Proton
Illstration of the surveillance represented by user data requests.

Massive corporate databases become government tools of surveillance

The number of data requests the US government sent to Google has increased 510% since 2010. US government requests to Facebook have also increased 364% since the beginning of 2013. The databases of private companies are increasingly being used to monitor individuals with little transparency into the process.

In 2013, when Edward Snowden revealed the National Security Agency was conducting dragnet, mass surveillance(new window), he forced the public to refocus on how to protect the right to privacy. These revelations inspired the founders of Proton Mail to begin thinking about how people could privately communicate with each other. 

Two years later, the US Congress passed the Freedom Act(new window), which stopped the NSA’s bulk collection of private data. Data collection can only be performed against individual suspects with the approval of the secretive FISA court(new window). However, the bulk collection of private data still happens; only now it is carried out by private corporations like Google, Facebook, and Internet service providers.  

This article will examine how mass data collection by corporations has enabled the governments around the world to continue spying on individuals and how this type of surveillance has increased over the past several years.

Once data is collected, it can be shared

It’s hard to conceive of how much data corporations have. Google handles over 83,000 searches(new window) and Instagram (owned by Facebook) users upload 994 photos — per second. Each of these actions leaves a record, and it does not take long for these companies to build very comprehensive and detailed user profiles. That same year, a journalist from The Guardian(new window) used the GDPR(new window) to request his personal data from Google and Facebook. He received the equivalent of 3 million Word documents from Google and 400,000 Word documents from Facebook. These companies analyze all this information and use it to target you with ads. 

It is possible to limit the amount of data corporations collect and delete the information they already have. We have made a guide to help you manage your privacy on Google(new window). However, if you do not take the time to adjust your privacy settings and delete your data, these corporations have troves of personal information to share with national governments.

The number of government data requests is increasing

While US law prevents the NSA from performing bulk data collection, corporations like Google and Facebook face few restrictions on gathering data on their users. So, to get the data it wants, the NSA simply goes to these companies with user data requests. Under the Freedom Act, if the US government can convince a judge in the FISA court that an investigation pertains to national security, then they can request that a company share whatever data it has on an individual. And requests that are delivered via a national security letter do not need a judge’s approval, not even from the FISA court. This secretive system gives the government access to the reams of personal information these companies collect with little transparency or public oversight.

Companies can refuse or argue that the request should be more narrowly interpreted, but then they face costly legal action. Google began charging governments a fee(new window) for processing such  data requests, a move that some claim will help winnow out frivolous or unnecessary requests. That being said, the majority of user data requests are respected. Facebook has shared information in response to a user data request roughly 74% of the time(new window), and that percentage has remained steady since 2017.

This success rate has led more and more governments to use online platforms as their data collection services. Between the first half of 2013 and the end of 2019, the number of data requests made by governments worldwide to Facebook, Google, Twitter, and Yahoo has increased by roughly 320%.

Line graph showing the increase in user data requests from around the world from 2013 to 2019.

Unsurprisingly, given the weak privacy protections offered by the FISA courts, the United States sent the most data requests to private companies in 2019. In fact, the US made more data requests (168,000) to Facebook, Google, Twitter, and Yahoo than the rest of the countries that make up the 14 Eyes intelligence-sharing agreement(new window) combined. (These statistics do not include the user data requests sent to Twitter and Yahoo for the second half of 2019, as they have not yet shared this data.)

Bar graph depicting the number of user data requests made by each country in the 14 eyes intelligence sharing agreement.

The two companies that receive the most requests, by far, are Google and Facebook. It is not a coincidence that these are also the two companies that collect the most data from their users. In 2019 alone, Google received 157,435 user data requests worldwide and Facebook received 269,492. 

Bar graph depicting the number of user data requests Google and Facebook have received.

Because of the secrecy surrounding the FISA court proceedings, it is hard to say what the US government is doing with the data they collect. Most requests come with a gag order(new window), which prevents companies from informing their users if their information has been requested by the government. 

ProtonMail: a safe place for your messages

This demonstrates the profound impact the tools you use online have on your privacy. But there are safe alternatives that protect your privacy. Proton Mail is based in Switzerland, which is not a member of the 14 Eyes agreement. We cannot act on a data request until it has been approved by the appropriate Swiss authority. We keep a full record of the data requests we receive in our Transparency Report(new window)

If we receive an approved request from the Swiss authorities, we are bound by Swiss law to share what information we have. However, even if we wanted to, we cannot access the content of your messages because we use end-to-end encryption(new window) and zero access encryption(new window). This is also why we minimize the amount of data we require to set up an account and allow our users to use anonymous payment options(new window)

Proton’s mission is privacy. Because we see your data as something to protect, not profit off of, we cannot and will not become a tool that helps governments spy on you.

You can get a free secure email account from Proton Mail here.

We also provide a free VPN service(new window) to protect your privacy. Proton Mail and Proton VPN(new window) are funded by community contributions. If you would like to support our development efforts, you can upgrade to a paid plan(new window). Thank you for your support.


Feel free to share your feedback and questions with us via our official social media channels on Twitter(new window) and Reddit(new window).

Protect your privacy with Proton
Create a free account

Related articles

People and companies are generally subject to the laws of the country and city where they are located, and those laws can change when they move to a new place. However, the situation becomes more complicated when considering data, which can be subjec
Your online data is no longer just used for ads but also for training AI. Google uses publicly available information to train its AI models, raising concerns over whether AI is even compatible with data protection laws. People are worried companies
iPhone stores passwords in iCloud Keychain, Apple’s built-in password manager. It’s convenient but has some drawbacks. A major issue is that it doesn’t work well with other platforms, making it hard for Apple users to use their passwords and passkeys
There are many reasons you may need to share passwords, bank details, and other highly sensitive information. But we noticed that many people do this via messaging apps or other methods that put your data at risk. In response to the needs of our com
Large language models (LLMs) trained on public datasets can serve a wide range of purposes, from composing blog posts to programming. However, their true potential lies in contextualization, achieved by either fine-tuning the model or enriching its p
is Google Docs secure
Your online data is incredibly valuable, particularly to companies like Google that use it to make money through ads. This, along with Google’s numerous privacy violations, has led many to question the safety of their information and find alternative