Surveillance Technology

On July 13, 2026, the European Union imposed sanctions on VK Company for developing MAX, a messaging app mandatorily preinstalled on all smartphones, tablets, computers, and smart TVs sold in Russia since September 2025. MAX's terms of service explicitly permit sharing user data with Russian government institutions, and human rights lawyers say law enforcement has access to VK-administered platforms including VKontakte, Odnoklassniki, and MAX. The EU action, part of a package that also sanctioned developers of the FSB's SORM surveillance system, followed a Russian government crackdown on independent apps such as Telegram and WhatsApp. MAX had over 45 million registered accounts and 18 million daily active users as of late 2025.

On June 5, 2026 Microsoft published the conclusion of its internal investigation into the Israeli military's use of Azure cloud and other Microsoft products. The review acknowledged prior gaps and committed to strengthening human rights governance procedures, expanding internal escalation paths for misuse allegations, and tightening contract language. Human-rights advocates and Microsoft employees criticized the review as insufficient because it did not commit to terminating identified contracts or publish the underlying findings. The review followed sustained internal organizing and external reporting on mass surveillance of Palestinians via Azure.

Middle East Eye reported in June 2026 that Israeli spyware firm NSO Group continued to target WhatsApp users with Pegasus despite a binding US court order arising from the Meta v. NSO Group litigation. The reporting cited evidence of continued infections after the judgment, raising the prospect of contempt proceedings and renewed pressure on US sanctions enforcement against the company.

In April 2026, the EFF published analysis showing Palantir's ELITE tool is used by ICE for mass deportation sweeps, contrary to Palantir's claims of 'prioritized enforcement.' Sworn testimony revealed ICE agents use ELITE to determine where to conduct deportation sweeps using data from 'all kinds of sources' including Medicaid. Nearly 1 in 5 ICE arrests were of Latine persons with neither criminal history nor removal order. Reports link Palantir systems to facial recognition used to identify people recording law enforcement. The tool has been connected to deaths of Renee Good and Alex Pretti. Palantir publicly embraces UN Guiding Principles on Business and Human Rights.

On February 23-24, 2026, xAI reached agreement with the Pentagon to deploy Grok on classified military systems at Impact Level 5 (IL5) - the highest military AI security classification. Unlike Anthropic, xAI accepted the Pentagon's 'all lawful use' standard without restrictions on autonomous weapons or mass surveillance. The deal positions Grok to replace Claude across up to 3 million DoD personnel, with potential applications in intelligence analysis, weapons development, and battlefield operations.

In January 2026, reporting revealed that ICE was using a Palantir-built tool called ELITE that taps Medicaid data to identify and arrest people for deportation. The tool maps potential targets and provides 'confidence scores' for individuals' current addresses. A data-sharing agreement between ICE and the Centers for Medicare and Medicaid Services gave ICE access to personal data of nearly 80 million Medicaid patients. The Electronic Frontier Foundation challenged the use of healthcare data for immigration enforcement, arguing patients never consented to their health-related information being repurposed for deportation.

On December 30, 2025, the Treasury Department's Office of Foreign Assets Control removed three executives linked to the Intellexa commercial spyware consortium from its sanctions list. The individuals had been sanctioned by the Biden administration in 2024 for enabling spyware (including Predator, capable of one-click and zero-click device compromise) used to target U.S. government officials, journalists, policy experts, opposition politicians, and activists worldwide, as part of a broader effort under Executive Order 14093 to curb commercial spyware. Treasury and State Department officials offered only a vague characterization of the removal as a 'normal administrative process,' without publicly explaining what changed in the underlying conduct that had justified the original designations.

The US Federal Communications Commission designated DJI as a national security threat and banned its communications equipment from use in the United States in December 2025.

Following the Guardian's investigation revealing mass Palestinian surveillance via Azure, Microsoft ceased and disabled specified Israel Ministry of Defense subscriptions including cloud storage and AI services. Microsoft President Brad Smith stated 'We do not provide technology to facilitate mass surveillance of civilians.' This was the first known case of a US tech company withdrawing services from the Israeli military since the Gaza war began. However, Microsoft's wider relationship with the IDF remained intact, and Unit 8200 reportedly migrated the surveillance data to Amazon Web Services.

A joint Guardian/+972 Magazine/Local Call investigation revealed Microsoft provided customized Azure cloud infrastructure to Israel's Unit 8200 intelligence unit for storing recordings of millions of daily Palestinian phone calls. By July 2025, the surveillance system held 11,500 terabytes of military data stored on Azure servers in the Netherlands and Ireland. Microsoft CEO Satya Nadella met with Unit 8200's commander in late 2021 to discuss the collaboration. Sources within Unit 8200 said the data was used to research and identify bombing targets in Gaza and to blackmail Palestinians in the West Bank.

The One Big Beautiful Bill Act, signed by President Trump on July 4, 2025, includes provisions that effectively grant Anduril Industries a monopoly on new autonomous surveillance towers for US Customs and Border Protection across both southern and northern borders. CBP confirmed to The Intercept that Anduril is now the country's only approved border tower vendor. Anduril's ASTs cover an estimated 30% of the US southern land border, using AI and computer vision to detect, identify, classify, and track people crossing the border. Civil liberties groups have raised concerns about the humanitarian impact of automated border surveillance.

Founders Fund, co-founded by Palantir chairman Peter Thiel, has been a major investor in Palantir Technologies since its founding in 2003. Palantir built the ImmigrationOS platform for ICE, receiving a $30 million contract in 2025. The Electronic Frontier Foundation reported in January 2026 that ICE uses a Palantir tool that feeds on Medicaid and other government data to identify and track people for arrest. The American Immigration Council documented how the system enables mass surveillance of immigrant communities. Founders Fund's continued investment in and promotion of Palantir directly supports the expansion of government surveillance infrastructure.

Paul Graham publicly criticized Palantir Technologies over its $30 million ImmigrationOS contract with ICE, urging programmers not to work for 'the company building the infrastructure of the police state.' He pressed a Palantir executive to commit not to build things that help the government violate the US constitution.

World Uyghur Congress filed complaints in French courts (April 7 and September 8, 2025) against Huawei France, Hikvision, and Dahua for complicity in crimes against humanity against Uyghurs. Charges include genocide, human trafficking, aggravated servitude, and concealment. Allegations state Huawei participated in developing innovative police laboratories in East Turkistan, testing systems for detecting Uyghurs in crowds. Supported by Don't Fund Russian Army NGO.

Citizen Lab's March 2025 forensic report identified Paragon Solutions' Graphite spyware infrastructure operating in 12 jurisdictions including Australia, Canada, Cyprus, Denmark, Israel, Singapore, the United Kingdom and the United States. While Paragon publicly marketed itself as selling only to democracies and committing to no targeting of journalists or civil society, Citizen Lab's evidence raised questions about how those commitments were enforced. Paragon disputed some findings.

In February 2025 WhatsApp and forensic researchers at Citizen Lab disclosed that Paragon Solutions' Graphite spyware had been deployed against approximately 90 WhatsApp users worldwide, with confirmed Italian targets including investigative journalist Francesco Cancellato, head of the migrant-rescue NGO Mediterranea Saving Humans Luca Casarini, and activists working with refugees crossing the Mediterranean. Paragon, which had marketed Graphite as a 'responsible' alternative to NSO's Pegasus and was acquired by US PE firm AE Industrial Partners in 2024, publicly stated it had terminated its contract with Italy after the Italian government refused an audit. Italy denied authorizing targeting of journalists.

Google removed its commitment to abstain from using AI for weapons and surveillance from its updated AI Principles. The prior version stated the company would not pursue 'weapons or other technologies whose principal purpose or implementation is to cause or directly facilitate injury to people' and 'technologies that gather or use information for surveillance violating internationally accepted norms.' Amnesty International called it 'a shame that Google has chosen to set this dangerous precedent.'

Nvidia processors have been integrated into Israeli military systems, including the Elbit Systems Lanius drone which uses the NVIDIA Jetson TX2 AI processor. Nvidia has its second-largest R&D center in Israel with 13% of its global workforce based there, and collaborates with over 800 Israeli startups, some contributing to military technology. In January 2025, Nvidia announced a $500 million investment in a new AI research center near Haifa. The American Friends Service Committee (AFSC) has flagged the dual-use potential of Nvidia technologies for surveillance and military applications in the context of the Israel-Palestine conflict.

Oracle settled a class action lawsuit for $115 million after plaintiffs alleged the company surveilled consumers online and offline, compiled personal data into detailed profiles including geolocation, finances, demographics, interests, and health data, and sold those profiles to third parties. Oracle's 'coretag' tracking code was embedded on thousands of websites to intercept consumer communications. Oracle claimed to have amassed dossiers on 5 billion people. Court granted preliminary approval August 2024.

In July 2024, Oracle settled a class action lawsuit for $115 million over allegations it operated a 'worldwide surveillance machine' collecting detailed personal data on approximately 5 billion people. The lawsuit alleged Oracle compiled 'digital dossiers' tracking where people browsed, banked, dined, shopped, and used credit cards, then sold this data. Larry Ellison had publicly acknowledged the data collection scope in 2016. Oracle agreed to stop gathering user-generated information from URLs of previously visited websites and collecting text from online forms.