The Unanswered Question
The public confrontation between Anthropic and the Department of Defense has forced into the open a question that U.S. law has never clearly answered: Is the Pentagon allowed to conduct mass surveillance on Americans using artificial intelligence? More than a decade after Edward Snowden exposed the NSA's bulk metadata collection, the legal framework governing domestic surveillance by the military remains riddled with gaps.
The flashpoint was the Pentagon's desire to use Anthropic's Claude AI to analyze bulk commercial data on Americans — the kind of information that data brokers sell openly, including location data, purchase histories, browsing patterns, and social media activity. Anthropic refused, demanding that its AI not be used for mass domestic surveillance or autonomous weapons. A week after negotiations collapsed, the Pentagon designated Anthropic a "supply chain risk," a classification typically reserved for foreign companies that threaten national security.
What the Law Actually Says
The legal landscape governing military surveillance of Americans is a patchwork of statutes, executive orders, and court interpretations that were largely written before AI existed. The Posse Comitatus Act of 1878 prohibits the use of federal military forces for domestic law enforcement, but its application to intelligence gathering rather than enforcement actions is contested.
Executive Order 12333, signed by Ronald Reagan in 1981 and still in effect, authorizes intelligence agencies to collect "publicly available information" and information obtained from "cooperating sources." Commercial data purchased from data brokers arguably falls into both categories, creating a legal pathway for bulk data acquisition that many civil liberties advocates find alarming.
The Foreign Intelligence Surveillance Act establishes judicial oversight for certain types of surveillance but contains exceptions for information that is voluntarily provided or commercially available. When the Pentagon buys Americans' data from commercial sources rather than intercepting their communications, FISA's protections may not apply.
