PANOPTICON 00 data brokers and the loophole
page 1 / 1
The Privatization of Surveillance — Data Brokers, Ad-Tech & the Loophole
factual-summary . retrieved 2026-07-11
sources: Brennan Center, EPIC, EFF, NPR, FTC, The Record
archived for offline mesh reading
------------------------------------------------------------
The core of the "it's worse now, and it's private" thesis, stated as documented facts.
How commercial collection works
- **Mobile SDKs & apps** embedded in weather, game, and utility apps collect **precise
location** and device identifiers.
- **Real-time bidding (RTB):** every programmatic ad auction broadcasts user data (location,
device, interests) to many bidders in milliseconds. The FTC found brokers **retaining data
from *failed* bids** — collecting even when they didn't win the ad.
- **Data brokers** (Gravy Analytics/Venntel, Mobilewalla, Babel Street, Fog Data Science,
etc.) aggregate these feeds into **searchable location/behavior datasets** and sell to
**private and government** clients.
The "data broker loophole"
- **Carpenter (2018)** requires a **warrant** for historical cell-site location. But agencies
argue that **buying** the same location data from a broker is **not a "search"** and needs
**no warrant.**
- **Courts have not squarely resolved this** — it's an untested legal gray area. The **DIA**
formally stated it "**does not construe the Carpenter decision to require a judicial
warrant**" to purchase or use commercial data.
- **Result:** agencies (ICE, CBP, FBI, DIA, military, IRS-CI, Secret Service, and local
police) have **purchased** location, utility, and other data to do **warrantlessly** what
Carpenter said needs a warrant.
The ODNI's own findings — and its next move
- A **declassified ODNI report** found the Intelligence Community buys **increasing amounts
of "commercially available information" (CAI)** — including sensitive location data — and
**"does not know how much it is collecting, what types, or what it is doing with it."**
- In 2025–2026, ODNI moved to create an **Intelligence Community "Data Consortium"** — a
**centralized marketplace** where agencies could shop for broker data. Privacy groups (EFF)
oppose it as institutionalizing the loophole.
The legislative response (blocked so far)
- **Fourth Amendment Is Not For Sale Act** — would **require agencies to get a warrant**
before buying data they'd otherwise need one to collect. **Passed the House (2024)** with a
bipartisan majority; the **Senate never voted.** Advocates hoped to attach it to **Section
702 reauthorization** (see [[../Legislation & Legal/00-section-702-and-the-data-broker-fight]]).
- **FTC enforcement** has been the main *actual* check — see
[[../Case Studies/00-documented-data-purchases-and-ftc-actions]].
Why this exceeds the Snowden-era programs
/ 2013 NSA programs / 2026 commercial surveillance /
/---/---/
/ Legally bounded to foreign-intelligence purpose / No mission limit — sold to anyone /
/ Metadata + targeted content / Precise, continuous location + behavioral profiles /
/ Government-operated, oversight (however weak) / Private, opaque, minimal oversight /
/ Required legal authority to collect / Collected by default via apps/ads; govt just **buys** it /
Sources
- Brennan Center — "Closing the Data Broker Loophole" (detailed report)
- EPIC — ODNI CAI report analysis; EFF — ODNI "Data Consortium" opposition
- NPR (2026-03-25) — government buying data without a warrant
- FTC / The Record — RTB & failed-bid data retention findings
< prev page 1/1 next