Daily Surveillance Briefing: June 6, 2026

A line of closed Capitol Hill hearing room doors with red warning lights glowing above them — Photo via Unsplash

Today in Surveillance:

Senate kills FISA 702 deal. 7 Republicans join Democrats in stunning rebellion. The cloture vote to advance reauthorization failed Friday night. The sticking point isn't surveillance, it's Trump picking Bill Pulte, a housing official with zero intel experience, as acting Director of National Intelligence. The deadline is six days away [1][2][3].
Trump tells Pulte to fire intel workers and be "less shackled." The Wall Street Journal published the message Friday. Trump wants Pulte to clean house at the Office of the Director of National Intelligence. The same office that runs the warrantless surveillance program [4].
Connecticut becomes the second state to ban surveillance pricing. Gov. Ned Lamont signed SB 4 on Friday, a sweeping package that includes a data broker deletion system modeled on California's Delete Act, a ban on geolocation data sales, facial recognition disclosure rules, and a prohibition on automated price personalization [5][6].
Amazon Ring hit with class action: "Tracking millions without consent." A new lawsuit alleges Amazon's Ring doorbell facial recognition runs without meaningful user knowledge or opt-in. Plaintiffs are seeking $5 million [7][8].
Telegram's Pavel Durov: Russia's internet crackdown helps U.S. spies. The Telegram founder broke from his usual tone Friday to publicly argue that Russian app bans and censorship are pushing citizens onto platforms that expose them to U.S. surveillance. "It's just changing the packaging without changing the core reality," he wrote [9].
Apple Photos BIPA class certified in Illinois. A federal judge approved class action status in a biometric privacy suit over Apple's Photos app. Apple now faces the same per-scan damages regime that sank Facebook's facial recognition [10].
Signal and DuckDuckGo are weighing a Canada exit. Both companies say the federal "lawful access" bill, which would force backdoors into encrypted services, could force them out. The Liberals say they won't split the controversial sections off [11].

Senate Kills FISA 702 Deal: 7 Republicans Join Democrats Over Trump's Pulte Pick

The Senate failed to advance FISA Section 702 reauthorization on Friday when 7 Republicans joined every Democrat in voting against cloture. The procedural vote fell short 45-52, killing the deal that intelligence agencies and leadership in both parties had been pushing for weeks [1][2][3].

What stopped it wasn't warrantless surveillance. It wasn't a warrant requirement. It wasn't a CBDC rider. It was Bill Pulte, the former Federal Housing Finance Agency director Trump installed as acting Director of National Intelligence in early June [1][2].

Pulte has no intelligence community experience. None. He ran the mortgage-finance regulator. Senate Democrats, and a bloc of seven Republicans led by Sens. Mike Lee, Rand Paul, and others, said they would not hand the surveillance state to someone they view as unqualified and unaccountable. "Democrats are giving Trump a choice," Sen. Mark Warner warned: Pulte, or 702 [1][3].

The Hill reported that the failed vote effectively killed the underlying reauthorization bill. With six days until the June 12 expiration, the path forward is unclear. House-passed 3-year extensions are dead. The 45-day short-term fix that bought time in April is fully spent. The Brennan Center's running 2026 resource page is now tracking what happens next in real time [3].

If Congress does nothing on June 12, new surveillance authorizations stop. Existing FISA Court certifications keep ongoing collection running until as late as April 2027. The "expiration" is more theatrical than operational, but the pressure point it gives reformers is real, and Friday's vote shows the pressure is being used.

Trump Tells Pulte to Fire Intel Workers: "Be Less Shackled"

The Wall Street Journal published an exclusive on Friday: Donald Trump has urged acting Director of National Intelligence Bill Pulte to fire "a lot of people" at the intelligence community and be "less shackled" in how he runs the office [4].

Trump publicly backed away from making Pulte the permanent nominee earlier in the week, telling reporters April 4 that Pulte "won't be" his pick for the Senate-confirmed role. But he's leaving him in the acting seat, and pushing him to gut the staff. The Guardian confirmed the WSJ account Friday, citing its own White House reporting [4].

Why this matters: the Office of the Director of National Intelligence oversees the entire 18-agency U.S. intelligence community, including the NSA and CIA. The same office that runs Section 702 collection, that decides what gets shared with the FBI, and that determines when a "702-incidentally collected" American gets searched. Trump's instruction to fire staff is, in practice, a directive to hollow out the institution that the surveillance state runs through.

Friday's failed cloture vote is the Senate's response. Democrats and seven Republicans are saying: we won't reauthorize a program for an office whose leadership is openly hostile to the institution.

Connecticut Becomes the Second State to Ban Surveillance Pricing

Connecticut Gov. Ned Lamont signed SB 4 on Friday, a sweeping privacy package that makes Connecticut the second state in the country to ban surveillance pricing, after Colorado's SB 26-050 took effect in 2024 [5][6].

SB 4 is broader than the Colorado law. It creates a state-level deletion system modeled on California's Delete Act: residents can submit a single request through a portal to have data brokers remove their personal information, no per-broker opt-out loops required. It also bans the sale of precise geolocation data. It forces businesses using facial recognition to provide notice and abide by restrictions on how biometric databases are maintained. It expands Connecticut's existing consumer privacy framework, dropping the threshold to 35,000 consumers (from 100,000), adding automated profiling protections, and bringing automated decision-making transparency into scope [5].

The surveillance pricing ban itself targets the practice of using personal data, location history, purchase patterns, browsing behavior, to charge different customers different prices for the same goods. Walmart, Target, and Amazon are already under congressional investigation for it. Pallone's inquiry identified 25 retailers. Connecticut's law now makes the practice illegal in the state, joining Colorado [5][6].

Lamont also signed SB 5 the same week, a separate law governing AI companion chatbots, automated employment decision tools, synthetic media, and youth online safety. AI companion operators now have to detect self-harm, label themselves as non-human, and restrict minor access when systems can encourage dangerous behavior. Both laws take effect in stages, with the privacy threshold change kicking in July [5].

Amazon Ring Hit With Class Action: "Millions of Americans Are Being Tracked Without Knowing It"

A class action lawsuit filed this week in federal court alleges Amazon's Ring doorbell cameras are running facial recognition on millions of Americans without their knowledge or consent. The plaintiffs are seeking $5 million in damages and an injunction against the feature [7][8].

The lawsuit claims Ring's "Familiar Faces" feature, which uses facial recognition to identify visitors, runs continuously in neighborhoods and across Ring's network without meaningful disclosure to people who walk by the cameras. The plaintiffs argue that Amazon is constructing a faceprint database that includes people who never opted in, neighbors, delivery drivers, passers-by, and that the company's privacy disclosures are buried in menus and terms-of-service clauses that nobody reads [7][8].

AL.com's coverage of the case, published Friday, puts the scope in stark terms: "millions of Americans are being tracked by Amazon's Ring cameras and they have no idea." Reuters, Fast Company, and Law Commentary all confirmed the suit's filing [7][8].

Ring has been here before. The company settled an FTC complaint in 2023 over hacking incidents and employee surveillance of customer feeds. Texas Attorney General Ken Paxton opened a separate investigation into the facial recognition feature in 2024. This is the first federal class action. Amazon has not yet responded publicly to the new complaint [7][8].

Telegram's Durov: Russia's Internet Crackdown "Plays Directly Into U.S. Surveillance"

Pavel Durov, the billionaire founder of Telegram, broke from his usual posture on Friday to publicly criticize Russia's internet censorship. The argument: Russian app bans and platform restrictions are pushing citizens toward Western-controlled services, which means more Russian data flowing through companies that are exposed to U.S. intelligence [9].

"Censorship and internet blocks have only pushed Russia further away from 'digital sovereignty,'" Durov wrote, using the Kremlin's own phrase and turning it into a critique. He said any domestic or foreign app running on iOS and Android is "exposed to targeted U.S. surveillance and censorship through backdoors and app stores", and that building a Russian replacement just changes the packaging without changing the core reality [9].

The comments come days after Apple removed Max, Russia's state-backed messaging app, from the Russian App Store. Moscow has been pushing Max as the replacement for Telegram and WhatsApp since 2024. Durov's argument is essentially: the harder Russia cracks down on Western platforms, the more its citizens end up using the very services Russian policy was supposed to keep them off of, except now with extra resentment and zero trust in the Kremlin's preferred alternatives [9].

Durov is hardly a privacy saint. Telegram is end-to-end encrypted only in "Secret Chats" by default; regular chats are encrypted client-server, not end-to-end. France is pursuing criminal proceedings against him over Telegram's role in enabling criminal activity. But his critique of Russian state censorship is unusually pointed for a CEO whose platform has survived years of Russian attempts to ban it.

Apple Photos BIPA Class Certified in Illinois, $1,000-Per-Scan Liability Now in Play

A federal judge in Illinois certified a class action on Friday alleging that Apple's Photos app violated the state's Biometric Information Privacy Act. The case now moves toward discovery and potential trial [10].

BIPA is the strictest biometric privacy law in the country. It requires informed written consent before a company collects or uses a faceprint, fingerprint, or iris scan. The law allows statutory damages of $1,000 per negligent violation and $5,000 per intentional or reckless violation. Facebook paid $650 million to settle a 2021 BIPA suit over its face-tagging feature. Google paid $100 million. TikTok paid $92 million. Snap settled for $35 million [10].

Apple's Photos app uses on-device face recognition to group photos by person. Apple's argument: the faceprints never leave the device, so there's no "collection" under BIPA. Plaintiffs' counter: the law's plain text covers the act of scanning, not just the act of transmitting. The judge agreed with the plaintiffs' reading for purposes of class certification [10].

If the case goes to trial and Apple loses, the per-scan damages model means a single user's 10,000 photos could be worth millions in statutory damages. Multiply by millions of Illinois users, and the exposure is in the billions.

Weekend Breach Watch: Health Club Chain and El Camino College

Two breach disclosures dropped Saturday morning [12][13].

Health Club Chain: A multi-state health club operator is being sued for allegedly hiding a data breach affecting an undisclosed number of members. Law360 reports the company knew about the intrusion for months before notifying affected members. The complaint alleges the data includes names, addresses, payment card information, and, in some cases, health information tied to specific club programs. The case is in early stages; the company has not yet filed a public response [12].

El Camino College / Canvas: El Camino College, a community college in California, is publishing proactive response plans after the broader Canvas LMS data breach that affected 275 million students nationwide in May. The college is the largest single named institution in the post-mortem. El Camino's IT team is now reviewing every connected third-party tool that integrates with the Canvas platform [13].

Both stories are early. We'll update when more details land.

Quick Hit: EFF Says Surveillance Tech Is Losing

The EFF published a Tuesday piece titled "We're Fighting Mass Surveillance Tech, and Winning" that cataloged recent wins against facial recognition, ALPR, and AI surveillance deployments. Cities that said no. Schools that paused. Laws that passed. It's a useful counter-narrative to the "surveillance is inevitable" story [14].

The argument: most surveillance tech still requires buy-in from local officials, and local officials are now accountable to residents who actually read the contracts. The EFF cites Berkeley's Flock vote delay, Pennsylvania ALPR transparency fights, and the EFF's own ALPR mission-creep investigations as evidence. The piece is also a fundraising pitch, they're running a major-gift push through mid-June [14].

What to Watch

June 12: FISA Section 702 expiration. Six days. The Senate's failure Friday means the path forward requires either a leadership breakthrough, a clean short-term extension, or letting the program "go dark" on new authorizations. Watch for Sen. Mike Lee and Sen. Dick Durbin joint statements, they've been the most active reformers in the chamber.
Pulte at ODNI: The acting DNI's next move matters. If he follows Trump's instruction to fire intel staff, expect a fresh round of congressional pressure. If he backs off, the FISA logjam might break.
Connecticut SB 4 implementation: The deletion portal needs to be built. The 35,000-consumer threshold takes effect in July. Watch for the AG's first enforcement actions against data brokers operating without registration.
Canada lawful access vote: The Liberals say they won't split the encryption-breaking sections off the bill. Signal and DuckDuckGo are signaling they're out if it passes. Watch for the Standing Committee on Public Safety and National Security hearings, that's where the bill heads next [11].
Ring class action: Amazon's response is the next marker. If they move to dismiss, look for the plaintiffs to file an amended complaint adding state AG attention (Texas, California, and Connecticut have all signaled interest).
Apple BIPA discovery: Class certification is the legal hurdle. The next one is damages. Watch for settlement talks in 90-120 days, Apple's typical pattern is to settle rather than risk a runaway jury.