Keep data that could potentially contain details of US persons for up to five years;
Retain and make use of “inadvertently acquired” domestic communications if they contain usable intelligence, information on criminal activity, threat of harm to people or property, are encrypted, or are believed to contain any information relevant to cybersecurity;
Preserve “foreign intelligence information” contained within attorney-client communications;
Access the content of communications gathered from “U.S. based machine[s]” or phone numbers in order to establish if targets are located in the US, for the purposes of ceasing further surveillance.
Basically - collect on anyone and everyone - we’ll figure it out later!