Daily Surveillance Briefing: March 31, 2026

Security cameras mounted on a building wall against a cloudy sky

Today's Headlines:

20 days until Section 702 expires. SAFE Act reform stalls as bipartisan support fragments. Clean extension likely wins.
Tennessee Highway Patrol got Clearview AI pitch. Demo in February, $1M quote. State AG already on record opposing it.
Angela Lipps GoFundMe tops $70K. Tennessee grandmother wrongfully jailed 5 months on facial recognition match finds support.
IAPP Summit Day 2. State privacy law fragmentation and AI governance dominate DC sessions.
Maine privacy bill bounces back to Senate. House passed with amendments. Data minimization requirements in play.

20 Days: Section 702 Reform Slips Further Away

The April 20 deadline is now under three weeks out. The bipartisan SAFE Act, the only bill that would require warrants for American queries and close the data broker loophole, is stalled.^[1]

The math keeps getting worse for reformers. 98 House Democrats in the Congressional Progressive Caucus voted to oppose any reauthorization without "dramatic reforms." But a dozen GOP holdouts plus Luna's SAVE Act voter ID demands mean Speaker Johnson can't pass anything controversial. The path of least resistance: another clean extension.^[2]

Senator Durbin called for reforms last week from the Judiciary Committee, but the White House isn't listening. The administration wants Section 702 intact. So does the intelligence community. That's a lot of weight against reform.^[3]

The EFF put it bluntly: "Prior to the 2024 reauthorization, Section 702 was already misused to run improper queries on peaceful protesters, federal and state lawmakers, Congressional staff, thousands of campaign donors, journalists, and a judge." The FBI's track record didn't change in 2024. It won't change in 2026.^[4]

Twenty days left. 130+ civil rights groups demanding action. Zero momentum in Congress.

Section 702 explainer | CPC opposition vote

Tennessee Highway Patrol Gets $1 Million Clearview AI Pitch

While Angela Lipps sits in headlines for being wrongfully jailed on a Clearview AI match, Tennessee's state police were getting a sales demo from the company.^[5]

On February 24, an intelligence analyst for the Tennessee Highway Patrol sat down with a Clearview AI rep. The quote: "just under" $1 million. As of March 25, "no action" had been taken on the proposal.^[6]

The timing is terrible, or revealing. Tennessee Attorney General Jonathan Skrmetti already filed an amicus brief with 23 other states challenging Clearview's practice of scraping billions of photos from social media without consent. The state's top lawyer calls it a privacy violation. The state police are taking demos.^[7]

The waiver terms require officers to consent to biometric data collection during the demo. Clearview wants webcam photos of the cops testing the system, stored indefinitely. That's the price of a free trial.^[8]

Tennessee residents can't opt out of Clearview's database. Only 13 states offer that option. Your face is already in there.

Full coverage: Tennessee Clearview AI demo

Angela Lipps GoFundMe Tops $70,000

The Tennessee grandmother who spent five months in jail after Clearview AI flagged her for crimes in North Dakota, a state she'd never visited, is finding support. Her GoFundMe has raised over $70,000.^[9]

Lipps lost everything during her wrongful incarceration: her home, her car, her dog. The charges were dismissed December 23 after her lawyers found bank records proving she was in Tennessee when the North Dakota frauds occurred. Basic police work that should have happened before the arrest.^[10]

Fargo police announced they'll stop accepting AI results from West Fargo's Clearview system. "It's their own system. We don't know how it's run or how it's overseen," a spokesman said. One department realized it couldn't trust another's AI. That's where we are.^[11]

Lipps' attorneys are exploring civil rights claims. No lawsuit filed yet. Meanwhile, thousands of law enforcement agencies still use Clearview AI with minimal oversight. The next Angela Lipps case is already in the pipeline.

Full coverage

IAPP Summit Day 2: State Privacy Chaos Takes Center Stage

Day two of the world's largest privacy conference in DC. Today's sessions focus on the 21-state privacy law mess and what to do about it.^[12]

The fragmentation is real. January 2026 brought Indiana, Kentucky, and Rhode Island's privacy laws online. California's new automated decision-making requirements kicked in. Each state has different rules, different exemptions, different enforcement. Companies are drowning in compliance.^[13]

AI governance remains the hot topic. The consensus: nobody knows how to regulate agentic AI systems. The models that act autonomously, make decisions, and chain actions together, and current privacy frameworks weren't built for them. Multiple sessions are trying to figure out what "consent" even means when AI is the one collecting data.^[14]

Meanwhile, a new political operation called Innovation Council Action announced plans to spend $100 million in the 2026 midterms backing candidates aligned with AI deregulation. David Sacks gave his blessing. The lobbying war is heating up.^[15]

State Privacy Bills: Kentucky Passes, Maine Bounces

Kentucky HB 692 passed the Senate and heads to the governor. The bill adds "automatic content recognition" to the state's sensitive data category. Your smart TV's viewer tracking would fall under stricter consent requirements. Samsung and Vizio are paying attention.^[16]

Maine's consumer privacy bill passed the House for a second time but with amendments. It now goes back to the Senate for concurrence. The bill includes data minimization requirements modeled on Maryland's strict approach. If it passes, Maine becomes the 21st state with comprehensive privacy law.^[17]

Illinois' biometric ban bill got new attention this week. State Rep. Kelly Cassidy introduced legislation that would ban law enforcement from using biometric identification systems entirely: fingerprints, facial recognition, iris scans, all of it. Chicago PD is fighting back, crediting facial recognition with solving a January homicide. The debate is getting louder.^[18]

Full coverage: Illinois facial recognition ban | State legislation tracker

UK Police Expand Live Facial Recognition

Two UK police forces made arrests using live facial recognition this month.^[19]

Merseyside Police deployed the technology in Birkenhead, scanning crowds and identifying individuals with outstanding warrants. First arrests reported. Norfolk Constabulary ran a two-day deployment in Norwich, scanning approximately 50,000 faces and generating "multiple positive matches."^[20]

The UK is racing ahead with live facial recognition while the EU debates it. No opt-out. No notice. Walk through a town center and your face gets scanned against police watchlists. The surveillance state is being built in public, one deployment at a time.

Data Breach Updates

Companies House (UK): British government agency's WebFiling service back online after security flaw exposed company information since October 2025. Every UK business was potentially affected.^[21]
Woflow: ShinyHunters hit the AI business workflow platform. Class action filed over the breach. The hacking group's March 2026 spree continues.^[22]
Apex, NC: Town disclosed 22,000 residents had information stolen in a 2024 cyberattack. Disclosure came in March 2026, over a year late.^[23]

Quick Hits

FBI Director Patel hack update: The Handala hack group continues releasing Kash Patel's personal Gmail contents from 2010-2019. FBI confirms no government information involved. The breach was retaliation for FBI domain seizures.^[24]
DHS surveillance spending: Internal documents show DHS preparing to spend hundreds of millions on AI-powered surveillance trucks, 148 camera tower upgrades, and 50 new towers for border monitoring.^[25]
DeepSeek outage: China's DeepSeek chatbot went down for over seven hours, its longest outage since the 2025 breakout. No explanation given.^[26]

What to Watch

IAPP Summit Day 3 (April 1): Workshops and training sessions begin.
EU CSAM scanning expires (April 3): Platform scanning becomes legally uncertain. 3 days.
Meta smart glasses deadline (April 6): Senate demanding answers on Name Tag facial recognition. 6 days.
Section 702 sunset (April 20): 20 days. Reform dead. Clean extension incoming.