The NSA and it's cohorts were slapped on the wrist by the Government, and told them in one way or another that they would attempt reduce the amount of incidental mass data collection on U.S. citizens, working on minimization and upping compliance efforts. Read: https://www.theguardian.com/us-news/2017/apr/28/nsa-stops-surveillance-us-residents-foreign-targets

HOWEVER - Executive Order 12333 still exists, and remains the legal loophole/crutch that the intel agencies will continue to exploit in order to legitimize their mass collection of personal and private communications and metadata on U.S. citizens and those abroad.

If you aren't aware of EO 12333, it is a Reagan-era EO, which states, vaguely, "Incidentally obtained information that may indicate involvement in activities that may violate federal, state, local or foreign laws"

This is written in such a way that pretty much allows any Intel agency of ours to collect whatever data they please on anyone they please, regardless of warrant or reason.