Digital surveillance state expansion
Digital surveillance state expansion is one continuing mechanism: states extending lawful and extra-legal collection of communications, location, biometrics, and device data at population scale, through statutes, intelligence programmes, and commercial spyware, faster than independent oversight. It is a mechanism with dates, public laws, leaks, and consortium investigations. Its strongest welfare pathway: it weakens Having a say in government, a worse welfare reading.

Read the full background
What this driver is
Digital surveillance state expansion is one continuing mechanism: states extending lawful and extra-legal collection of communications, location, biometrics, and device data at population scale, through statutes, intelligence programmes, and commercial spyware, faster than independent oversight. It is a mechanism with dates, public laws, leaks, and consortium investigations. It is not a mood called “privacy is dead,” not a unique subject-count integer invented here, and not a brochure about smart cities.
The driver is not the LIVE metric Digital Surveillance Intensity, a global intensity series. It is not Digital Censorship, Personal Data Protection, or State Repression as a second name for the same file. Those neighbouring nodes can move with this expansion. They do not replace the June 2013 NSA disclosures, China’s 2017 Cybersecurity Law and National Intelligence Law, the July 2021 Pegasus Project, or Public Law 118-49 of 20 April 2024 reauthorising FISA Section 702. It is not Ukraine war. It is not Glavlit-era Soviet censorship hung on a 21st-century phone.
It applies from the 5–6 June 2013 Guardian/Washington Post NSA files through the 2016 UK Investigatory Powers Act, the 2017 PRC statutes, the 2021 Pegasus leaks, France’s 2021 global-security law, and the 20 April 2024 U.S. 702 reauthorization. It is not territorial-revisionism (1918–45).
The legal core is the Foreign Intelligence Surveillance Act Section 702 architecture, reauthorized as the Reforming Intelligence and Securing America Act, Public Law 118-49 of 20 April 2024; the PRC Cybersecurity Law effective 1 June 2017 and National Intelligence Law adopted 27 June 2017; the UK Investigatory Powers Act 2016; and the Pegasus Project publications of July 2021. A ministerial claim that collection is “targeted” does not change those instruments. This page does not invent a unique warrantless-query census.
Mechanism
The expansion moves welfare through named channels.
First, bulk and incidental collection under foreign-intelligence statutes. Section 702 authorises targeting of non-U.S. persons reasonably believed to be abroad; U.S. persons’ communications are collected incidentally and later queried. On 20 April 2024 Joe Biden signed Public Law 118-49, extending Title VII two years after a warrant requirement for FBI U.S.-person queries failed on the House floor. Critics called it an expansion of a warrantless programme; the Department of Justice called 702 indispensable and cited internal query-compliance figures. Those figures stay on the named DOJ releases. This page does not copy a unique FBI-query integer as Contribution.size.
Second, domestic legal duties to assist. China’s Cybersecurity Law (effective 1 June 2017) and National Intelligence Law (adopted 27 June 2017) require network operators and organisations to support national intelligence work. Xi Jinping is the live head of state of that legal order. Those statutes are completed instruments, not a unique CCTV-camera census.
Third, commercial spyware as a state accessory. On 18 July 2021 Forbidden Stories and Amnesty International, with a consortium of newsrooms, published the Pegasus Project: NSO Group’s Pegasus malware alleged on phones of journalists, opposition figures, and officials. Infection of each listed number is not established here. The live Factrail file on UAE/NSO tools is neighbouring. This page does not invent a unique victim headcount.
Fourth, criminal-procedure and assembly overlays. France’s global-security law, promulgated 25 May 2021 under Emmanuel Macron, tightened rules around images of police and related surveillance. Thierry Breton’s Commission CSAM proposal is a neighbouring child-protection/scanning file already stored on digital-rights facts; it is not reminted here. Edward Snowden, whose 2013 disclosures opened the public file, is unresolved. Merrick Garland is unresolved.
Fifth, denial versus documentation. Governments call each layer targeted, judicially overseen, or necessary against terrorism. Independent inspectors, FISC opinions, and consortium investigations document query abuse, zero-click infection, and localisation-plus-assistance duties. Timing is hours for an implant and years for a reauthorization. A later sunset without renewal, a later warrant rule, or a later measured infection series would be a new fact.
Evidence base
The best evidence is public laws, dated leaks, and consortium investigations.
Public Law 118-49, the Reforming Intelligence and Securing America Act, became law on 20 April 2024 (https://www.congress.gov/bill/118th-congress/house-bill/7888 (opens in a new tab)). The Guardian’s 6 June 2013 NSA files opened the public bulk-collection file (https://www.theguardian.com/world/2013/jun/06/nsa-phone-records-verizon-court-order (opens in a new tab)). The PRC Cybersecurity Law took effect 1 June 2017; the National Intelligence Law was adopted 27 June 2017. The Pegasus Project of 18 July 2021 is the spyware documentation wave (https://forbiddenstories.org/case/the-pegasus-project/ (opens in a new tab)). Amnesty International’s technical companion is independent of NSO’s denial.
This page does not invent a unique subject count, query census, or Contribution.size. Where a DOJ fact sheet prints a query-compliance percentage, that percentage stays on the fact sheet. Where Forbidden Stories prints a list of possible numbers, that list is an allegation of selection, not a completed infection census.
Evidence is strongest for a public law, a dated leak with documents, and a consortium technical report. It is weaker for any unique first-week infection coefficient. It is weakest where a “nothing to hide” slogan is asked to rebate Section 702.
Effect on welfare indicators
This driver, when it actually runs, is a first-order channel into civic voice and the practical secrecy of opposition, journalism, and private life.
- Having a say in government: direction lower civic voice when opposition phones, journalists, and ordinary communications can be queried or implanted without an individualised warrant the target can contest. Horizon: hours for an implant, years for a statute. The indicator is higher-is-better. Strengthening this expansion is a welfare-negative move.
Missing coefficients stay missing.
The welfare sign of strengthening digital surveillance-state expansion is negative for civic voice. That is the opposite of treating a two-year 702 extension as a privacy reform that rebates Pegasus.
Interactions and contested points
The mechanism interacts with Digital Surveillance Intensity (the LIVE meter), Digital Censorship, Civic Space, and Personal Data Protection when a query scandal, a spyware leak, and a data-protection statute sit in the same decade. Reinforcement is obvious. Offsetting is the claim that 702 and assistance statutes are the only way to stop terrorism and child abuse. Those claims can be stored. They do not cancel the 2013 documents, the 2021 consortium, or the 2024 reauthorization without a U.S.-person warrant.
The strongest competing view is that 702 targets only foreigners, that PRC assistance duties are ordinary sovereignty, and that Pegasus is a tool against criminals. FISC and inspector-general files have recorded U.S.-person query compliance failures. The National Intelligence Law is a completed assistance duty. Pegasus infection of each listed number is not established here; the consortium’s selection-list and NSO’s denial are both stored.
A second competing view is that this node is the same thing as digital-surveillance-intensity. It is not. That is a LIVE metric. This node is the event bundle: 2013 disclosures, 2017 PRC statutes, 2021 Pegasus, and 2024 702 reauthorization.
Established: NSA files June 2013; PRC Cybersecurity Law 1 June 2017 and National Intelligence Law 27 June 2017; Pegasus Project 18 July 2021; Public Law 118-49 of 20 April 2024. Not established: a unique query, implant, or camera integer as Contribution.size; minted pages for Snowden or Garland. A later sunset or warrant rule would be a new fact.
What it changes
Indicators this driver moves, strongest relation first. Relation strength is separate from the observed state.
Weakens · 75% impact strength
Observed
29.8% of population aged 16-65 years · 8.13 below the normal line (2023)
Worse than normalTwo readings: 30.2% of population aged 16-65 years (2021) and 29.8% of population aged 16-65 years (2023).
20212023 Above normal = better · Relation verified
Key facts moving this driver
Ranked by impact weight, then verification, then recency.
- EU prohibited-AI rules begin applying as Commission guidance clarifies biometric-surveillance boundaries4 February 2025 · Weakening · provisional weight
- EU AI Act adopts biometric-surveillance bans while retaining defined law-enforcement exceptions12 July 2024 · Weakening · provisional weight
- United States reauthorizes FISA Section 702 and broadens covered communications-service providers20 April 2024 · Weakening · provisional weight
- Citizen Lab documents the FORCEDENTRY zero-click exploit used to deliver Pegasus13 September 2021 · Weakening · provisional weight
Driver over time
The dated facts recorded on this driver, oldest first.
6 June 2013 · Weakening
Snowden disclosures expose NSA bulk telephone metadata and PRISM surveillance14 June 2014 · Weakening
China's State Council issues the 2014–2020 Social Credit System planning outline1 January 2016 · Weakening
Xinjiang authorities expand the Integrated Joint Operations Platform for mass data-driven policing29 October 2019 · Weakening
WhatsApp sues NSO Group over alleged Pegasus targeting of about 1,400 users21 April 2021 · Weakening
European Commission AI Act proposal includes law-enforcement exceptions for real-time biometric identification18 July 2021 · Weakening
Pegasus Project documents widespread targeting linked to NSO Group spyware13 September 2021 · Weakening
Citizen Lab documents the FORCEDENTRY zero-click exploit used to deliver Pegasus20 April 2024 · Weakening
United States reauthorizes FISA Section 702 and broadens covered communications-service providers12 July 2024 · Weakening
EU AI Act adopts biometric-surveillance bans while retaining defined law-enforcement exceptions4 February 2025 · Weakening
EU prohibited-AI rules begin applying as Commission guidance clarifies biometric-surveillance boundaries
Causal path
Facts move the driver; the driver moves indicators. Open the full network to inspect each link.
- Facts10 recorded
- moveDriverDigital surveillance state expansion
- weakensIndicatorHaving a say in government
Evidence
Review status of the facts behind this driver.
Documented Jun 2013 – Feb 2025
How Factrail grades evidenceBy the Factrail desk · Method: how we source and score · Last reviewed
Questions
When did Digital surveillance state expansion start?
6 June 2013: Snowden disclosures expose NSA bulk telephone metadata and PRISM surveillance.
How does Digital surveillance state expansion affect people?
It is linked to Having a say in government in Factrail's graph.