It finally admitted to buying bulk data on Americans from data brokers, in response to a query by Senator Weyden.
This is almost certainly illegal, although the NSA maintains that it is legal until it’s told otherwise.
This article has been indexed from Schneier on Security