NYX VAEL
On June 19, a man was arrested in São Gabriel da Palha, in the Brazilian state of Espírito Santo, after OpenAI reported his ChatGPT conversations to the FBI. The messages described plans to kill his eight-year-old son to avoid paying child support, as well as attacks against schools, churches, and public officials.
The FBI passed the information to the CyberLab at Brazil's Ministry of Justice, which forwarded it to the state police, who made the arrest one day before the date the suspect had mentioned in the conversations.
The outcome was the right one, and it would be difficult to argue otherwise, which is precisely why this case deserves more thought than it usually gets.
The mechanism matters more than the outcome
The troubling aspect of this story is not that the suspect was arrested. Few people would argue that authorities should ignore explicit plans for murder or mass violence. The question is different: what institutional process made that intervention possible?
No court order was involved. There was no public oversight or judicial review before a private technology company decided that a user's conversations justified notifying a government agency in another country. From there, information moved through law enforcement channels until it resulted in an arrest.
In this case, the intervention may well have prevented a tragedy. That is precisely what makes it difficult to discuss. When a system produces a desirable outcome, people tend to stop asking how that system operates, what standards it applies, or how those standards might change over time.
But history shows that surveillance rarely remains limited to its original purpose. Powers introduced to address exceptional situations often become normalized, while the definition of what constitutes a threat gradually expands. Emergency measures become routine administration.
The familiar response is that people with nothing to hide have nothing to fear. But privacy has never existed solely to protect wrongdoing. It protects ordinary life from constant observation. It creates space for experimentation, disagreement, mistakes, and unpopular opinions without every action being permanently recorded and evaluated.
The Cambridge Analytica scandal illustrated that the greatest risk is often not the data itself, but who controls it and the purposes for which it is used. Information collected for one reason can later be repurposed for another, especially when the technical infrastructure already exists.
The New Default
Surveillance almost never arrives as surveillance. It arrives as convenience, security, efficiency, or public safety.
Each individual step appears reasonable. Looking only at isolated decisions, it is easy to conclude that nothing fundamental has changed. Looking at the cumulative effect tells a different story.
Perhaps the most significant cultural shift of the digital age is that privacy has ceased to be the default condition. Increasingly, the burden falls on individuals to justify why they do not want to be monitored, rather than on institutions to justify why monitoring is necessary.
The cyberpunk writers imagined societies where corporate platforms and governments shared unprecedented access to personal information. What they underestimated was not the technology itself, but how willingly people would accept it when each new layer of surveillance was introduced in the name of solving a real problem.