Surveillance

BadIn progressUnited States

New York S8102 (Device Age Checks)

NY S8102 · United States · New York
In committee

Would push age verification down to the device, operating system, and app store, so a phone checks your age before its software works normally.

●●● High threatUpdated July 19, 2026Details →
BadLawUnited Kingdom

UK National Security (State Threats) Bill

Bill of the 2026-27 session · United Kingdom
In force; first designations made, including the IRGC

Ministers can designate organizations as tools of foreign states and prosecute support for them. Rammed through the whole Parliament in 29 days.

●●● High threatUpdated July 17, 2026Details →
BadLawEuropean Union

EU Chat Control 1.0 (Scanning Derogation)

Regulation (EU) 2021/1232 · European Union
In force to April 2028 (readopted July 9; E2EE excluded)

The 'temporary' law behind mass scanning of Europe's messages since 2021. A majority of voting MEPs tried to block its July revival and fell short of the absolute majority needed to do it, so suspicionless scanning is law again through April 2028.

●●● High threatUpdated July 9, 2026Details →
BadLawUnited States

Nebraska Parental Rights in Social Media Act (LB 383)

Nebraska LB 383 · United States · Nebraska
Age checks enjoined; parental surveillance dashboard stands

Nebraska's social media age-check law was blocked days before taking effect. The part that survived forces platforms to hand parents their kids' private messages.

●●○ Medium threatUpdated June 27, 2026Details →
BadIn progressCanada

Canada Bill C-22 (Lawful Access Act)

Bill C-22 (45th Parliament) · Canada
Before the Senate

Canada's surveillance rebuild: providers ordered to install monitoring capability, encryption breakable on ministerial demand, and a year of everyone's metadata on file. Passed the Commons; the Senate is what remains.

●●● High threatUpdated June 18, 2026Details →
BadIn progressUnited Kingdom

UK NHS Modernisation Bill

Commons Bill (2026-27 session) · United Kingdom
Committee stage (Commons)

Compels every NHS provider into a single lifetime health record per person, surfaced through the NHS App, the same app ecosystem the digital ID scheme wants to inhabit.

●●● High threatUpdated June 16, 2026Details →
BadLawUnited Kingdom

UK Crime and Policing Act 2026

UK Public General Act 2026 · United Kingdom
In force; facial recognition rules await the code of practice

Turns 50 million driving licence photos into the largest real-name facial recognition database British police have ever had, usable against faces captured live at protests.

●●● High threatUpdated April 30, 2026Details →
BadLawUnited Kingdom

UK Data (Use and Access) Act 2025

UK Public General Act 2025 c. 18 · United Kingdom
In force; digital identity framework live since Dec 2025

The law that built Britain's digital ID rails while everyone watched the data-reform headline: a state-run trust framework and register for identity providers, live since December.

●●● High threatUpdated December 1, 2025Details →
BadIn progressUnited States

Cooper Davis and Devin Norring Act

S.2316 / H.R.4518 (119th) · United States
Referred to committee

Would make platforms report suspected drug activity in users' messages to the DEA, deputizing them as federal informants.

●●● High threatUpdated July 17, 2025Details →
BadIn progressUnited States

STOP CSAM Act

S.1829 / H.R.3921 (119th) · United States
Reported by committee

Would let platforms be sued for 'recklessly' hosting abuse material, which makes offering encryption itself the legal risk.

●●● High threatUpdated June 12, 2025Details →
BadLawEuropean Union

EU AI Act

Regulation (EU) 2024/1689 · European Union
In force; general application from Aug 2, 2026

Sold as banning biometric mass surveillance, written to license it: the prohibitions on real-time face scanning, emotion recognition, and predictive policing all carry law-enforcement carve-outs.

●●● High threatUpdated February 2, 2025Details →
GoodDormantUnited States

Fourth Amendment Is Not For Sale Act

H.R.4639 (118th) · United States
Passed the House in the 118th Congress; died in the Senate

A protective bill that would stop the government buying Americans' data from brokers to sidestep a warrant. Passed the House in 2024, died in the Senate.

●○○ Low threatUpdated January 3, 2025Details →
MixedLawUnited States

Connecticut SB 3 (Online Privacy & Minors)

CT SB 3 · United States · Connecticut
In force since Oct 2024

Adds child-safety and health-data rules to Connecticut's privacy law, with a vague harm-to-minors duty and account-deletion mandates the Attorney General enforces.

●●○ Medium threatUpdated October 1, 2024Details →
BadLawUnited Kingdom

UK Investigatory Powers Act 2016

UK Public General Act 2016 c. 25 · United Kingdom
In force; expanded by the 2024 Amendment Act

The Snoopers' Charter: bulk interception, state hacking, a year of everyone's browsing history on file, and secret orders that can compel companies to break their own encryption.

●●● High threatUpdated April 25, 2024Details →
BadLawEuropean Union

EU Digital Services Act

Regulation (EU) 2022/2065 · European Union
In force; full application since Feb 2024

The EU's speech-control framework: state-certified 'trusted flaggers' whose reports platforms must prioritize, systemic-risk duties over lawful content, and a crisis switch, backed by fines of 6 percent of global revenue.

●●● High threatUpdated February 17, 2024Details →
BadLawAustralia

Australia TOLA (Assistance and Access Act)

Act No. 148 of 2018 · Australia
In force since December 2018

The first Western law built to compel tech companies to help break their own encryption: secret notices, criminal penalties for disclosure, and a 'systemic weakness' safeguard nobody can define.

●●● High threatUpdated December 8, 2018Details →

← All tracked bills