Civic

Government Agencies Hold Your Data — And Most Americans Don't Trust What Happens Next

A new survey from the Center for Democracy and Technology reveals deep public anxiety about how public institutions collect, store, and use personal information.

NewsOnScale Staff

June 24, 2026

There is a particular kind of vulnerability that comes with mandatory disclosure. When you file taxes, apply for public benefits, register a vehicle, or enroll a child in school, you are not choosing to share your data with a government agency — you are required to. And according to new survey research from the Center for Democracy and Technology, most Americans are deeply uncomfortable with what happens to that information once it leaves their hands.

The CDT findings document widespread concern across partisan lines about personal data held by public institutions, with respondents expressing demand for stronger oversight, clearer accountability structures, and meaningful consequences when agencies misuse or inadequately protect the information entrusted to them. The breadth of that concern — cutting across demographics that rarely agree on anything — suggests this is not a niche civil liberties worry. It is a mainstream civic anxiety that has not yet found a proportional policy response.

## Why This Matters More Now

The timing of this data is not incidental. Federal, state, and local agencies are in the middle of an aggressive expansion of data-driven systems — algorithmic tools for benefits determination, predictive policing platforms, AI-assisted child welfare screening, automated fraud detection. Each of these systems ingests the personal data that citizens had no choice but to provide. Each creates new surfaces for error, bias, breach, and abuse.

The concern is not hypothetical. Documented cases of algorithmic errors in benefits systems have wrongly cut off food assistance. Facial recognition tools deployed by law enforcement agencies have produced misidentifications that led to wrongful arrests. Medicaid and child services algorithms have been shown to produce racially disparate outcomes that their procurement processes never adequately audited. In each case, the underlying data was public-sector data — information citizens gave the government because they had to.

The CDT research suggests the public has noticed, even if legislators have been slow to act.

## The Accountability Gap

What the survey underscores is a structural mismatch: the obligations citizens have to government data collection are legally enforceable, but the obligations government has to citizens regarding that data are often aspirational at best. Privacy policies exist. Data governance frameworks exist. But meaningful, independent oversight with real enforcement authority is rare at any level of government.

This is the accountability gap. It is not primarily a technology problem — it is a governance design problem. Agencies that adopt new data systems frequently do so without independent audits, without public comment periods, and without sunset clauses requiring periodic reauthorization. The systems accumulate. The data accumulates. The oversight does not.

Some jurisdictions have begun to move. A handful of cities have passed algorithmic accountability ordinances requiring impact assessments before procurement. Several states have proposed data minimization rules limiting what agencies can collect. The federal landscape, however, remains largely fragmented — a patchwork of sector-specific rules that was not designed for the integrated, AI-augmented data environment agencies now operate in.

## What Accountability Would Actually Require

The CDT findings point toward public demand that is fairly specific: people want to know what data is held, why it is being used, who has access to it, and what recourse exists when something goes wrong. That is not an unreasonable ask. It is, in fact, the minimum standard that private-sector data handlers in regulated industries are already expected to meet.

Applying that standard to public agencies would require mandatory public registries of data systems, independent audit authority, accessible individual rights mechanisms including the ability to correct erroneous records, and real penalties for noncompliance — not voluntary best-practice guidelines.

None of that is technically complex. All of it is politically difficult, because it requires agencies to accept constraints on discretion they currently exercise without much external review.

The survey data suggests the public is ready for that conversation. The question is whether the institutions that hold the data are.

← Back to all news