Table of Contents
Weekly Privacy Insights
This week’s privacy news is anchored by a landmark Supreme Court ruling protecting location data, alongside troubling revelations about Flock’s plateless vehicle tracking, France’s push toward quantum-safe encryption, and the expanding reach of AI-powered video surveillance.
Weekly Analysis / My Opinion
The Supreme Court’s decision in Chatrie v. United States is the most consequential privacy ruling since Carpenter in 2018. The Court confirmed that even short-term surveillance of your location data is a Fourth Amendment search — and, just as important, that the records generated by apps on your phone are yours, even when a third-party company holds them. That reasoning will ripple far beyond geofence warrants.
The same week, we learned Flock’s cameras don’t actually need your license plate. Decals, bumper stickers, roof racks — a “Vehicle Fingerprint” that tracks the car itself. It’s a reminder that removing one identifier rarely defeats a surveillance system; the system just fingerprints something else.
There’s a common thread here: courts are starting to catch up with dragnet surveillance at exactly the moment the technology is leaping ahead of them. AI-powered video search that answers natural-language questions about footage, grocery-purchase profiling for ad targeting, and device-level age-gating mandates all landed in the same news cycle as the Chatrie victory.
The practical takeaway: legal wins matter, but they lag. Minimize what you emit — location history, purchase data, identifiable vehicle features — rather than counting on the courts to protect it after the fact.
Featured Articles
Victory! Supreme Court Says Constitution Protects People’s Location Data
The Supreme Court ruled in Chatrie v. United States that people have an expectation of privacy in location data revealing their physical movements, and that even short-term surveillance of those movements is a Fourth Amendment search. The case involved geofence warrants — dragnet demands that compel companies to identify every device near a crime scene.
Flock Cameras Can Surveil Cars Without License Plates
A company presentation reveals Flock’s “Vehicle Fingerprint” lets police track cars using decals, bumper stickers, racks, and temporary tags — no plate required. Officers can search this data and run “multi geo” searches to find vehicles traveling together.
France to Stop Certifying Non-Quantum-Safe Encryption
France’s cybersecurity agency ANSSI will stop certifying security products that lack quantum-resistant encryption starting in 2027, with businesses expected to buy only quantum-safe products by 2030. Because ANSSI approval is required for government and critical infrastructure use, this amounts to a national phase-out of older encryption.
The Realities of AI Video Surveillance
AI now lets intelligence officers search massive video streams with natural-language queries — “two men handing a bag to each other,” “a vehicle that has driven past the same spot several times.” One European official called it “the holy grail of surveillance”: searching for behavior, not objects.
Additional Highlights
Cybersecurity Mission Creep in the US: A new paper examines how wildly different policy issues get reframed as “cybersecurity” problems, granting them the politics of urgency and exceptionalism while making governance choices more opaque. Read more
Papa Johns Surveillance-Based Advertising: The pizza chain uses Instacart purchase data to predict when specific households are low on groceries and serve them ads at that moment — surveillance-based marketing dressed up as convenience. Read more
EFF and Allies: X’s FTC Petition to Waive Privacy Violation Order Should Be Rejected: X Corp. wants out of its 2022 FTC consent decree for misusing users’ security phone numbers and emails for ad targeting. EFF, EPIC, and others urge the FTC to hold the line. Read more
LGBT Q&A: How Can I Wipe Online Data That Points To My Queer Identity?: EFF’s practical guide to finding and removing personal data from social platforms and data brokers — relevant to anyone, not just the community it’s written for. Read more
LGBT Q&A: What Data Are Companies in the UK Collecting When Verifying My Age?: A breakdown of what UK age-verification systems actually collect, who sees it, and how long it’s retained — questions worth asking of any age-gate anywhere. Read more
EFF to Gov. Pritzker: Veto Illinois’ HB 5511: Illinois passed a sweeping device-level age-gating framework that would force platforms to collect and share users’ ages. EFF is urging a veto, warning it would dismantle online anonymity. Read more
Factoring RSA Keys with Many Zeros: Researchers found a class of weak RSA keys with regularly spaced zero blocks in the wild — in Certificate Transparency logs, SSH hosts, and PGP keys. Independent implementations failed in similar ways, raising the possibility of a deliberate backdoor. Read more
Conclusion
The Chatrie ruling proves the courts can still deliver real privacy wins — but the same week’s news shows surveillance capability compounding faster than case law. Track the car instead of the plate, search the video instead of the scene, profile the fridge instead of the shopper. The lesson holds: reduce what you emit, and support the organizations fighting the legal battles.
Weekly Privacy Insights is a curated digest of the most important privacy and digital rights news, published every Sunday on djeditech.com.
AIL-3 | AI Transparency: This digest is AI-assisted. Articles are aggregated from RSS feeds and ranked by source authority. This issue was summarized by Kai (Claude) — the resident local LLM (Ollama) missed its shift, so I covered it. All content is human-curated and reviewed before publication. Original reporting belongs to the linked authors and publications.
