By Malcolm Lee Kitchen III | MK3 Law Group
(c) 2026 – All rights reserved.

You Are Not Being Watched. You Are Being Modeled.

There was a time when surveillance meant a guy in a trench coat parked across the street with a thermos and bad coffee.

That world is gone.

Today, surveillance is not a person. It is not a camera. It is not even a program. It is infrastructure. It is the operating layer beneath modern life, and it is running continuously whether you are paying attention to it or not.

Your face. Your phone. Your car. Your search history. Your location. Your patterns. Your habits. Your network. Your metadata.

All of it. All the time.

This is not a theory. This is not paranoia. This is the documented, commercially profitable, legally ambiguous reality of living in a connected society in the twenty-first century. The question is not whether it is happening. The question is whether you are going to treat it like it matters.

The Expansion That No One Voted For

Surveillance did not arrive in one visible, controversial moment. It came in layers, each one justified by something that sounded reasonable at the time.

National security. Crime prevention. Public safety. Convenience. Personalization.

Stack those justifications together and you get a system that sees everything but answers to almost nothing.

Facial recognition alone has gone from experimental technology to a multi-billion-dollar global industry. It is embedded in airports, retail stores, police departments, and the phone in your pocket. That is one piece. Add license plate readers, cell tower tracking, social media scraping, smart home devices, and AI-driven data aggregation, and you are no longer just being observed. You are being modeled.

The distinction matters. Observation records what you did. Modeling predicts what you will do.

That is the real shift, and it is the one that should concern you most. Artificial intelligence has converted raw behavioral data into forecasting systems. Your past actions are fed into algorithms that attempt to anticipate your future ones, your buying patterns, your travel, your political leanings, your risk profile. This is not science fiction. This is the current state of commercial and government data practice.

And the law has not caught up.

A Legal Framework Built for a Different Era

The United States has no single comprehensive federal privacy law. What it has is a patchwork: sector-specific regulations, state-level statutes, agency policies that vary by department, and judicial interpretations of constitutional protections written before the internet existed.

Privacy law was historically built around what the government knew about you. The new problem is what the system can infer about you. Those are not the same thing, and the gap between them is where surveillance systems operate with the most freedom.

Some of these systems function under legal assumptions that are decades out of date. Others operate in gray zones with minimal oversight. Some operate with almost no clear accountability structure at all. States are passing new laws regulating biometric data and consumer privacy, but enforcement is inconsistent, and the technology evolves faster than any legislative session.

That gap is not an accident. That gap is an opportunity, and it is being used.

Facial Recognition: Where Anonymity Ended

If you want to understand what has actually changed about privacy, start with facial recognition. Because it eliminated something that people took for granted without ever having to articulate it: the right to exist in public without being identified at scale.

Being in public always meant being seen. It never meant being catalogued.

Facial recognition changed that. It enables real-time identification, retrospective tracking across historical footage, and cross-referencing across multiple databases simultaneously. It is being used by law enforcement. It is also being used by private companies for customer analytics, loss prevention, and identity verification, frequently without meaningful consent and sometimes without users knowing it is happening at all.

Here is the part that makes this different from every other data privacy issue: you cannot change your face.

A compromised password gets reset. Exposed financial data triggers new account numbers. Biometric data, once collected, cannot be revoked. It belongs to you in the most literal sense, and once it is in a system, your relationship to that system is permanent.

A U.S. Government Accountability Office review found that multiple federal agencies were already using facial recognition, often relying on third-party systems, often without consistent internal tracking of how or how often those tools were being deployed. The federal government, in other words, does not have a complete picture of its own surveillance capacity. That is not oversight. That is institutional drift operating inside a power structure with no clear ceiling.

Recent reporting documented federal agents using facial recognition tools in public settings, scanning individuals without consent, with data retained for decades. You can be scanned, potentially misidentified, and entered into a federal database without any knowledge that it happened. No notification. No recourse. No record you can access.

The Private Sector Is Not the Alternative. It Is the Other Half of the Problem.

If government surveillance is concerning, the private sector should be treated with equal suspicion, because the two are not separate systems operating in parallel. They are increasingly interconnected.

Companies do not just collect data. They buy it, sell it, aggregate it, model it, and feed it back into systems that shape what you see, what you are offered, and sometimes what you believe. Facial recognition, behavioral tracking, and data profiling are not side effects of the modern digital economy. They are core business functions.

The legal system is still arguing about where the line is. Meanwhile, the data economy operates at scale.

The consent mechanisms in place are not functioning as consent. Clicking accept on a cookie banner is not an informed decision. Agreeing to terms of service that run to forty pages of legal language is not meaningful agreement. Real consent requires understanding, genuine choice, and viable alternatives. Surveillance systems embedded in public infrastructure or essential services offer none of those.

Even in schools, new laws are now mandating explicit consent before biometric data can be collected from students because it was not happening before. That tells you exactly how seriously the default has treated individual rights.

Normalization Is the Mechanism

The most effective thing surveillance has done is not expand. It is normalize.

Cameras on every corner become unremarkable. Devices that listen in every room become convenient. Data collection baked into every app becomes the cost of participation. And slowly, across years and updates and terms-of-service revisions, expectations shift.

Privacy stops being a default condition and becomes something individuals have to actively fight to maintain. That is a fundamental reversal of how constitutional protections were originally conceived. Rights are not supposed to require constant defense against the systems created to protect them.

The argument you have heard, probably more than once, is this: if you have nothing to hide, you have nothing to fear.

That line is not just wrong. It is deliberately designed to reframe the conversation. It repositions privacy as the refuge of the guilty rather than the foundation of a free society. Privacy is not about concealing wrongdoing. It is about personal autonomy. It is about the freedom to think, associate, and dissent without those activities being permanently recorded and potentially used against you. It is about protection from the misuse of power, and misuse of power is not hypothetical. It is historical fact.

Once surveillance infrastructure is built, it does not shrink. It expands. Always.

Imperfect Systems With Real Consequences

Surveillance systems are not just powerful. They are imperfect, and the consequences of their errors are not abstract.

Facial recognition has documented accuracy problems, documented bias issues, and documented failures of contextual interpretation. When these systems are used in law enforcement or high-stakes decision-making, a technical error is not a minor inconvenience. It is a wrongful accusation. It is an arrest. It is years of reputational damage attached to a name that appeared in the wrong database at the wrong time.

And once your data is in the system, removal is not straightforward. The infrastructure is not designed for correction. It is designed for retention.

What Is Coming and Why It Requires a Position Now

The next phase of surveillance is not reactive. It is integrated. Smart cities. Connected vehicles. AI-driven monitoring. Predictive policing. These systems feed into each other, and the combined picture they produce is more complete than any single component.

Globally, governments and institutions are working to build regulatory frameworks, but even the most well-intentioned regulation is struggling to match the pace of technological development. The result is a system that is highly capable, poorly understood, and lightly regulated, and the gap between capability and accountability keeps widening.

This is forcing a redefinition of privacy itself. The old model, privacy as physical space, privacy as secrecy, does not translate to the current environment. The new model has to be built around data control, identity protection, and the right to resist profiling. And right now, individuals are losing ground in that redefinition. Not because they chose to, but because the system expanded faster than the protections around it were designed to reach.

The Actual Question

Surveillance systems are not going away. That argument is over.

The argument that is still open, and still worth having, is this: who controls these systems, and who controls the data they produce.

That is where power lives now. Not exclusively in government. Not exclusively in corporations. In the intersection of both, where accountability is most diffuse and oversight is least consistent.

Unchecked systems do not correct themselves. They do not reach a natural limit and pull back. They get entrenched, they get expanded, and they get defended by the institutions that benefit from them.

The question is not whether surveillance is part of modern life. It is. The question is whether the people subject to it are going to demand accountability for how it is used, or whether normalization will do its work quietly until the question no longer feels worth asking.

That is the turning point. And it is right now.

Resources:

Home

https://www.stopspying.org

https://www.eff.org

© 2026 – MK3 Law Group
For republication or citation, please credit this article with link attribution to marginofthelaw.com/.