At least six times the cases were reported to the Justice Department for possible prosecution, Ellard's letter said. In some cases, U.S. prosecutors declined to take action but in nearly every case the employees were allowed to retire without punishment. In one case, a worker was suspended without pay then retired; in another case, a worker's promotion was cancelled; in two cases, military employees suffered a reduction in rank, extra duty and brief reduction in salary for two months.
Public concerns about how telephone and Internet surveillance data is handled by the NSA have intensified in the wake of leaks about the agency's programs by former contract employee Edward Snowden. With the Senate readying to consider new limits on the NSA's spying programs, national security officials have sought to boost confidence in their procedures. Senior officials have said they moved quickly to report and correct internal problems that led to the NSA's accidental collection of 56,000 emails and other communications by Americans, and they insisted that willful abuse of surveillance data by officials is almost non-existent.
(Read more: Facebook fears prompt 'virtual identity suicides')
Grassley, who had asked Ellard last month to provide more information about the 12 violations, urged robust oversight of the secret programs. "We shouldn't tolerate even one misuse of this program," he said.
Several cases clearly showed government officials using the surveillance system to probe for information about spouses or paramours. During a 2011 polygraph test, an official acknowledged tapping into surveillance data about his foreign girlfriend's telephone number in 2004. The official also tried to retrieve data about his own phone but was prevented because internal mechanisms prevented queries on domestic phone numbers without authorization. The matter was referred to the Justice Department. The official retired in 2012 before internal disciplinary action could be taken.
In another case, the foreign girlfriend of a U.S official reported her suspicions that the official was listening to her telephone calls. An internal investigation found that the official had made internal surveillance queries on the phones of nine foreign women without authorization and had at times listened in on some phone conversations. The same official also collected data on a U.S. person's phone.
(Read more: EU threatens to stop sharing terrorist data with US)
The case was referred to prosecutors and the official resigned before internal discipline could be imposed.
—By the Associated Press