Your Data Will Be Used Against You Policing in the Age of Self-Surveillance

The digital age has fundamentally transformed the ancient philosophical directive to "know thyself" into a massive, commercially driven data extraction enterprise. What began as the Internet of Things has rapidly evolved into what legal scholar Andrea Matwyshyn identifies as the Internet of Bodies (IoB). This ecosystem comprises a vast array of smart devices—ranging from watches and rings to ingestible digital pills and smart bandages—that monitor the most intimate biological functions of the human body. While these innovations promise unprecedented insights into personal health and productivity, they simultaneously create a granular digital trail that is increasingly being repurposed as a tool for state surveillance and criminal prosecution.

The Rise of the Internet of Bodies and Biological Tracking

The "quantified self" movement has encouraged millions of Americans to integrate biometric sensors into their daily lives. Current market data suggests that nearly one in three Americans uses a wearable device to track health metrics. These devices monitor heart rates, blood pressure, sleep cycles, and even emotional affect. However, the same algorithmic prompts that remind a user to stand or breathe also serve as persistent monitors of physical presence and activity.

In a medical context, this surveillance is often viewed as a breakthrough. Smart pacemakers can transmit real-time cardiac data to physicians, and digital pills can confirm medication adherence for patients with complex conditions. Yet, the transition of this data from a clinical setting to a legal one raises significant privacy concerns. For example, the first FDA-approved digital pill was designed to treat schizophrenia, a move that critics suggest could allow the state or parole officers to monitor mental health compliance with digital precision.

Chronology of the Transition from Privacy to Policing

The integration of biometric data into law enforcement has followed a steady trajectory over the last several decades, accelerated by the digitization of records and the rise of artificial intelligence.

• 1973: The Supreme Court rules in United States v. Dionisio that individuals have no reasonable expectation of privacy regarding their physical characteristics, such as voice or facial features, because they are constantly exposed to the public.
• 1990s: The FBI establishes the Combined DNA Index System (CODIS), creating a centralized database for genetic profiles collected from crime scenes and convicted offenders.
• 2013: In Maryland v. King, the Supreme Court upholds the legality of collecting DNA samples from individuals arrested for—but not yet convicted of—serious crimes, likening the practice to fingerprinting.
• 2018: The arrest of the "Golden State Killer" via familial DNA searching on GEDmatch marks a turning point in the use of consumer genetic data for policing.
• 2020-2023: The Federal Trade Commission (FTC) begins a series of crackdowns on "femtech" and mental health apps, such as Flo, Premom, and BetterHelp, for sharing sensitive reproductive and psychological data with third-party advertisers and data brokers.
• 2022: The overturning of Roe v. Wade increases the legal stakes for period-tracking data, as prosecutors in restrictive states gain the potential to use digital health logs as evidence of reproductive crimes.

Supporting Data: The Scale of Biometric Collection

The infrastructure for biometric surveillance is now massive in scale and centralized in its reach. The FBI’s Next Generation Identification (NGI) system is currently the largest biometric database in the world. It contains millions of "faceprints," iris scans, palm prints, and voice profiles. As of recent reports, the NGI’s CODIS component holds over 21.7 million DNA profiles, representing nearly 7% of the U.S. population.

In the private sector, the data is even more pervasive. Over 30 million Americans have voluntarily submitted their DNA to private corporations like 23andMe and Ancestry.com. Furthermore, the facial recognition firm Clearview AI has scraped more than 30 billion images from public social media platforms to train its identification algorithms, providing law enforcement with a tool that can identify almost any citizen with a public digital presence.

The Legal Landscape and the "Abandoned DNA" Loophole

A critical tension exists between the Fourth Amendment’s protection of "persons, houses, papers, and effects" and the modern reality of biological "leakage." Under current legal doctrines, humans are considered to be constantly "abandoning" their DNA through shed skin cells, hair, and saliva.

Courts have generally ruled that police do not require a warrant to collect DNA from items a person has discarded, such as a coffee cup or a cigarette butt. This "abandoned DNA" loophole allows investigators to bypass traditional probable cause requirements. The issue is further complicated by "familial searching," where a relative’s voluntary submission to a genetic database can implicate family members who never consented to such tracking. By 2018, researchers estimated that 60% of Americans of European descent could be identified through a third-cousin match in a consumer database, regardless of whether they had personally taken a test.

Case Studies: The Dangers of Algorithmic Identification

The deployment of facial recognition technology (FRT) in active policing has yielded a mixture of efficient resolutions and catastrophic errors.

In Manhattan, the NYPD successfully used FRT to identify Luis Reyes, who was recorded stealing packages in an apartment mailroom. The system matched the surveillance footage to a police file, leading to a swift arrest. However, across the river in New Jersey, the case of Nijeer Parks highlights the technology’s inherent flaws. Parks was falsely arrested for shoplifting based solely on a flawed facial recognition match. Despite being 30 miles away at the time of the crime, he spent 10 days in jail and was forced to spend thousands of dollars in legal fees to clear his name.

Studies by the Georgetown Law Center for Privacy and Technology have consistently shown that facial recognition algorithms are prone to higher error rates when identifying women and people of color. This is often attributed to the lack of diversity in the datasets used to train the AI models. In one notable instance, New York investigators reportedly substituted a photo of actor Woody Harrelson into a search engine to find a "lookalike" suspect, a practice that critics argue undermines the scientific validity of the technology.

Official Responses and Regulatory Shifts

As public awareness of these risks grows, some state and federal entities have begun to implement guardrails.

1. Illinois Biometric Information Privacy Act (BIPA): This landmark law remains the most stringent in the U.S., requiring private companies to obtain written consent before collecting biometric data. It has resulted in multi-million dollar settlements against tech giants for unauthorized photo-tagging and data collection.
2. FTC Enforcement: The FTC has recently taken a more aggressive stance against the "surveillance economy." In 2023, it fined BetterHelp $7.8 million for sharing mental health data with Facebook and Snapchat, and it banned Rite Aid from using facial recognition for five years following reports of "surveillance theater" that unfairly targeted minority shoppers.
3. State-Level Restrictions: Maryland and Montana have passed laws limiting the use of genetic genealogy in criminal investigations, requiring a warrant and restricting its use to only the most violent crimes, such as murder and forcible sexual assault.

Broader Impact and Future Implications

The evolution of self-surveillance into a tool for policing represents a fundamental shift in the relationship between the citizen and the state. The "Internet of Bodies" ensures that an individual’s most private biological processes—their heartbeat, their cycle, their genetic code—are no longer contained within the self. Instead, they exist as commodified data points stored on corporate servers and accessible via subpoena or warrant.

Legal scholars argue that the current interpretation of the Fourth Amendment is ill-equipped for this transition. While the Supreme Court’s rulings in United States v. Jones (GPS tracking) and Carpenter v. United States (cell-site location) suggest a growing judicial skepticism toward long-term digital monitoring, the law has yet to provide a comprehensive shield for biometric data.

The potential for "surveillance theater" to turn into a tool for political or social control remains a significant concern for civil liberties advocates. Technologies that can identify individuals by their gait or "emotional affect" are already being marketed to police as "pre-crime" tools. In a society where every public movement is recorded and every biological secret is digitized, the ability to remain anonymous or to dissent without consequence is rapidly diminishing. Protecting the "quantified self" will likely require a new framework of constitutional rights that recognizes the body itself as a protected digital space.