via @AntDerosa:

"To be clear, that was only an audit spanning 12 months, May 2011 to May 2012. There may have been more violations by NSA before and after.

Also, this audit only covers NSA’s Fort Meade headquarters and other facilities in the Washington area."