On a Tuesday in June, as voters arrived at a polling site in Syracuse, New York, to cast their ballots in the state’s primary elections, an unexpected encounter between federal law enforcement and a local poll worker sparked a national conversation regarding the limits of government surveillance and the protections afforded by the First Amendment. Paigelynn Gonyea, a Syracuse resident and election worker, found herself the subject of an investigation by Immigration and Customs Enforcement (ICE) agents not for any activity related to her duties at the polls, but for a social media post she had shared months earlier. The agents, representing the agency’s Office of Professional Responsibility (OPR), confronted Gonyea at her place of work, demanding she remove an Instagram post and sign a formal warning notice. This incident has since become a focal point for civil liberties advocates who argue that federal agencies are increasingly being used to monitor and intimidate American civilians for lawful political expression.

The Syracuse Encounter and the Warning Notice

The interaction began when ICE agents arrived at the Syracuse polling site specifically to locate Gonyea. According to her account, the agents expressed concern over an Instagram post she had allegedly made in January, which they characterized as "doxing" an ICE agent. Upon reviewing her social media history, Gonyea identified the post in question: a shared image and caption that credited the Minnesota Star Tribune for identifying Jonathan Ross, an ICE agent involved in the fatal shooting of Renee Good during a federal incursion in Minneapolis earlier that winter. In her post, Gonyea had called for Ross’s indictment, echoing sentiments shared by various community activists and news outlets following the incident.

The agents presented Gonyea with a warning notice, a document stating that it is a federal crime to "threaten to assault, kidnap and/or murder" federal officials or their immediate family members with the intent to impede their official duties. The form further requested that she "remove the post and/or discontinue" the behavior described by the agents. Gonyea, asserting that her post contained only publicly available information and political commentary, refused to sign the document. She maintained that signing would constitute an admission of criminal intent or guilt for an act she believed was protected speech. While ICE has declined to comment on the specific details of the Syracuse encounter, the incident has raised questions about the presence of federal agents at sensitive locations like polling sites and the criteria used to initiate such confrontations.

A Chronology of Escalating Surveillance

The confrontation in Syracuse is not an isolated event but part of a documented shift in how ICE monitors online activity. To understand the context of the Gonyea investigation, it is necessary to look at the timeline of agency policy changes and the events leading up to the 2025-2026 period.

In early 2024, tensions surrounding federal immigration enforcement intensified following several high-profile enforcement actions, including the Minneapolis shooting involving Agent Jonathan Ross. In the wake of these events, online criticism of ICE personnel grew more frequent. In response, the Department of Homeland Security (DHS) began updating its internal protocols. By July 2025, DHS published an update to its Privacy Act system of records for the ICE Intelligence Records Systems. This update explicitly authorized the collection of information on "individuals who have made credible threats against ICE personnel or facilities," including the harvesting of social media posts, account details, and location-related data.

By March 2025, the then-acting director of ICE, Todd Lyons, issued an internal memorandum directing the agency to "invest in capabilities" to protect employees from "emerging threats, including doxing and online harassment." This directive appears to have expanded the scope of the Office of Professional Responsibility. Traditionally, the OPR served as an internal watchdog, tasked with investigating employee misconduct, inspecting detention facilities, and vetting new hires. However, court declarations filed in early 2026 reveal that between January 2025 and March 2026, the OPR opened at least 131 investigations into "incidents of doxing and threats" directed at ICE employees nationwide.

The Role of the Office of Professional Responsibility

The involvement of the OPR in civilian investigations marks a significant departure from its historical mandate. As an internal affairs division, the OPR’s primary function is to ensure the integrity of the agency’s workforce. Its official mission includes the inspection of the more than 200 detention facilities managed by ICE to ensure they meet national standards, as well as processing security clearances.

Critics and legal experts, including those from the American Civil Liberties Union (ACLU), have expressed alarm at the OPR’s pivot toward external surveillance. "That office is supposed to be for internal investigations," Gonyea noted in her public statements following the Syracuse incident. "Now they’re using their own internal departments on American civilians."

The OPR justifies this expansion by citing its responsibility to protect against "external threats" to the agency’s personnel and infrastructure. However, data suggests that as the OPR has increased its focus on social media monitoring, its performance in other core areas has declined. An analysis conducted by the Project on Government Oversight (POGO) found that in 2025, ICE published only 102 detention facility inspection reports on its website. This represents a nearly 50 percent decrease from the 192 reports published in 2023. This drop in transparency occurred even as the number of individuals in federal immigration detention reached record highs, suggesting a shift in resources away from facility oversight and toward civilian surveillance.

Legal Challenges and the Definition of Doxing

Central to the controversy is the legal definition of "doxing" and what constitutes a "true threat" under the First Amendment. Doxing typically refers to the malicious publication of private or identifying information, such as home addresses or social security numbers, with the intent to facilitate harassment. However, ICE officials have sought to broaden this definition. In recent administrative filings, the agency has suggested that filming agents in the performance of their public duties or sharing the names of agents involved in public-interest shootings—information often already reported by major news organizations—could be classified as doxing.

Legal experts argue that this interpretation clashes with established Supreme Court precedents. "People have a First Amendment right to criticize the government and to do that online and to do that anonymously," says Laura Moraff, a staff attorney at the ACLU’s Speech, Privacy, and Technology Project. For speech to lose its constitutional protection, it must meet the high bar of being a "true threat" or "incitement to imminent lawless action."

The agency’s aggressive stance has already faced setbacks in court. In several instances, ICE issued administrative subpoenas to major tech companies, including Google, demanding the identities and location data of users who posted anti-ICE content. In one case involving a poster known as "doepodslurp," the government withdrew its subpoena after the user’s legal counsel challenged it on First Amendment grounds. Another subpoena, carrying the tracking prefix "OPR-DC," was also withdrawn before it could be litigated, suggesting that the agency may be hesitant to have its investigative methods scrutinized by the judiciary.

Broader Implications for Public Oversight

The shift in ICE’s investigative priorities has profound implications for public oversight and the relationship between the executive branch and the citizenry. While federal officials, including Director Todd Lyons, have testified before Congress regarding the OPR’s role in vetting applicants and overseeing the 287(g) program—which allows local law enforcement to perform immigration functions—the work of investigating online critics is rarely mentioned in public budget hearings.

Adam Steinbaugh, a senior attorney at the Foundation for Individual Rights and Expression (FIRE), emphasizes the danger of "speech policing" by federal agencies. "I can’t imagine that [an agency head] would willingly go before Congress and say, ‘Yeah, we’re speech police, that’s what you’re funding,’" Steinbaugh remarked. He argued that without rigorous legislative oversight, agencies may continue to use internal resources to bypass the traditional legal hurdles required for criminal investigations.

Furthermore, the focus on "external threats" from social media users may be based on disputed data. While the administration has claimed a dramatic rise in attacks on ICE agents, a 2025 analysis by the Los Angeles Times suggested that these claims were statistically inflated, noting that the agency’s internal metrics for "attacks" often included non-violent resistance or verbal protests.

Conclusion

The case of Paigelynn Gonyea serves as a stark reminder of the evolving landscape of digital privacy and government accountability. As ICE continues to invest in surveillance technologies and expand the remit of its internal watchdog divisions, the tension between national security and individual liberty remains unresolved. Gonyea has indicated her intention to pursue legal action, characterizing her struggle as one that extends beyond her personal experience. "This is literally about protecting all Americans’ right to free speech," she stated.

As the judicial system begins to grapple with these cases, the outcome will likely define the boundaries of federal power in the digital age. For now, the Syracuse incident stands as a significant marker of a trend toward the domestic monitoring of political speech, raising urgent questions about the transparency and purpose of the Office of Professional Responsibility.

By