I think a previous law allows them to demand that hardware or software developers (people or companies) modify their products to aid in intercepting communications. Theoretically, this could even be by request of foreign countries with targets in foreign countries.