The Police Department That Was Not One (09/17/2026)

Every argument for a surveillance network rests on the claim that only accountable agencies can query it. The reporting today describes an account that was not an agency at all, styled as a police department, owned by the vendor, running searches against live cameras for named people.

Top 5 Critical Privacy Alerts

1. A Fake Police Department Searched Real Cameras

Reporters documented an account presented as a police department, owned by the camera company rather than by any municipality, that ran searches against real camera networks for real people. The access model for these systems is built entirely on the premise that queries come from sworn agencies subject to public oversight, and an account that looks like an agency and is not defeats that premise at the root. Everything downstream of it, including the audit fields we covered on Monday, assumes the querying entity is who the record says. 404 Media has the investigation.

Operator Note: For any data you share with partners through a portal, ask who is entitled to create an account on it and whether your vendor can create one for itself.

2. California Puts a Price on AI Posing as a Therapist

California established penalties of $10,000 for artificial intelligence systems presenting themselves as licensed mental health professionals. The distinction being enforced is between a tool that supports somebody and a tool that claims a credential, because a license is a promise about training, accountability, and a complaints process that a model cannot make. A specific dollar figure converts a principle into something a product team has to price. PogoWasRight has the rule.

3. A Job Offer Was Rescinded Over a Wiped Phone

A university withdrew a job offer from an activist who allegedly wiped a phone before the Department of Homeland Security could search it. Wiping a device before a border search is lawful in a way that is genuinely contested, and treating the act itself as disqualifying converts an exercise of a right into evidence of something. The employment consequence arrives without any of the process that would attach to a charge. 404 Media has the case.

4. The EFF Argues the Addictive Feeds Law Fails on Free Speech

The EFF published its position that California’s addictive feeds law violates the First Amendment rights of teenagers, arguing that restricting how content is arranged restricts access to the content itself. Child safety law keeps producing this collision, since the mechanisms available for protecting younger users operate on everybody and the ones that do not require knowing everybody’s age. Somebody has to lose an argument they have a reasonable case in. EFF has the analysis.

5. Two Model Providers Concede the Web Is Degrading

OpenAI and Microsoft acknowledged that large language models are damaging the web they were trained on and that the training rests on material taken without permission. An admission from the parties with the most to lose from it is worth more than the same claim from a critic, and the practical consequence lands on anybody whose business depends on being found through search. The supply of the material these systems consume is a function of publishing continuing to be worth doing. 404 Media has the admissions.

Operator Note: If organic search sends you meaningful traffic, model how your pipeline behaves at half that volume, because the trend line here does not depend on any single product decision.

Additional Privacy Alerts

Consumer Protection

• The FTC took action against Amway over deceptive practices: The commission described the multilevel marketing operator’s conduct as unfair and deceptive in what it called a historic action. FTC
• FleetCor will pay $100 million over unauthorized fees: A federal court found the company violated the FTC Act by charging fees customers had not agreed to. FTC

The Axe Report is a daily briefing from Grab The Axe. Need help assessing your organization’s security posture? Take our free Human Attack Surface Score assessment.