:

DHS USED 1930S LAW TO DEMAND GOOGLE DATA ON CANADIAN

INDUSTRY DESK2 MIN READ
SUN, MAY 24, 2026

■ AI-SUMMARIZED FROM 4 SOURCES ▸ TIMELINE

The Department of Homeland Security demanded Google surrender location and activity data on a Canadian citizen who criticized ICE operations online. The man, who hasn't entered the US in over a decade, was targeted using an obscure trade statute from the Great Depression era.

DHS invoked the International Emergency Economic Powers Act—a 1930s customs law—to pressure Google into handing over browsing history, location data, and other activity information on the Canadian national. The request followed his posts on X condemning ICE following the deaths of Renee Good and Alex Pretti. The case highlights how legacy legislation can be repurposed for modern surveillance. The law, originally designed for trade enforcement, gave DHS leverage to demand user data without a traditional warrant or court oversight. Google's response to the demand remains unclear, but the incident raises questions about how tech companies handle government data requests using unconventional legal frameworks. It also underscores risks for non-US citizens whose speech on global platforms can trigger US government scrutiny. The action comes as the White House simultaneously escalates tech oversight in other areas. The administration recently briefed Anthropic, Google, and OpenAI on plans for a government AI review process—potentially requiring companies to submit new AI models for government approval before release. The proposal reportedly triggered by Anthropic's "Mythos" model follows a year of relative regulatory hands-off approach. Separately, Google is developing new AI capabilities that could blur lines between user control and autonomous action. The company is testing an agent codenamed "Remy" within its Gemini app that can integrate with Google services and take actions on a user's behalf—raising privacy and security implications as AI systems gain deeper access to personal accounts. Together, these developments paint a picture of increasing government pressure on tech companies and expanding AI capabilities with limited transparency around data handling and government access.

■ SOURCES

WiredThe DecoderArs TechnicaTechmeme

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.

4H AGOIndustry Desk

Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.

4H AGOSecurity Desk

Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.

4H AGOIndustry Desk

Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.

4H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.