Digital-Surveillance Intensity

What this driver is

Digital surveillance intensity is a continuing meter of how far states and their contractors can observe communications, location, biometrics, and device data at population scale. It is a mechanism, not a single statute and not a unique Factrail subject-count integer. It is not the NEW event bundle Digital surveillance state expansion. That bundle holds Snowden-era disclosures, the 2017 PRC statutes, Pegasus, and the 2024 FISA 702 reauthorization. This node is the intensity of collection capacity over time.

The driver is not Digital Censorship (speech removed), not Personal Data Protection (rules that constrain collectors), and not Civic Space as a second name. Those neighbouring nodes can move with this meter. They do not replace it. It is not Ukraine war. It is not Glavlit hung on a smartphone.

It applies globally as a time-varying intensity. The live Factrail series uses Individuals using the Internet (IT.NET.USER.ZS) as a disclosed proxy: a higher share of people online is treated as a larger surface for collection, not as a complete operational definition of surveillance. Missing releases stay missing. This page does not interpolate. Internet use is not the same thing as a warrantless query.

The documentary neighbourhood includes Public Law 118-49 of 20 April 2024, the PRC Cybersecurity Law of 1 June 2017, the Pegasus Project of 18 July 2021, and the June 2013 NSA files. Those instruments belong on surveillance-state-expansion when they name programmes.

Mechanism

Intensity moves welfare through named channels.

First, surface. More people online, more phones, more clouds mean more interceptable traffic. ITU’s internet-user series is that surface, not a camera census.

Second, legal authority. Foreign-intelligence titles, assistance statutes, and data-retention rules convert surface into lawful collection. Section 702 reauthorization and PRC assistance duties are the event-bundle neighbours.

Third, commercial spyware and vendor access. Zero-click implants and lawful intercept interfaces extend the state into devices it does not own. Infection of each listed number is not established here.

Fourth, the proxy’s limits. IT.NET.USER.ZS measures use of the internet, not queries, not implants, not CCTV.

Timing is hours for an implant and years for an ITU point. A later dedicated surveillance index with a public methodology would be a better meter.

Evidence base

The live quantitative record is Individuals using the Internet (% of population) via the World Bank API (https://api.worldbank.org/v2/country/all/indicator/IT.NET.USER.ZS?date=2020:2025&format=json&per_page=20000 (opens in a new tab)). Those figures are the live lineage, not a new invented coefficient. ITU is the producer (https://datahub.itu.int/ (opens in a new tab)).

Context sits at Congress.gov for Public Law 118-49 and at Forbidden Stories for Pegasus, which remain the event-bundle neighbours.

This page does not invent a unique query census, implant total, or Contribution.size. Where ITU prints a user share, that share stays on ITU.

Evidence is strongest for the stored proxy observations and for named statutes on the neighbouring expansion driver. It is weaker for the claim that every internet-user movement was surveillance. It is weakest where a “smart city” brochure is asked to replace the series.

Effect on welfare indicators

This driver, when it actually runs, is a first-order channel into civic voice.

• WJP Rule of Law Index: direction lower when collection without contestable warrants chills opposition, journalism, and private association. Horizon: months to years. Confidence: medium. The indicator is higher-is-better. Strengthening surveillance intensity is welfare-negative on that series. No unique subject integer is invented here.

Missing coefficients stay missing.

The welfare sign of strengthening this meter is negative for civic reliability. That is the opposite of treating a rise in internet use as a privacy good that rebates Section 702.

Interactions and contested points

The mechanism interacts with the NEW surveillance-state-expansion bundle, Digital Censorship, Civic Space, and Personal Data Protection when a statute, a leak, and an ITU point sit in the same decade. Reinforcement is obvious. Offsetting is the claim that more users online is development, not surveillance. Both can be true of the proxy. They are not the same driver.

The strongest competing view is that IT.NET.USER.ZS is too remote to carry “surveillance intensity” at all. That objection is serious. The competing defence is only this: the node already exists, it already has a disclosed proxy, and an honest description is better than a template that pretends internet use is collection.

A second competing view is that this node should be merged into surveillance-state-expansion. It should not. Expansion is the event bundle. Intensity is the meter.

Not established: a unique Factrail subject count. A later dedicated series would update the meter.

What is documented

The clearest surveillance anchor is the Pegasus reporting concerning Hungary. Amnesty International’s 2021 technical and investigative work identified Hungarian journalists and other public-interest targets among devices selected for or affected by Pegasus spyware, prompting demands for a meaningful government response. The issue is not ordinary lawful interception in the abstract; it is the documented availability and use of a highly intrusive tool capable of accessing communications and device data, combined with concerns about authorization, oversight and remedy. A second documented mechanism appeared in Hungary’s March 2025 anti-Pride legislation. Amnesty International reported that amendments expanded the use of facial-recognition technology so authorities could identify participants in prohibited assemblies. That change links surveillance capability to enforcement of restrictions on peaceful assembly, creating a concrete route from identification technology to the deterrence of protest participation.

Who moves this driver

Viktor Orbán is linked through the Pegasus fact and the anti-Pride facial-recognition law. The two routes are deliberately separated. Pegasus concerns covert device surveillance and unresolved questions about targeting and safeguards; the Pride law concerns an explicit statutory expansion of facial identification for petty-offence enforcement connected to assemblies. Their weights therefore differ, with the statutory Pride surveillance leg below the strongest coercive or judicial-restructuring measures.

Welfare pathways

Intensive surveillance can reduce welfare even when it does not produce an arrest. Journalists may protect sources less effectively, civil-society organizers may avoid sensitive contacts, and ordinary participants may refrain from lawful protest if identification creates a credible risk of sanction. These behavioral effects can lower the supply of investigative reporting and public participation. Surveillance also changes the distribution of informational power between state institutions and individuals, increasing the importance of authorization rules, independent oversight and accessible remedies.

What is uncertain

Public evidence does not establish every operational detail of Pegasus use in Hungary or prove that each selected number resulted in successful device compromise. Attribution should therefore remain tied to the documented forensic and investigative record, not expanded into unsupported claims about universal monitoring. Facial recognition presents a different evidentiary posture because the legal authorization is public, but actual deployment still depends on enforcement choices. No numerical estimate is assigned to the number of people deterred or the magnitude of resulting welfare loss.