Part IV - The Bureaucratic Panopticon — Administrative Violence and Zombie Data

In Part III, we explored the psychological dimension of the surveillance state—the chilling effect that turns citizens into their own censors. But the Panopticon does not limit itself to silencing people. It also punishes them through paperwork. The Aurora family went home after their ordeal at gunpoint. Robert Williams was released after 30 hours. What follows is a tour of the quieter violence: the kind administered not by officers or algorithms, but by databases that refuse to forget and bureaucracies that cannot correct themselves.

4.1 The Toll Violation Trap: How a Misread Plate Can Revoke Your License

Consider a scenario so mundane it barely registers as “surveillance”: driving through a highway toll booth. Interstate compacts like the Non-Resident Violator Compact (NRVC) allow states to suspend driver’s licenses for unpaid tolls in other jurisdictions. The system is designed for efficiency. In practice, it is a machine for manufacturing Kafkaesque nightmares.³⁵

A camera in Florida might misread a Georgia license plate, assigning a toll violation to an innocent driver hundreds of miles away. Because the notice is mailed to the address on file for the misread plate, the actual driver never receives it. The debt goes unpaid. The license is suspended.³⁵

Drivers often discover the suspension only when they attempt to renew their registration or are pulled over for a routine traffic stop. Resolving these out-of-state errors is a bureaucratic ordeal of staggering proportions—requiring coordination between two distinct state DMV systems while the victim is legally barred from driving.³⁶ The automated system that created the error has no mechanism for correcting it with comparable speed. The machine acts in milliseconds; the human appeals process takes months.

4.2 Zombie Records and Tenant Screening: When the Database Outlives the Court

Background check companies scrape court records to create dossiers on potential tenants and employees. These automated scrapers often fail to distinguish between individuals with similar names, or they report expunged records as active convictions. The result is a category of data that privacy scholars have come to call “zombie records”—records that should be dead but keep rising from the database to haunt their subjects.³⁹

Case Study: Marco Antonio Fernandez

A Navy veteran with top-secret security clearance, Fernandez was denied housing because a screening algorithm confused him with a Mexican drug trafficker named Marco Alberto Fernandez Santana. The algorithm matched the first and last names but ignored the different middle names and distinct dates of birth.³⁸ A system built to assess risk had instead manufactured it—flagging a decorated serviceman as a cartel operative on the strength of a partial name match.

Case Study: Rafaela Aldaco

Aldaco was denied transitional housing because a background check reported a twenty-year-old misdemeanor. The report failed to note that the charge had been dismissed.³⁹ She was effectively punished for a crime she was never convicted of, by a database that neither knew nor cared about the distinction.

These cases illustrate a quiet inversion of justice. In the algorithmic age, the “presumption of innocence” is replaced by the “presumption of data accuracy.” The database is assumed correct until the citizen—often with limited resources, limited time, and limited knowledge of the system’s inner workings—can prove it wrong. Richelieu’s six lines have been replaced by six data fields in a tenant screening report, and the consequences are not imprisonment but something nearly as devastating: the inability to find a home.

4.3 The Infinite Life of Data: “Zombie Debt” and the Expungement Gap

The concept of “zombie debt” extends this problem into the financial sphere. Zombie debt refers to old or invalid debts that are purchased by collection agencies for pennies on the dollar and then aggressively collected, often long after the statute of limitations has expired.⁵⁸ The debts are legally unenforceable, but the collection calls are not. And in the data ecosystem, even resolved debts leave traces that can damage credit scores and block access to housing and employment.

In the data context, the problem is compounded by the “Expungement Gap.” Even when a court orders a criminal record expunged, private data brokers—who scrape court records continuously—may not update their databases. A landlord running a background check through a commercial screening service will still see the expunged record, leading to housing denial.³⁹ The “memory” of the private sector outlasts the “forgiveness” of the legal system. The court may forgive, but the database does not.

4.4 The Mother of All Breaches: The Library of Vulnerability

The “Mother of All Breaches” (MOAB), discovered in 2024, represents the ultimate failure of data stewardship. Containing 26 billion records—a compilation of thousands of previous breaches aggregated into a single searchable dataset—the MOAB effectively serves as what we might call a “Richelieu Engine” for cybercriminals and state actors alike.⁸

It allows for the construction of detailed profiles on billions of individuals, cross-referencing passwords, email addresses, and personal data across platforms. The sheer scale means that “privacy” is no longer a state of being but a temporary administrative oversight. If the data exists, it is likely in the MOAB. And if it is in the MOAB, it is accessible to anyone with the motivation to look.

4.5 The “Privacy Compact”: A Broken Promise

The term “Privacy Compact” is often invoked to describe the social contract between citizen and state regarding data. However, in the U.S. legal context, the National Crime Prevention and Privacy Compact of 1998 is actually a mechanism for sharing criminal records, not protecting them.⁶⁰ This compact facilitates the interstate flow of data that powers background checks, often prioritizing efficiency over accuracy.

A growing number of scholars argue for a genuinely new Privacy Compact—one that includes a “Statute of Erasure” or a “Data Statute of Limitations.” The logic is straightforward: just as crimes have statutes of limitations that acknowledge the diminishing relevance of past offenses, digital footprints should have expiration dates. A toll violation from 2018 or a misdemeanor from 2004 should not be perpetually accessible to deny a license or an apartment in 2025. Every year without reform, the window for meaningful data privacy narrows further—as more records accumulate, more breaches occur, and more citizens are locked into permanent digital pasts they cannot escape. Without such protections, the bureaucratic Panopticon will continue to do what Richelieu’s spies did—find “something which will hang him”—except the hanging will be done not by a court, but by a database that no one monitors and no one can appeal.

•  •  •

The harms cataloged so far—algorithmic arrests, chilled speech, zombie records—are the products of a surveillance system that at least claims to be seeking truth. But what happens when the system is deliberately poisoned? In Part V, we confront the newest frontier: synthetic consensus, agentic AI swarms, and the manufactured corruption of reality itself.

Works Cited

8. “26 Billion Records Released in the Mother of All Breaches,” McAfee Blog, accessed January 30, 2026

35. “Florida Unpaid Toll, issue with License but live in Georgia,” Reddit r/Georgia, accessed January 30, 2026

36. “Can unpaid tolls get my license suspended?” Traffic Ticket Lawyer Miami, accessed January 30, 2026

38. “Tenant screening software faces national reckoning,” The Greenlining Institute, accessed January 30, 2026

39. “When Zombie Data Costs You a Home,” The Markup, accessed January 30, 2026

58. “What is Zombie Debt?” Holland Law Firm, accessed January 30, 2026

60. “Fusion Center Privacy, Civil Rights, and Civil Liberties Policy Development Template, Version 3.0,” NCRIC, accessed January 30, 2026