Daily Surveillance Briefing: April 2, 2026

Today's Headlines:

EU Chat Control scanning expires tomorrow. Parliament killed the extension 311-228. Google, Meta, Microsoft, and TikTok lose their legal basis to scan your messages starting April 3.
ATF ran 549+ facial recognition searches on gun owners using Clearview AI and Vigilant Solutions, with zero policy, zero training, and zero risk assessment. A GAO audit caught them.
Seattle City Council voted 6-3 to deactivate all 62 surveillance cameras. The city has 90 days to pull the plug.
64 civil society groups demand Congress block Meta's plan to put facial recognition in Ray-Ban smart glasses. Kenya data-labeling scandal adds fuel.
18 days until Section 702 expires. Boebert and Luna are blocking Johnson's procedural vote. He can only lose one Republican.

Chat Control Dies Tomorrow. Here's What That Means.

On April 3 (tomorrow) the EU's voluntary CSAM scanning rules expire. And this time, nobody's coming to save them.^[1]

The European Parliament voted 311-228 on March 26 to reject an extension of the ePrivacy Directive derogation that allowed platforms to scan private messages for child sexual abuse material. The rules have been in place since 2021. Starting tomorrow, companies lose the legal basis to scan your chats, at least voluntarily.^[2]

Four tech giants publicly fought to keep the scanning authority: Google, Meta, Microsoft, and TikTok. They warned that letting the rules expire would "reduce the legal clarity that has enabled companies for nearly 20 years to detect and report known child sexual abuse material." Translation: we've been reading your messages for two decades and we'd like to keep doing it.^[3]

The backstory matters. On March 11, MEPs tried a compromise: extend scanning until August 2027, but limit it to known CSAM material, ban scanning of end-to-end encrypted messages, and require judicial authorization targeting specific suspects. EU member states rejected those limitations. They wanted broader powers. They got nothing instead.^[4]

Platforms still have to remove illegal content under the Digital Services Act. But proactive scanning of private messages? That authority dies at midnight. The permanent Chat Control regulation (the one that could force backdoors into encrypted messaging) is still being negotiated. Political trilogues are scheduled for May 4 and June 29, with a deal targeted for July 2026.^[5]

Signal has already threatened to leave the EU if forced to break encryption. Tomorrow's expiry buys time. The permanent fight is far from over.

Full coverage: EU Chat Control | Signal's EU exit threat

ATF Used Clearview AI to ID Gun Owners. Nobody Knew.

The Bureau of Alcohol, Tobacco, Firearms and Explosives ran at least 549 facial recognition searches using Clearview AI and Vigilant Solutions over a two-and-a-half-year period, without a dedicated policy, risk assessment, or staff training. A GAO audit caught what ATF's own headquarters apparently missed.^[6]

An April 8 hearing before the House Judiciary Subcommittee on Crime and Federal Government Surveillance laid it out. GAO auditors found that ATF headquarters officials were "initially unaware that ATF staff sent photos" to commercial facial recognition services. The agency claims it stopped using Clearview AI by April 2023. But that claim has a hole in it: ATF was caught requesting facial recognition photos during the investigation of the July 2024 attempted assassination of President Trump.^[7]

ATF's workaround is elegant in its cynicism. Rather than using commercial services directly, the agency now "leverages non-federal facial recognition systems by requesting that state and local partners run searches" on its behalf. Same searches. Different hands on the keyboard. No warrant required.^[8]

What makes this story unusual is who's angry about it. Gun Owners of America flagged the ATF's use of biometric surveillance to identify firearms owners. The ACLU testified at the same hearing about broader federal surveillance abuses. Second Amendment advocates and civil libertarians don't agree on much. They agree on this: federal agencies shouldn't be running your face through AI databases without oversight, policy, or consent.^[9]

Rep. Andy Biggs and Rep. Warren Davidson sent a letter to ATF on March 27 demanding answers. Gene Schaerr of the Project for Privacy and Surveillance Accountability, James Czerniawski of Americans for Prosperity, and Kia Hamadanchy of the ACLU all testified. Cross-partisan outrage is rare in Washington. ATF managed to unite the left and the right against it.^[10]

Seattle Pulls the Plug on 62 Surveillance Cameras

The Seattle City Council voted 6-3 on March 28 to deactivate all 62 CCTV surveillance cameras across the city. The cameras, spread across downtown, Aurora Avenue North, and the Chinatown-International District, have 90 days to go dark.^[11]

This goes beyond Mayor Katie Wilson's earlier pause on ALPR and CCTV data collection. That was a freeze. This is a kill switch. The council voted to deactivate the cameras entirely, not just suspend data collection.^[12]

The split was telling. Privacy advocates and civil libertarians won the argument. Police Chief Maria Hernandez opposed the move, calling surveillance cameras "a vital tool that have helped us solve numerous crimes." Councilmember Jill Sanchez, who voted for deactivation, framed it differently: "These cameras represent an unacceptable invasion of privacy for our residents."^[13]

Seattle joins a growing list of cities pushing back against surveillance infrastructure. Portland banned city use of facial recognition in 2020. San Francisco did it in 2019. But full camera network deactivation? That's a step further. This is a city telling its own police: we'd rather have less surveillance than more solved crimes. In the current political climate, that's a bold bet.^[14]

Earlier coverage: Mayor Wilson's surveillance pause | Cities fighting surveillance

64 Groups Tell Congress: Block Meta's Facial Recognition Glasses

A coalition of 64 civil society organizations sent letters to Congress, enforcement agencies, Meta, and EssilorLuxottica on March 31 demanding they block Meta's plan to integrate facial recognition into Ray-Ban smart glasses. The Consumer Federation of America and UltraViolet Action led the charge. Public Citizen, Consumer Reports, EPIC, the American Federation of Teachers, and dozens of state advocacy groups signed on.^[15]

The coalition called the plan a "creepy and unacceptable escalation of surveillance." Their timing was deliberate. Senators Markey, Wyden, and Merkley gave Meta until April 6 (four days from now) to answer questions about the Name Tag facial recognition feature. Meta hasn't responded publicly.^[16]

The Kenya scandal keeps making it worse. A Swedish media investigation by Svenska Dagbladet and Göteborgs-Posten found that Meta subcontractors at Sama's facility in Nairobi were data-labeling private footage captured through smart glasses. That footage included bathroom visits, sexual encounters, bank card details, and personal messages. Meta says faces are blurred. Workers say otherwise: "We see everything, from living rooms to naked bodies." Kenya, the UK, and the US are now all investigating.^[17]

An internal Meta document revealed the company's strategy: release facial recognition "during a dynamic political environment where many civil society groups that we would expect to attack us would have their resources focused on other concerns." Sixty-four groups just demonstrated that strategy isn't working.^[18]

Senators demand answers from Meta | Kenya data-labeling scandal

18 Days: Conservative Revolt Meets Progressive Boycott on FISA 702

Section 702 of FISA expires April 20. Speaker Johnson wants a clean 18-month extension. He's running out of Republicans willing to vote for it.^[19]

Rep. Lauren Boebert (R-CO) pledged to tank the procedural rule vote: "I'm a NO on FISA as it stands. I'm a NO on the rule for FISA to boot." Rep. Anna Paulina Luna (R-FL) is conditioning her vote on Senate passage of the unrelated SAVE America Act. With a razor-thin majority, Johnson can lose exactly one Republican on the rule vote. He's losing at least three.^[20]

From the other side: the Congressional Progressive Caucus, 98 House Democrats, already voted to oppose any reauthorization without "dramatic reforms." The bipartisan Government Surveillance Reform Act from Senators Wyden and Lee would require warrants for American queries and close the data broker loophole. The White House doesn't want it. The intelligence community doesn't want it.^[21]

The math: Johnson needs Democratic votes to pass a clean extension, but most Democrats want reforms he can't attach without losing the White House. He needs Republican unity on the rule vote, but Boebert and Luna are holding out for a completely different bill. The vote window is April 14-15. Eighteen days until the authority dies if Congress does nothing.^[22]

Section 702 explainer | Government Surveillance Reform Act | CPC opposition

State Department Orders Diplomats to Kill Foreign Data Privacy Laws

Secretary of State Marco Rubio signed an internal cable on February 18 ordering US diplomats worldwide to lobby against data sovereignty laws. Reuters broke the story on February 25, and it's still gaining traction on HackerNews and in the tech community.^[23]

The cable frames data localization requirements as threats to AI services and cloud computing. It singles out the EU's GDPR as "unnecessarily burdensome." Diplomatic missions got three directives: challenge regulations deemed restrictive, monitor emerging data sovereignty initiatives, and promote international frameworks that keep data flowing across borders, specifically to US companies.^[24]

Techdirt's headline captured the irony: "Rubio To World: Stop Doing The Exact Same Thing The US Just Did." Last year, Rubio ordered diplomats to rally opposition to the EU's Digital Services Act. Now he's targeting data privacy laws in general. The message to the world: your data belongs in American data centers, governed by American rules, accessible to American intelligence agencies.^[25]

Quick Hits

DHS watchlist lawsuit update: The DOJ admitted that DHS agents who threatened immigration enforcement observers in Maine with placement on a "domestic terrorist watchlist" in January 2026 "were not approved or condoned by DHS and were inconsistent with DHS policy." The agents scanned faces and license plates of legal observers. A class action suit filed by Protect Democracy is moving forward.^[26]
ICE budget continues making waves: The $28.7 billion surveillance tech budget (ten times ICE's total surveillance spending over the previous 13 years) is drawing coverage from NPR, the Brennan Center, and Cato Institute. The Brennan Center called it a "deportation-industrial complex." That money buys Zignal Labs social media monitoring (8 billion posts daily), BI2 iris scanners (5 million records), and cell-site simulators for real-time phone tracking.^[27]
Ring-Flock backlash keeps rippling: Security Systems News reports half of surveyed security professionals say the Super Bowl Ring-Flock controversy is still sparking conversations with customers about surveillance practices. Amazon killed the partnership in February, but the trust damage spreads.^[28]
DeleteMe publishes April surveillance guide: JoinDeleteMe's Incognito report for April 2026 focuses on "Navigating the New Age of American Surveillance": practical guidance for consumers worried about government data collection.^[29]

What to Watch

EU Chat Control expiry (April 3): Tomorrow. Voluntary CSAM scanning loses legal basis. Watch for platform responses. 1 day.
Meta senator deadline (April 6): Senators Markey, Wyden, and Merkley expect answers on Name Tag facial recognition. 4 days.
FISA 702 vote week (April 14-15): Johnson's target window. Boebert and Luna blocking. 12 days.
Section 702 sunset (April 20): Legal expiration. No extension means the authority dies. 18 days.
Meta New Mexico trial (May 4): Phase 2 of the state's child exploitation case against Meta. 32 days.
EU CSAR Trilogue Round 2 (May 4): Permanent Chat Control regulation negotiations resume. 32 days.
EU AI Act full enforcement (August 2): Bans real-time biometric surveillance in public. 122 days.