Is the US Push for 'Digital Public Infrastructure' the Quiet Birth of a National Surveillance State?

The physical wallet is slowly being digitized. From mobile driver's licenses (mDLs) issued by state motor vehicle departments to the Federal Reserve's FedNow instant payment system, the United States is quietly assembling the components of what global technologists call "Digital Public Infrastructure" (DPI). This shift promises to modernize how Americans interact with the state and the broader economy, replacing easily forged plastic cards and slow paper checks with cryptographic proofs and instant digital settlements. For proponents, this is the inevitable and necessary evolution of public works for the twenty-first century.[1][8]

In theory, Digital Public Infrastructure is the digital equivalent of physical roads and bridges—foundational, interoperable systems that allow citizens to securely prove who they are, send money instantly, and share data safely across sectors. Proponents envision a seamless, inclusive society where bureaucratic friction is eliminated. A properly designed digital ID, for example, could allow a user to instantly verify they are over twenty-one without revealing their home address or full name to a bouncer, while instant payment rails could deliver emergency government benefits in seconds rather than weeks.[4]

But a growing coalition of civil liberties organizations, privacy advocates, and decentralized technologists warns that this push could quietly construct a frictionless national surveillance state. They argue that the United States is rushing to digitize identity and financial transactions without the necessary statutory guardrails. By relying on commercial tech giants and flawed technical standards, critics warn that the US is creating a system that could easily be weaponized for mass tracking, corporate data harvesting, and algorithmic discrimination against vulnerable populations.[3][7]

To understand the tension, one must look at the three core pillars of Digital Public Infrastructure: digital identity, digital payments, and data exchange. Globally, countries like Estonia and India have built unified, state-backed systems that integrate these pillars into a cohesive national architecture. The United States, constrained by federalism and a strong political preference for private-sector solutions, is taking a highly fragmented approach. FedNow handles the back-end settlement of payments at the federal level, while identity is left to a patchwork of state motor vehicle departments issuing unique mobile driver's licenses.[1][4][8]

Organizations like the Center for Digital Public Infrastructure argue that well-designed DPI actually reduces surveillance rather than expanding it. By institutionalizing data minimalism and cryptographic tokenization, a digital ID can prevent the creation of centralized data honeypots. In a truly privacy-preserving system, authentication is done with the explicit consent of the user, and usage audits are permanently auto-deleted. The system does not track the location or purpose of the identity check, ensuring that the state remains entirely blind to the citizen's daily movements and transactions.[2]

However, civil liberties defenders point out that current US implementations fall dangerously short of this cryptographic ideal. A major concern centers on the technical standards backing mobile driver's licenses. The 'No Phone Home' campaign—backed by the American Civil Liberties Union, the Electronic Frontier Foundation, and various digital rights groups—highlights that many digital credentials contain embedded functionality allowing user behavior data to be transmitted back to the issuing government agency during verification. This means the DMV could theoretically know exactly when and where a citizen presents their ID.[6][7]

If an identity system can 'phone home,' it facilitates centralized tracking by default. Even if the capability is currently inactive or officially restricted to security updates, privacy advocates warn that its mere existence is a vulnerability waiting to be exploited. A system that pings a central government server every time a citizen buys alcohol, enters a federal building, or logs into a restricted website creates an unprecedented, highly detailed map of human behavior. History suggests that once such surveillance capabilities exist, they are inevitably utilized by law enforcement or intelligence agencies under the banner of national security.[6]

Furthermore, the United States relies heavily on private companies to host these digital wallets. Organizations like the National Immigration Law Center warn that integrating government IDs into commercial smartphones merges state identification with corporate data harvesting. Companies whose business models rely on capturing massive amounts of consumer data have a mutual interest in increasing reliance on smartphones. This public-private hybrid blurs the line between public infrastructure and private surveillance, placing sensitive civic data inside commercial ecosystems that are notorious for opaque tracking practices.[5]

There are also severe legal risks at the physical point of contact. Handing an unlocked smartphone to a police officer to show a mobile driver's license creates immense Fourth Amendment complexities. While some states have attempted to legislate that presenting a digital ID does not constitute consent to a broader device search, the reality of a traffic stop is fraught. Notifications popping up during the interaction could be interpreted as probable cause, potentially opening the device to unwarranted searches.[7]

The payment pillar of American DPI faces similar structural critiques regarding data protection. The Federal Reserve's FedNow system provides a highly efficient real-time gross settlement rail, but it leaves consumer interfaces and data rules entirely to private banks and fintech applications. This infrastructure-centric approach means that data protection rules remain sector-specific and fragmented, rather than citizen-centric. Without a unified privacy framework, the financial data generated by instant payments remains vulnerable to commercial exploitation and opaque sharing agreements that consumers rarely read or understand.[1]

The ultimate fear among digital rights advocates is coercion. Access Now warns that when digital identity systems become de facto mandatory to participate in modern society—required to get a job, rent an apartment, or access government benefits—individuals lose the ability to meaningfully opt out. This dynamic disproportionately harms vulnerable populations, who may be forced into a surveillance net simply to survive. A truly equitable system must preserve the right to a paper ID and analog participation without penalty.[3]

Without a comprehensive federal data privacy law, the foundation of American Digital Public Infrastructure is being laid on shifting sand. The technology itself is inherently neutral. Cryptographic tools like verifiable credentials and zero-knowledge proofs already exist to make digital IDs perfectly private. These protocols keep data entirely on the user's device and allow for selective disclosure—proving a specific fact without revealing the underlying data—without any government ping-backs. Implementing these standards would sever the link between identity verification and behavioral tracking.[2][9]

But until the United States mandates these privacy-preserving architectures by law, the debate will rage on. The transition to digital public infrastructure is likely inevitable, but its underlying architecture is not. The technical choices made today will determine whether the US builds a modern public works project that empowers its citizens, or a frictionless surveillance network that tracks their every move. For now, the American approach remains a high-stakes experiment in balancing the undeniable convenience of a digital wallet against the fundamental right to be left alone.[9]