By Malcolm Lee Kitchen III | Margin Of The Law

Republicans and Democrats both greenlit the machine. Now it runs 24 hours a day, on your data, and nobody is asking your permission.

You are being watched. Automated License Plate Readers scan your car as you drive through your own neighborhood. Postal workers photograph your mail before it reaches your door. Facial recognition systems process your face at airports before you board a plane. Your social media posts, your search history, your location data, the apps on your phone: all of it feeds a system that grows larger and more capable every year.

This is not a theory. It is documented, operating infrastructure.

Your information footprint is enormous. But the government’s appetite for collecting it is larger. Federal, state, and local agencies now track the who, what, when, where, and how of your private life with tools that did not exist twenty years ago and with legal authority that is vague by design. Most of it happens without a warrant. Most of it happens without your knowledge. Almost none of it happens with your consent.

The question is not whether the surveillance state exists. The question is what you are going to do now that you understand what it actually is.

How We Got Here

The foundation was poured after September 11, 2001. The intelligence failures that allowed those attacks to happen created a political atmosphere in which any surveillance authority could be justified under the banner of national security. Congress moved fast.

The USA PATRIOT Act passed with sweeping bipartisan support and handed the government broad powers over communications surveillance. The Bush administration then went further, circumventing Congress and the courts to build a mass data collection program targeting both international and domestic communications. The public did not learn the full scope of this for years.

Congress also created the Department of Homeland Security, merging 22 agencies into a single intelligence-sharing entity. DHS, the FBI, the NSA, and the Justice Department all expanded their surveillance capabilities in the years that followed. The organizing principle was simple: intelligence sharing is inherently good, so more sharing is always better. That principle has never been seriously challenged at the federal level.

Federal agencies are not working alone. DHS funds and supports a network of “fusion centers” that connect federal agents with state and local law enforcement to share information. Much of the intelligence passed through these centers is unverified. There is a documented history of abuse. Civil liberties organizations warned about this for years. Those warnings were largely ignored.

What began as a post-9/11 emergency response calcified into permanent policy. Temporary surveillance authorities became standing law. Emergency powers became bureaucratic routine. The bipartisan consensus that surveillance equals safety has driven the expansion of this apparatus regardless of which party held power.

This is not a Republican problem or a Democratic problem. The PATRIOT Act and its reauthorizations drew support from both sides of the aisle every single time. The surveillance state was built in bipartisan committee rooms, signed by presidents of both parties, and funded by Congresses that never seriously debated the constitutional consequences.

Just recently, Congress had the opportunity to reform the Foreign Intelligence Surveillance Act, known as FISA. This law authorizes warrantless collection of millions of Americans’ communications data without their knowledge or consent. Civil liberties advocates, constitutional scholars, and community organizations across the political spectrum pushed for reform. They presented evidence of abuse. They documented disproportionate targeting of minority communities. They made the constitutional case clearly.

Congress reauthorized FISA without any meaningful reforms.

The people who voted for reauthorization understood they were extending a surveillance authority with a documented history of abuse. They did it anyway. They were pressed by the intelligence community, pushed against a manufactured deadline, and they folded. Both parties. Again.

This is the pattern. It has repeated for twenty-five years. And it will keep repeating until the public makes the cost of inaction higher than the cost of reform.

What the System Actually Collects

Before you can demand change, you need to understand exactly what is being collected and how it is being used. The scope is broader than most people assume.

Facial recognition is one of the most aggressive tools in current use. The FBI runs a facial recognition system that can scan hundreds of millions of photographs on behalf of state and local law enforcement agencies across the country. In cities like New York, real-time facial recognition operates through networks of cameras that track your movement as you travel through public space. Those cameras are not distributed evenly. They are placed with concentration in communities of color.

This system can identify you, log your location, and connect that data to other records without you ever knowing it happened. No warrant. No notification. No opportunity to contest the information or how it is used.

DNA collection has expanded just as aggressively. The FBI holds DNA profiles on millions of individuals. A regulatory change expanded mandatory DNA collection from detained migrants and asylum seekers, including children as young as fourteen. The national database now holds DNA samples from approximately 21 million people. DNA is not like a license plate or a phone number. It reveals your family connections, your physical traits, and your medical vulnerabilities. It connects you to relatives who have never been accused of anything. In the wrong hands, inside or outside government, that information can be weaponized in ways that are difficult to reverse and nearly impossible to contain.

Your phone produces data that is equally intimate. Your app history reveals who you are close to. Your location history shows how often you visit a doctor and what kind of facility that doctor operates. Your movement patterns reveal your religious practices, your political activities, your personal relationships. Data brokers collect this information, aggregate tens of thousands of data points per individual, and sell detailed profiles to anyone who can pay.

This is where the data broker loophole becomes critical to understand. Law enforcement agencies, the NSA, and the Department of Defense do not always need a warrant to obtain your phone data. They can simply pay a third-party data broker for it. The data broker hands over the information. No judge signs off. No court reviews the request. The Fourth Amendment protection against unreasonable search and seizure does not apply because the government technically never searched your device. They just bought a copy of everything on it.

The secrecy surrounding these purchases is itself a problem. At the local level, data purchases rarely appear in public budget documents. Law enforcement agencies do not volunteer information about what they buy or from whom. At the federal level, data purchases can be hidden behind broad national security classifications, keeping them out of public view indefinitely. You are being surveilled in intimate detail, and you have no legal right to know how extensively that surveillance operates.

This is the opposite of what a constitutional republic requires. Government answers to the people. The people cannot hold government accountable for powers they cannot see.

Who Gets Targeted

The surveillance apparatus does not operate neutrally. The weight of it falls hardest on communities that were already targeted before the technology existed.

Communities of color face disproportionate surveillance at every level. The facial recognition cameras are concentrated in their neighborhoods. The fusion center intelligence is more likely to flag their associations and activities. The predictive policing tools trained on decades of biased enforcement data produce outputs that reflect those biases. The technology amplifies existing inequity rather than correcting for it.

This is documented. It is not an accusation without support. It is the pattern that civil liberties researchers have traced across multiple programs and multiple decades.

Historically marginalized communities carry additional risk. The data broker loophole has already been used to track Black Lives Matter protesters. Location data purchased from Muslim prayer apps and dating apps has been used to monitor Muslim communities. These are not hypothetical future abuses. They are abuses that already happened, documented by investigators and reported publicly, and Congress still voted to reauthorize the surveillance authorities that enabled them.

When the government knows who your friends are, where you worship, what organizations you support, and what medical care you seek, it holds leverage over you. That leverage does not need to be used explicitly to be effective. The awareness that surveillance is possible shapes behavior. People self-censor. They avoid associations. They modify their public conduct to reduce risk. This is the chilling effect that constitutional protections were designed to prevent.

An authoritarian government does not need to arrest everyone. It only needs people to believe that their actions are visible and their compliance is expected. A surveillance apparatus this comprehensive hands that tool to whoever holds power next.

The Specific Threats You Need to Understand Now

The overturning of Roe v. Wade created an immediate, concrete example of how this infrastructure can be turned against ordinary people seeking legal medical care.

In states that have criminalized abortion access, law enforcement agencies could purchase cell phone location data to identify people who travel from restricted states to states where abortion remains legal. This is not speculation about what might happen in some distant future. Investigators and legal analysts have traced the specific mechanisms by which this could work. The data is available. The purchase is legal. The only thing preventing it is the discretion of individual officials who may choose not to exercise that discretion.

Last year, documented reporting showed how digital data could be used to enforce laws targeting transgender individuals seeking gender affirming care. An investigation by Senator Ron Wyden’s office revealed that an anti-abortion organization tracked visits to nearly 600 Planned Parenthood locations across 48 states and shared that location data with one of the largest anti-abortion advertising campaigns in the country.

This is happening now. The infrastructure is in place. The purchases are legal. The only meaningful protection at this moment is political pressure, and that pressure is insufficient.

Congress dismissed the case for guardrails on data purchases during the FISA reform process. The window for that particular fight has closed. But the underlying question remains open: will the people represented by Congress demand accountability, or will this system continue to expand without constraint?

The Wrong Conversation

One reason the surveillance state keeps growing is that the public debate around it is consistently framed to favor expansion.

You have heard these arguments. If you have nothing to hide, you have nothing to fear. We must collect everything to remain safe. The choice is between liberty and security. Every one of these statements is constructed to foreclose the discussion before it begins.

The nothing to hide argument assumes that government surveillance is neutral and that the people operating it will always act in good faith. History does not support that assumption. The FBI surveilled civil rights leaders. The NSA collected data on millions of Americans in a program later ruled illegal. Fusion centers spread unverified intelligence about people who had committed no crime. Power gets abused. The historical record on this is not ambiguous.

The safety argument presents a false binary. Surveillance does not guarantee safety. Mass warrantless collection of communications data did not prevent major attacks. The intelligence failures that led to those attacks were not primarily failures of data volume. They were failures of analysis and information sharing within existing structures. Collecting more data from more innocent people does not fix that problem.

The liberty versus security framing is the most damaging because it sounds like a serious policy position. It is not. Security without liberty is not security. A government that can monitor every communication, track every movement, and build a detailed profile of every citizen is not protecting those citizens. It is building the infrastructure for control.

These arguments are not made in good faith. They are made to justify the expansion of power. Recognize them when you hear them.

What Constitutional Protection Actually Requires

The Fourth Amendment prohibits unreasonable searches and seizures. The government needs a warrant, based on probable cause, to search your home, your papers, your effects. The framers wrote this protection because they understood what government surveillance looks like in practice. They had lived under it.

The digital era has created gaps that the Fourth Amendment was not designed to address directly. The third-party doctrine, developed in an era of paper records and telephone companies, holds that information you share with a third party loses its Fourth Amendment protection. Applied to the modern data ecosystem, this means that nearly everything your phone generates falls outside constitutional protection because you technically “shared” it with app developers, wireless carriers, and data brokers.

This is a legal fiction that produces unconstitutional outcomes. The solution is legislative. Courts can and should reinterpret the third-party doctrine for the digital age, but Congress has the direct authority to pass laws that require warrants for government data purchases. That authority has not been used.

The data broker loophole exists because Congress chose not to close it. Fusion centers share unverified intelligence because Congress chose not to require verification standards. Facial recognition operates without warrant requirements because Congress chose not to impose them. These are policy choices. They can be reversed by the same process that created them.

This is where your role becomes concrete.

What Needs to Happen and Who Can Make It Happen

The surveillance state was built incrementally. Changing it requires the same sustained pressure over time. There is no single piece of legislation that fixes this. There is no election that resolves it automatically. This is a long engagement, and you need to understand what you are engaging with.

Federal legislation requiring warrants for government data purchases is achievable. Bills have been introduced. They have not passed because the votes were not there. The votes are not there because enough members of Congress have not been convinced that their constituents are paying attention. Show them you are paying attention.

FISA reform will come up again. The law requires reauthorization on a cycle. The next reauthorization fight is an opportunity. Organizations that track surveillance policy will be engaged. Follow their work. Understand the specific provisions at issue. Contact your representatives with specific demands, not general concerns. Specific demands are harder to dismiss.

State-level action is already happening. Several states have passed laws restricting or banning facial recognition by government agencies. Some have passed consumer data privacy legislation that creates at least partial protection against data broker sales. These efforts need support and they need to spread. Your state legislature is accessible in ways that Congress often is not. Local organizing on surveillance technology has produced results. It can produce more.

Demand transparency at the local level. Request public records on law enforcement data purchases in your jurisdiction. Most people will find that the records are incomplete or nonexistent. Document that. Bring it to local elected officials. Bring it to local journalists. Sunlight is the first tool.

Support the organizations doing this work. The ACLU, the Electronic Frontier Foundation, the Project on Government Oversight, and similar organizations have lawyers, researchers, and policy analysts tracking these issues full time. They need resources and they need public support to maintain political pressure.

Understand the technology being deployed in your community. Many municipalities adopt facial recognition, automated license plate readers, and predictive policing tools with minimal public debate. City council meetings, public comment periods, and local elections are the mechanisms for pushing back on these adoptions before they become established infrastructure.

The Data You Generate Is a Political Issue

Your personal data practices are not separate from the political question. The data broker ecosystem depends on the volume and granularity of data available for purchase. Reducing what is available reduces what can be sold to the government.

This does not mean you can opt out of surveillance entirely. You cannot. But you can understand what your devices are generating and make deliberate choices about it. Location services that run continuously on apps that do not need them produce location history that data brokers can purchase and sell. Review what your phone is collecting. Limit what you can limit. This is not a complete solution, but it is not meaningless.

Understand what data your health apps share. Understand what information period-tracking apps collect and with whom they share it. After the Dobbs decision, the potential for this data to be used against people seeking reproductive health care is not abstract. The risk is real and the mechanism is already in place.

Encrypted communication tools exist and are not difficult to use. Signal is a messaging application that provides end-to-end encryption and is used by journalists, lawyers, and security researchers. Using it does not make you a suspect. It makes your communications more resistant to bulk collection.

These steps are not paranoia. They are informed choices made in response to a documented threat.

The People Who Should Be Uncomfortable

The officials who voted to reauthorize FISA without reforms should face direct accountability for that vote. They know what they voted for. They know the documented history of abuse under the authorities they extended. They made a calculation that the political cost of voting no was higher than the political cost of voting yes. Change that calculation.

The agencies that operate fusion centers without meaningful oversight should face oversight hearings. The relevant committee chairs have the authority to demand answers and to put officials on record. When they do not exercise that authority, they share responsibility for what happens inside the system.

The data brokers who sell location data from prayer apps and period-tracking apps to government agencies are operating legally. That is the problem. Legal does not mean acceptable. The laws that make this legal were written by people you can vote for or against.

The technology companies that build facial recognition systems and sell them to law enforcement agencies without demanding use restrictions or oversight requirements are making a choice. They can make a different one. Public pressure, regulatory exposure, and demonstrated reputational cost can shift those choices.

Nobody in this system operates without accountability to something. The question is whether you are willing to apply pressure consistently enough to matter.

Where This Ends If Nothing Changes

The pace of technological development does not slow down while the political process catches up. Artificial intelligence tools for analyzing surveillance data are already in use and growing more capable. Predictive systems that flag individuals based on behavioral patterns are already deployed in some jurisdictions. The integration of facial recognition, location tracking, and financial data into unified profiles is technically possible and likely already happening in some programs.

What is hard to reverse now becomes impossible to reverse later. The infrastructure deepens with each year of unchecked expansion. The legal precedents that permit warrantless collection accumulate. The agencies that depend on surveillance funding grow larger and more entrenched. The political economy of the surveillance state reinforces itself.

The window for meaningful reform is open. It will not stay open indefinitely.

Bodies can be controlled when authorities know exactly where they are at all times. Organizers can be disrupted when their connections and planning are visible. Communities can be targeted when every member’s associations, beliefs, and vulnerabilities are already on file. If the surveillance apparatus reaches that level of completeness without meaningful guardrails, the constitutional republic you live in becomes something different in practice, regardless of what the law says on paper.

This is not a hypothetical future threat. It is the logical extension of a trajectory that has been running for twenty-five years with minimal resistance.

What You Do With This

The surveillance state was built by politicians making decisions they calculated their constituents would not pay attention to. They were right. Most people did not pay attention. Some people did, warned about the consequences, and were ignored.

The warnings were accurate. The consequences are here. The question is whether the next twenty-five years repeat the same pattern.

You have representatives at the federal, state, and local level. You have a vote. You have the ability to make noise in your community, to show up at public meetings, to make data requests, to support organizations doing this work, and to hold officials accountable by name for specific votes and specific decisions.

The surveillance state does not require your participation to operate. It operates on your data whether you engage politically or not. But it was built through political decisions and it can only be constrained through political action.

The choice is not between safety and liberty. It never was.

The choice is between a government that answers to you and one that watches you.

Those are not the same thing.

Margin of the Law publishes constitutional analysis, civic research, and legal education for people who want to understand the system they actually live in. Read the Full Constitutional Analysis Library at marginofthelaw.com.

For republication or citation, please credit this article with link attribution to marginofthelaw.com.

We Built a Surveillance State. What Can We Do About It Now?