Although it’s supposed to be restricted by surveillance rules at local, state and federal levels, Immigration and Customs Enforcement (ICE) has built up a mass surveillance system that includes details on almost all US residents, according to a report from a major think tank. Researchers from Georgetown Law’s Center on Privacy and Technology said ICE “now operates as a domestic surveillance agency” and that it was able to bypass regulations in part by purchasing databases from private companies. 

“Since its founding in 2003, ICE has not only been building its own capacity to use surveillance to carry out deportations but has also played a key role in the federal government’s larger push to amass as much information as possible about all of our lives,” the report’s authors state. “By reaching into the digital records of state and local governments and buying databases with billions of data points from private companies, ICE has created a surveillance infrastructure that enables it to pull detailed dossiers on nearly anyone, seemingly at any time.”

The researchers spent two years looking into ICE to put together the extensive report, which is called “American Dragnet: Data-Driven Deportation in the 21st Century.” They obtained information by filing hundreds of freedom of information requests and scouring more than 100,000 contracts and procurement records.

The agency is said to be using data from the Department of Motor Vehicles and utility companies, along with the likes of call records, child welfare records, phone location data, healthcare records and social media posts. ICE is now said to hold driver’s license data for 74 percent of adults and can track the movement of cars in cities that are home to 70 percent of the adult population in the US.

The study shows that ICE, which falls under the Department of Homeland Security, has already used facial recognition technology to search through driver’s license photos of a third of adults in the US. In 2020, the agency signed a deal with Clearview AI to use that company’s controversial technology. In addition, the report states that when 74 percent of adults hook up gas, electricity, phone or internet utilities in a new residence, ICE was able to automatically find out their updated address.

The authors wrote that ICE is able to carry out these actions in secret and without warrants. Along with the data it acquired from other government departments, utilities, private companies and third-party data brokers, “the power of algorithmic tools for sorting, matching, searching and analysis has dramatically expanded the scope and regularity of ICE surveillance,” the report states.

Spending transactions reviewed by the researchers showed that, between 2008 and last year, ICE spent around $2.8 billion on “new surveillance, data collection and data-sharing initiatives.” It spent approximately $569 million on data analysis, including $186.6 million in contracts with Palantir Technologies to help it make sense of its vast troves of data. Records showed that ICE also spent more than $1.3 billion on geolocation tech during that timeframe and $389 million on telecom interception, which includes tech that helps the agency track someone’s phone calls, emails, social media activity and real-time internet use.

In addition, the findings suggest the agency started engaging in certain surveillance activities much earlier than previously believed. The researchers found a contract from 2008 that granted ICE access to the Rhode Island motor vehicle department’s facial recognition database. Prior to that, it was understood that ICE started conducting facial recognition searches on state and local data sets in 2013.

The authors claim that ICE has been able to sidestep congressional oversight and bypass attempts at state level to curtain its surveillance capabilities. They included a list of recommendations that may help rein in the agency’s surveillance dragnet, such as Congress reforming immigration laws to “undercut ICE surveillance authority” and blocking ICE’s use of DMV data. The recommended measures also include protecting people who trust federal, state and local authorities with their data and blocking the use of utility records for immigration enforcement.

Engadget has contacted ICE and the Department of Homeland Security for comment.