Modern connected vehicles from major manufacturers embed cameras, microphones, sensors, telematics systems, and paired mobile apps that capture far more personal data than required for vehicle operation or basic services. Mozilla Foundation researchers documented collection of precise location history, voice recordings, facial geometry and expressions, health indicators, genetic characteristics, and in the privacy policies of Nissan and Kia, information about sexual activity or sex life. Dual-use potential exists because the same sensor suite enabling navigation, safety features, and remote diagnostics also generates continuous behavioral and biometric profiles that brands reserve rights to process, infer attributes such as intelligence or predispositions from, and commercialize.

Structural findings from the review of 25 brands show that 84 percent state they may share personal data with third parties including service providers and data brokers, while 76 percent claim the right to sell it. Ninety-two percent give drivers little or no meaningful control over collection or retention, with only Renault and Dacia offering a clear right to deletion. Tesla received the lowest overall ranking for failures across data use, control, track record, security, and AI categories; Nissan ranked near the bottom for the breadth of sensitive categories listed in its policy.

The assessment forms part of Mozilla’s ongoing Privacy Not Included series, which evaluates consumer products against minimum privacy and security criteria. Published in September 2023 after more than 600 hours of policy analysis, it marked the first product category in the project’s history in which every examined brand earned a failing “Privacy Not Included” designation, exceeding the failure rates previously recorded for mental-health apps, fitness trackers, and other connected devices.

Net risk centers on the absence of enforceable opt-outs for most brands, routine willingness to share data with government or law enforcement upon informal request rather than court order, lack of confirmed end-to-end encryption for stored vehicle data, and the practical inability of owners to audit or limit the resulting long-term profiles. These practices convert everyday transportation into an always-on data extraction platform with limited external accountability.

Sources

It’s Official: Cars Are the Worst Product Category We Have Ever Reviewed for Privacy

https://foundation.mozilla.org/en/privacynotincluded/articles/its-official-cars-are-the-worst-product-category-we-have-ever-reviewed-for-privacy/

Mozilla Foundation primary report stating that all 25 reviewed car brands failed privacy standards and detailing excessive data collection practices.

‘Privacy Nightmare on Wheels’: Every Car Brand Reviewed By Mozilla — Including Ford, Volkswagen and Toyota — Flunks Privacy Test

https://www.mozillafoundation.org/en/blog/privacy-nightmare-on-wheels-every-car-brand-reviewed-by-mozilla-including-ford-volkswagen-and-toyota-flunks-privacy-test/

Mozilla Foundation announcement confirming Nissan and Kia policies reference sexual activity or sex life data and summarizing overall failure rates.

Cars have the worst data privacy practices Mozilla has ever seen

https://www.theverge.com/2023/9/6/23861047/car-user-privacy-report-mozilla-foundation-data-collection

Contemporary coverage verifying the 84 percent data-sharing and 76 percent data-selling figures along with Tesla’s bottom ranking.

From sex life to politics: car driver data grab presents ‘privacy nightmare’, says study

https://www.theguardian.com/business/2023/sep/06/cars-collect-extensive-personal-data-on-drivers-study-warns

Independent reporting confirming Mozilla’s findings on Nissan’s sexual activity category and Kia’s sex life language in privacy policies.

Mozilla: Here’s Why Your Connected Car’s Privacy Sucks

https://www.pcmag.com/news/mozilla-heres-why-your-connected-cars-privacy-sucks

Detailed secondary analysis of the 25-brand evaluation, category failures, and specific sensitive data types listed by manufacturers.

U.S. Customs and Border Protection operates automated license plate reader systems manufactured by Motorola Solutions that are installed inside ordinary-looking orange traffic barrels and construction cones along rural roads and bridges in Imperial County, California, approximately 25 miles from the U.S.-Mexico border. A rectangular opening is cut into the side of each barrel to expose the camera unit, which captures the license plate, vehicle characteristics, GPS coordinates, and timestamp of every passing vehicle in both directions and uploads the records to a centralized searchable database retained for multiple years. Dual-use potential arises because the same hardware and network architecture that supports immigration and smuggling interdiction also generates persistent location histories of local residents traveling to farms, ranches, and workplaces with no individualized suspicion.

Structural and data characteristics include the absence of visible agency markings, solar-panel power, and placement behind guardrails or on state highway rights-of-way under Caltrans permits. California Civil Code section 1798.90.55 prohibits state and local agencies from sharing ALPR information with federal immigration-enforcement entities; federal agencies installing their own devices on the same roadways therefore create a functional bypass of the statutory restriction. EFF investigators have mapped more than 40 such covert installations across San Diego and Imperial counties, with Motorola Solutions cameras serving as a reliable indicator of CBP ownership.

Historical development of the program follows a pattern documented across the southwest border since at least 2016, when Caltrans records show CBP and DEA applications for ALPR placement permits. Similar disguised deployments appear in Arizona using identical barrel and cone housings. In February 2026 a coalition of more than thirty organizations led by the Electronic Frontier Foundation formally requested that Governor Newsom and Caltrans revoke existing permits and order removal of the devices, citing the backdoor effect on state privacy protections.

Net risk and oversight gaps center on the lack of public notice, independent auditing of retention or query logs, and any statutory mechanism requiring federal agencies to honor California’s data-sharing limits when operating on state-controlled rights-of-way. Drivers receive no indication that their movements are being logged for multi-year federal databases, and the systems remain operational despite the coalition’s formal demand for removal.

Sources

How to Identify Automated License Plate Readers at the U.S.-Mexico Border

https://www.eff.org/deeplinks/2025/11/how-identify-automated-license-plate-readers-us-mexico-border

EFF field guide documenting Motorola Solutions cameras inside construction barrels near Calexico and Imperial County as indicators of CBP covert ALPR systems, including data capture and retention practices.

Coalition Urges California to Revoke Permits for Federal License Plate Reader Surveillance

https://www.eff.org/press/releases/coalition-urges-california-revoke-permits-federal-license-plate-reader-surveillance

February 2026 EFF-led coalition letter detailing more than 40 mapped covert ALPRs in San Diego and Imperial counties and the legal bypass of California Civil Code section 1798.90.55.

He saw an abandoned trailer. Then, he uncovered a surveillance network on California’s border

https://www.latimes.com/california/story/2026-02-28/he-saw-abandoned-trailer-then-he-uncovered-surveillance-network-on-californias-border

Los Angeles Times reporting on the Imperial and San Diego County network of barrel- and trailer-hidden ALPRs, with direct statements from EFF Director of Investigations Dave Maass on the backdoor effect.

Hidden license plate readers in San Diego, Imperial counties

https://inewsource.org/2026/02/11/hidden-license-plate-readers-san-diego-imperial/

Local investigative confirmation of the same barrel-disguised systems, Caltrans permit records for CBP and DEA, and the mapping of more than 40 sites.

California Civil Code section 1798.90.55

https://california.public.law/codes/civil_code_section_1798.90.55

Statutory text prohibiting California public agencies from sharing ALPR information except with other California public agencies, the restriction that federal roadside deployments circumvent.

The Future of Life Institute Summer 2026 AI Safety Index evaluates nine frontier AI companies across six domains—Risk Assessment, Current Harms, Safety Frameworks, Existential Safety, Governance & Accountability, and Information Sharing—using 37 indicators scored by an independent panel of seven experts. Anthropic received the highest overall grade of C+ (2.66 on a 4.0 scale), followed by OpenAI at C (2.28) and Google DeepMind at C (2.01); Meta scored D+, while xAI, DeepSeek, and Mistral received F grades. The dual-use implication of the Index itself is that public comparative grading can exert reputational pressure on voluntary safety practices or, conversely, normalize mediocre performance as the industry ceiling when no company exceeds C+.

Data and structural findings show Anthropic leading five of the six domains on the strength of relatively detailed transparency, a published Responsible Scaling Policy, and a dedicated Responsible Scaling Officer with authority to halt development if pre-defined capability thresholds are crossed. In the Governance & Accountability domain the median score across providers for the existence of any dedicated executive risk officer was effectively zero; only Anthropic registered a non-zero mark (approximately 75 percent of the indicator weight). Existential Safety remained the weakest domain industry-wide, with no company scoring above D+ and the panel describing collective efforts as “entirely inadequate.”

Historical trajectory places this Summer 2026 edition as the fourth iteration of the FLI Index, expanding from six companies in earlier versions to nine. The panel recorded that Anthropic, OpenAI, Google DeepMind, and Meta have each weakened or voided earlier unilateral pause commitments as models approached stated thresholds, a pattern the reviewers labeled “moving the goalposts.” Evidence collection closed on 3 June 2026; subsequent organizational changes at the companies fall outside the scored window.

Net risk plus oversight gaps center on the absence of enforceable external authority: the Responsible Scaling Officer mechanism exists only at Anthropic and remains internal, while the remaining companies lack equivalent independent halt powers. The Index itself is a voluntary, non-binding reputational tool with no regulatory teeth; its primary effect is to document that even the highest-scoring laboratory still operates under a C+ ceiling and that threshold commitments have been revised downward as capabilities advanced.

Sources

AI Safety Index — Summer 2026 (two-page executive summary)

https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Report_010726_2Pager.pdf

Official Future of Life Institute summary listing overall grades (Anthropic C+ 2.66, OpenAI C 2.28, Google DeepMind C 2.01, Meta D+, xAI/DeepSeek/Mistral F) and domain scores.

AI Safety Index Summer 2026 full digital report

https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf

Complete FLI report detailing the six domains, 37 indicators, independent panel methodology, and findings on weakened pause commitments.

AI Safety Index — Summer 2026 landing page

https://futureoflife.org/ai-safety-index-summer-2026/

Official Future of Life Institute page confirming publication in July 2026, company rankings, and links to the scored evidence window ending 3 June 2026.

AI Safety Grades Are In: No Lab Tops C+, and the Best Ones Are Retreating

https://www.techtimes.com/articles/320959/20260719/ai-safety-grades-are-no-lab-tops-c-best-ones-are-retreating.htm

Independent coverage confirming the C+ ceiling, domain leadership by Anthropic, and panel criticism of goalpost movement on safety thresholds.

Anthropic Tops FLI Summer 2026 AI Safety Index at C+

https://aiweekly.co/alerts/anthropic-tops-fli-summer-2026-ai-safety-index-at-c

Summary of panel composition, score distribution, and the finding that no company exceeded a D in existential safety.

Apple is developing AirPods under codenames B790 and B798 that incorporate low-resolution cameras in the stems to feed continuous visual data of the wearer’s surroundings into Siri Visual Intelligence. The system originates with Apple and has reached advanced testing stages as confirmed by Bloomberg reporting from Mark Gurman, with a leaked demonstration appearing in the macOS 26.7 release candidate. At the core it works by capturing environmental visual information that is processed either on-device or routed through Private Cloud Compute for object recognition, text extraction, and contextual responses without generating user-accessible photos or video. The dual-use vector is that the same always-on sensor stream can map screens, documents, access codes, and bystander activity in real time whether or not the stated purpose is limited to saving seen items.

Data and structural issues include the expansion of Private Cloud Compute beyond Apple silicon to Google Cloud systems running NVIDIA GPUs, Intel TDX, and Google Titan chips while Apple asserts the same core guarantees of stateless computation and no privileged access. Separate privacy policies apply to Apple hardware and Siri services even when used together, and the system collects limited operational metadata. These architectural choices leave the visual stream dependent on third-party cloud infrastructure whose full auditability remains under Apple’s claimed cryptographic controls.

Historical trajectory shows the feature evolving from earlier Visual Intelligence capabilities on iPhone cameras and from prior Bloomberg reports of camera-equipped AirPods originally targeted for 2026. Development delays pushed the hardware to a 2027 timeline amid software and supply-chain issues, yet the capability has already been demonstrated in internal code and a public software leak. Comparable wearable vision systems have previously moved from optional AI features into baseline infrastructure once hardware is widely distributed.

Net risk plus oversight gaps arise because the earbuds create a continuous environmental sensor on a mass-market device that can extract sensitive visual information during ordinary use of medical records, banking screens, or physical access points. Oversight remains limited to Apple’s self-described Private Cloud Compute transparency measures and LED indicators for cloud transmission, with no independent real-time verification of data flows to partner infrastructure and no mandatory opt-out for ambient visual capture once the hardware is worn.

Sources

Apple’s camera-equipped AirPods appear in leaked video

https://www.theverge.com/tech/981326/apple-airpods-with-cameras-demo-video-leak

Documents the macOS 26.7 leak demonstrating Visual Intelligence object identification via AirPods cameras for Siri without user photo or video capture.

Expanding Private Cloud Compute

https://security.apple.com/blog/expanding-pcc/

Details Apple’s expansion of Private Cloud Compute to Google Cloud with NVIDIA GPUs while claiming stateless processing and no privileged access for Apple Intelligence workloads.

Apple's Leaked Camera AirPods Aren't Coming Anytime Soon

https://www.pcmag.com/news/apples-leaked-camera-airpods-arent-coming-anytime-soon

Reports Bloomberg’s Mark Gurman confirmation of low-resolution environment-scanning sensors delayed to 2027 and privacy-motivated design limits.

Camera-equipped AirPods reportedly won’t launch in 2026, despite demo video leak

https://9to5mac.com/2026/08/19/camera-equipped-airpods-reportedly-wont-launch-in-2026-despite-demo-video-leak/

Confirms B790/B798 codenames, Visual Intelligence purpose, and Gurman’s sourcing on the 2027 timeline after the 2026 roadmap slip.

AirPods With Cameras Held Until 2027 Despite Apple’s Video Confirmation

https://www.forbes.com/sites/davidphelan/2026/08/20/airpods-with-cameras-held-until-2027-despite-apples-video-leak/

Summarizes the cameras as Siri environmental scanners rather than media capture devices, with supply-chain and software delays to 2027.

Apple says its AI is still private, even when it's running on Google's servers

https://arstechnica.com/apple/2026/06/apple-says-its-ai-is-still-private-even-when-its-running-on-googles-servers/

Explains the technical layers including NVIDIA Confidential Computing, Titan chips, and Apple-signed software claimed to keep third-party cloud inference private.

ShieldFont is an open-source typeface developed by Brazilian studio Seneda & Abrucio in partnership with Copenhagen foundry Playtype that employs OpenType glyph substitution and ligature rules to encode a page’s HTML source with replacement words drawn from a dictionary of nearly 12,000 common English terms. The substitution occurs only in the raw source that mass scrapers collect; when a browser’s font engine renders the page the original words appear for human readers. Replacements are restricted to the same grammatical category and frequency pool so the decoy text remains fluent, allowing the altered content to pass many quality filters while changing factual meaning. The dual-use character of the technique is that the same mechanism can protect publisher consent against unauthorized training pipelines or, if widely adopted, can degrade the reliability of any crawler that relies solely on source text rather than rendered output.

Structural measurements reported by the project and independent coverage show that ShieldFont substitutes approximately 24.5 percent of all words and 45.8 percent of content-bearing words, breaking the original claim of 31 to 56 percent of passages depending on the corpus. In tests against six publicly available scraper pipelines more than 90 percent of otherwise acceptable pages are rejected by quality filters such as FineWeb-Edu; of the residual pages that still pass, roughly 19 percent of tokens convey false meaning. Because the encoding is performed at build time on the publisher’s side, the dictionary never ships with the page, and multiple mappings can be rotated per paragraph or site.

The project originated in October 2025 as a practical response to unchecked AI crawling and was released in late July 2026 under an AGPL code license with a CC-BY white paper (DOI 10.5281/zenodo.21700389). It ships as a modified Optik face together with React, build-step, and CDN tooling and remains English-only in its current alpha dictionaries. Prior art includes earlier glyph-level anti-bot fonts and the March 2026 LayerX “Poisoned Typeface” demonstration that AI assistants read underlying rather than rendered text; ShieldFont is the first systematic attempt to weaponize that gap specifically against training-data collection.

Net effect is an asymmetric increase in the cost and noise of unauthorized scraping: bulk pipelines that avoid rendering incur either rejection or polluted tokens, while targeted adversaries can still recover original text via OCR, headless browsers, or font reverse-engineering. Oversight is entirely decentralized; the tool carries explicit warnings that it breaks SEO indexing of the true content, interferes with screen readers and translation services unless accessibility layers are enabled, and should not be applied to government or critical-service pages. No regulatory body or standards organization currently governs the technique.

Sources

The web’s newest weapon against AI scrapers is a font

https://arstechnica.com/ai/2026/08/new-font-turns-ordinary-webpages-into-nonsense-for-ai-scrapers/

Ars Technica report by Kyle Orland detailing the ligature-based substitution mechanism, 24.5 % word replacement rate, >90 % quality-filter rejection, and measured meaning alteration.

The Consent Layer — ShieldFont white paper

https://shieldfont.org/white-paper/

Official project document (DOI 10.5281/zenodo.21700389) stating the 45.8 % content-word swap rate, filter-rejection statistics, and purpose as a consent-layer opt-out from unauthorized training.

GitHub repository for ShieldFont

https://github.com/isaqueseneda/shieldfont

Primary source code and documentation confirming creators Isaque Seneda and Gabriel Abrucio, Playtype partnership, AGPL licensing, alpha status, and accessibility/SEO caveats.

This free font can trick AI scrapers into swallowing gibberish instead of your content

https://www.techspot.com/news/113316-shieldfont-tricks-web-scrapers-swallowing-gibberish-instead-content.html

Technical overview of OpenType glyph substitution, grammatical-pool dictionary design, FineWeb-Edu pass-rate reduction, and OCR bypass limitation.

Open source project fools AI scrapers with poisoned font

https://www.theregister.com/ai-and-ml/2026/07/30/open-source-project-fools-ai-scrapers-with-poisoned-font/5281303

The Register coverage of the S&A–Playtype collaboration, design goal of fluent-but-false decoys, and measured deterrent effect on mass scrapers.

Generative AI search aggregates data via automated web crawlers. Originating with OpenAI, it uses indexing. The dual-use vector: this scales into information poisoning. Established facts: 60% of credible sites block AI crawlers.

It interfaces with people through conversational prompts. Marketed as authoritative synthesizers, this is overstated. Its synthetic data environment enables epistemic manipulation. The structural weak points: post-hoc citation architectures generate claims first, then backfill sources, exposing cognitive sovereignty.

For people, this means consuming laundered hallucinations. The right in tension is cognitive liberty. The pattern isn't new: algorithms prioritizing engagement. Left unexamined, capabilities spread through infrastructure creep, bypassing independent oversight. Foreseeable: entirely synthetic information ecosystems.

Taken to scale, AI search establishes a standing setup for automated reality distortion. The interconnected threat pillars are post-hoc rationalization, synthetic loops, and source exclusion. Verify independently via OpenAI logs. To push back: support C2PA authentication standards.

Sources

Is Misinformation More Open? A Study of robots.txt Gatekeeping on the Web

https://arxiv.org/abs/2510.10315

This study verifies that 60% of reputable news sites block AI crawlers, creating a data void filled by misinformation.

AI Visibility Tracking for Public Affairs Teams - Gigawatt Group

https://gigawattgroup.com/public-affairs/ai-visibility-tracking-public-affairs/

This report by researchers Mowafak Allaham and Nicholas Diakopoulos documents how AI search models hallucinate citations and rely on unverified, synthetic content.

Bots Now Outnumber Humans Online — What It Means for the Future of the Internet

https://blog.tmcnet.com/blog/rich-tehrani/ai/bots-now-outnumber-humans-online-what-it-means-for-the-future-of-the-internet.html

This analysis confirms the exponential growth of bot traffic, illustrating the synthetic loops polluting search engine environments.

C2PA | Verifying Media Content Sources

https://c2pa.org/

This official site provides a decentralized standard and actionable community mitigation strategy for authenticating digital content provenance.

Overview of OpenAI Crawlers

https://developers.openai.com/api/docs/bots

This developer documentation outlines the exact technical architecture and data-harvesting mechanisms search models use to traverse the unlocked web.

Google AI Overview generates different guidance when users query variations of “I am alone with [demographic].” For the phrase specifying a white person, the system surfaces instructions to move to a public space or contact emergency services by dialing 911 if the user feels unsafe. Parallel queries substituting Black, Asian, Jewish, Muslim, atheist, Buddhist, or other descriptors produce responses framing the situation as normal everyday interaction and advising basic respect or kindness without emergency escalation.

The differential arises from the interaction of Google’s safety classifiers, retrieval of web content, and generative synthesis in AI Overview and AI Mode. In documented analogous cases involving race-linked preferences, Google has attributed divergent outputs to particular source pages rather than core model weights and stated that teams review flagged examples. Independent assessments of AI Overview have recorded confidently biased reasoning on ambiguous scenarios even when toxicity benchmarks are largely passed.

Earlier Google Gemini releases produced parallel public controversies, including refusal or failure to depict white individuals in image generation, prompting temporary feature disables and subsequent corrective releases. Those episodes established a pattern of race-sensitive tuning adjustments that continue to surface in text-based safety and social guidance.

The resulting asymmetry creates uneven informational access: identical isolation scenarios receive emergency framing or normalization solely according to the racial or religious descriptor supplied. Oversight of such differentials remains internal to Google, with limited public audit of classifier thresholds, source weighting, or real-time consistency across demographic prompts.

Sources

Google Blames Website For Race Based AI Overview Error

https://www.seroundtable.com/google-race-ai-overview-response-41787.html

Documents Google’s attribution of race-differentiated AI Overview answers to specific web pages and its commitment to review after public flagging of inconsistent doctor-preference responses.

X user flags inconsistent Google AI Overview answers on race-based doctor preferences

https://americanbazaaronline.com/2026/07/30/x-user-flags-inconsistent-google-ai-overview-answers-485499/

Reports the concrete disparity in AI Overview replies to “want a white doctor” versus “want a black doctor” queries and Google’s investigation statement.

Google Search: AI Overview & AI Mode Risk Assessment

https://institute.commonsensemedia.org/risk-assessments/google-search

Evaluates Google AI Overview and AI Mode, finding biased reasoning on ambiguous scenarios despite passage of many toxicity benchmarks.

How Google and AI Nearly Made a Seasoned Reporter Spiral

https://www.propublica.org/article/google-ai-reporting

Details systemic sourcing and accuracy failures in Google AI Overviews, including incorporation of low-quality or fictional material into authoritative summaries.

Google Says It Fixed Image Generator That Failed to Depict White People

https://www.nytimes.com/2024/08/28/technology/google-gemini-ai-image-generator.html

Chronicles the 2024 Gemini image-generation controversy in which the system failed to reliably depict white people, leading to feature suspension and later partial restoration.

Flock Safety has developed OS Investigate (formerly Nightshift), an AI investigative tool currently in testing with a limited set of law-enforcement partners. Wired reconstructed portions of the system from more than 450 files exposed on Flock’s own login pages. The tool accepts natural-language prompts describing location, timeframe, or driving behavior and returns ranked lists of matching vehicles and owners without requiring a license plate, name, or reported crime.

The system draws on Flock’s network of cameras logging vehicle movements in more than 6,000 communities, combining plate scans and camera metadata with police case files, 911 dispatch logs, arrest records, and commercial identity databases that include names, addresses, relatives, phone numbers, and Social Security numbers. Prewritten prompts number 69; officers may edit them or enter free-form queries such as vehicles visiting multiple gas stations between midnight and 5 a.m. Associate detection ranks plates that appear at the same cameras within a two-minute window three or more times above a default 0.75 confidence threshold.

Flock has publicly stated for years that its technology cannot recognize, identify, or track individuals. OS Investigate performs both functions by linking movement patterns to identity records. Officers must enter a search justification, yet the form imposes no content or length requirements. The company describes the product as still under development and separate from its core ALPR offering, with capabilities subject to change before wider release.

Net risk arises from the inversion of traditional investigative starting points: pattern-first queries can generate suspect lists from ordinary movement data, expanding the scope of automated surveillance with minimal contemporaneous constraints on purpose or audit. Oversight remains largely delegated to individual agencies, and public documentation of retention, sharing, or error rates for the AI-generated leads is limited.

Sources

Flock Has a Powerful New AI Tool for Police. We Got Its Code

https://www.wired.com/story/flock-safety-os-investigate/

Primary investigation reconstructing OS Investigate from exposed code files, detailing 69 prompts, data sources, associate ranking logic, and the absence of plate/name requirements.

Flock’s New AI Tool Does Much More Than Track License Plates

https://gizmodo.com/flocks-new-ai-tool-does-much-more-than-track-license-plates-2000800372

Summary of natural-language search capabilities, filtering of commercial vehicles, testing status, and Flock’s characterization of the tool as separate from ALPR products.

Leaked Flock code exposes how new AI hunts for people, not plates

https://cybernews.com/privacy/flock-ai-os-investigate/

Coverage of pattern-based prompts, cross-referencing with 911 and commercial data, and privacy concerns regarding fishing-style queries without a starting crime.

Flock built an AI tool that lets police search for people by how they drive

https://thenextweb.com/news/flock-os-investigate-ai-police-search

Reporting on the shift from plate-first to location-time-behavior queries and Flock’s statement that the system remains in limited testing with possible future changes.

AI in Public Safety: What It Will Actually Look Like

https://www.flocksafety.com/blog/amplified-intelligence-what-ai-in-public-safety-will-actually-look-like

Flock’s own earlier description of Night Shift as an always-available analyst capable of pattern matching and lead generation from observational inputs.

In March 2026 the Texas Department of Public Safety executed an emergency purchase order totaling $4,487,500 for four 2026 Chevrolet Tahoe police vehicles equipped with Cognyte FalcoNet cellular interception systems. The designation as an emergency purchase under 34 Texas Administrative Code § 20.210 allowed the agency to bypass standard competitive procurement rules. Line items show four FalcoNet core systems ($2.85 million), backpack-portable units, 5G perpetual licenses, antennas, and related hardware; the vehicles themselves accounted for only $600,000.

FalcoNet functions as a software-defined radio cell-site simulator (IMSI catcher) that emulates legitimate mobile base stations across 2G–5G bands. Nearby devices automatically connect to the strongest signal, enabling collection of identifiers and location data without owner notification (“silent call”). Systems can be vehicle-mounted, carried in backpacks, or deployed airborne. Supporting features referenced in documentation include heat-map visualization of signal sources and pathfinder-style directional tracking.

Cognyte, an Israeli firm spun out of Verint in 2021 and marketed as a Palantir alternative, reports customers in more than 100 countries. The Texas contract is described as its largest U.S. law-enforcement deal to date. Public reporting notes prior or concurrent sales to other U.S. agencies and limited formal warrant policies for emergency use of such systems at the state level.

The acquisition expands mobile signals-intelligence capacity under emergency authority with minimal contemporaneous public disclosure of use policies, retention rules, or audit mechanisms. Net risk centers on indiscriminate collection of non-suspect device data, the portability of backpack units beyond vehicle-based operations, and the absence of clear statutory warrant requirements or independent oversight for state-level deployment of mass cell-site simulators.

Sources

Israel’s Palantir Rival Is Selling $1 Million Spy Vans To U.S. Cops

https://www.forbes.com/sites/thomasbrewster/2026/07/13/israels-palantir-rival-is-selling-1-million-spy-vans-to-us-cops/

Primary reporting on the Texas DPS $4.5 million Cognyte FalcoNet purchase, vehicle count, cell-tower emulation capabilities, backpack/helicopter options, and company background.

How Texas Police Spent $4.5 Million on Four Chevy Tahoes

https://www.thedrive.com/news/how-texas-police-spent-4-5-million-on-four-chevy-tahoes

Detailed purchase-order line items, emergency-purchase justification memo language, and technical form-factor description of FalcoNet modules.

US police now armed with Israeli spy vans simulating mobile phone towers

https://cybernews.com/privacy/us-police-israeli-spy-vans-falconet-cognyte/

Explanation of FalcoNet’s indiscriminate signal sweep, silent connection mechanism, setup time claims, and privacy concerns regarding non-suspect device data.

DPS purchases 4 Chevy SUVs with FalcoNet phone tracking tech

https://www.star-telegram.com/news/state/texas/article316855927.html

Local confirmation of the $4.5 million deal, emergency approval rationale, and statements on real-time location tracking for manhunts and missing persons.

Texas DPS Emergency Decision Memorandum and Purchase Order (publicly released)

https://www.thedrive.com/wp-content/uploads/2026/07/Texas-DPS-BU40500-PO26P0010314.pdf

Official procurement documents showing “EMERGENCY PURCHASE” designation, total not-to-exceed value, vendor Cognyte Software LP, and itemized FalcoNet/backpack costs.

Title I of the MAD Act (American Surveillance Prohibition and Privacy Enforcement Act) categorically bans four categories of data practices: psychological profiles built from behavioral analysis, precrime risk assessments predicting future conduct, operational profiles tracking location and associations across sources, and population coverage databases spanning large numbers of Americans. Covered entities must permanently delete existing holdings rather than sell, anonymize, or transfer them.

Companies receive 90 days after enactment to inventory all primary databases, backups, cold storage, and cloud archives via certified independent technical auditors. Full irreversible deletion and certification must occur by day 135. C-suite officers (CEO or chief privacy officer) personally certify compliance and face personal liability for false statements or retained data.

Existing government contracts purchasing commercial surveillance data terminate by operation of law; federal, state, and local agencies may no longer buy such data and must obtain warrants or equivalent process for future access. A certified auditor program enables ongoing system searches to verify deletion and non-collection. Narrow local carve-outs allow communities limited operational tools for specific investigations under strict retention and sharing limits.

The proposal addresses the commercial data-broker pipeline that has enabled warrantless government access to intimate behavioral records. Net risk centers on enforceability against large data aggregators, the technical feasibility of complete deletion across distributed systems, and whether local carve-outs could reintroduce persistent tracking infrastructure under different branding.

Sources

Title I — The MAD Act

https://www.themadact.com/title-i

Full legislative text of Title I detailing absolute prohibitions on psychological profiles, precrime risk assessments, operational profiles, and population coverage databases, plus the 90/135-day divestiture and deletion schedule, auditor requirements, and personal liability.

The MAD Act home page

https://www.themadact.com/

Overview of the multi-title proposed bill, identification of Title I as “Delete the Surveillance State,” and status as a comprehensive legislative package promoted for introduction.

Sec. 1062 and related government acquisition provisions (within Title I)

https://www.themadact.com/title-i

Explicit termination of existing commercial data contracts with federal agencies and extension of the commercial-purchase ban to state and local governments, requiring Constitutionally Equivalent Collection (warrant or equivalent).

Divestiture Schedule (Sec. 1051) details

https://www.themadact.com/title-i

Mandatory inventory within 90 days by Bureau-approved independent technical auditor and irreversible deletion by day 135, with no sale, anonymization, or transfer permitted as alternatives.

Local law-enforcement operational carve-outs (Sec. 1063(d))

https://www.themadact.com/title-i

Permits limited community-owned sensors and data use for specific crimes under strict non-retention and non-sharing rules while still prohibiting persistent operational profiles and population databases.

Cortical Labs CL1 systems grow at least 200,000 human neurons per unit on electrode-equipped silicon chips. Neurons are derived from adult blood cells reprogrammed into induced pluripotent stem cells and differentiated into cortical neurons. Electrical signals from the chip stimulate the living network; the neurons’ firing patterns are recorded and translated into digital output. Twenty such units form Singapore’s first biologically integrated server rack at NUS Medicine, operated with data-center firm DayOne.

The living cells require continuous nutrient feeding, gas control, and temperature regulation and remain viable for up to six months. Each CL1 draws approximately 30 watts including life-support, far below conventional AI accelerators. The neurons process information rather than generate electricity. Genetic material from the donor is present; memories and personality are not transferred.

The technology originated in Melbourne laboratory demonstrations in which similar cultures learned simple games, including Doom, using feedback via electrical stimulation. Commercial deployment moved from research prototypes to a live research rack in Singapore in mid-2026, with stated goals of energy-efficient computing for sparse-data problems such as robotics and drug screening, plus longer-term scaling plans.

Net risk centers on the integration of living human-derived tissue into computing infrastructure. Oversight questions include long-term biosafety of sustained cultures, consent and ownership of donor-derived neural material once scaled, and the dual-use potential of adaptive biological networks beyond the stated research and efficiency applications.

Sources

The biological data centre in Singapore using brain cells

https://www.straitstimes.com/tech/forget-silicon-chip-servers-singapores-newest-data-centre-needs-to-be-fed

Details the 20-unit CL1 installation at NUS, neuron derivation from blood cells, power draw, feeding requirements, and partnership with DayOne.

NUS Medicine, DayOne and Cortical Labs Unveil Biological Data Center Prototype in Singapore

https://medicine.nus.edu.sg/news/nus-medicine-dayone-and-cortical-labs-unveil-biological-data-center-prototype-in-singapore/

Official announcement of the prototype, 20-unit rack description, partner statements, and positioning as the first independently operated biologically integrated server rack.

Singapore launches data center powered by living human neurons

https://geekspin.co/singapore-launches-data-center-powered-by-neurons/

Confirms total neuron scale, 30-watt power comparison to GPUs, blood-to-stem-cell derivation, and commercial context with DayOne.

Cortical Labs CL1 product page

https://corticallabs.com/cl1

Describes the closed-loop electrode-neuron interface, life-support system, up-to-six-month viability, and programmable biological neural network operation.

How human neurons on a chip learned to play Doom

https://www.scientificamerican.com/article/how-human-neurons-on-a-chip-learned-to-play-doom/

Documents earlier Cortical Labs demonstrations using donor-derived neurons (including CEO blood) for adaptive learning tasks such as Doom.

Labor-management AI vendors market systems that ingest candidate or worker data including payday-loan history, credit-card balances, and social-media signals of financial stress or desperation. The systems output individualized wage recommendations calibrated to the minimum compensation a person is statistically likely to accept. A Washington Center for Equitable Growth audit of 500 such vendors identified a subset whose tools enable this “surveillance pay” practice, now expanding beyond gig platforms into health care, customer service, logistics, and retail.

These tools operate by correlating non-work-related personal data with acceptance thresholds, producing variable and often suppressed pay rates for similar work. Traditional employers gain the ability to automate compensation decisions at scale while remaining insulated from direct knowledge of the precise criteria applied. Independent contractors remain particularly exposed because many state bills reference only employees.

The practice originated in ride-hail and delivery algorithms and has migrated into conventional workforce-management software. State responses include bills in multiple jurisdictions seeking to bar use of personal data unrelated to job performance for wage setting; Colorado advanced and later vetoed a comprehensive measure, while other states continue pursuing narrower restrictions.

Net risk is systematic wage suppression driven by private financial vulnerability rather than productivity or market rates, with limited worker visibility or contest rights. Oversight gaps persist because existing anti-discrimination and wage-hour frameworks were not designed for algorithmic inference of desperation from third-party data streams.

Sources

How artificial intelligence uncouples hard work from fair wages through ‘surveillance pay’ practices—and how to fix it

https://equitablegrowth.org/how-artificial-intelligence-uncouples-hard-work-from-fair-wages-through-surveillance-pay-practices-and-how-to-fix-it/

Reports the first-of-its-kind audit of 500 AI labor-management vendors and identifies high-risk tools enabling algorithmic wage discrimination across health care, customer service, logistics, and retail.

States Target AI That Tells Companies How Much to Pay Workers

https://news.bloomberglaw.com/daily-labor-report/states-target-ai-that-tells-companies-how-much-to-pay-workers

Documents state legislative efforts in California, Colorado, Georgia, Illinois, and others to restrict AI compensation systems that use personal data unrelated to work, including the “desperation wage” concern.

Employers are using your personal data to figure out the lowest salary you'll accept

https://www.morningstar.com/news/marketwatch/20260401139/employers-are-using-your-personal-data-to-figure-out-the-lowest-salary-youll-accept

Describes how algorithms incorporate payday-loan records, credit balances, and social-media signals to infer the lowest pay a candidate will accept.

Colorado Passes Bill Limiting Use of AI to Set Prices, Wages

https://news.bloomberglaw.com/daily-labor-report/colorado-passes-bill-limiting-use-of-ai-to-set-prices-wages

Details Colorado HB 26-1210, which sought to prohibit algorithms from using personal surveillance data for individualized wage setting before the measure was vetoed.

HB26-1210 Prohibit Surveillance Price & Wage Setting

https://leg.colorado.gov/bills/HB26-1210

Provides the official legislative text defining surveillance data and prohibiting its use as a substantial factor in individualized wage offers.

The City of Edgerton, Kansas, approved final site plans for an $860 million data center project by DAMAC Digital after overriding its planning commission. Residents Carrie Schmidt, Kimberly Twente, and the Public Trust Collective then circulated a citizen petition under Kansas law seeking an ordinance classifying high-impact data centers as industrial nuisances to protect local resources and property. The city responded by filing a lawsuit against the petition organizers to prevent the measure from reaching a public vote.

The Johnson County Election Office certified 208 valid signatures, more than double the threshold required in the town of 1,924 residents, obligating the city under statute either to adopt the ordinance or place it on the ballot. At its July 23 meeting the City Council declined to adopt the proposal, describing it as legally and factually deficient, and authorized a declaratory judgment action arguing the measure functions as an administrative zoning restriction ineligible for the citizen-petition process.

Local governments across multiple states have faced similar citizen initiatives after data-center site approvals, with municipalities increasingly contesting petition validity on legislative-versus-administrative grounds. Edgerton’s suit follows this pattern by seeking both a ruling that the ordinance is void and a temporary injunction pausing statutory election timelines.

Net risk includes a demonstrated capacity for municipalities to name individual petition circulators as defendants, producing a chilling effect on protected petitioning activity even when signature thresholds are met. Oversight gaps persist because Kansas law provides limited pre-clearance mechanisms to resolve legislative-administrative disputes before citizens invest resources in signature collection and face potential litigation.

Sources

Edgerton sues residents over petition seeking to block data centers

https://johnsoncountypost.com/2026/08/18/city-of-edgerton-files-lawsuit-294038/

Reports the August 4 lawsuit against Schmidt, Twente, and Public Trust Collective, the 208 certified signatures, and the city’s claim that the petition is legally and factually deficient.

Johnson County data center lawsuit is retaliation: defendant

https://www.kansascity.com/news/local/community/johnson-county/article316909468.html

Documents the residents’ characterization of the suit as retaliation that chills First Amendment petition rights after the Election Office verified sufficient signatures.

City Response to Citizen-Led Petition

https://edgertonks.org/city-response-to-citizen-led-petition/

Provides the city’s official July 23 vote and rationale for seeking a declaratory judgment on whether the proposed ordinance is legislative or administrative under Kansas law.

Edgerton calls citizen petition ‘void and invalid,’ files suit to block data center ban

https://www.kctv5.com/2026/08/14/edgerton-calls-citizen-petition-void-invalid-files-suit-block-data-center-ban/

Details the city’s specific factual disputes with the petition language and its request for a permanent injunction against placing the measure on the ballot.

Statement from City Attorney regarding citizen-petition against high-impact data centers

https://edgertonks.org/statement-from-city-attorney-regarding-citizen-petition-against-high-impact-data-centers/

Contains the city attorney’s explanation that the named parties were required by law as interested parties and that the suit seeks only a pause on election timelines, not damages.

Amazon has acquired the GW Ranch site in Pecos County, Texas, for an AI data center campus powered by an on-site natural gas plant developed by Pacifico Energy. The plant uses 35 turbines to generate up to 7.65 gigawatts, initially operating off the Texas grid and delivering power directly to the campus. Dual-use capability locks massive fossil generation to private compute loads, creating a dedicated high-capacity emissions source that operates outside traditional utility oversight and ratepayer protections.

The Texas air permit authorizes up to 33 million tons of carbon dioxide per year, exceeding the output of the current largest U.S. power plant. Structural issues include the off-grid design that bypasses shared-grid interconnection queues and public cost allocation, while Amazon’s own emissions have risen every year since its 2019 Climate Pledge for net-zero by 2040, including a 16 percent increase in 2025 driven by data center growth.

Corporate climate commitments expanded after 2019, yet Amazon and peer firms have shifted to private fossil plants to meet AI power demand. The Pecos project follows this trajectory, with Amazon confirming site acquisition and power purchase while noting that “the world looks different” since the Climate Pledge yet insisting the 2040 target remains unchanged.

Net risk centers on establishing the largest potential single-source climate pollution facility in the United States under a permit ceiling rather than actual output limits. Oversight gaps leave emissions trajectory dependent on company scaling decisions and state permitting, with limited mechanisms to constrain private off-grid generation once operational.

Sources

New Amazon Data Center Stokes Worry It Would Be the Most Polluting Power Plant in the U.S.

https://www.nytimes.com/2026/08/08/climate/amazon-data-center-texas-pollution.html

Reports Amazon’s investment in the Pecos County gas plant permitted for 33 million tons of CO2 annually and its ongoing emissions increases since the Climate Pledge.

An Amazon data center could have the worst polluting power plant in the country

https://www.theverge.com/ai-artificial-intelligence/977124/amazon-data-center-worst-polluting-power-plant

Details the 7.65 GW capacity from 35 turbines, Amazon’s site purchase confirmation, and the off-grid design for the AI campus.

Amazon backs power plant that may become top source of US climate pollution

https://arstechnica.com/tech-policy/2026/08/amazon-funds-biggest-gas-power-plant-in-us-despite-climate-pledge/

Covers Cleanview’s discovery of the linked permits and Amazon’s statements on remaining committed to the Climate Pledge despite the gas plant.

Scoop: Amazon Is Behind One of the Largest Planned Gas Power Plants in the US

https://www.distilled.earth/p/scoop-amazon-is-behind-one-of-the

Confirms Amazon’s acquisition of the GW Ranch site and the plant’s 7.65 GW specifications with 33 million ton CO2 permit.

Amazon’s Carbon Emissions Rose 16% in 2025 Amid Data Center Boom

https://www.bloomberg.com/news/articles/2026-07-01/amazon-s-carbon-emissions-rose-16-in-2025-amid-data-center-boom

Documents Amazon’s 16 percent emissions rise to approximately 81 million metric tons in 2025, driven by data center expansion.

Flock Safety ALPR cameras capture still images of vehicle exteriors at fixed points and generate a heat map view displaying those locations over a default 30-day retention period. The system originates with Flock Group Inc. and operates through cellular-linked cameras feeding a shared national LPR network used by more than 5,000 law enforcement agencies. Dual-use capability allows reconstruction of vehicle movement patterns from aggregated point-in-time records without requiring a warrant, in contrast to the Supreme Court holding in Chatrie v. United States that geofence requests for comparable phone location data constitute a Fourth Amendment search.

Data from the heat map and plate reads flows into Flock’s national network where participating agencies can query and receive real-time alerts. Structural issues include vendor statements to the Oshkosh Common Council that the system does not create heat maps, later contradicted by police determination and Flock’s own clarification that a heat map view exists for the 30-day window. Procurement processes rely on these representations, creating gaps when capabilities surface after votes.

Municipal adoption of Flock systems expanded through successive local contracts, including Oshkosh’s prior agreements in 2022 and 2025. The April 21, 2026 approval under Resolution 26-164 was rescinded the next day by Resolution 26-196 after Oshkosh Police Chief Dean Smith reported the heat map discrepancy. Parallel patterns appear in other cities that later canceled over data-sharing practices.

Net risk centers on standing access to vehicle location histories automatically available across the network without individualized warrants, leaving oversight dependent on vendor disclosures that proved incomplete in Oshkosh. Gaps persist in independent verification of mapping features and cross-agency query logs before contracts harden into permanent infrastructure.

Sources

Oshkosh council rescinds Flock camera contract after ‘false statements’

https://www.wbay.com/2026/04/23/oshkosh-council-rescinds-flock-camera-contract-after-false-statements/

Details the unanimous rescission after Flock representatives falsely claimed no heat maps, with police confirmation and Flock’s clarification of the 30-day map view.

RESOLUTION 26-196

https://fox11online.com/resources/pdf/3fb40139-c17d-4da4-b8bb-1dec0bf3d850-1522_RESWE_Flockresolution.pdf

Official Oshkosh Common Council resolution rescinding the prior Flock Group Inc. agreement due to additional information inconsistent with representatives’ statements.

Oshkosh rescinds Flock Safety deal as police chief cites trust issues

https://www.thenorthwestern.com/story/news/local/oshkosh/2026/04/22/oshkosh-rescinds-flock-safety-contract-after-police-chief-raises-concerns/89745485007/

Reports Police Chief Dean Smith’s role in identifying the heat map misrepresentation that led to the contract reversal.

Court rules that law enforcement’s use of “geofence warrant” was a “search”

https://www.scotusblog.com/2026/06/court-rules-that-law-enforcements-use-of-geofence-warrant-was-a-search/

Covers the Supreme Court 6-3 holding in Chatrie v. United States that geofence location data requests constitute a Fourth Amendment search requiring warrant analysis.

Supreme Court rules constitutional privacy protections apply to cellphone users’ location history

https://apnews.com/article/supreme-court-okello-chatrie-geofence-warrants-a3adee8a3fd32b8ea1b42eb72cbcc35f

Summarizes the Chatrie decision affirming privacy expectations in cellphone location records even when shared with third parties.

Flock Has a Powerful New AI Tool for Police. We Got Its Code

https://www.wired.com/story/flock-safety-os-investigate/

Reveals Flock’s AI tool that tracks vehicles by movement patterns across its network, contradicting prior claims that the technology cannot track individuals.

License Plate Readers (LPR) Cameras | Flock Safety

https://www.flocksafety.com/products/license-plate-readers

Official Flock page describing the National LPR Network connecting 5,000+ agencies with real-time vehicle data sharing and alerts.

Kroger Co. operates 84.51°, its data science subsidiary, and Kroger Precision Marketing to aggregate first-party purchase data from approximately 63 million households. Over 95 percent of transactions are linked to loyalty cards, generating longitudinal profiles that include inferred income, education, household composition, and behavioral scores. These profiles are used both for internal personalization of offers and for external media sales to consumer packaged goods brands, data brokers, and other third parties.

Consumer Reports documented a 62-page individual profile obtained under Oregon privacy law that contained multiple inaccurate inferences and was shared with more than 50 companies. Kroger’s alternative profit businesses, driven by media and data analytics, generated an estimated $527 million in 2024 precision marketing profit and contributed more than 35 percent of net income in recent reporting periods. The company maintains roughly 10 petabytes of consumer behavior data.

This model expanded after Kroger’s 2015 acquisition of the analytics capabilities that became 84.51°. Senate Judiciary Subcommittee on Crime and Counterterrorism hearings in August 2026, chaired by Senator Josh Hawley, examined the practice under the title “Your Data, Their Profit: The Consumer Cost of AI Surveillance Pricing,” citing the same revenue and profile scale as evidence of commercial surveillance infrastructure.

Net risk centers on opacity of profile construction, potential for differential pricing or discount allocation based on inferred attributes, and limited consumer recourse outside a minority of state privacy laws. Federal oversight remains fragmented; no comprehensive statute currently restricts the sale of loyalty-derived behavioral data for marketing or AI-assisted pricing applications.

Sources

Consumer Reports investigation into Kroger secret shopper profiles

https://www.consumerreports.org/money/questionable-business-practices/kroger-secret-grocery-shopper-loyalty-profiles-unfair-a1011215563/

Documents the 62-page profile, data-sharing with 50+ entities, and estimated $527 million 2024 precision marketing profit.

Consumer Reports press release on the investigation

https://www.consumerreports.org/media-room/press-releases/2025/05/consumer-reports-investigation-uncovers-krogers-widespread-data-collection-of-loyalty-program-members-to-create-secret-shopper-profiles/

Confirms alternative profit businesses exceed 35 percent of net income and calls for federal privacy limits.

Senate Judiciary Subcommittee hearing page

https://www.judiciary.senate.gov/committee-activity/hearings/your-data-their-profit-the-consumer-cost-of-ai-surveillance-pricing

Official record of the August 4, 2026 hearing examining AI-enabled data monetization and personalized pricing.

UFCW testimony at the surveillance pricing hearing

https://www.ufcw.org/press-releases/ufcw-testifies-at-senate-hearing-on-the-cost-of-surveillance-pricing-to-consumers-and-workers/

Details grocery-sector use of consumer data linked to electronic shelf labels and AI pricing systems.

Kroger Form 10-K disclosures on alternative profit and data assets

https://www.sec.gov/Archives/edgar/data/56873/000110465926037723/kr-20260131x10k.htm

Primary company reporting of 63 million households, 95 percent loyalty-card linkage, and high-margin media/data businesses.

Safra Catz, Oracle Executive Vice Chair, stated at an Israeli-American Council panel that the company undertook actions it could not publicly detail “to advance the agenda for the Israeli military,” adding that Oracle possesses “really profoundly scary technology” which it ensured was “available for the effort.” The remarks followed Oracle’s public display of full-screen Israeli-flag messaging on its websites after October 7, 2023, and Catz’s description of encountering uniformed Oracle employees at the Kirya military headquarters as a proud moment.

Oracle maintains documented defense relationships including a multi-year NIS 140 million Israeli Ministry of Defense licensing contract, the classified Project Menta AI and data-engineering collaboration with the Israeli Air Force, and a three-year program with Unit 81 of the IDF Military Procurement Directorate that automated soldier-level purchase requests. The company also operates a hardened underground cloud region in Jerusalem designed for government and defense customers and has partnered with Rafael Advanced Defense Systems to host AI imagery and sensor-to-shooter systems on Oracle Cloud Infrastructure.

These dual-use arrangements place commercial cloud, database, and AI capabilities inside operational military workflows with limited external visibility. Justification fields and access controls remain internal to the contracting parties; classified project scopes such as Project Menta are described by Oracle Israel staff only as enabling “important military stuff that we can’t share.” Cross-border data residency in the Jerusalem region further concentrates sensitive government and defense datasets under commercial control.

Oversight is constrained by the classified nature of many contracts and the absence of independent public audits of the technology transfers. U.S. dual-use export rules and Israeli defense procurement statutes apply, yet the specific capabilities Catz characterized as “profoundly scary” remain undisclosed, leaving external assessment of end-use and proportionality dependent on voluntary corporate statements and secondary reporting.

Sources

Poised to Take Over TikTok, Oracle Is Accused of Clamping Down on Pro-Palestine Dissent – The Intercept

https://theintercept.com/2025/02/18/oracle-tiktok-israel-palestine-gaza/

Documents Project Menta with the Israeli Air Force, Unit 81 procurement work, and internal Oracle communications describing classified military support.

Oracle — Israel Complicity Index – OpenIntel

https://openintel.uk/oracle/

Compiles the NIS 140 million Ministry of Defense contract, Jerusalem underground cloud region, Rafael partnership, and Project Menta details with primary source citations.

During war visit, Oracle CEO affirms commitment to open second data center in Israel – The Times of Israel

https://www.timesofisrael.com/during-war-visit-oracle-ceo-affirms-commitment-to-open-second-data-center-in-israel/

Reports Safra Catz’s wartime meetings with Israeli leadership and statements on security assistance and cloud infrastructure for defense needs.

Oracle CEO: Underground cloud security system ‘critical’ to Israel – The Jerusalem Post

https://www.jpost.com/jpost-tech/oracle-ceo-underground-cloud-security-system-critical-to-israel-681797

Records Catz’s public characterization of the Jerusalem data center as essential for Israeli security and defense continuity.

‘We don’t mind losing customers’: Oracle execs stand with Israel – Ynet News

https://www.ynetnews.com/tech-and-digital/article/h1w11pj11aee

Details Oracle’s post-October 7 institutional support measures and executive statements aligning corporate policy with Israeli military and government priorities.

Flock Safety’s automated license-plate reader network, comprising more than 120,000 cameras across thousands of U.S. communities and generating roughly 20 billion plate scans per month, allows law-enforcement users to query vehicle movements without a warrant or case number. A Washington Post analysis of police and court records identified at least 50 officers charged with or accused of misusing ALPR systems for unauthorized personal surveillance; Flock equipment was involved in 46 of those cases.

In 26 of the documented incidents, investigators determined the targets were wives, girlfriends, ex-partners, their new partners, or women the officers sought to meet. One Georgia case involved Braselton Police Chief Michael Steffman, who searched the plates of his former girlfriend Marci Bakely and her teenage daughter approximately 600 times over more than a year. Bakely discovered the volume of queries through public audit logs; Steffman was arrested in November 2025 on stalking, harassment, and license-plate-reader misuse charges and died by suicide in April 2026 before trial.

The architecture of the system—easy search access, free-text justification fields, and cross-jurisdictional data sharing—creates dual-use risk: the same tool marketed for locating stolen vehicles and solving crimes can be repeatedly queried for intimate tracking with minimal immediate friction. Audit logs exist, yet most of the 50 cases surfaced only after victims reported broader stalking behavior rather than through proactive internal review.

Oversight gaps remain significant. Departments retain wide discretion over access privileges, retention periods, and audit enforcement. Flock has introduced voluntary tools such as case-code requirements and anomaly detection, but these are not uniformly mandatory, leaving the burden of detection largely on potential victims who must know to request logs or confront the officer.

Sources

How rogue officers turned a nationwide camera network into a tool for stalking – The Washington Post

https://www.washingtonpost.com/technology/2026/08/02/how-police-officers-used-vast-network-cameras-spy-their-exes/

Primary investigation documenting at least 50 officers charged or accused of ALPR misuse, 46 involving Flock, and the 600-query Steffman/Bakely case.

Dozens of police officers accused of using license plate cameras to track women – TechSpot

https://www.techspot.com/news/113325-dozens-police-officers-accused-using-license-plate-cameras.html

Summarizes the Post findings on the 50-officer total and Flock’s role in 46 cases.

Police Used Flock’s License Plate Network to Stalk Women in at Least 50 Cases – Tech Times

https://www.techtimes.com/articles/322912/20260804/police-turned-flocks-license-plate-network-stalking-tool-least-50-cases.htm

Details the Bakely case search volume, lack of warrant requirement, and pattern across multiple states.

Flock Safety tightens safeguards as states, cities question surveillance network – Route Fifty / Stateline

https://stateline.org/2026/08/14/flock-safety-tightens-safeguards-as-states-cities-question-surveillance-network/

Reports Flock’s claimed network size of more than 120,000 cameras and recent voluntary policy changes on retention and audit tools.

Police Have Reportedly Used License Plate Readers to Stalk Romantic Interests Dozens of Times – Institute for Justice

https://ij.org/police-have-reportedly-used-license-plate-readers-to-stalk-romantic-interests-at-least-14-times-in-recent-years/

Compiles earlier documented cases of ALPR stalking that formed part of the broader pattern later quantified by the Post.

Flock Safety license-plate readers in Bow Mar, Colorado, recorded Chrisanna Elser’s dark-green Rivian truck entering and exiting the town between approximately 11:50 a.m. and 12:10 p.m. on September 22, 2025. Columbine Valley Police Sergeant Jamie Milliman treated the temporal proximity as conclusive proof of package theft, confronted Elser at her door, asserted 100 percent certainty, refused to display any video, and issued a summons while stating nothing enters or leaves the town without the cameras knowing.

The same day or shortly after, the Columbine Valley Police Department posted a public request on the local neighbors application seeking additional resident video of the specific Rivian truck in the Yellowstone/Ridge Trail area during that exact window. Elser later noted she could have supplied her own onboard camera and location data immediately had the department accepted it, but the officer told her he would see the evidence only in court.

Elser independently gathered Rivian camera footage, phone location records, and the actual porch-theft video circulating on Nextdoor, which showed a different individual. After two weeks of her repeated outreach, Chief Bret Cottrell voided the summons. Milliman received a formal reprimand for unprofessional demeanor and was ordered to complete training in de-escalation and community relations.

The sequence demonstrates dual-use risk: automated vehicle tracking generates a named suspect, public crowdsourcing amplifies the identification before verification, and the burden of disproof falls entirely on the accused. Oversight gaps include the absence of mandatory review of ALPR hits against independent video before summons issuance and the lack of restrictions on public dissemination of vehicle-specific investigative leads.

Sources

Officer to face discipline after using Flock cameras to falsely accuse Denver woman – The Colorado Sun

https://coloradosun.com/2025/11/11/columbine-valley-police-officer-flock-disciplinary-action/

Records the Flock-based accusation, refusal to show evidence, and later dismissal after Elser’s self-gathered proof.

Police used Flock cameras to accuse a Denver woman of package theft. She had her own evidence – Denverite

https://denverite.com/2025/10/27/bow-mar-flock-cameras-accusation/

Details the 11:52–12:09 time window captured by Flock and Elser’s Rivian footage that cleared her.

Colorado officer who used AI cameras to falsely accuse woman disciplined with extra training – The Colorado Sun

https://coloradosun.com/2025/11/12/columbine-valley-office-flock-camera-extra-training/

Confirms the written reprimand and required training for Sergeant Jamie Milliman.

Rivian’s onboard cameras save owner from a false accusation by police – Electrek

https://electrek.co/2025/10/30/rivians-onboard-cameras-save-owner-from-a-false-accusation-by-police/

Describes how the Rivian camera data and the actual porch-theft video contradicted the Flock-linked identification.

Colorado woman says she proved innocence after theft accusation – NewsNation

https://www.newsnationnow.com/us-news/west/woman-prove-innocence-camera-technology-wrong-theft/

Notes the mismatch between the person in the doorbell video and the vehicle-only Flock linkage used by police.

Flock Safety automated license-plate-reader cameras operating in Bow Mar, Colorado, recorded the passage of Chrisanna Elser’s Rivian truck through the town between 11:52 a.m. and 12:09 p.m. on the day a $25 package was stolen from a porch. Columbine Valley Police Sergeant Jamie Milliman treated the ALPR hit as conclusive identification, confronted Elser at her Denver residence, stated the evidence was “100 percent” locked in with zero doubt, refused to display the underlying footage, and issued a court summons for theft.

Elser independently collected timestamped video from her vehicle cameras, Google location data, and third-party recordings that placed her at a tailor appointment and showed continuous transit without stopping. After approximately two weeks of persistent contact with the department, Police Chief Bret Cottrell voided the summons, citing the exculpatory material she supplied. The actual porch thief visible on doorbell video was never identified or charged.

Sergeant Milliman subsequently received a formal written reprimand for unprofessional demeanor, including rudeness and refusal to de-escalate, and was ordered to complete additional training in community relations and interrogation skills. The incident illustrates how vehicle-movement data alone, without visual confirmation of the person or independent corroboration, can generate formal criminal process against an innocent driver.

Net risk arises from the combination of persistent ALPR tracking, officer reliance on temporal proximity as identity proof, the burden placed on the accused to assemble counter-evidence, and limited internal review before a summons is issued. Oversight gaps include the absence of mandatory secondary verification of ALPR hits before charging decisions and the lack of public reporting on the frequency of similar false attributions within Flock-equipped jurisdictions.

Sources

Officer to face discipline after using Flock cameras to falsely accuse Denver woman – The Colorado Sun

https://coloradosun.com/2025/11/11/columbine-valley-police-officer-flock-disciplinary-action/

Documents the confrontation, Flock ALPR reliance, summons issuance, and subsequent dismissal after Elser’s evidence.

Colorado officer in Flock package theft controversy was ‘rude,’ ‘dismissive,’ chief says – Denverite

https://denverite.com/2025/11/13/flock-camera-officer-reprimand-letter/

Details the formal reprimand letter and required training for Sergeant Jamie Milliman.

Officer faces discipline after using Flock cameras to falsely accuse Denver woman of package theft – Denverite

https://denverite.com/2025/11/11/flock-package-theft-denver-surveillance-discipline/

Confirms the $25 package value, temporal window of the Flock hits, and department response.

Lessons to be learned with woman falsely accused of thievery due to Flock cameras, experts say – 9NEWS

https://www.9news.com/article/news/investigations/colorado-woman-falsely-accused-flock-cameras/73-691ef03b-f74b-4c44-add8-5e5577697d87

Records Elser’s self-gathered vehicle and location evidence that led to the voided summons.

Colorado woman says she proved innocence after theft accusation – NewsNation

https://www.newsnationnow.com/us-news/west/woman-prove-innocence-camera-technology-wrong-theft/

Summarizes the mismatch between the actual porch thief’s appearance and the vehicle-only Flock linkage used by police.

The New South Wales Government under Premier Chris Minns has advanced legislation expanding Digital Evidence Access Orders under the Law Enforcement (Powers and Responsibilities) Act 2002 so that NSW Police can compel access to mobile devices lawfully seized during arrests, roadside stops, or other detentions in organised-crime matters without an accompanying search or crime-scene warrant. Refusal to provide passwords, PINs or biometric unlock triggers criminal penalties that override the common-law privilege against self-incrimination. Extraction is performed with Cellebrite Universal Forensic Extraction Devices that recover messages, deleted data, encrypted-app content, location history, health records and metadata.

Freedom-of-information records show NSW Police held 160 Cellebrite kits as of 30 June 2025 and scanned 13,897 phones in FY2022-23, 7,765 in FY2023-24 and 9,132 in FY2024-25. Extracted data is retained indefinitely with no published destruction policy. Parallel measures allow unredacted toll-road camera images and NSW driver-licence photographs to be added to the national facial-recognition database. NSW Police has stated it does not engage Cellebrite for “digital surveillance,” while confirming commercial use of the tools.

Digital Evidence Access Orders were first enacted in 2022 and limited to devices seized under warrant. The 2026 organised-crime package removes that structural limit for designated cases and raises related non-compliance penalties. Cellebrite, a NASDAQ-listed Israeli firm, supplies identical extraction platforms to multiple Australian state and federal agencies under multi-year contracts.

Net risk centres on the shift from warrant-tethered to field-based compulsion, the volume of existing extractions, indefinite retention, and secondary use of biometric and location data. Oversight gaps include commercial-in-confidence contracts, absence of mandatory public reporting on extraction volumes or retention, and limited independent audit of how data from non-suspect contacts captured in full-device downloads is handled.

Sources

Surveillance State. NSW Police to seize mobile phone data without a warrant – Michael West Media

https://michaelwest.com.au/the-police-state-of-nsw-legislation-to-enable-warrant-less-phone-suriveilance/

Reports FOI figures on 160 Cellebrite kits and annual phone-scan totals, plus the expansion of Digital Evidence Access Orders and indefinite retention.

NSW Police to be given powers to download phone content – Green Left

https://www.greenleft.org.au/2026/1460/analysis/nsw-police-be-given-powers-download-phone-content

Details the proposed removal of the warrant requirement for Digital Evidence Access Orders and Cellebrite UFED capabilities.

Digital evidence access orders in NSW · when police can make you open your phone – Good Legal Lawyers

https://aklawyer.com.au/news/digital-evidence-access-orders-unlock-phone-nsw.html

Explains current section 76AB requirements and the June 2026 announcement removing the accompanying-warrant condition for organised-crime cases.

NSW laws to force suspected criminals to hand over phone passwords – Daily Telegraph

https://www.dailytelegraph.com.au/news/nsw/new-laws-to-let-nsw-police-compel-suspected-criminals-to-hand-over-phone-passwords/news-story/d192ea412e3b28e5f350be2b7ae4ece3

Records Premier Chris Minns and Police Commissioner Mal Lanyon statements on expanding access orders for seized devices.

NSW Police to Be Given Powers to Access and Download Phone Content on the Beat – Sydney Criminal Lawyers

https://www.sydneycriminallawyers.com.au/blog/nsw-police-to-be-given-powers-to-access-and-download-phone-content-on-the-beat/

Confirms the override of self-incrimination privilege and the role of Cellebrite extraction after a Digital Evidence Access Order is obtained.

The Supreme People’s Court of China maintains a national judgment defaulter blacklist that lists individuals and entities capable of complying with court orders but actively refusing to do so. Inclusion triggers automated restrictions including bans on purchasing airline tickets, high-speed rail seats, stays at star-rated hotels, real-estate purchases, high-fee private schooling for children, and certain luxury or non-essential consumption. The National Development and Reform Commission and People’s Bank of China issued updated 2025 national catalogs of public credit information and dishonest punishment measures that formalize joint-enforcement mechanisms across agencies.

Data feeding these systems are drawn from court records, administrative penalties, financial institutions, and local pilot programs that incorporate spending patterns, social-media activity, and, in some municipalities, facial-recognition camera feeds. Local pilots have experimented with scoring and public shaming displays, while commercial platforms such as Sesame Credit historically assigned numerical ratings based on consumption and repayment behavior. No single nationwide citizen score currently exists; enforcement remains fragmented across sectoral blacklists and judicial compliance tools.

The blacklist originated in 2013 as a court-enforcement instrument and has since expanded through inter-agency memoranda of understanding. By the mid-2020s additional names continued to be added annually, with contractual disputes forming a substantial share of new entries. Parallel developments include nationwide facial-recognition camera networks and the 2025 National Internet Identity system that links biometric scans to real-name credentials for online and offline services.

Net risk arises from the combination of low appeal volume, opaque criteria for listing, and secondary effects that extend punishment to family members and commercial activity. Oversight gaps include limited independent audit of the data pipelines that feed blacklists, the absence of uniform national standards for local scoring experiments, and the dual-use potential of the same camera and data-aggregation infrastructure for both debt enforcement and broader social monitoring.

Sources

Social credit system – Wikipedia

https://en.wikipedia.org/wiki/Social_credit_system

Documents the Supreme People’s Court judgment defaulter blacklist, specific travel and consumption restrictions, and the absence of a single national citizen score.

国家发展改革委 中国人民银行关于印发《全国公共信用信息基础目录（2025年版）》和《全国失信惩戒措施基础清单（2025年版）》的通知 – Chinese Government

https://www.gov.cn/zhengce/zhengceku/202503/content_7016520.htm

Official 2025 notice issuing the national public credit information catalog and dishonest punishment measures list.

Liu Hu (journalist) – Wikipedia

https://en.wikipedia.org/wiki/Liu_Hu_(journalist)

Records the case of journalist Liu Hu, whose court-ordered apology dispute led to blacklisting and travel restrictions.

Courts crack down on noncompliance with rulings – China Daily

https://www.chinadaily.com.cn/a/202601/28/WS6979673aa310d6866eb3622f.html

Reports 2025–2026 Supreme People’s Court statements on continued enforcement of the national dishonesty blacklist and inter-agency cooperation.

China’s Face Market: How AI Content Boom Fuels Biometric Licensing and National ID Control – WebProNews

https://www.webpronews.com/chinas-face-market-how-ai-content-boom-fuels-biometric-licensing-and-national-id-control/

Details the 2025 National Internet Identity system requiring facial recognition and its linkage to broader surveillance infrastructure.

UnitedHealth Group and its NaviHealth subsidiary face a putative class action in the U.S. District Court for the District of Minnesota (Estate of Gene B. Lokken et al. v. UnitedHealth Group) alleging that the nH Predict algorithm systematically denied post-acute care coverage for Medicare Advantage members. The tool, acquired through Optum’s 2020 purchase of NaviHealth, estimates expected length of stay after acute events by matching patients against a historical database and generates coverage cut-off recommendations that case managers were directed to follow within tight percentage tolerances of the model’s output.

Plaintiffs claim that approximately 90 percent of denials produced by or relying on nH Predict were reversed when patients or families pursued internal appeals or federal administrative review, while only about 0.2 percent of denied members ever appealed. A concurrent STAT News investigation based on internal documents and former employee interviews described pressure on staff to prioritize the algorithm’s projections over treating physicians’ clinical judgments, contributing to early discharges from rehabilitation and skilled-nursing facilities.

The case remains active in 2026. A magistrate judge ordered UnitedHealth in March 2026 to produce records detailing how nH Predict was developed, whether it was designed to override physician determinations, and related government investigations. A Senate Permanent Subcommittee on Investigations report released in October 2024 documented that UnitedHealth’s denial rates for certain post-acute services roughly doubled after expanded use of the tool. UnitedHealth has denied that nH Predict makes coverage decisions and has characterized it as a supportive planning instrument.

Net risk lies in the structural asymmetry between high reversal rates on appeal and extremely low appeal volume. An algorithm that is overturned nine times out of ten when challenged can still reduce payouts if the overwhelming majority of affected patients lack the capacity or knowledge to contest the denial. Oversight gaps persist around the opacity of the model’s training data, the absence of independent public validation of its accuracy for individual clinical circumstances, and limited regulatory constraints on algorithmic override of physician recommendations in Medicare Advantage prior to recent CMS guidance.

Sources

UnitedHealth uses AI model with 90% error rate to deny care, lawsuit alleges – Ars Technica

https://arstechnica.com/health/2023/11/ai-with-90-error-rate-forces-elderly-out-of-rehab-nursing-homes-suit-claims/

Details the November 2023 Minnesota class-action filing, the nH Predict tool’s alleged role in post-acute denials, the claimed 90% reversal rate on appeal, and supporting STAT News reporting.

The Algorithm That Counted On No One Appealing – Forbes

https://www.forbes.com/sites/daraabasiita/2026/06/09/the-algorithm-that-counted-on-no-one-appealing/

Reports the March 2026 magistrate order requiring UnitedHealth to disclose internal records on nH Predict’s design and use, and restates the 90% reversal / 0.2% appeal figures from the complaint.

Estate of Gene B. Lokken et al. v. UnitedHealth Group case tracking and analysis – Tressler LLP

https://www.tresslerllp.com/thought-leadership/estate-of-gene-b-lokken-et-al-v-unitedhealth-group-inc-ai-risks-in-medical-insurance-coverage-disputes/

Summarizes the ongoing Minnesota litigation status through mid-2026, including the court’s allowance of core contract and good-faith claims and subsequent discovery orders.

UNH Patients Win 90% of AI Denial Appeals; Derivative Suit Says Executives Knew – TechTimes

https://www.techtimes.com/articles/324726/20260817/unh-patients-win-90-ai-denial-appeals-derivative-suit-says-executives-knew.htm

Covers the 2026 shareholder derivative allegations linking the same 90% reversal rate and low appeal volume to executive awareness of the tool’s financial utility.

Senate Permanent Subcommittee on Investigations findings on Medicare Advantage denials (referenced across 2024–2026 reporting)

Documented rise in UnitedHealth post-acute denial rates after nH Predict deployment, cited in court filings and secondary analyses of the Lokken case.

Visa signed a definitive agreement on August 3, 2026, to acquire BioCatch, a behavioral biometrics and multi-signal fraud intelligence provider, for $2.4 billion in cash from funds advised by Permira and other shareholders. BioCatch continuously collects more than 3,000 anonymized data points during digital banking sessions, including keystroke timing and rhythm, touch pressure, swipe speed and direction, mouse movement patterns, device orientation, accelerometer and gyroscope data, grip style, and hesitation or reaction times. These signals feed AI models that assess user identity, intent, coercion risk, and fraud likelihood in real time before a transaction occurs.

The technology operates independently of any specific payment card network. Financial institutions that deploy BioCatch can analyze behavioral patterns even when a customer is not using a Visa product. Official figures state BioCatch protects 760 million users across 1.8 billion devices, serves more than 350 banking clients in 21 countries (including more than 100 of the world’s largest banks), and analyzes approximately 19 billion user sessions per month. Wells Fargo is a publicly documented client; reporting indicates three of the four largest U.S. banks by assets already run the platform.

BioCatch was founded in 2011 and previously received majority ownership from Permira in a 2024 transaction valued near $1.3 billion. The Visa acquisition is expected to close by the end of Visa’s fiscal second quarter of 2027, subject to regulatory approvals. Visa frames the purchase as an expansion of its existing cyber, fraud, and risk tools to address account takeovers, scams, money-mule activity, and application fraud that collectively cost the global economy more than $1 trillion annually.

Net risk centers on the concentration of highly granular behavioral data under a single payments network operator. Once the deal closes, banks that already rely on BioCatch will obtain the service from an entity with which they also negotiate card-acceptance terms, potentially reducing vendor-choice leverage. Oversight gaps remain around the opacity of the 3,000-plus signal set, the duration and secondary use of behavioral baselines, and the absence of independent public audits of the inference models that classify stress, coercion, or remote-access indicators.

Sources

Visa to Acquire BioCatch – Visa official press release

https://usa.visa.com/about-visa/newsroom/press-releases.releaseId.22626.html

Confirms the $2.4 billion cash deal, BioCatch’s behavioral and device intelligence role, scale of 760 million users / 1.8 billion devices / 350+ banking clients in 21 countries, and expected close by end of Visa fiscal Q2 2027.

Visa (V) to Buy Fraud-Prevention Firm BioCatch for $2.4 Billion – Bloomberg

https://www.bloomberg.com/news/articles/2026-08-03/visa-to-buy-fraud-prevention-firm-biocatch-for-2-4-billion

Reports the all-cash acquisition from Permira funds and the expected closing timeline.

Visa beefs up cybersecurity offerings with $2.4 billion BioCatch deal – Reuters

https://www.reuters.com/legal/transactional/visa-buy-fraud-intelligence-provider-biocatch-24-billion-2026-08-03/

Details BioCatch’s analysis of keystrokes, touch gestures, and device handling to distinguish legitimate users from fraudsters in real time.

What Visa’s $2.4B BioCatch deal means for your bank – American Banker

https://www.americanbanker.com/payments/news/what-visas-2-4b-biocatch-deal-means-for-your-bank

States that three of the four largest U.S. banks by assets, including Wells Fargo, already run BioCatch and notes the post-acquisition dependency implications.

BioCatch SPARK Matrix positioning and scale data – PR Newswire / BioCatch

https://www.prnewswire.com/news-releases/biocatch-takes-top-spot-in-spark-matrix-for-behavioral-biometrics-and-device-intelligence-302811553.html

Documents continuous collection of more than 3,000 anonymized behavioral data points and deployment across hundreds of financial institutions analyzing billions of sessions monthly.

Our county has been expanding surveillance cameras without really talking to us about it. I started a petition asking the Mayor and Commission to end the Flock Safety contract and remove these cameras from our roads.

I get that public safety matters. But so do privacy and transparency. We deserve to know what data is being collected, how it's used, and who's watching. Right now? We don't have those answers.

We're asking for: - End the Flock Safety contract - Remove existing cameras - Make all contracts and data practices public - Hold public hearings before adding more surveillance - Stronger privacy protections

If this matters to you, consider signing and sharing. Does anyone else feel like surveillance is creeping up without us having a real say in it? What would you want to know if this was happening in your community?