ACLU Says Spy Law Still Needs Work