Like the PRISM program, the NSA’s post–September 11 efforts to obtain customer information voluntarily from the private sector raised a fundamental question: How can we fulfill our responsibility to customers while answering the call to protect the country?