Proton
Illstration of the surveillance represented by user data requests.

The number of data requests the US government sent to Google has increased 510% since 2010. US government requests to Facebook have also increased 364% since the beginning of 2013. The databases of private companies are increasingly being used to monitor individuals with little transparency into the process.

In 2013, when Edward Snowden revealed the National Security Agency was conducting dragnet, mass surveillance(nueva ventana), he forced the public to refocus on how to protect the right to privacy. These revelations inspired the founders of Proton Mail to begin thinking about how people could privately communicate with each other. 

Two years later, the US Congress passed the Freedom Act(nueva ventana), which stopped the NSA’s bulk collection of private data. Data collection can only be performed against individual suspects with the approval of the secretive FISA court(nueva ventana). However, the bulk collection of private data still happens; only now it is carried out by private corporations like Google, Facebook, and Internet service providers.  

This article will examine how mass data collection by corporations has enabled the governments around the world to continue spying on individuals and how this type of surveillance has increased over the past several years.

Once data is collected, it can be shared

It’s hard to conceive of how much data corporations have. Google handles over 83,000 searches(nueva ventana) and Instagram (owned by Facebook) users upload 994 photos — per second. Each of these actions leaves a record, and it does not take long for these companies to build very comprehensive and detailed user profiles. That same year, a journalist from The Guardian(nueva ventana) used the GDPR(nueva ventana) to request his personal data from Google and Facebook. He received the equivalent of 3 million Word documents from Google and 400,000 Word documents from Facebook. These companies analyze all this information and use it to target you with ads. 

It is possible to limit the amount of data corporations collect and delete the information they already have. We have made a guide to help you manage your privacy on Google(nueva ventana). However, if you do not take the time to adjust your privacy settings and delete your data, these corporations have troves of personal information to share with national governments.

The number of government data requests is increasing

While US law prevents the NSA from performing bulk data collection, corporations like Google and Facebook face few restrictions on gathering data on their users. So, to get the data it wants, the NSA simply goes to these companies with user data requests. Under the Freedom Act, if the US government can convince a judge in the FISA court that an investigation pertains to national security, then they can request that a company share whatever data it has on an individual. And requests that are delivered via a national security letter do not need a judge’s approval, not even from the FISA court. This secretive system gives the government access to the reams of personal information these companies collect with little transparency or public oversight.

Companies can refuse or argue that the request should be more narrowly interpreted, but then they face costly legal action. Google began charging governments a fee(nueva ventana) for processing such  data requests, a move that some claim will help winnow out frivolous or unnecessary requests. That being said, the majority of user data requests are respected. Facebook has shared information in response to a user data request roughly 74% of the time(nueva ventana), and that percentage has remained steady since 2017.

This success rate has led more and more governments to use online platforms as their data collection services. Between the first half of 2013 and the end of 2019, the number of data requests made by governments worldwide to Facebook, Google, Twitter, and Yahoo has increased by roughly 320%.

Line graph showing the increase in user data requests from around the world from 2013 to 2019.

Unsurprisingly, given the weak privacy protections offered by the FISA courts, the United States sent the most data requests to private companies in 2019. In fact, the US made more data requests (168,000) to Facebook, Google, Twitter, and Yahoo than the rest of the countries that make up the 14 Eyes intelligence-sharing agreement(nueva ventana) combined. (These statistics do not include the user data requests sent to Twitter and Yahoo for the second half of 2019, as they have not yet shared this data.)

Bar graph depicting the number of user data requests made by each country in the 14 eyes intelligence sharing agreement.

The two companies that receive the most requests, by far, are Google and Facebook. It is not a coincidence that these are also the two companies that collect the most data from their users. In 2019 alone, Google received 157,435 user data requests worldwide and Facebook received 269,492. 

Bar graph depicting the number of user data requests Google and Facebook have received.

Because of the secrecy surrounding the FISA court proceedings, it is hard to say what the US government is doing with the data they collect. Most requests come with a gag order(nueva ventana), which prevents companies from informing their users if their information has been requested by the government. 

ProtonMail: a safe place for your messages

This demonstrates the profound impact the tools you use online have on your privacy. But there are safe alternatives that protect your privacy. Proton Mail is based in Switzerland, which is not a member of the 14 Eyes agreement. We cannot act on a data request until it has been approved by the appropriate Swiss authority. We keep a full record of the data requests we receive in our Transparency Report(nueva ventana)

If we receive an approved request from the Swiss authorities, we are bound by Swiss law to share what information we have. However, even if we wanted to, we cannot access the content of your messages because we use end-to-end encryption(nueva ventana) and zero access encryption(nueva ventana). This is also why we minimize the amount of data we require to set up an account and allow our users to use anonymous payment options(nueva ventana)

Proton’s mission is privacy. Because we see your data as something to protect, not profit off of, we cannot and will not become a tool that helps governments spy on you.

You can get a free secure email account from Proton Mail here.

We also provide a free VPN service(nueva ventana) to protect your privacy. Proton Mail and Proton VPN(nueva ventana) are funded by community contributions. If you would like to support our development efforts, you can upgrade to a paid plan(nueva ventana). Thank you for your support.


Feel free to share your feedback and questions with us via our official social media channels on Twitter(nueva ventana) and Reddit(nueva ventana).

Artículos relacionados

The cover image for a Proton Pass blog comparing SAML and OAuth as protocols for business protection
en
SAML and OAuth help your workers access your network securely, but what's the difference? Here's what you need to know.
Proton Lifetime Fundraiser 7th edition
en
Learn how to join our 2024 Lifetime Account Charity Fundraiser, your chance to win our most exclusive plan and fight for a better internet.
The cover image for a Proton Pass blog about zero trust security showing a dial marked 'zero trust' turned all the way to the right
en
Cybersecurity for businesses is harder than ever: find out how zero trust security can prevent data breaches within your business.
How to protect your inbox from an email extractor
en
Learn how an email extractor works, why your email address is valuable, how to protect your inbox, and what to do if your email address is exposed.
How to whitelist an email address and keep important messages in your inbox
en
Find out what email whitelisting is, why it’s useful, how to whitelist email addresses on different platforms, and how Proton Mail can help.
The cover image for Proton blog about cyberthreats businesses will face in 2025, showing a webpage, a mask, and an error message hanging on a fishing hook
en
Thousands of businesses of all sizes were impacted by cybercrime in 2024. Here are the top cybersecurity threats we expect companies to face in 2025—and how Proton Pass can protect your business.