The Patriot Act is a law. The buck stops at Congress. They passed it the first time. They reauthorized the parts of it that are still around the subsequent times. Trying to redirect the blame to the administration, which has, by the way, done plenty of things wrong, is a misunderstanding of the system and a distortion that does no one any favors. When we concentrate responsibility in the executive, we support the concentration of power in the executive, as well.
The Patriot Act is Congress's responsibility. And unless we send a strong signal as a nation, from sea to shining sea, to our representatives, that its powers are no longer acceptable (if, indeed, they ever were), nothing will change substantively. Congress is where the blame lies, no matter which administration the act was passed under or which administration it's being administered under now. Congress, Congress, Congress. They pass the laws, no matter whether or not the administration helps write them.