Global Threats to Anonymity: From FCC Data Demands to State Surveillance

Featured image: Photo by Thomas Windisch on Pexels.

In an increasingly interconnected world, the fabric of personal anonymity is under constant assault from various fronts. From governmental regulatory bodies demanding extensive personal data to state-sponsored surveillance technologies, the ability for individuals to maintain privacy in their digital and physical lives is rapidly diminishing. These global threats not only erode fundamental rights but also create environments where vulnerable populations are further marginalized and the space for free expression is curtailed. Understanding the nature and scope of these challenges is crucial for advocating for stronger protections against an ever-expanding surveillance apparatus.

FCC’s Controversial Data Demands for Phone Services

One significant threat to anonymity stems from proposals by regulatory bodies, such as the Federal Communications Commission (FCC) in the United States. The FCC has put forth a plan to mandate telecommunications providers collect extensive personal information from anyone seeking a phone number, ostensibly to combat spam and scam calls. However, critics, including the EFF and ACLU, argue that this proposal is less about stopping unwanted calls and more about establishing a broad data collection scheme [3].

The core of the FCC’s proposal, often referred to as “Know Your Customer” (KYC) requirements, would necessitate individuals providing identification and a physical address to obtain phone service. This measure would effectively eliminate the possibility of having an anonymous phone line, commonly known as a burner phone. While burner phones are sometimes associated with illicit activities, they serve as a critical lifeline for many individuals in precarious situations, including survivors of domestic violence and human trafficking, unhoused people, and journalists protecting confidential sources [3]. Cutting off access to such anonymous communication channels without viable alternatives would place these vulnerable populations at greater risk and isolate them further from essential services and support networks.

Moreover, the effectiveness of such a proposal in addressing spam calls is highly questionable. The FCC’s own rulemaking acknowledges that the most effective way to prevent unwanted calls is to stop them from entering the network in the first place. A significant portion of unwanted robocalls originates from overseas, meaning that collecting personal information from domestic users would have little impact on this international problem. Instead, existing technical standards like STIR/SHAKEN, if fully implemented by all telecommunication providers, offer a more direct and effective solution to the issue of caller ID spoofing and spam calls [3]. The FCC’s focus on data collection rather than full implementation of these technical solutions raises concerns about its true motives.

The Perils of Mass Data Collection by Telecoms

Beyond the immediate impact on anonymity, the FCC’s proposal to mandate mass data collection by telecommunications companies introduces severe security and privacy risks. The telecommunications industry has a documented history of being poor stewards of personal information, repeatedly demonstrating vulnerabilities to data breaches and engaging in questionable data practices. For instance, in 2024, AT&T disclosed two large data breaches, one affecting millions of current and former customers with their information leaked onto the dark web, and another where over 100 million customer account call and text logs were compromised. Similarly, Comcast experienced a data breach in 2023, exposing information for nearly 36 million account holders [3].

Such incidents highlight the inherent danger of centralizing vast amounts of sensitive personal data. If telecommunications providers, who are also responsible for maintaining critical communications infrastructure, cannot adequately protect existing customer information, there is little reason to believe they can secure an even larger repository of newly mandated data. The vulnerability of U.S. communications networks to attacks, as evidenced by the 2024 breach of the nation’s CALEA infrastructure, further underscores these security concerns. Entrusting these companies with even more personal identifiers, including physical addresses and government-issued IDs, creates an an attractive target for malicious actors and significantly increases