Who profits from a body?

Intelligence tradecraft has always separated a witting source from an unwitting one. A person can supply information without knowing who receives it, or that anyone does. What changed is scale, and it required nobody's cooperation. American law enforcement agencies buy location data that phones emit continuously. The Electronic Frontier Foundation's investigation into Fog Data Science documented a company selling local police searchable access to billions of location signals harvested from ordinary apps, at prices small departments could afford. Babel Street's Locate X offered comparable capability, and EPIC obtained records of Customs and Border Protection's use of it. The mechanism is commercial: brokers buy from the advertising ecosystem and agencies buy from brokers. No warrant is involved because no compulsion is involved. The result is a population of unwitting sources. A person carrying a phone generates a record of where they went, who they were near and for how long, and that record is purchasable. They were never approached, never recruited, and are never harassed — because harassment would defeat the purpose. The value of an unwitting asset lies precisely in their not knowing. What this does not describe is access to perception. No documented capability reads a person's eyesight, and the mechanism above does not require one. What people already emit is sufficient.

Amnesty International's 2023 report Automated Apartheid documented facial-recognition systems, Red Wolf and Blue Wolf among them, used to control Palestinian movement in the occupied territories, with residents describing repeated identification at checkpoints as a condition of ordinary life. Palestinians interviewed described the effect in consistent and non-technical terms: there was no space left in which to think privately. That effect is measurable, and it has been measured in the United States. Jonathon Penney, writing in the Berkeley Technology Law Journal in 2016, examined Wikipedia traffic to privacy-sensitive articles before and after June 2013, when the NSA and PRISM disclosures became public. He found a statistically significant immediate decline, with evidence that it persisted. People stopped looking things up. Nobody instructed them to. The migration of such tools is documented too. Julian Go, in the American Journal of Sociology, traces how instruments and doctrines developed for imperial control returned to domestic American policing; cell-site simulators reached local departments from military origins by the same route. The pattern is old enough to carry a name in the literature. So the question worth asking is not whether America has some particular system. It is narrower and answerable: given that capabilities move from conflict territory to domestic policin

Less than most people assume, and the gap is structural rather than criminal. HIPAA protects a setting, not a category of information. It binds health plans, clearinghouses and providers who bill electronically. It does not bind most of the places health information is now generated. That distinction is not academic. When the Federal Trade Commission acted against GoodRx in February 2023, it could not use HIPAA at all — it used the Health Breach Notification Rule, and part of its complaint was that GoodRx had falsely suggested to consumers that it complied with HIPAA. What GoodRx had actually done was compile lists of users who bought particular medications and upload their email addresses, phone numbers and mobile advertising identifiers to Facebook, Google, Criteo, Branch and Twilio, so those users could be advertised to on the basis of their prescriptions and health conditions. The penalty was $1.5 million. The FTC brought a comparable action against BetterHelp over mental-health questionnaire data shared with advertisers. Scale is the other half. In 2024 a ransomware attack on Change Healthcare, a UnitedHealth subsidiary that processes a large share of American medical claims, exposed the data of roughly 190 million people — the largest health-data breach in United States history, and not a break-in at a doctor's office but a failure at a clearing house most patients had ne

Surveillance aimed at one person is rarely confined to one person, and in at least one widely deployed technology the indiscriminacy is the design. A cell-site simulator, commonly called a Stingray, works by impersonating a mobile network tower. Phones in range cannot tell the difference, so they connect and identify themselves. That includes the phone the operator is looking for and every other phone nearby — neighbours, passers-by, people in adjacent flats, anyone in a hospital or a place of worship within the radius. The bystander collection is not an error; it is how the device locates the target at all. What surrounded that capability is documented too. The FBI required local police departments to sign non-disclosure agreements as a condition of acquiring the equipment, and the American Civil Liberties Union obtained and published them. Departments concealed the technology's use from defence lawyers and from judges, and in some cases prosecutors dropped charges rather than disclose in open court how a defendant had been found. The Pasco County programme shows the same shape without any exotic equipment: the people repeatedly visited were not only those on the list but the households around them — parents, siblings, grandparents cited for uncut grass and missing house numbers because someone under that roof had been designated. Whether or not a given system is aimed at one

Imagine the terms inverted: you are told whenever you are observed, harassment is a crime rather than a method, and law enforcement is paid for harm that did not happen rather than arrests that did. Now the hard case: someone on a registry is present where children are, and the system flags it in seconds rather than after a report — an automation raises it, a person reviews it, a person decides. The intervention is closer to social work than policing; the individual is steered away, no crime occurs, and a child goes home that afternoon never knowing there was an afternoon to survive. The family is told a harm was prevented, and invited to review the service. What they feel is relief so total it forecloses argument, and that is the finding: a system justified by the worst thing that could happen to your child cannot be argued with by anyone who loves a child. What that family feels is the finding. Relief so total that it forecloses argument, and then, for anyone who thinks about it later, the knowledge that a mind was read and a life rearranged before anything was done — and that they are glad. A system justified by the worst thing that could happen to your child cannot be argued with by anyone who loves a child. That makes the consent it collects the most powerful instrument in it, and the least examined.

A doorbell camera watches your street and answers to its manufacturer. You can look at what it recorded; you do not hold it, and you cannot say who else can. The proposal here is narrower than a privacy argument and harder to dismiss: give a citizen their own eyesight — one recording that belongs to the person the way a body camera belongs to an officer. The procurement record gives that proposal an uncomfortable shape. Amazon Web Services is the largest government cloud vendor in this register by a wide margin: $42.9bn across 27 awards, and 93 deployments in 21 of the 35 geographies tracked. Its GovCloud capability list includes Amazon Rekognition — face detection and comparison across image and video. The company that sells the doorbell also sells the platform. That is a statement about concentration, not a connection between the two, and nothing in this record shows one. What it does show is who has a column. Across 1,922 procurement entries, ten describe an individual. All ten are litigants.