The Government Knows More About You Than You Think

Every American with a smartphone leaves behind a trail.

Where you drive. Where you shop. The websites you visit. The applications installed on your phone. In some circumstances, even visits to medical facilities, religious institutions and other sensitive locations can become pieces of commercially collected information.

For years, Americans have generally assumed that if the government wants detailed information about their private lives, investigators must obtain a warrant or use some other legal process. The growth of the commercial data industry has complicated that assumption.

Today, enormous quantities of information are collected by private companies and data brokers. Government agencies can, under various circumstances and legal authorities, obtain commercially available information from those companies.

The Office of the Director of National Intelligence openly acknowledges that America's intelligence agencies use what it calls "commercially available information," or CAI. The government's definition includes information sold, leased or licensed to the public or nongovernmental organizations.

That information can originate from cellphones, automobiles, household devices and other technology Americans use every day.

The intelligence community says the information can provide critical intelligence value and that its use remains subject to constitutional, statutory and internal safeguards. At the same time, ODNI acknowledges that such databases can reveal extraordinarily sensitive details about individuals. In 2024, it established a policy framework specifically intended to strengthen rules governing their use.

Privacy advocates argue the problem is much larger.

Their concern centers on what has become known as the "data broker loophole."

The Fourth Amendment generally protects Americans against unreasonable government searches. But when information is collected commercially and offered for sale, the legal landscape becomes considerably more complicated.

The issue has attracted growing political attention. In March 2026, a coalition of 18 state attorneys general called on Congress to restrict federal agencies' ability to purchase Americans' digital information without judicial oversight. Their recommendations included warrant requirements and greater transparency surrounding data brokers.

The private marketplace demonstrates just how sensitive commercially collected information can become.

In 2025, the Federal Trade Commission finalized an order against data broker Mobilewalla after alleging that the company had collected and sold sensitive location information, including information associated with visits to healthcare facilities and places of worship.

The debate extends beyond smartphones.

Automated license-plate readers have created enormous networks capable of recording when and where vehicles travel. Facial-recognition systems can identify individuals in photographs and video. Internet advertising systems can generate detailed information about users. Modern vehicles and connected household devices can produce still more data.

None of this means government agencies have unrestricted access to every American's personal information. Different agencies operate under different statutes, policies and constitutional restrictions.

But the technological reality has changed dramatically.

Forty years ago, following someone for days required investigators, vehicles and considerable manpower. Today, pieces of a person's movements and activities may already exist inside privately maintained databases.

Congress has begun confronting another dimension of the problem: foreign access. The Protecting Americans' Data from Foreign Adversaries Act restricts data brokers from providing certain sensitive information about Americans to foreign adversaries, including China, Russia, Iran and North Korea.

That raises an unavoidable question.

If Americans' personal information is sensitive enough to protect from foreign governments, what rules should govern their own government's access to it?

Technology has made surveillance cheaper, faster and less visible than previous generations could have imagined. The next major privacy battle may therefore have little to do with whether government can collect information itself.

It may be about whether government can simply buy information that has already been collected.