[Jarwain]

I was under the impression a NSL could not force the recipient to do work to comply. For example, they could hand over information they currently have, but they cannot insert a backdoor/vulnerability to start collecting data they previously didn't.

[gcp]

They presumably have some short term logging. Collecting those over a longer period = tracking.