PRISM itself isn't secret. It's a relatively benign programme that tracks a small number of foreigners (typically 300 per year, I think). It's the mechanism behind it that is secret. As far as I can work out, tens of thousands (some would say millions) of accounts are tracked each year and the data stored in data banks. This data is then minimized to provide the CIA with the information they want and to comply with US law.