The Invisible Dragnet: How HIDTA's License Plate Program Normalizes Surveillance Creep

In the world of cybersecurity, we talk about 'attack surfaces'—the total sum of vulnerabilities that can be exploited. For the average American, the biggest vulnerability isn't a weak password; it's the fact that the federal government can track their movements in real-time without a warrant.

As reported by 404 Media, the High Intensity Drug Trafficking Area (HIDTA) program has established a complex system to mirror license plate reader data from cities and towns onto federal databases. This isn't just a local police effort; it is a federal aggregation project. According to 404 Media, the government is obtaining this data through agreements with vendors including Motorola, Axon, and Flock.

Let's be clear: this is surveillance creep masquerading as public safety. The ONDCP, or the White House’s Office of National Drug Control Policy, is the agency that oversees the HIDTA program. To those of us who track the history of federal overreach, that name should trigger immediate alarm. 404 Media notes that the ONDCP previously managed Hemisphere, a secretive project focused on cell phone data surveillance. Now, they are applying that same appetite for bulk data to our roads.

When the state decides it needs a 'database' of where every car is located, it isn't just looking for drug traffickers; it's building a permanent record of association, movement, and behavior.

What is more disturbing than the surveillance itself is the active effort to hide the fallout. Sen. Ron Wyden has recently demanded more information regarding these operations, specifically targeting Sara Carter, the director of the ONDCP. As 404 Media reports, Wyden revealed that the ONDCP commissioned a privacy review of its surveillance programs—including the license plate reader database and the cell phone data project—conducted by the nonprofit contractor MITRE in 2024.

Despite the fact that this review was completed, the ONDCP has refused to release it to the public or to Sen. Wyden's office.

Why the secrecy? If these programs are legal, ethical, and narrowly targeted, the privacy assessment should be a matter of public record. Instead, the ONDCP is treating a government-funded privacy audit like a state secret.

We are witnessing the construction of a federal dragnet. By mirroring local data onto federal servers, the government creates a centralized point of failure and a centralized tool for abuse. When the ONDCP refuses to publish the MITRE report, they are telling us that the 'privacy practices' of these programs are likely indefensible.

Public safety is the eternal excuse for the erosion of the Fourth Amendment. But when the government aggregates location data from Flock and Axon without transparency, it isn't protecting the public—it's monitoring them.