Daily Surveillance Briefing: March 15, 2026

What You Need to Know:

DOGE investigation expands. SSA Inspector General probing thumb drive allegations. Congress gave Commissioner Bisignano until March 26 to explain what happened.
FISA 702: 36 days. FBI warrantless queries of Americans jumped 35% in 2025. Progressive groups sent a letter urging Democrats to block reauthorization without reforms.
12th facial recognition wrongful arrest. Angela Lipps spent 108 days in jail because Fargo police believed an algorithm over bank records proving she was 1,200 miles away.
Army renews Clearview AI. Special Forces get four more years of controversial facial recognition. Contract starts March 20.
Privacy Act overhaul proposed. Rep. Trahan released a 68-page blueprint after DOGE data scandals exposed gaps in the 1974 law.

DOGE Investigation Widens: Congress Demands Answers

The Social Security Administration is under mounting pressure to explain how a former DOGE employee allegedly walked out with copies of the Numident database, 548 million records of every American with a Social Security number ^[1].

Here's what happened this week:

March 10: Washington Post breaks the thumb drive story
March 11: SSA Inspector General confirms active investigation
March 12: House Oversight Democrats expand probe
March 14: Congress sets March 26 deadline for Commissioner Bisignano to respond

The whistleblower complaint alleges the former engineer bragged about having "God-level" access to SSA systems after leaving. He reportedly told coworkers at his new job about the databases he'd copied.

SSA called it "fake news." But the IG notified Congress on March 6 that they're investigating. You don't launch investigations into fake news.

Why it matters: This isn't just data exposure. If true, a private individual now possesses the most comprehensive identity database of living Americans, and possibly the dead ones too via the Master Death File. Identity theft, fraud, and targeted harassment become trivially easy.

FISA 702: 36 Days Until Sunset

The clock keeps ticking. Section 702 expires April 20 unless Congress acts ^[2].

New this week:

FBI queries jumped 35%. From 5,518 searches (December 2024) to 7,413 (November 2025). These are warrantless searches of Americans' communications swept up in foreign surveillance.
Progressive groups sent a letter. Dozens of civil liberties organizations urged congressional Democrats to block renewal without privacy safeguards.
Government Surveillance Reform Act. The bipartisan Wyden-Lee bill would require warrants for searching Americans' data and close the data broker loophole. Four-year extension with actual reforms.

The Trump administration still won't say what it wants. Senator Tom Cotton wants 18 months of "clean" extension, no reforms, no debate, business as usual.

Remember: 702 passed in 2024 by one vote. The House was split 273-147 on reforms. This isn't a guaranteed renewal.

Grandmother Jailed 108 Days: The 12th Known Facial Recognition Wrongful Arrest

Angela Lipps was babysitting her grandchildren in Tennessee when U.S. Marshals arrived with guns drawn. Fargo police had identified her as a bank fraud suspect using facial recognition software ^[3].

The problem: She'd never been to North Dakota. Her bank records proved she was home in Tennessee, 1,200 miles away, when the crimes occurred.

That didn't matter. The algorithm said it was her.

The timeline:

July 14, 2025: Arrested at gunpoint in Tennessee
108 days: Held in Tennessee jail awaiting extradition
Two more months: Custody in North Dakota
December 24, 2025: Charges dismissed

By the time she was released, Lipps had lost her home, her car, and her dog. All because a Fargo detective looked at her social media and said she matched based on "facial features, body type and hairstyle."

The ACLU counts this as the 12th known case of wrongful arrest due to facial recognition errors. Most victims are Black. Lipps is white, the technology fails across demographics.

Read the full story: 108 Days for a Face She Doesn't Have

Army Special Forces Renew Clearview AI Contract

The U.S. Army's 1st Special Forces Command just locked in four more years of Clearview AI ^[4].

Contract details:

Start date: March 20, 2026
Duration: Base year plus options through March 2030
Licenses: Five Clearview AI software seats
Bidding: None. Sole source, they say no one else can do this.

The Army's justification: Clearview AI is the "only product capable of meeting operational requirements." They need to "rapidly analyze vast amounts of facial data" to identify "high-value targets."

Translation: Green Berets are using a facial recognition database built by scraping billions of photos from Facebook, Instagram, and LinkedIn without consent. The company faced lawsuits across multiple countries for this. The UK fined them £7.5 million. Australia called it a breach of privacy law.

None of that stopped the Pentagon.

Privacy Act Reform: Trahan Releases Blueprint

Rep. Lori Trahan (D-Mass.) released a 68-page staff report arguing the Privacy Act of 1974 is broken ^[5].

The timing isn't subtle. DOGE's alleged data theft shows exactly what happens when 50-year-old privacy rules meet 2026 technology.

Key problems identified:

Individuals can't effectively sue over Privacy Act violations
Agencies share data without meaningful oversight
No enforcement mechanism for violations
Tech has outpaced the law by decades

The report could serve as a roadmap for bipartisan reform. Whether Congress acts before more data walks out the door is another question.

Quick Hits

FBI surveillance breach investigation continues. The bureau is still assessing damage from the February 17 intrusion into systems containing wiretap warrants and FISA data. Supply chain attack suspected. Chinese hackers likely ^[6].
UK expanding facial recognition vans. Home Office funding 40 new mobile units. Every police force in England and Wales will have access ^[7].
Iran using Russian FindFace. Joint investigation found Iran acquired NtechLab's facial recognition system through shell companies to evade sanctions. Used to crush protests ^[8].
Bumble class action. Lawsuit alleges the dating app failed to prevent a "massive" January 2026 breach. 30GB+ of user data exfiltrated ^[9].

Looking Ahead

Coming up:

March 23-26: RSA Conference 2026 (multiple federal agencies boycotting)
March 26: DOGE-SSA deadline for Commissioner Bisignano response to Congress
March 31: Conduent breach credit monitoring enrollment deadline
April 1: California "Delete My Data" requests open
April 20: FISA Section 702 sunset. 36 days.

References

Last updated: March 15, 2026