◂ Biometric Enforcement Index Reading · ten bricks
DATASET ▸ BEI-v1 READING ▸ Ten bricks STATUS ▸ All ten in the wall AS OF ▸ 2026-10-27

Ten bricks, no vote

This index measures the wall between a state and its own resident: how far it can reach to enforce identity on a phone. Walls like that are not raised in one act. They go up a brick at a time — a settings change, a terms update, a sale order, a statute, a border kiosk — each laid on an ordinary day and announced to a different audience. Here are ten. All ten are in the wall now.

One · The wall

Built without a building permit

A wall-height score is a summary. Underneath it are mechanisms, and each one adds a specific kind of reach: a face becomes a name, a payment becomes something that can be stopped, a session carries an identity. None of the ten below needed a vote on the wall as a whole. Each was approved, if at all, as something smaller.

10Bricks on this page, all in service
2Of them are mortar: they bind the other eight
8–9Wall height this index gives the places they were laid

Two · The courses

Ten bricks, laid

  1. 01

    Face match

    Adds: a face becomes a name, with no phone in hand

    New Orleans police took real-time face alerts from Project NOLA, a private network with more than 200 face-recognition cameras, for at least two years before pausing them in April 2025. Clearview AI says it holds more than 10 billion face images taken from the open web, searchable by any agency that subscribes.

    Laid · before April 2023

  2. 02

    The ledger, on private rails

    Adds: money can be stopped without a court

    A central bank coin is not needed for a permanent, freezable record of what you buy. Card payments run over Visa and Mastercard, and every one leaves a record with the bank that the state can reach. In February 2022 Canada used the Emergencies Act to have banks freeze about 210 accounts holding $7.8 million, without a court order. In January 2025 the United States barred a federal digital currency; in July it enacted the GENIUS Act, which requires private dollar stablecoins to be built so the issuer can seize, freeze or burn them on a lawful order. The programmable dollar arrived, issued privately.

    Laid · 14 February 2022 · reinforced 18 July 2025

  3. 03

    ID at the door

    Adds: every session carries a name · mortar

    Since 25 July 2025 British sites with adult content, including social media, must verify age by credit card, photo ID or a face scan. Since 10 December 2025 Australian platforms must keep out under-16s, which means checking everyone. On 26 September 2025 the British prime minister announced a digital ID that will be mandatory to prove the right to work. Each check ties a name to a session.

    Laid · 25 July 2025

  4. 04

    The room that listens

    Adds: the room becomes a source

    On 28 March 2025 Amazon removed the Echo setting that processed voice requests on the device. Every request after the wake word now goes to Amazon’s cloud, where a lawful order can reach it. The notice went out by email ten days before.

    Laid · 28 March 2025

  5. 05

    The body, uploaded

    Adds: the body becomes a record that can be sold

    In June 2025 the US health secretary told Congress his vision was “that every American is wearing a wearable within four years.” The same summer a bankruptcy court approved the $305 million sale of 23andMe, with its customers’ genetic data, to a new owner.

    Laid · summer 2025

  6. 06

    The car that reports

    Adds: movement becomes a file outside the phone

    General Motors sold drivers’ location and driving-behaviour data to the data brokers LexisNexis and Verisk. Drivers learned of it from the New York Times in March 2024, after insurers had the data. The Federal Trade Commission’s order came in January 2026.

    Laid · years before March 2024

  7. 07

    The browser that cannot be cleared

    Adds: a device is recognised after you clear it

    Google lifted its ban on device fingerprinting in its advertising products on 16 February 2025. In 2019 it had said fingerprinting “subverts user choice and is wrong.” A fingerprint survives a cleared history and a refused cookie.

    Laid · 16 February 2025

  8. 08

    The model on top

    Adds: what you never said gets stated

    Researchers at ETH Zurich gave real Reddit profiles to GPT-4. It inferred where people lived, what they earned, their sex and age with up to 85 per cent accuracy, at a hundredth of the cost of a human analyst. Anonymising the text did not stop it.

    Laid · October 2023

  9. 09

    The archive waiting for its key

    Adds: what is locked today is kept until it is not

    In August 2023 the NSA, CISA and NIST warned that adversaries could be collecting encrypted data now to decrypt once quantum computers can break it. NIST released its first quantum-resistant standards in August 2024. Everything sent under the old locks before the switch stays in whatever archive took it. The collection is the part that is running.

    Laid · every day before the switch

  10. 10

    One stream

    Adds: face, prints and passport in one query · mortar

    The European Union’s Entry/Exit System began on 12 October 2025 and was fully operational on 10 April 2026. Travellers from outside the EU give fingerprints and a facial image at the Schengen border, stored with their passport data and every crossing date.

    Laid · 12 October 2025

Three · The mortar

What holds the courses together

A wall is bricks plus whatever binds them. Two of the ten do the binding. Brick 03 gives every other brick the same name: once access needs an identity, the face, the purchase, the car and the browser all resolve to one person. Brick 10 lets any one record look up the others: a face at a border kiosk returns the prints, the passport and every past crossing.

The bricks on this page were laid in the United States, the United Kingdom, Australia, Canada and the Schengen area — places this index scores at wall height 8 and 9, not 10. The towering walls on the map are usually read as somebody else’s. These were laid at home.

No single act built this wall. It does not need one. It needs a shared key, and the key is brick 03.

A companion reading traces eight of these bricks back to a 2003 Pentagon research solicitation that was cancelled, and whose threads were not: LifeLog § 05g.

Four · Sources

The record

  1. “New Orleans may be first U.S. city to use live AI facial recognition camera network.” Axios, 19 May 2025, reporting the Washington Post. Clearview AI, company platform description.
  2. CBC News, February 2022 (up to 210 accounts, about $7.8 million, under the Emergencies Act). Executive Order 14178, “Strengthening American Leadership in Digital Financial Technology,” 23 January 2025. Baker McKenzie, “The GENIUS Act — a new federal framework for stablecoin issuers” (seize, freeze or burn on lawful order).
  3. Ofcom age-assurance duties in force 25 July 2025, as reported by Mobile ID World. Online Safety Amendment (Social Media Minimum Age) Act 2024 (Australia), in force 10 December 2025. Associated Press, “UK says it will introduce digital ID cards,” 26 September 2025.
  4. “Amazon’s Echo is ending its ‘Do Not Send Voice Recordings’ feature.” TechCrunch, 15 March 2025.
  5. TechRadar, June 2025. Fierce Biotech, 2025 (23andMe, $305 million).
  6. “The FTC’s data-sharing order against GM is finally settled.” TechCrunch, 14 January 2026.
  7. DLA Piper, “Google’s U-turn on device fingerprinting,” January 2025.
  8. Staab, Vero, Balunović and Vechev, “Beyond Memorization: Violating Privacy via Inference with Large Language Models,” ETH Zurich, October 2023 (ICLR 2024).
  9. CISA, NSA and NIST, “Quantum-Readiness: Migration to Post-Quantum Cryptography,” August 2023. NIST, “NIST Releases First 3 Finalized Post-Quantum Encryption Standards,” 13 August 2024.
  10. Council of the European Union, “Entry/Exit System.”
  11. Wall heights: this index, BEI-v1.
Read the narration transcript

The wall

The deskThis index gives every country a wall height. How far the state can reach to enforce identity on a phone. Ten is towering. One is open ground.

The planA score like that is a summary. Walls are not raised in one act. They go up a brick at a time. A settings change. A terms update. A sale order. A statute. A border kiosk.

The ledgerEach one laid on an ordinary day, and announced to a different audience. Nobody votes on the wall. People vote, if at all, on a brick.

The recordTen bricks on this page. All ten are in the wall now. Two of them are mortar. They bind the other eight.

Bricks one to five

The deskBrick one. Face match. A face becomes a name, with no phone in hand.

The recordNew Orleans police took real-time face alerts from a private network of more than two hundred face-recognition cameras, for at least two years, before pausing them in April twenty twenty-five. Clearview AI says it holds more than ten billion face images from the open web.

The deskBrick two. The ledger, on private rails. Money can be stopped without a court.

The ledgerNo central bank coin is needed for that. Card payments run over Visa and Mastercard, and every one leaves a record at the bank. In February twenty twenty-two Canada used the Emergencies Act to have banks freeze about two hundred and ten accounts, holding seven point eight million dollars, without a court order.

The ledgerIn twenty twenty-five the United States barred a federal digital currency, and in the same year passed the GENIUS Act, which requires private dollar stablecoins to be built so the issuer can seize, freeze or burn them on a lawful order. The programmable dollar arrived. Issued privately.

The deskBrick three. Identity at the door. Every session carries a name. This one is mortar.

The recordSince July twenty twenty-five, British sites with adult content, social media included, must check age by credit card, photo identification or a face scan. Since December, Australian platforms must keep out everyone under sixteen, which means checking everyone. And Britain has announced a digital identity card that will be mandatory to prove the right to work.

The deskBrick four. The room that listens.

The planOn the twenty-eighth of March twenty twenty-five, Amazon removed the Echo setting that processed voice requests on the device. Every request after the wake word now goes to its cloud, where a lawful order can reach it.

The deskBrick five. The body, uploaded.

The ledgerIn June twenty twenty-five the US health secretary told Congress he wanted every American wearing a wearable within four years. That summer a bankruptcy court approved the sale of twenty-three and me, with its customers' genetic data, for three hundred and five million dollars.

Bricks six to ten

The deskBrick six. The car that reports. Movement becomes a file outside the phone.

The recordGeneral Motors sold drivers' location and driving data to the brokers LexisNexis and Verisk. Drivers found out from the New York Times in March twenty twenty-four, after insurers had it.

The deskBrick seven. The browser that cannot be cleared.

The planGoogle lifted its own ban on device fingerprinting for advertisers in February twenty twenty-five. In twenty nineteen it had called fingerprinting wrong. A fingerprint survives a cleared history and a refused cookie.

The deskBrick eight. The model on top. What you never said gets stated.

The ledgerResearchers in Zurich gave real Reddit profiles to a large language model. It inferred where people lived, what they earned, their sex and age, with up to eighty-five percent accuracy, at a hundredth of the cost of a human analyst.

The deskBrick nine. The archive waiting for its key.

The recordIn August twenty twenty-three the NSA, NIST and the US cyber-defence agency warned that adversaries could be collecting encrypted data now, to decrypt once quantum computers can break it. The new standards came a year later. Everything sent under the old locks stays in whatever archive took it. The collection is the part that is running.

The deskBrick ten. One stream. This one is mortar too.

The planThe European Union's Entry Exit System began in October twenty twenty-five. Fingerprints and a face at the Schengen border, stored with the passport and every crossing date. One query returns all of it.

The mortar

The planA wall is bricks, plus whatever binds them. Brick three gives every other brick the same name. Once access needs an identity, the face, the purchase, the car and the browser resolve to one person.

The ledgerBrick ten lets any one record look up the rest. A face at a kiosk returns the prints, the passport and every past crossing.

The deskAnd look where these were laid. The United States, the United Kingdom, Australia, Canada, the Schengen area. This index puts them at eight and nine. Not ten.

The recordThe towering walls on the map are usually read as somebody else's. These were laid at home.

The planNo single act built this wall. It does not need one. It needs a shared key, and the key is brick three.

The ledgerEvery source for this is listed at the end of the page, and every one of them is linked.

The planThis was Ten bricks, no vote, from the Biometric Enforcement Index. A Feline Union publication.