § 3511
    (b)(3) provides:
    A district court of the United States shall issue a
    nondisclosure order or extension thereof under this
    subsection if the court determines that there is reason to
    believe that disclosure of the information subject to the
    nondisclosure requirement during the applicable time
    period may result in [the four harms enumerated in
    
    18 U.S.C. § 2709
    (c)(1)(B)].
    18           IN RE NATIONAL SECURITY LETTER
    making this determination, “the court shall, upon request of
    the government, review ex parte and in camera any
    government submission or portions thereof, which may
    include classified information.” 
    Id.
     § 3511(e). Any
    nondisclosure order issued by a reviewing court should
    “include[] conditions appropriate to the circumstances.” Id.
    § 3511(b)(1)(C).
    In amending the NSL law in 2015, Congress also required
    the Attorney General to promulgate procedures for
    periodically reviewing and terminating any nondisclosure
    requirements issued in connection with an NSL. Pub. L. No.
    114-23, Title V, § 502(f), 129 Stat. at 288 (codified at
    
    12 U.S.C. § 3414
     note). The Attorney General adopted such
    procedures in November 2015. See Termination Procedures
    for National Security Letter Nondisclosure Requirement, Fed.
    Bur e a u o f I nve s t i ga t i on ( Nov. 24, 2015) ,
    https://www.fbi.gov/file-repository/nsl-ndp-procedures.pdf
    (hereinafter “Termination Procedures”).           Under these
    procedures, any nondisclosure requirement must terminate
    when the underlying investigation is closed or “on the three-
    year anniversary of the initiation” of the investigation, unless
    “the FBI makes a determination that one of the existing
    statutory standards for nondisclosure is satisfied.” Once the
    FBI has determined that nondisclosure is no longer required,
    it must provide written notice to the recipient to that effect.
    If the FBI does not terminate the nondisclosure requirement
    at either of these occasions, the recipient retains the right to
    The Second Circuit in John Doe, Inc. v. Mukasey adopted the
    “common-sense understanding” that “reason” in the 2006 NSL law means
    “good reason.” 
    549 F.3d 861
    , 875 (2d Cir. 2008). We also adopt this
    understanding.
    IN RE NATIONAL SECURITY LETTER                   19
    challenge the requirement in district court. 
    18 U.S.C. § 3511
    (a).
    The 2015 legislation amending the NSL law also added
    
    50 U.S.C. § 1874
    , which allows “[a] person subject to a
    nondisclosure requirement” to disclose aggregate data
    regarding the number of NSLs (in specified ranges or
    “bands”) that the person has received. Pub. L. No. 114-23,
    Title VI, § 603(a), 129 Stat. at 295–96 (codified at 
    50 U.S.C. § 1874
    (a)(1)–(4)). For instance, a person may report
    receiving 0 to 99, 0 to 249, 0 to 499, or 0 to 999
    nondisclosure requirements. A person who chooses to report
    receiving 0 to 99 nondisclosure requirements may make such
    a disclosure on an annual basis, while a person who chooses
    to report receipt of a larger range of NSLs may report
    semiannually. See 
    50 U.S.C. § 1874
    (a)(1)–(4).
    II
    We next turn to the facts of these consolidated appeals,
    which involve five NSLs issued to two recipients between
    2011 and 2013 (while the 2006 NSL law remained in effect).
    Each NSL at issue contained an information request and a
    nondisclosure requirement, and informed the recipient that it
    could seek judicial review of the nondisclosure requirement
    by notifying the FBI and that the FBI would accordingly
    initiate judicial review within 30 days.
    The first recipient, CREDO Mobile, received three of the
    NSLs at issue, the first in 2011 and two more in 2013. The
    second recipient, CloudFlare, received the other two NSLs,
    both in 2012. Following receipt, CREDO and CloudFlare
    petitioned the district court to set aside the information
    requests and nondisclosure requirements contained in each
    NSL. Each recipient also sought to enjoin the government
    20           IN RE NATIONAL SECURITY LETTER
    from issuing additional NSLs and from imposing additional
    nondisclosure requirements. In response, the government
    cross-moved in each case to compel compliance with the
    NSLs.
    In considering the 2011 NSL issued to CREDO, the
    district court held that the nondisclosure and judicial review
    provisions in the 2006 NSL law violated the First
    Amendment and that these provisions were not severable
    from the remainder of the statute, and accordingly enjoined
    the government from issuing information requests and from
    enforcing nondisclosure requirements. See In re Nat’l Sec.
    Letter, 
    930 F. Supp. 2d 1064
    , 1081 (N.D. Cal. 2013). The
    district court stayed its decision pending the resolution of the
    government’s appeal.
    Notwithstanding its conclusion that the 2006 NSL law
    was constitutionally deficient, the district court denied the
    petitions to set aside the information requests and
    nondisclosure requirements in the 2013 NSLs issued to
    CREDO and the 2012 NSLs issued to CloudFlare. The
    district court reasoned that those NSLs were issued in full
    compliance with the procedural and substantive requirements
    suggested by the Second Circuit in John Doe, Inc. v.
    Mukasey, 
    549 F.3d 861
     (2d Cir. 2008), which had held that
    the 2006 NSL law could be constitutionally applied if certain
    additional safeguards were provided.           CREDO and
    CloudFlare appealed.
    While we considered these appeals, Congress enacted the
    USA FREEDOM Act, effective June 2, 2015. Recognizing
    the extensive changes to the NSL law made by this
    enactment, we vacated the district court’s judgments and
    IN RE NATIONAL SECURITY LETTER                         21
    remanded to allow the district court to consider in the first
    instance the constitutionality of the 2015 NSL law.
    On remand, CREDO and CloudFlare submitted renewed
    petitions under § 3511(a) to set aside the information requests
    and nondisclosure requirements contained in each NSL and
    the government cross-petitioned to enforce both components
    of the NSLs. This time, the district court held that the NSL
    law, as amended, was constitutional. It also determined that
    the government had carried its burden of showing that there
    was good reason to believe that disclosure of the 2011 NSL
    to CREDO and of the 2012 NSLs to CloudFlare might result
    in one of the four enumerated harms. Accordingly, it granted
    the government’s cross-petitions to enforce those three NSLs
    in their entirety. However, with respect to the 2013 NSLs to
    CREDO, the district court held that the government’s
    certification that one of the four enumerated harms would
    result absent nondisclosure was insufficient. Accordingly, it
    granted CREDO’s petition to set aside the nondisclosure
    requirement in the 2013 NSLs.
    CREDO and CloudFlare appealed the denial of their
    petitions to set aside the information requests and
    nondisclosure requirements in the 2011 and 2012 NSLs. The
    government cross-appealed the district court’s decision to set
    aside the nondisclosure requirements in the 2013 NSLs to
    CREDO, but has since voluntarily dismissed its cross-
    appeal.12
    12
    The 2013 NSLs’ nondisclosure requirements are therefore no longer
    at issue, and CREDO raises no argument on appeal challenging the
    information requests contained in the 2013 NSLs.
    22            IN RE NATIONAL SECURITY LETTER
    While this appeal was pending, the FBI closed the
    investigation underlying the 2011 NSL to CREDO.
    Following the Termination Procedures adopted as required by
    the 2015 amendments, the FBI determined that continued
    nondisclosure was no longer necessary and so notified
    CREDO in writing. According to the FBI’s letter to CREDO,
    CREDO may now disclose “[t]he fact that [CREDO] received
    the NSL on a certain date” and “[w]hether or not [CREDO]
    provided responsive information to the FBI pursuant to the
    NSL.” However, “the nondisclosure requirement remains in
    place for any information regarding the customer account(s)
    for which information was sought, as well as any other
    information that could be used to identify the subscriber(s)
    for the customer account(s).”13
    The FBI also closed the investigation underlying one of
    the 2012 NSLs issued to CloudFlare. Following the
    Termination Procedures, the FBI determined that continued
    nondisclosure was no longer necessary and provided
    CloudFlare written notice to that effect. According to the
    FBI’s letter to CloudFlare, CloudFlare may now disclose the
    “[t]he fact that [CloudFlare] received the NSL on a certain
    date”; “[t]he customer account(s) for which information was
    sought”; and “[w]hether or not [CloudFlare] provided
    responsive information to the FBI pursuant to the NSL.”14
    13
    The nondisclosure requirement also remains in place for the name
    and contact information of the FBI Special Agent identified in the NSL.
    14
    As with the 2011 NSL to CREDO, the nondisclosure requirement
    remains in place for the name and contact information of the FBI Special
    Agent identified in the first 2012 NSL to CloudFlare.
    IN RE NATIONAL SECURITY LETTER                           23
    The nondisclosure requirement contained in the second 2012
    NSL to CloudFlare remains in full effect.15
    In sum, CREDO is now subject to a nondisclosure
    requirement “for any information regarding the customer
    account(s) for which information was sought, as well as any
    other information that could be used to identify the
    subscriber(s) for the customer account(s)” under the 2011
    NSL. CloudFlare is subject to a nondisclosure requirement
    only as to one of the 2012 NSLs.16
    III
    We begin our constitutional analysis by analyzing
    whether this appeal raises a facial challenge or an as-applied
    challenge to the NSL law. “A facial challenge is an attack on
    a statute itself as opposed to a particular application.” City of
    Los Angeles v. Patel, 
    135 S. Ct. 2443
    , 2449 (2015). By
    contrast, “[a]n as-applied challenge contends that the law is
    unconstitutional as applied to the litigant’s particular speech
    activity, even though the law may be capable of valid
    application to others.” Foti v. City of Menlo Park, 
    146 F.3d 629
    , 635 (9th Cir. 1998). The recipients assert that the
    nondisclosure requirement of § 2709(c) prevents them from
    speaking about matters of public policy and engaging in the
    political process, but do not argue that the NSL law can never
    be constitutionally applied in any context. Accordingly, we
    15
    Because CloudFlare identified itself not only as the recipient of one
    of the 2012 NSLs but also as challenging two NSLs before us, the FBI
    determined that CloudFlare may be publicly identified.
    16
    On appeal, CREDO and CloudFlare raise the same arguments.
    Therefore, we refer to the appellants together as the “recipients.”
    24           IN RE NATIONAL SECURITY LETTER
    analyze the recipients’ challenge as an as-applied challenge.
    Cf. Members of the City Council v. Taxpayers for Vincent,
    
    466 U.S. 789
    , 802–03 (1984) (concluding that the plaintiff’s
    challenge to an ordinance was an as-applied challenge
    because the plaintiffs acknowledged that the statute could be
    validly applied in other cases).
    “[C]onstitutional questions of fact (such as whether
    certain restrictions create a ‘severe burden’ on an individual’s
    First Amendment rights) are reviewed de novo.” Prete v.
    Bradbury, 
    438 F.3d 949
    , 960 (9th Cir. 2006) (emphasis
    omitted). We also review legal conclusions de novo. 
    Id.
    IV
    The First Amendment provides that “Congress shall make
    no law . . . abridging the freedom of speech, or of the press.”
    U.S. Const. amend. I. Despite the breadth of this language,
    the Supreme Court has concluded that some restrictions on
    speech are constitutional, provided they survive the
    appropriate level of scrutiny. When the government restricts
    speech based on its content, a court will subject the restriction
    to strict scrutiny. See Reed v. Town of Gilbert, 
    135 S. Ct. 2218
    , 2226 (2015); United States v. Playboy Entm’t Grp.,
    Inc., 
    529 U.S. 803
    , 813 (2000). Under strict scrutiny,
    restrictions “may be justified only if the government proves
    that they are narrowly tailored to serve compelling state
    interests.” Reed, 
    135 S. Ct. at 2226
    . If the governmental
    restriction on speech is content neutral, a court will uphold it
    if it furthers “an important or substantial governmental
    interest unrelated to the suppression of free speech, provided
    the incidental restrictions did not burden substantially more
    speech than is necessary to further those interests.” Turner
    IN RE NATIONAL SECURITY LETTER                         25
    Broad. Sys., Inc. v. FCC, 
    520 U.S. 180
    , 186 (1997) (internal
    quotation marks omitted).17
    Even if the government has constitutional authority to
    impose a particular content-based restriction on speech, the
    government does not have unfettered freedom to implement
    such a restriction through “a system of prior administrative
    restraints.” Bantam Books, Inc. v. Sullivan, 
    372 U.S. 58
    , 70
    (1963); see also 
    id. at 66
     (“[A] State is not free to adopt
    whatever procedures it pleases for dealing with obscenity . . .
    without regard to the possible consequences for
    constitutionally protected speech.” (quoting Marcus v. Search
    Warrants, 
    367 U.S. 717
    , 730–31 (1961))). Rather, “a law
    subjecting the exercise of First Amendment freedoms to the
    prior restraint of a license” or other burden must itself pass
    constitutional muster. Shuttlesworth v. City of Birmingham,
    
    394 U.S. 147
    , 150–51 (1969). A system that gives public
    officials authority to regulate or prohibit an individual’s
    exercise of First Amendment rights based on the content of
    the individual’s speech must have “narrow, objective, and
    definite standards to guide the licensing authority,” 
    id. at 151
    ,
    and must have the “procedural safeguards that reduce the
    danger of suppressing constitutionally protected speech,” Se.
    Promotions, Ltd. v. Conrad, 
    420 U.S. 546
    , 559 (1975). These
    procedural safeguards are as follows: “(1) any restraint prior
    to judicial review can be imposed only for a specified brief
    period during which the status quo must be maintained;
    (2) expeditious judicial review of that decision must be
    17
    The government may also restrict the time, place, and manner of
    speech so long as it does not discriminate based on content and meets
    certain other criteria. See Consol. Edison Co. of N.Y., Inc. v. Pub. Serv.
    Comm’n, 
    447 U.S. 530
    , 536 (1980). This form of restriction is not at issue
    here.
    26          IN RE NATIONAL SECURITY LETTER
    available; and (3) the censor must bear the burden of going to
    court to suppress the speech and must bear the burden of
    proof once in court.” Thomas v. Chi. Park Dist., 
    534 U.S. 316
    , 321 (2002) (quoting FW/PBS v. City of Dallas, 
    493 U.S. 215
    , 227 (1990) (principal opinion of O’Connor, J.), and
    citing Freedman v. Maryland, 
    380 U.S. 51
    , 58–60 (1965)).
    The procedural requirements for systems imposing content-
    based restraints do not apply, however, to “a content-neutral
    permit scheme regulating speech in a public forum.” Id. at
    322.
    Accordingly, our analysis of § 2709(c)’s nondisclosure
    requirement proceeds in three steps. We must first determine
    whether the nondisclosure requirement is content based or
    content neutral. If the nondisclosure requirement is content
    based, we then consider whether it survives strict scrutiny.
    Finally, we must determine whether the nondisclosure
    requirement constitutes the type of restraint for which the
    procedural safeguards are required and, if so, whether it
    provides those safeguards.
    A
    We turn first to the question whether the nondisclosure
    requirement in § 2709(c) is content based or content neutral.
    A government’s restriction on “speech is content based if a
    law applies to particular speech because of the topic
    discussed or the idea or message expressed.” Reed, 
    135 S. Ct. at 2227
    . The first step in determining whether speech is
    content based is “to consider whether a regulation of speech
    ‘on its face’ draws distinctions based on the message a
    speaker conveys.” 
    Id.
     (quoting Sorrell v. IMS Health, Inc.,
    
    564 U.S. 552
    , 566 (2011)). Regulations draw such a
    distinction if they “target speech based on its communicative
    IN RE NATIONAL SECURITY LETTER                  27
    content,” id. at 2226, prohibit “public discussion of an entire
    topic,” id. at 2230 (quoting Consol. Edison Co. of N.Y. v. Pub.
    Serv. Comm’n of N.Y., 
    447 U.S. 530
    , 537 (1980)), or “single[]
    out specific subject matter for differential treatment,” 
    id.
    Thus, a regulation or law that restricts speech based on its
    topic, idea, message, or content is “content based” on its face,
    and is accordingly subject to strict scrutiny. If a court
    determines that the law is content based at this first step, the
    court need not “consider the government’s justifications or
    purposes” for enacting the regulation. Id. at 2227. “A law
    that is content based on its face is subject to strict scrutiny
    regardless of the government’s benign motive, content-
    neutral justification, or lack of animus toward the ideas
    contained in the regulated speech.” Id. at 2228 (internal
    quotation marks omitted). Only if a law is content neutral on
    its face should a court proceed to consider whether it is
    nevertheless a content-based regulation of speech because it
    “cannot be justified without reference to the content of the
    regulated speech, or [was] adopted by the government
    because of disagreement with the message [the speech]
    conveys.” Id. at 2227 (second alteration in original) (quoting
    Ward v. Rock Against Racism, 
    491 U.S. 781
    , 791 (1989))
    (internal quotation marks omitted).
    Applying this framework here, the nondisclosure
    requirement in § 2709(c) is content based on its face. By its
    terms, the nondisclosure requirement prohibits speech about
    one specific issue: the recipient may not “disclose to any
    person that the Federal Bureau of Investigation has sought or
    obtained access to information or records” by means of an
    NSL. See 
    18 U.S.C. § 2709
    (c). Such a restriction “target[s]
    speech based on its communicative content,” and restricts
    speech based on its “function or purpose.” Reed, 
    135 S. Ct. 28
              IN RE NATIONAL SECURITY LETTER
    at 2226–27. Given this conclusion, we need not proceed to
    the second step of the analysis, to determine whether the
    statute stifles views with which the government disagrees, see
    Ward, 
    491 U.S. at 791
    , or distinguishes among views about
    NSLs in deciding which speech is prohibited, see Turner
    Broad. Sys., Inc. v. FCC, 
    512 U.S. 622
    , 643 (1994). We
    conclude that the nondisclosure requirement is a content-
    based restriction.
    B
    Because we have determined that the restriction imposed
    by the nondisclosure requirement is content based, we turn to
    the Supreme Court’s strict scrutiny test for content-based
    restrictions on speech and ask whether the nondisclosure
    requirement permitted by § 2709(c) is narrowly tailored to
    serve a compelling state interest. Reed, 
    135 S. Ct. at 2226
    .
    As a threshold matter, we readily conclude that national
    security is a compelling government interest. Indeed, the
    Court has recognized that “[e]veryone agrees that the
    Government’s interest in combating terrorism is an urgent
    objective of the highest order.” Holder v. Humanitarian Law
    Project, 
    561 U.S. 1
    , 28 (2010). “It is ‘obvious and
    unarguable’ that no governmental interest is more compelling
    than the security of the Nation.” Haig v. Agee, 
    453 U.S. 280
    ,
    307 (1981) (quoting Aptheker v. Sec’y of State, 
    378 U.S. 500
    ,
    509 (1964)). By the same token, keeping sensitive
    information confidential in order to protect national security
    is a compelling government interest. See Dep’t of the Navy
    v. Egan, 
    484 U.S. 518
    , 527 (1988) (recognizing “the
    Government’s compelling interest in withholding national
    security information from unauthorized persons in the course
    of executive business” (internal quotation marks omitted));
    IN RE NATIONAL SECURITY LETTER                   29
    Snepp v. United States, 
    444 U.S. 507
    , 509 n.3 (1980) (“The
    Government has a compelling interest in protecting both the
    secrecy of information important to our national security and
    the appearance of confidentiality so essential to the effective
    operation of our foreign intelligence service.”). Here, the
    recipients do not dispute that the nondisclosure requirement
    directly serves the compelling state interest of national
    security: a nondisclosure requirement may be imposed only
    if one of the four enumerated harms “may result” absent
    nondisclosure. 
    18 U.S.C. § 2709
    (c)(1)(B).
    We therefore turn to the question whether the
    nondisclosure requirement in § 2709(c) is narrowly tailored.
    A restriction is not narrowly tailored “if less restrictive
    alternatives would be at least as effective in achieving the
    legitimate purpose that the statute was enacted to serve.”
    Reno v. Am. Civil Liberties Union, 
    521 U.S. 844
    , 874 (1997).
    Nevertheless, strict scrutiny requires that a content-based
    restriction “be narrowly tailored, not that it be ‘perfectly
    tailored.’” Williams-Yulee v. Fla. Bar, 
    135 S. Ct. 1656
    , 1671
    (2015) (quoting Burson v. Freeman, 
    504 U.S. 191
    , 209
    (1992)). Accordingly, a reviewing court should “decline to
    wade into th[e] swamp” of calibrating the individual
    mechanisms of a restriction. 
    Id.
     Ultimately, the Supreme
    Court has emphasized that strict scrutiny is not “fatal in fact.”
    Id. at 1666 (quoting Adarand Constructors, Inc. v. Pena,
    
    515 U.S. 200
    , 237 (1995)).
    The recipients argue that the 2015 NSL law is not
    narrowly tailored for two reasons. First, they claim it is
    overinclusive because it prevents disclosure of the bare fact
    of receiving the NSL as well as disclosure of the NSL’s
    content. Second, they claim it is not the least restrictive
    alternative because it allows the government to prohibit
    30             IN RE NATIONAL SECURITY LETTER
    disclosure indefinitely. Because the recipients claim that the
    NSL law constitutes a system of prior restraints, they also
    argue that the statute fails to provide the government with
    “narrow, objective, and definite standards” to guide its
    decision to prohibit disclosure. Shuttlesworth, 
    394 U.S. at
    150–51. We consider each argument in turn.
    1
    The recipients contend that the NSL law is not narrowly
    tailored because, as they interpret the NSL law, it prevents
    disclosures that are not harmful to national security and
    therefore does not further the government’s compelling
    interest. Specifically, the recipients argue that a recipient
    who has millions of customers could disclose the receipt of a
    single NSL without impeding national security interests.
    Second, the recipients argue that 
    18 U.S.C. § 2709
    (c)(2)(A)(iii), authorizing the FBI director or a
    designee to permit a recipient to make disclosures to
    additional persons, is an insufficient remedy for
    overinclusiveness because it gives the FBI total discretion to
    determine who may receive disclosures and does not require
    the FBI to engage in any consideration of a narrower
    nondisclosure requirement. Further, they argue that the
    judicial review provisions are insufficient to render the
    nondisclosure requirement narrowly tailored because,
    according to the recipients, a court’s subsequent narrowing of
    the nondisclosure requirement is irrelevant to the narrow
    tailoring analysis.18 Finally, they argue that 50 U.S.C.
    18
    The recipients also argue that the judicial review provisions are
    insufficient to address overinclusiveness because they are triggered only
    if a recipient challenges the nondisclosure order. We reject this argument
    IN RE NATIONAL SECURITY LETTER                         31
    § 1874, allowing for disclosure of aggregate data in various
    ranges, does not remedy the overinclusiveness of the
    nondisclosure requirement, because it arbitrarily
    differentiates between recipients who receive fewer than 500
    NSLs (who must include “0” in the lowest reporting band)
    from recipients who receive more than 500 NSLs. As a
    result, the recipients argue, recipients who receive fewer than
    500 NSLs are forced to make the false assertion that they
    might have received no NSLs.
    These arguments are based on the erroneous assumption
    that, in order to determine whether the NSL law is narrowly
    tailored, we must analyze each provision of the NSL law
    individually to ensure that each is itself narrowly tailored.
    This granular focus cannot be reconciled with the Supreme
    Court’s direction that narrow tailoring is not perfect tailoring.
    Williams-Yulee, 
    135 S. Ct. at 1671
    . Analyzing the statute as
    a whole, we reject the recipients’ arguments.
    The statute does not authorize the government to issue a
    nondisclosure requirement based on a mere possibility of
    harm; rather, a high ranking official must certify that
    disclosure “may result” in one of four enumerated harms,
    
    18 U.S.C. § 2709
    (c)(1)(B), meaning that there is “some
    reasonable likelihood” that harm will result from the
    disclosure. John Doe, Inc. v. Mukasey, 
    549 F.3d at 875
    . The
    government must engage in an individualized analysis of each
    recipient when making such a certification, which may
    include consideration of the size of the recipient’s customer
    base. If disclosure of the receipt of an NSL would not result
    in one of the enumerated harms because the recipient has
    because judicial review is available to every recipient and, as we discuss
    in Section V, the burden of obtaining review is de minimis.
    32          IN RE NATIONAL SECURITY LETTER
    millions of customers, the government could not properly
    make the certification required under the statute. Moreover,
    under those circumstances, the reviewing court would lack a
    good reason to believe that continued nondisclosure as to the
    fact of receipt is necessary. 
    18 U.S.C. § 3511
    (b)(3).
    Similarly, the new 2015 provision allowing disclosures to
    “other persons as permitted by the [FBI] Director” or the
    Director’s designee, 
    id.
     § 2709(c)(2)(A)(iii), merely provides
    the FBI with more flexibility to tailor the scope of the
    nondisclosure provision. We reject the recipients’ argument
    that this provision gives the government unfettered discretion
    and therefore creates a system of insufficiently cabined prior
    restraints. Even if the NSL law is determined to be the type
    of regulation for which procedural safeguards are required
    (see section V, infra), the law as a whole imposes narrow,
    objective, and definite standards on the government before it
    can issue a nondisclosure requirement, see id. § 2709(c); cf.
    Shuttlesworth, 
    394 U.S. at 150
     (considering a city ordinance
    that “conferred upon the [governmental authority] virtually
    unbridled and absolute power to prohibit” certain forms of
    speech). The fact that the statute also gives the FBI Director
    or a designee discretion to make additional exceptions to the
    nondisclosure requirement does not lessen the adequacy of
    the clear standards imposed on these officials before issuing
    a nondisclosure requirement in the first place.
    Nor are we persuaded by the recipients’ attempt to
    divorce the nondisclosure requirement from the availability
    of judicial review, which authorizes a court to modify a
    nondisclosure order with “conditions appropriate to the
    circumstances,” 
    18 U.S.C. § 3511
    (b)(1)(C). The availability
    of judicial review is a component of each nondisclosure
    requirement issued under § 2709(c); each recipient is
    IN RE NATIONAL SECURITY LETTER                  33
    informed of the availability of judicial review in the NSL
    itself. See id. § 2709(d); see also id. § 3511(a), (b)(1). The
    fact that some, or even most, NSL recipients do not seek
    judicial review of a nondisclosure requirement is not relevant
    to the question whether the NSL law is narrowly tailored on
    its face.
    Finally, the provision allowing a speaker to disclose its
    status as a recipient of a specified range of NSLs, see
    
    50 U.S.C. § 1874
    , does not affect our conclusion that the NSL
    statute is narrowly tailored. To the contrary, the provisions
    allow recipients to make additional specified disclosures
    regarding the receipt of the nondisclosure requirements in
    certain circumstances without obtaining government or court
    approval. We decline the recipients’ invitation to quibble
    with the particular ranges selected by Congress. See
    Williams-Yulee, 
    135 S. Ct. at 1671
    .
    2
    The recipients next argue that the nondisclosure
    requirement in § 2709(c) is not narrowly tailored because it
    authorizes restraints of overly long or indefinite duration and
    so is not the least restrictive means of achieving the
    government’s compelling interest. We agree that in order to
    ensure that the nondisclosure requirement is narrowly tailored
    to serve the government’s compelling interest in national
    security, a nondisclosure requirement must terminate when it
    no longer serves such a purpose. But the 2015 amendments
    to the NSL law largely address this concern by requiring the
    Attorney General to promulgate the Termination Procedures,
    34            IN RE NATIONAL SECURITY LETTER
    which are now in effect.19 Under these procedures, the FBI
    is required to reassess the necessity of nondisclosure on two
    occasions: three years after an investigation is begun and
    upon the closing of an investigation. This mandated
    reassessment reduces the likelihood that an overly long
    nondisclosure requirement will be imposed. For example, if
    the need for nondisclosure arises because of the ongoing
    status of an investigation, nondisclosure would no longer be
    required following the closure of the investigation, and the
    requirement would terminate pursuant to the Termination
    Procedures.20
    Nonetheless, the Termination Procedures do not resolve
    the duration issue entirely. For example, where the
    government determines that the nondisclosure requirement
    remains necessary at the close of an investigation, the
    Termination Procedures do not require any subsequent
    review. Similarly, if an investigation extends for many years,
    the Termination Procedures do not provide for any interim
    review between the third-year anniversary and the date the
    investigation closes.
    But the Termination Procedures are supplemented by the
    availability of judicial review. When judicial review is
    sought, either through a recipient’s own petition or on the
    government’s application following notice from a recipient,
    19
    The recipients do not challenge the Termination Procedures
    themselves.
    20
    In this case, the Termination Procedures worked as intended:
    nondisclosure requirements in two of the NSLs at issue in this case were
    reduced in scope or entirely removed pursuant to the Termination
    Procedures, as the FBI determined upon the completion of the relevant
    investigations that continued nondisclosure was not required.
    IN RE NATIONAL SECURITY LETTER                   35
    the reviewing court “shall . . . issue a nondisclosure order that
    includes conditions appropriate to the circumstances.”
    
    18 U.S.C. § 3511
    (b)(1)(C). A court’s order enforcing an
    administrative subpoena must be within constitutional
    bounds. See Brock v. Local 375, Plumbers Int’l Union of
    Am., 
    860 F.2d 346
    , 349–50 (9th Cir. 1988). Therefore, a
    reviewing court would be bound to ensure that the
    nondisclosure requirement does not remain in place longer
    than is necessary to serve the government’s compelling
    interest. See Playboy Entm’t, 
    529 U.S. at 813
    .
    Moreover, as part of the judicial review process, a court
    may require the government to justify the continued necessity
    of nondisclosure on a periodic, ongoing basis, or may
    terminate the nondisclosure requirement entirely if the
    government cannot certify that one of the four enumerated
    harms may occur. See In re Nat’l Sec. Letters, No. 16-518,
    
    2016 WL 7017215
    , at *4 (D.D.C. July 25, 2016) (imposing
    periodic review every three years); see also In re Nat’l Sec.
    Letter, 
    165 F. Supp. 3d 352
    , 356 (D. Md. 2015) (imposing
    periodic review every 180 days until issuance of the
    Termination Procedures). Accordingly, any constitutional
    concerns regarding the duration of the nondisclosure
    requirement can be addressed by a reviewing court’s
    determination that periodic review should be one of the
    “conditions appropriate to the circumstances.” See 
    18 U.S.C. § 3511
    (b)(1)(C).
    We therefore conclude that the 2015 NSL law is narrowly
    tailored to serve a compelling government interest, both as to
    inclusiveness and duration. Accordingly, we hold that the
    36              IN RE NATIONAL SECURITY LETTER
    nondisclosure requirement in § 2709(c) survives strict
    scrutiny.21
    V
    Having determined that the First Amendment does not
    prevent the government from restricting the information
    subject to nondisclosure under the NSL law, we next consider
    the recipients’ argument that the nondisclosure requirement
    in § 2709(c) is the sort of content-based restriction on speech
    which must have the procedural safeguards identified by the
    Supreme Court in Freedman v. Maryland, 
    380 U.S. 51
    .
    The recipients argue that the NSL law’s nondisclosure
    requirement is such a restriction because it is a content-based
    rule that “forbid[s] certain communications when issued in
    21
    The recipients argue that the NSL law should be held to a higher
    standard than strict scrutiny. According to the recipients, a content-based
    restriction imposed by a system of prior restraint is permissible only if
    (1) the harm to the governmental interest is highly likely to occur; (2) the
    harm will be irreparable; (3) no alternative exists for preventing the harm;
    and (4) the restriction will actually prevent the harm. This argument is
    meritless. No Supreme Court or Ninth Circuit opinion has articulated such
    a test, nor do the three cases cited by the recipients support it. The brief
    per curiam opinion in New York Times Co. v. United States (Pentagon
    Papers) did not specify a test that should be applied to prior restraints. See
    
    403 U.S. 713
    , 714 (1971). Further, neither Nebraska Press Ass’n v.
    Stuart, 
    427 U.S. 541
     (1976), nor Levine v. U.S. District Court, 
    764 F.2d 590
     (9th Cir. 1985), required the government to show that harm to a
    government interest (i.e., protecting a criminal defendant’s Sixth
    Amendment rights) was highly likely to occur or that no alternative to a
    restraining order existed. Nor did either case suggest that a pretrial
    restraint is invalid unless it is certain to prevent the harm at issue. Rather,
    consistent with the application of strict scrutiny, these opinions considered
    the availability of less restrictive alternatives to a restraining order. See
    Nebraska Press, 427 U.S. at 563–64; Levine, 
    764 F.2d at
    599–601.
    IN RE NATIONAL SECURITY LETTER                  37
    advance of the time that such communications are to occur.”
    Alexander v. United States, 
    509 U.S. 544
    , 550 (1993). In the
    absence of such a restriction, the recipients argue, they would
    have the opportunity to disclose the receipt of an NSL,
    subject to subsequent judicial review.
    This argument is not entirely persuasive. As the Second
    Circuit noted, § 2709(c) limits certain speech in advance but
    “is not a typical example” of a regulation for which
    procedural safeguards are required. John Doe, Inc. v.
    Mukasey, 
    549 F.3d at 876
    . The Supreme Court has generally
    focused on two types of government schemes requiring
    safeguards: censorship schemes and licensing schemes. The
    Court has long held that schemes requiring a putative speaker
    to submit proposed speech to a governmental body, which is
    then “empowered to determine whether the applicant should
    be granted permission — in effect, a license or permit — on
    the basis of its review of the content of the proposed” speech,
    Se. Promotions, 
    420 U.S. at 554
    , “avoids constitutional
    infirmity only if it takes place under procedural safeguards
    designed to obviate the dangers of a censorship system,”
    Freedman, 
    380 U.S. at 58
    . The Court has applied this rule to
    censorship schemes requiring film exhibitors to obtain prior
    approval before showing a film, see 
    id.
     at 52–53, requiring
    producers to obtain permission to show theatrical productions
    in municipal theaters, Se. Promotions, 
    420 U.S. at 554
    ,
    allowing the postmaster to hold books sent through the mail
    pending a determination of obscenity, Blount v. Rizzi,
    
    400 U.S. 410
    , 413–15 (1971), and seizing materials brought
    into the United States pending an obscenity determination by
    customs agents, United States v. Thirty-Seven (37)
    Photographs, 
    402 U.S. 363
    , 365–66 (1971), among other
    systems of censorship. The need for procedural safeguards in
    these cases derived from the principle that “a free society
    38          IN RE NATIONAL SECURITY LETTER
    prefers to punish the few who abuse rights of speech after
    they break the law than to throttle them and all others
    beforehand.” Se. Promotions, 
    420 U.S. at 559
    . “[T]he line
    between legitimate and illegitimate speech is often so finely
    drawn that the risks of freewheeling censorship are
    formidable.” 
    Id.
    In later years, the Supreme Court has extended the
    applicability of Freedman, holding that government schemes
    for licensing constitutionally permissible speech or
    communicative conduct also require procedural safeguards.
    See Riley v. Nat’l Fed’n of the Blind of N.C., Inc., 
    487 U.S. 781
    , 802 (1988) (requiring procedural safeguards in
    government schemes for licensing professional fundraisers to
    solicit money); City of Littleton v. Z.J. Gifts D-4, L.L.C.,
    
    541 U.S. 774
    , 776, 780 (2004) (requiring procedural
    safeguards in government schemes for licensing adult
    entertainment businesses); see also FW/PBS, 
    493 U.S. at 220
    ,
    228–30 (principal opinion of O’Connor, J.) (same); Dream
    Palace v. County of Maricopa, 
    384 F.3d 990
    , 1001 (9th Cir.
    2004) (same). The safeguards required for licensing schemes
    are less extensive than those required in Freedman because
    they do “not present the grave dangers of a censorship
    system.” City of Littleton, 
    541 U.S. at 783
     (quoting FW/PBS,
    
    493 U.S. at 228
    ) (internal quotation marks omitted).
    The NSL law does not resemble these government
    censorship and licensing schemes. It neither requires a
    speaker to submit proposed speech for review and approval,
    nor does it require a speaker to obtain a license before
    engaging in business. Rather, the NSL law prohibits the
    disclosure of a single, specific piece of information that was
    generated by the government: the fact that the government
    has requested information to assist in an investigation
    IN RE NATIONAL SECURITY LETTER                 39
    addressing sensitive national security concerns, i.e., “to
    protect against international terrorism or clandestine
    intelligence activities.” 
    18 U.S.C. § 2709
    (b)(1). As the
    Second Circuit noted, “[u]nlike an exhibitor of movies,” the
    recipient of a nondisclosure requirement “did not intend to
    speak and was not subject to any administrative restraint on
    speaking prior to the Government’s issuance of an NSL.”
    John Doe, Inc. v. Mukasey, 
    549 F.3d at 880
     (emphasis
    added). And unlike the operator of an adult entertainment
    business, the recipient of a nondisclosure requirement does
    not operate an enterprise where receiving government
    approval under the licensing scheme at issue “is the key to
    [its] obtaining and maintaining a business.” FW/PBS,
    
    493 U.S. at 230
    .
    Rather than resembling a censorship or licensing scheme,
    the NSL law is more similar to governmental confidentiality
    requirements that have been upheld by the courts. See, e.g.,
    Butterworth v. Smith, 
    494 U.S. 624
    , 634–36 (1990)
    (upholding in part a law requiring witnesses to maintain the
    confidentiality of the grand jury process); Seattle Times Co.
    v. Rhinehart, 
    467 U.S. 20
    , 37 (1984) (upholding a restriction
    on disclosure of information obtained through pretrial
    discovery).     In Butterworth, for instance, the Court
    considered a Florida statute that “prohibit[ed] a grand jury
    witness from ever disclosing testimony which he gave before
    that body.” 
    494 U.S. at 626
    . While the statute could not
    constitutionally prohibit a witness from disclosing
    “information of which he was in possession before he
    testified before the grand jury,” the Court did not invalidate
    that “part of the Florida statute which prohibits the witness
    from disclosing the testimony of another witness.” 
    Id.
     at
    632–33.      Similarly, the only information subject to
    nondisclosure under § 2709(c) relate to the NSL and its
    40             IN RE NATIONAL SECURITY LETTER
    contents — information of which a recipient was not in
    possession prior to the NSL’s issuance. The Supreme Court
    has sometimes reviewed such governmental confidentiality
    restrictions under a framework akin to strict scrutiny,
    considering whether the state has the “highest form of state
    interest,” and the restriction is “necessary to further the state
    interests asserted.” Smith v. Daily Mail Publ’g Co., 
    443 U.S. 97
    , 102 (1979); see also United States v. Aguilar, 
    515 U.S. 593
    , 605–06 (1995). On other occasions, it has applied a test
    closer to intermediate scrutiny, see Rhinehart, 
    467 U.S. at
    32–34, in which it balanced the government’s interest against
    that of the speaker’s by considering factors such as whether
    the speaker obtained the confidential information from a
    government source and whether the speaker knew the
    information prior to the government action. Compare 
    id.
     at
    31–32 (noting that First Amendment concerns are lessened
    when the speaker learned the information only as “a matter of
    legislative grace” through a court’s discovery process), with
    Butterworth, 
    494 U.S. at 632
     (striking down a confidentiality
    restriction to the extent it restricted disclosure of information
    that was in the speaker’s possession prior to his grand jury
    testimony). But the Court has not held that these sorts of
    government confidentiality restrictions must have the sorts of
    procedural safeguards required for censorship and licensing
    schemes.22
    22
    Contrary to Chief Judge Murguia’s concurrence, the Supreme
    Court does not refer to every law that bars speech in advance of its
    occurrence as a prior restraint. Conc. at 45. The Supreme Court has
    upheld the governmental confidentiality requirements discussed above,
    and of course, many other opinions uphold laws barring future speech,
    see, e.g., Holder v. Humanitarian Law Project, 
    561 U.S. 1
    , 36 (2010)
    (upholding a law criminalizing communications that provide material
    support to a foreign terrorist organization); Rust v. Sullivan, 
    500 U.S. 173
    ,
    192–94 (1991) (upholding regulations barring certain federally funded
    IN RE NATIONAL SECURITY LETTER                        41
    We need not, however, resolve the question whether the
    NSL law must provide procedural safeguards, because the
    2015 NSL law in fact provides all of them. First, Freedman
    requires that “any restraint prior to judicial review can be
    imposed only for a specified brief period.” Thomas, 
    534 U.S. at 321
    . A speaker must “be assured, by statute or
    authoritative judicial construction, that the censor will, within
    a specified brief period, either issue a license or go to court.”
    Freedman, 
    380 U.S. at
    58–59. The 2015 NSL law readily
    provides this assurance: a recipient may immediately notify
    the government that it desires judicial review, and the
    recipient is guaranteed by statute that the government will
    “go to court” within 30 days of receiving notice by
    “apply[ing] for an order prohibiting the disclosure of the
    existence or contents” of the NSL at issue. 
    18 U.S.C. § 3511
    (b)(1)(B). This 30-day period is both “specified” and
    “brief.” See John Doe, Inc. v. Mukasey, 
    549 F.3d at 883
    (considering a “30-day period in which the Government
    considers whether to seek judicial review”); cf. Thirty-Seven
    (37) Photographs, 
    402 U.S. at
    370–74 (plurality opinion)
    (holding that a 14-day limit on the initiation of judicial
    proceedings was sufficient under Freedman). Accordingly,
    we reject the recipients’ argument that the 2015 NSL law fails
    to provide this first safeguard.
    Second, Freedman requires that “expeditious judicial
    review” must be available. Thomas, 
    534 U.S. at 321
    . The
    2015 NSL law’s direction to reviewing courts, that they
    “should rule expeditiously” on any petition by a recipient or
    facilities from advocating abortion as a method of family planning).
    Although these cases considered laws preventing speech in advance of its
    occurrence, Conc. at 45, the Supreme Court did not use the term “prior
    restraint” nor require the procedural safeguards set forth in Freedman.
    42          IN RE NATIONAL SECURITY LETTER
    application by the government regarding the validity of a
    nondisclosure order, 
    18 U.S.C. § 3511
    (b)(1)(C), provides this
    safeguard. The recipients contend that this directive is
    insufficient because Congress should have imposed a specific
    time limit. Again, we disagree. While neither party may
    control how quickly a case moves through a court’s docket,
    we “presume that courts are aware of the constitutional need
    to avoid undue delay result[ing] in the unconstitutional
    suppression of protected speech.” City of Littleton, 
    541 U.S. at 782
     (alteration in original) (internal quotation marks
    omitted); see also Dream Palace, 
    384 F.3d at 1003
     (referring
    to City of Littleton’s “presumption that . . . courts function
    quickly enough, and with enough solicitude for the First
    Amendment rights of [speakers]”). Neither Freedman nor
    any other Supreme Court decision requires that judicial
    review be completed in a specified time frame, such as the 60
    days suggested by the Second Circuit in John Doe, Inc. v.
    Mukasey, see 
    549 F.3d at 879
    . The courts’ duty to “exercise
    [their] powers wisely so as to avoid serious threats of delay-
    induced First Amendment harm,” City of Littleton, 
    541 U.S. at 782
    , assures us that judicial proceedings will move
    sufficiently rapidly to safeguard an NSL recipient’s First
    Amendment rights.
    Finally, Freedman requires that the government “bear the
    burden of going to court to suppress the speech” and “the
    burden of proof once in court.” Thomas, 
    534 U.S. at 321
    .
    The recipients argue that § 3511(b)(1)(B)’s notice procedure
    is insufficient because a nondisclosure requirement may
    remain in place without judicial review if the recipient does
    not notify the government that it wishes to have a court
    review the order and if the recipient fails to bring its own
    petition to modify or set aside the nondisclosure requirement.
    We reject this argument. Freedman focused on minimizing
    IN RE NATIONAL SECURITY LETTER                    43
    the burden to the film exhibitor to “seek judicial review” of
    the state’s denial of a license; it did not focus on which party
    bore the initial burden. 
    380 U.S. at
    58–59. Here, the burden
    on a recipient is de minimis, as the recipient may seek
    judicial review simply by notifying the government that it so
    desires. Freedman does not require that the government
    provide judicial review of confidentiality provisions for the
    benefit of individuals who do not wish to speak.
    The recipients further argue that the NSL law “does not
    sufficiently place the burden of proof on the government”
    because the “reason to believe” and “may result” standards
    are insufficiently stringent. We reject this argument, too. As
    the Second Circuit held, and as we have already discussed,
    the government must certify to the reviewing court and
    establish to the court’s satisfaction, that there is a good reason
    to believe that absent nondisclosure, one of the enumerated
    harms is reasonably likely to result. John Doe, Inc. v.
    Mukasey, 
    549 F.3d at 875
    . Since the government has
    prohibited the recipient from disclosing the fact that it has
    even received an NSL, certification and proof are required to
    impose a nondisclosure requirement on both the fact of
    receipt and the contents of the NSL. Because the government
    must sufficiently certify and establish that both disclosures
    would likely result in one of the four enumerated harms, these
    requirements place the burden of proof on the government
    and thereby provide Freedman’s third safeguard.
    Because the NSL law provides the three procedural
    safeguards set forth in Freedman, we reject the recipients’
    argument that the NSL law is an invalid prior restraint on
    Freedman grounds.
    44           IN RE NATIONAL SECURITY LETTER
    VI
    We conclude that § 2709(c)’s nondisclosure requirement
    imposes a content-based restriction that is subject to, and
    withstands, strict scrutiny. We further hold that, assuming
    the nondisclosure requirement is the type of prior restraint for
    which the Freedman procedural safeguards are required, the
    NSL law provides those safeguards. The nondisclosure
    requirement in the NSL law therefore does not run afoul of
    the First Amendment.
    AFFIRMED.
    MURGUIA, Chief Judge, concurring:
    I agree that the NSL law’s nondisclosure requirement—
    which prohibits an electronic communication service provider
    from disclosing that the Federal Bureau of Investigation has
    sought or obtained information from the provider pursuant to
    an administrative subpoena, 
    18 U.S.C. § 2709
    (c)(1)(A)—does
    not violate the First Amendment.            The law passes
    constitutional muster because it is narrowly tailored to serve
    compelling national security interests and because it provides
    the government “narrow, objective, and definite standards”
    which limit its ability to prohibit disclosure as well as
    sufficiently robust procedural safeguards, including prompt
    judicial review. See 
    id.
     § 2709(c)–(d); Shuttlesworth v. City
    of Birmingham, 
    394 U.S. 147
    , 150–51 (1969); Freedman v.
    Maryland, 
    380 U.S. 51
    , 58–60 (1965). I write separately,
    however, to clarify important doctrinal assumptions that
    underlie my concurrence and inform the opinion’s reasoning.
    IN RE NATIONAL SECURITY LETTER                  45
    First, I assume that the nondisclosure requirement is a
    prior restraint. I make this assumption because “[t]he term
    prior restraint is used ‘to describe administrative and judicial
    orders forbidding certain communications when issued in
    advance of the time that such communications are to occur.’”
    Alexander v. U.S., 
    509 U.S. 544
    , 550 (1993) (citation
    omitted). The opinion, as a general matter, embraces this
    assumption and never concludes otherwise. Op. at 44 (“We
    further hold that, assuming the nondisclosure requirement is
    the type of prior restraint for which the Freedman procedural
    safeguards are required, the NSL law provides those
    safeguards.”). Nevertheless, the opinion at times appears to
    back away from this underlying premise. For example, the
    opinion states that “[t]he NSL law does not resemble . . .
    government censorship and licensing schemes,” id. at 38,
    which are prior restraints, see, e.g., Se. Promotions, Ltd. v.
    Conrad, 
    420 U.S. 546
    , 559–60 (1975). Similarly, the opinion
    notes that “the NSL law is more similar to governmental
    confidentiality requirements,” Op. at 39, which are subject to
    varying standards of scrutiny and do not require the
    procedural safeguards that typically accompany prior
    restraints, see 
    id.
     at 39–40. This language is unnecessary to
    the decision and may lead to misinterpretation of the opinion.
    Second, when a statute constitutes a prior restraint, we
    apply a heavy presumption against its constitutionality. See
    Bantam Books, Inc. v. Sullivan, 
    372 U.S. 58
    , 70 (1963) (“Any
    system of prior restraints of expression comes to [court]
    bearing a heavy presumption against its constitutional
    validity.”). As such, the government “carries a heavy burden
    of showing justification for the imposition of such a
    restraint.” Org. for a Better Austin v. Keefe, 
    402 U.S. 415
    ,
    419 (1971). I apply this heavy presumption because I assume
    the nondisclosure requirement constitutes a prior restraint.
    46          IN RE NATIONAL SECURITY LETTER
    Here, the NSL law overcomes the presumption through its
    nondisclosure standards and procedural safeguards. See
    
    18 U.S.C. § 2709
    (c)–(d). Absent certain enumerated
    exceptions, the government may only prohibit disclosure if it
    certifies that disclosure may endanger national security;
    interfere with a criminal, counterterrorism, or
    counterintelligence investigation; interfere with diplomatic
    relations; or endanger the life or physical safety of a person.
    
    Id.
     § 2709(c)(1)–(2).        Furthermore, a nondisclosure
    requirement is subject to expeditious judicial review. See id.
    §§ 2709(d), 3511(b)(1)(C).
    In sum, I am satisfied that we have evaluated the NSL law
    under the applicable, exacting standards, and I am in
    agreement with the opinion that the law withstands
    constitutional scrutiny. I write separately merely to make
    explicit that our conclusions rest on the assumption that the
    NSL law’s nondisclosure requirement is a prior restraint of
    speech.