Bottom line: Security leaders must prioritize data privacy and security in the development and deployment of surveillance technologies.
What's happening: Google, Facebook, and Amazon are using their surveillance technologies to build detailed profiles of their users, including their location and browsing history. Facebook's facial recognition technology has been used to identify and tag users in photos without their consent. The US government passed the CISA-ESI Act in 2020, granting CISA the authority to issue standards for the development and deployment of facial recognition technology.
What to do: Security leaders should require vendors to implement robust data protection controls and ensure that their surveillance technologies are transparent and auditable. They should establish clear policies and procedures for handling sensitive user data and train employees to recognize and report potential surveillance-related threats.