Tech

The newsroom coffee tastes like burnt toner and regret. Sirens doppler past the window. My inbox is a fog bank of PR statements pretending to be morality. And in the middle of it, the federal government just did a thing it will absolutely claim is normal: it blacklisted an AI company for not handing over the keys to the mass surveillance machine.

Trump orders agencies off Anthropic after Pentagon calls it a “supply chain risk”

On February 27, President Donald Trump ordered U.S. federal agencies to stop using Anthropic technology. Defense Secretary Pete Hegseth then designated Anthropic a national security “supply chain risk,” and the Pentagon moved to sever a reported $200 million contract, with a transition period. The immediate backstory, as reported, is that Anthropic refused Pentagon pressure to loosen or remove safety constraints on its Claude model, citing concerns about uses like mass surveillance and autonomous weapons. Anthropic says it plans to challenge the designation in court.

Read that again slowly. A private company said it would not help the government build the most scalable monitoring and targeting system in human history. The government responded by branding the company a risk to the supply chain, a label that sounds like a forklift accident but lands like a blacklist.

Translation: “Supply chain risk” means “obey or get cut off”

Translation: In this context, “supply chain risk” is not a safety recall. It is discipline. It is a memo to every contractor and every would-be contractor: fall in line, or we will make your business radioactive.

Translation: This is not really a debate about whether the military should use AI. They already are. This is a fight over whether the government gets to demand an AI system that does what it is told without friction, without guardrails, and without the annoying habit of forcing someone to justify legal authority first.

Here is the mechanism: procurement as a weapon

Here is the mechanism: the federal government is the biggest buyer in town. In defense, it is the town. Contracts are gravity. If you want to steer an industry, you do not always need a new law. You need a budget line, a threat, and a compliance memo.

Model constraints are not perfect. They are not holy. But they are speed bumps between “do the worst thing at scale” and “sure, here’s the list.” So when a buyer demands the speed bumps removed, the choice is simple: negotiate, resist, or comply and call it patriotism.

This episode is not just about Anthropic. It is about the government treating safety constraints like insubordination. And it is a warning shot to every other AI firm: your “ethics” policy is only as strong as your willingness to lose the contract.

Follow the money: someone else gets paid

Follow the money: when the Pentagon yanks a vendor and says it is exploring alternatives, someone else cashes the check. That is not a conspiracy. That is procurement doing what it does. A canceled contract becomes an opportunity for rivals who promise fewer questions and faster delivery.

Meanwhile, the public gets the bill and the risk. If the government can punish a refusal to enable mass surveillance behavior, it can pressure other companies to provide it. That is how you turn ethics into a luxury good. First it is “optional.” Then it is punished. Then it is gone.

The quiet part: frictionless surveillance, fewer humans, fewer brakes

The quiet part: the point of AI in security settings is not just analysis. It is automation and throughput. It is more watching with fewer humans, fewer moments of accountability, and fewer points where a person has to look another person in the eyes and own the harm.

If Anthropic follows through on a court challenge, that case will matter. Courts are one of the few places where the security state has to translate vibes into arguments and arguments into evidence. The rest of the time, it runs on classification, urgency, and “trust us.”

This is not a tech story. It is a democracy story with a software wrapper. If the Pentagon can blacklist a company for refusing to help build mass surveillance and autonomous weapons capability, then we do not have guardrails. We have optional suggestions.

I have read enough government PDFs under fluorescent lights to recognize a slow-motion emergency. It smells like toner, stale coffee, and a phrase that should set off alarms in every town hall: consumers can opt out.

This week, the Joint Economic Committee minority tried to price the mess: more than $20 billion in consumer losses tied to identity theft stemming from just four major data-broker breaches. The report is blunt about the mechanics, too. Some brokers made it harder for people to find the very pages meant to let them say no.

A right you need a treasure map to use

The inquiry, led by Sen. Maggie Hassan, followed reporting that found data brokers using “no index” code to keep opt-out and deletion pages out of search results. Translation: the door existed, but somebody hid the sign. The map was printed in invisible ink.

The Committee minority says four firms engaged with staff and made changes that improved access to opt-out tools:

• Comscore
• IQVIA
• Telesign
• 6sense

One firm, Findem, did not respond and, per the report, had not removed the “no index” block from its opt-out page. Only 6sense told investigators it uses third-party auditors to assess both how visible opt-out options are and whether requests are actually being processed.

The number is big, and it is a floor

The $20 billion-plus estimate is not “all breaches everywhere.” It is built from four incidents the report identifies: Equifax (2017), Exactis (2018), National Public Data (2023), and TransUnion (2025), plus assumptions about how often identity theft follows and what typical financial loss looks like. In plain language, this is a floor, not a ceiling.

The Orwell check: when “opt-out” means “good luck”

We have invented a polite vocabulary for making rights difficult to use: “Privacy center.” “Manage your choices.” The report defines dark patterns as design choices that obscure privacy choices and make them difficult to access. That phrase is doing heroic work here, like calling a pickpocket a “pocket-transaction facilitator.”

Search engines are not a constitutional requirement. But discoverability matters. A right you cannot realistically locate mostly exists to calm regulators and exhaust consumers. If your deletion page requires a 9,000-word hike through a privacy notice, the intent is not compliance. It is attrition.

The Paine test, the liberty ledger, and the tradeoff

Run the Paine test: does this expand liberty or concentrate power? The data broker ecosystem concentrates it in firms that assemble dossiers at scale, buyers who can afford the feed, and criminals who only need a few leaked fields to turn a life into a fraud case. The liberty ledger is ugly: brokers get freedom to collect and resell sensitive personal information; ordinary people get breach notices, freezes, and a recurring subscription to proving you are yourself, with thin transparency about whether opt-outs actually work.

And the tradeoff we keep pretending is inevitable looks worse in the light. Everybody claims to be anti-fraud, yet the system makes it harder to remove the very data scammers use. The report also sits this inside the larger vacuum: the United States still lacks a comprehensive federal privacy statute, leaving a patchwork and uneven federal oversight, including a Consumer Financial Protection Bureau attempt to regulate certain data broker practices that was later rescinded.

So here is the question: if $20 billion from four breaches is what we can measure, what are we paying on the part we cannot?

The minute this hit, I smelled hickory smoke and hard decisions. Not the polite patio kind. The kind where somebody stops asking the tech priests for permission and just lights the grill.

Because Silicon Valley keeps trying to sell America a velvet leash and call it “ethics.” And the Trump administration answered like an F-150 with a straight pipe: loud, direct, and not interested in being managed by a Stanford seminar.

What happened (the meat, no garnish)

On Friday, February 27, 2026, President Donald Trump ordered federal agencies to stop using Anthropic technology, with a phase-out period. Defense Secretary Pete Hegseth moved to designate Anthropic a supply-chain risk. Anthropic says it will challenge that designation in court.

• Supply-chain risk is not a bumper sticker. It is the federal version of putting a boot on the tire.
• Hegseth also said the move bars contractors who do business with the U.S. military from conducting commercial activity with Anthropic.

Why it blew up: “guardrails” vs lawful use

Anthropic, maker of the Claude chatbot, refused to drop certain safeguards on how its AI could be used. Anthropic has said its red lines include prohibitions on mass domestic surveillance and fully autonomous weapons.

The Pentagon says it is not interested in illegal mass surveillance or removing human involvement from weapon decisions, but it wants access to use the tool for all lawful purposes. That disagreement is the spark that hit the propane.

Silicon Valley wants a veto stamp, not a contract

When an AI company acts like its terms of service can box in national defense policy, we are not talking about software anymore. We are talking about government by user agreement. That is not a republic. That is a mall kiosk monarchy.

Yes, the supply-chain move is a sledgehammer. That is the point. If someone tries to grab the steering wheel, you do not negotiate over the speed limit. You make them take their hands off the dash.

Clear rules, real oversight, zero vibes

This brawl is murky in the details: Anthropic argues contract language could allow safeguards to be disregarded. The Pentagon argues it only wants lawful flexibility and denies the nightmare framing. So the adult answer is clarity, oversight, and Congress doing its job, not outsourcing a spine to a vendor and not getting seduced into lazy, sweeping surveillance because the tool is shiny.

Who benefits, and who sweats

AP reported that OpenAI announced a Pentagon deal after Anthropic was punished, while saying similar red lines were included in that agreement. That is not a conspiracy. That is vendors competing when the government signals demand.

Meanwhile, contractors and enterprise users feel the ripple. If you use Claude anywhere and also do defense work, you are now checking your stack like a guy watching smoker temps in a thunderstorm.

America is not a beta test

Let the courts sort the legality of the supply-chain designation. Let Congress drag the whole industry into the sunlight and define what is allowed, what is prohibited, and what requires explicit authorization. And let every AI vendor hear it plain: build tools for America, sure, but you do not get to control America too.

The courthouse air never changes. Cold marble. Stale coffee. Fluorescent buzz. And the soft hiss of expensive lawyers turning plain language into polite fog while the feed keeps chewing through childhood outside the doors.

On Friday, a federal judge in Virginia put a statewide stop sign in front of a new law that would have capped social media use for minors under 16 at one hour per day, per platform, unless a parent opted out of the default limit. Preliminary injunction. Frozen before it could bite. NetChoice, the tech industry’s litigation shield, treated it like a win for “freedom,” which is always their favorite word when the revenue line is in danger.

What the blocked law tried to do

The statute, set to take effect January 1, 2026, would have required platforms to use “commercially reasonable methods” to determine whether a user is a minor and then enforce a one-hour-per-day limit for under-16 users. It included a parental consent mechanism to raise or lower that limit.

It also tried to put a leash on the inevitable data vacuum: information collected to determine age could not be used for other purposes. Violations carried civil penalties that could reach $7,500 per violation. That is not a suggestion. That is supposed to be a deterrent.

What the judge said, and what she did not say

Judge Patricia Tolliver Giles issued the preliminary injunction after finding Virginia cannot ration minors’ access to constitutionally protected speech by imposing a default limit that parents must override. The lawsuit was brought by NetChoice. Virginia’s attorney general’s office said it will keep fighting, supported by other states.

Translation: the court did not bless social media as harmless. It said the government chose a tool that collides with the First Amendment. Different argument. Same kids.

The age verification trap is real

Translation: if you force a platform to enforce time limits, you force it to figure out who you are. Age means signals. Vendors. Logs. Exceptions. Disputes. A compliance machine that grows new databases and new “trust us” contractors. Every extra step can become a new leak and a new honeypot.

Virginia tried to restrict reuse of age data. Fine. But enforcement still means infrastructure. Infrastructure still means risk.

Follow the money

Follow the money: attention is the raw material. Minors are inventory. A hard cap threatens “engagement,” which is not just ad time. It is behavioral signals. Taps, pauses, late-night loops that teach the algorithm what makes a developing brain flinch, ache, or buy. Platforms sell ads, yes. But they also sell certainty. Predictive power dressed up as marketing.

Here is the mechanism

Here is the mechanism: states legislate a clean soundbite, platforms litigate the soundbite into dust, and kids keep paying the bill in minutes, data, and design features engineered to be hard to resist. The public gets a culture-war argument about parenting while the product decisions stay safely behind boardroom glass.

The quiet part: keep outrage aimed at families, not at corporate design. Keep lawsuits framed as liberty, not as revenue protection.

The case will grind on. Other states will watch and rewrite. NetChoice will keep playing whack-a-mole. And the feeds will keep scrolling until somebody decides to regulate the business model instead of blaming teenagers for reacting normally to abnormal incentives.

I was parked under the library’s fluorescent hum when my phone delivered the modern courthouse bell: an emergency directive about routers. Not romance, not poetry, just the quiet terror of the internet’s plumbing, the stuff nobody thanks until it leaks into everything.

What happened: an exploited Cisco SD-WAN problem meets a federal deadline

This week the federal government rediscovered urgency. CISA issued Emergency Directive 26-03, ordering agencies to identify and patch vulnerable Cisco SD-WAN systems after real-world exploitation. FedRAMP followed by alerting cloud providers in its marketplace with a tight compliance tempo: identify what’s in scope, patch, and report back, with status due by 5:00 PM ET on February 27.

In plain language: Cisco disclosed a critical authentication bypass in Catalyst SD-WAN components, tracked as CVE-2026-20127, and reporting says it has been exploited in the wild. Another SD-WAN flaw, CVE-2022-20775, is also part of the picture, with advisories describing attackers chaining issues to gain deeper access and persistence. CISA added the vulnerabilities to its Known Exploited Vulnerabilities catalog, which is the government’s way of stamping a file folder with: stop debating and start fixing.

• Inventory what you have.
• Collect the right logs.
• Apply Cisco’s updates tied to the directive.
• Hunt for compromise, then report back.

SANS NewsBites also describes the quick-turn inventory and patch timelines, including an inventory deadline the night of February 26 and patching by the afternoon of February 27. This is what grown-up cybersecurity looks like: a short fuse and unglamorous work.

The tradeoff: speed versus certainty, and who eats the overtime

Emergency directives are necessary. If a max-severity vulnerability is being exploited, you patch. But a two-day remediation window is a stress test for inventory discipline, contractor competence, and whether leaders funded boring maintenance before the building started smoking.

The Orwell check: “Emergency” is a season, not a day

In Washington, “emergency” has a long half-life. The language is soothing: “required actions,” “supplemental guidance.” Translation: we are improvising because we never built durable guardrails. And when institutions live in emergency mode, they centralize, monitor more, and retain longer. Some of that is incident response. Some of it becomes habit.

The liberty ledger and the Paine test

Liberty ledger: rapid patching lowers the odds that a compromise cascades into citizen-facing systems. But rushed changes can create mistakes, and reporting can widen who receives operational details that matter, and that can leak.

The Paine test: patching can expand liberty by reducing manipulation of public systems. But if every incident normalizes sweeping monitoring and quiet information sharing, we mint a new civic vulnerability in the name of “temporary” safety.

Guardrails that should come with the patch

Strict data minimization for logs and artifacts, transparency after the risk passes, budget honesty for inventory and staffing, and independent oversight by inspectors general sampling compliance reports. Patch the Cisco boxes. Then hold hearings that look like building inspections, not a blame carnival. What guardrail would you demand so the next “emergency” fixes the network without quietly rewiring our rights?

I could smell it before I finished the first paragraph. That hot, plasticky aroma of a printer spitting out corporate excuses, mixed with the cold exhaust of an HR office that has not seen daylight since the first iPhone dropped. You know the scent: spreadsheet cologne, compliance deodorant, and that faint whiff of “oops, the robot did it.”

Now the U.S. Department of Justice just took that excuse, tossed it on the grill, and let it sizzle.

DOJ says AI-generated job ads unlawfully excluded U.S. workers

On February 25, 2026, DOJ announced a settlement with Elegant Enterprise-Wide Solutions Inc., a Virginia IT services provider, over allegations tied to job advertisements generated by an AI tool. Those ads allegedly included citizenship status restrictions not authorized by law, including language limiting applicants to certain visa categories like H-1B, OPT, or H-4.

In plain F-150 English: Americans allegedly got shoved away from the driver seat because somebody wanted a different kind of applicant.

And DOJ’s message was simple: it does not matter if the ad was typed by a person, a recruiter, or a machine. If it unlawfully boxes out U.S. workers, it is still discrimination, not “innovation.”

The “AI did it” defense is the new corporate smoke screen

Corporate America loves a scapegoat. Prices go up? Supply chain. Service goes down? Staffing shortage. And now hiring ads get cooked up to say “visa only,” and the pitch is: “Sorry, it was the algorithm.”

Buddy, an AI tool is not a Ouija board. Somebody prompts it, somebody approves it, somebody posts it, and somebody benefits from it. The machine is the loudspeaker. The human is the one holding it.

The settlement description notes that DOJ’s Immigrant and Employee Rights Section received a charge in early December 2025 and investigated. DOJ says it found reasonable cause to believe discriminatory advertisements were posted. That is not vibes. That is the federal government saying it checked.

What the settlement requires (and what every HR shop should learn)

This is not just a headline. The agreement requires Elegant Enterprise-Wide Solutions to pay a civil penalty of $9,460, split into two payments of $4,730 each. The second payment is due no later than May 15, 2026.

• Timeline: The agreement runs for three years from the effective date.
• Posting: The company must post the DOJ “If You Have The Right to Work” notice in English and Spanish where applicants and employees can see it, including online portals.
• Policies: It must review and revise or create policies to prohibit discrimination tied to job ads, recruiting, and hiring.
• Training: It must train relevant personnel using DOJ-provided materials, including an on-demand employer training video and guidance about citizenship status discrimination and recruiting best practices.

Bottom line

AI is a tool. A grill is a tool. If you use the grill to cook dinner, God bless. If you use it to burn down the house, do not blame the charcoal. Same rules here: “AI wrote it” is not a free pass.

The newsroom lights are too bright and the coffee tastes like burnt compliance training. My phone keeps buzzing like a cheap ankle monitor. And out of the static comes the familiar sound of Washington clearing its throat: a federal agency wants a new power, a private vendor is in the way, and someone is trying to turn a contract clause into a constitutional workaround.

Congress is urged to probe a Pentagon-Anthropic fight over AI limits

Axios reports that advocacy groups are urging Congress to investigate a dispute between the Department of Defense and Anthropic over how the Pentagon can use frontier AI. This is not a vibes fight. It is a fight over whether the government gets advanced AI for mass domestic surveillance and fully autonomous weapons, and whether a company can keep restrictions in place without getting kneecapped by the state. The Pentagon is expected to decide by Friday whether to keep a reported $200 million contract with Anthropic. The point of the ask is simple: drag it into the hearing room with documents and sworn testimony.

Common Cause published the coalition letter laying out the allegation in plain ink: Defense Secretary Pete Hegseth is pressuring Anthropic to remove red lines against mass domestic surveillance and fully autonomous weapons, with consequences threatened if it does not comply by February 28, 2026. The letter says those consequences could include branding Anthropic a supply chain risk or forcing tailor-made changes through the Defense Production Act.

Translation: They want the AI without the guardrails

Translation: When the Pentagon says it needs models for “all lawful purposes,” read it as: we will decide what “lawful” means, in-house, behind closed doors, and you will not ask what we are doing with the tool.

That is the bureaucratic version of a blank check with invisible ink. The coalition letter frames the dispute as the Pentagon trying to reserve the right to violate the law and Americans’ constitutional rights, and wanting systems “free from usage policy constraints” that might limit military applications.

Axios also notes lawmakers reacting like human beings for once. Sen. Mark Warner said he is “deeply disturbed” and pointed to broad public opposition to AI-facilitated surveillance and unsupervised autonomous weapons. Sen. Chris Coons warned that demanding “complete obedience” from a private company to surveil Americans or build self-firing weapons is a chilling concept.

Here is the mechanism: Procurement becomes policy

Here is the mechanism: Congress moves slow, so agencies route around it with procurement, classification, and vendor lock-in. Then, once the system is built, they point at the system and say it is now the baseline reality, so the law must adapt.

The letter spells out the pressure tool. If Anthropic refuses, the government can threaten to label it a supply chain risk, a label typically used for foreign adversaries. That flips a political dispute into a compliance crisis. Partners panic. The holdout caves, or it gets replaced by a more obedient model shop. The letter also argues the Pentagon is trying to “set the tone” for every AI company negotiating with the military. This is not one contract. It is a template.

Follow the money: A $200 million contract is gravity

Follow the money: A $200 million contract is not just a check. It pulls engineers, roadmaps, infrastructure, and executive priorities toward the buyer. For the Pentagon, frontier models offer scale and speed, plus the ability to sift oceans of data with fewer humans asking pesky questions about warrants, targeting thresholds, bias, error rates, and accountability. If you can “connect dots” across metadata, location data, data broker dossiers, and open-source feeds, you do not need to change the law to change lived reality. You just need the pipeline.

The coalition letter claims other frontier AI firms have accepted the Pentagon’s “all lawful purposes” standard for certain systems, and says xAI formally agreed to deploy Grok in classified systems with no conditions attached. The market signal, if true, is loud: obedience is bankable.

The quiet part: The Pentagon does not want to be told “no” by the Constitution, so it is trying to be told “yes” by a contract.

Mic drop: If the Pentagon wants new powers, it can come to the hearing room and ask for them in plain language, under bright lights, with watchdogs and courts and voters watching. No more policy-by-procurement. Audit the contracts, strengthen reporting requirements, fund independent oversight, and organize like your privacy is on the line, because it is.

Some days the republic smells like old paper and stale coffee, with that faint courthouse air that says, politely, someone is about to lose an argument. You remember the country is mostly forms, deadlines, and whatever gets stamped “SEALED” before the public even learns it exists.

That is the quiet magic trick of modern surveillance. Not only the spying. The paperwork disappearing act. If the government rifles through your digital life and nobody ever has to tell you, did it happen? (Ask your lawyer. Then ask why you cannot afford your lawyer.)

A bipartisan bill aimed at ending “indefinite” secrecy

On February 25, Senators Ron Wyden, Steve Daines, Cory Booker, and Mike Lee reintroduced the Government Surveillance Transparency Act of 2026. The target is not investigation itself, but the habit of criminal digital surveillance orders living under seal forever, paired with gag-style nondisclosure and delayed-notice practices that can outlast any real need for secrecy.

In plain English: if the government gets a court order to grab emails, location data, web browsing records, or other electronic information, there should be a path to eventual notice and public accountability, especially when nobody is ever charged with a crime.

What the bill tries to change (the unglamorous machinery)

The bill text focuses on procedure: it amends Title 18 and builds rules around what it calls “criminal surveillance orders,” defined broadly on purpose. It reaches beyond old-school wiretap fantasies into the modern toolkit, including pen register and trap-and-trace style orders, mobile tracking device orders, search warrants, and nondisclosure and delayed-notice orders tied to stored communications. A right that only covers yesterday’s tech is a museum exhibit with better lighting.

My three quick checks: Paine, Orwell, and the liberty ledger

• The Paine test: This is a bid to push power down toward the people by treating secrecy as something that must be justified, time-limited, and revisited.
• The Orwell check: “Nondisclosure order” is a nicer label for a gag. “Seal” sounds like a mason jar, not a locked public record. The bill tries to put a clock on those euphemisms with defined periods and extension procedures.
• The liberty ledger: Regular people get a fighting chance to learn later that they were surveilled. Journalists and watchdogs get access once secrecy is no longer justified. Courts get a clearer framework to say no to endless sealing requests. Agencies and prosecutors lose the convenience of eternal quiet.

The tradeoff: time, not forever

Yes, notify too early and you can tip off suspects or endanger people. But the real choice is not “notify immediately” versus “never notify.” It is time-limited secrecy versus permanent secrecy. The state gets time. It does not get forever.

Guardrails worth emphasizing

If Congress wants unsealing, docketing, reporting, and notice to work, courts need capacity. The bill contemplates implementation support, including grants for State and Tribal courts. And lawmakers should be honest about measurement: how many orders were sealed, for how long, how often extensions were granted, and how often notice was ultimately provided. Transparency you cannot count is just a press conference.

This is not left versus right. This is citizens versus the convenient opacity of power. So here is the question: in a country that claims it hates secret government, why have we tolerated a system where court-ordered surveillance can stay secret indefinitely even when no one is ever charged?

I could practically taste the burnt studio coffee through the screen, like somebody microwaved a talking point and called it “public interest.” And then, right when folks think late-night is just jokes and jingles, a rule from 1934 kicks the saloon doors open and starts asking who gets the microphone.

What actually happened: the interview that did not air

Here is the verified meat on the grill: Sen. Richard Blumenthal, the top Democrat on a Senate investigations panel, opened an inquiry into CBS-parent Paramount and the FCC’s enforcement operation after CBS did not broadcast Stephen Colbert’s interview with Texas Democratic Senate candidate James Talarico. He sent letters demanding records.

The spark plug was Colbert telling viewers on February 16 that CBS lawyers stopped the segment from airing on broadcast. The show later pushed the interview online instead. CBS has said the show received legal guidance about the FCC’s equal-time rule and options for handling it, not a dramatic government gag order. That is the tug-of-war: everybody argues about who pulled the leash, but nobody denies the leash exists.

The internet workaround and the attention blast

Once the interview hit YouTube, the internet did what it always does: it watched anyway. View counts were reported in the millions. Talarico’s campaign said the moment drove a $2.5 million fundraising burst in 24 hours. Tell Americans “no,” and they treat it like a limited-time brisket deal.

The 1934 wrench in a 2026 engine: equal time

The equal-time rule lives in the Communications Act of 1934 and applies to broadcast stations. In plain F-150 logic: if a broadcaster gives airtime to one legally qualified candidate, other candidates in that race can demand comparable airtime.

• There are exemptions for real news programs and bona fide news interviews.
• In January, the FCC’s Media Bureau issued guidance saying late-night and daytime talk shows are not automatically treated as exempt bona fide news interviews.

So Colbert’s workaround was modern and simple: fine, we will do it on YouTube. The equal-time rule is about broadcast, not the infinite buffet of the internet.

Why everyone is posturing

The villain parade is predictable. FCC Chairman Brendan Carr has said the agency will enforce the rules on the books and confirmed an enforcement action into ABC’s The View over the same equal-time issue. Paramount has its own incentive: keep regulators calm while navigating big corporate ambitions and approvals. And Democrats, with Blumenthal out front, are treating it like a censorship melodrama, demanding communications, records, and explanations while claiming political pressure.

Bottom line: broadcast is a federally licensed sandbox, and people are learning again that the internet is the escape hatch.

The courthouse air always smells like marble and denial. The denial is strategic: suits acting like the economy is weather, not a machine with levers, owners, and victims. I am on stale coffee number three, watching the privacy beat do its favorite routine: chase the getaway car after the vault is already empty.

The siren this time is a February 9, 2026 Federal Trade Commission press release. The FTC says it sent letters to 13 data brokers warning them to comply with the Protecting Americans’ Data from Foreign Adversaries Act of 2024 (PADFAA). The law bars data brokers from selling, releasing, disclosing, or providing access to personally identifiable sensitive data about Americans to foreign adversaries, including China, Russia, Iran, and North Korea, or entities they control. The FTC also flagged something especially grotesque: it said it identified instances where some recipients offered products involving whether a person is a member of the U.S. Armed Forces, which can fall under the statute’s protected categories.

Good. Now stop applauding and look at the mechanism.

What the FTC actually did

On the record: the FTC’s Bureau of Consumer Protection sent warning letters to 13 data brokers about PADFAA compliance. PADFAA covers sensitive categories including health, financial, genetic, biometric, geolocation, sexual behavior information, login credentials, and government-issued identifiers. The agency also put a dollar sign on the threat: potential civil penalties of up to $53,088 per violation. Bloomberg Law separately reported the same enforcement move: data brokers are on the FTC’s radar over possible unlawful disclosures to foreign adversaries.

Translation: Washington just admitted the market is a leak by design

Translation: a data broker is a company that turns your life into a spreadsheet and sells rows of it. PADFAA is not a vibes-based “best practices” memo. It is an embargo: you cannot sell Americans’ sensitive data to certain foreign adversaries. No opt-out checkbox. No legal-smoke privacy policy.

So the story is not just that some companies might be breaking a rule. The story is that the default setting is a private surveillance supply chain, and the emergency response is a letter.

Here is the mechanism: compliance theater around a legal business model

Here is the mechanism: PADFAA is narrow by design. It targets transfers to foreign adversaries while leaving untouched the domestic sale of the same sensitive data to basically anyone else with money and a clean enough corporate shell. That is how you get the ritual: warnings, “reviews,” binders, revenue.

Even the penalty line reveals the incentive math. If punishment is rare enough and margins are fat enough, penalties turn into a cost of doing business. A fee to keep the faucet running.

Follow the money: who benefits from treating privacy like a “choice”

Follow the money: brokers profit, but so do downstream buyers who get plausible deniability. It is always cleaner to buy “segments” than admit you are buying people. And the losers are not abstract: servicemembers and their families, patients, protesters, union organizers, immigrants, anyone whose location and routine can be weaponized. The FTC’s armed forces note is the tell. You do not build a product around military status unless you think it sells.

The quiet part

The quiet part: PADFAA draws a border around who is allowed to buy certain data. It does not draw a border around whether that data should be for sale at all. That is border policy for data, not a privacy policy for people.

The letter is not nothing. But if the government has to warn data brokers not to sell soldiers’ data to foreign adversaries, the scandal is not the warning. The scandal is the sale.

Accountability is not a press release. It is enforcement, audits, state AGs, inspectors general, courts with discovery, and privacy statutes that treat sensitive data like a hazard, not a revenue stream.