Fundamentals

State Surveillance and Individual Liberty: Limits and Safeguards

By Daniel Sardá · Published on October 05, 2026

8 min read1,558 words

Surveillance can serve legitimate security aims, but its power requires clear rules, limited scope, independent oversight, and effective remedies.

A person need not be punished to change their behavior. The possibility that their messages, movements, or associations may be recorded can be enough to make them think twice about investigating a sensitive subject, attending a meeting, or expressing an unpopular view. The relationship between state surveillance and individual liberty therefore extends beyond the secrecy of communications: it also concerns the autonomy with which people form ideas, build relationships, and take part in public life.

Surveillance is not illegitimate by definition. Authorities may need information to investigate specific crimes, protect people in danger, or respond to genuine threats. The decisive question is different: under what rules may public power observe, collect, and use information about people, and what prevents an exceptional authority from becoming an ordinary practice of control?

What do we mean by state surveillance?

In a broad sense, state surveillance includes the observation, collection, or processing of information by public authorities in order to identify, track, or infer a person's activities, relationships, or characteristics. It may include physical tracking, interception of communications, and analysis of digital data.

There is no single universal legal definition covering all its forms. However, the International Covenant on Civil and Political Rights protects privacy and correspondence against unlawful or arbitrary interference. It also protects expression, peaceful assembly, and association under specified conditions.

This perspective avoids two simplifications. Privacy is not a right to remain beyond every legitimate investigation. But neither is it limited to concealing intimate matters: it protects communications, data, relationships, and decisions that form part of individual privacy.

Key idea: The issue is not choosing between absolute surveillance and no surveillance at all, but determining when an intervention is justified and which verifiable limits contain it.

Targeted and indiscriminate surveillance

A targeted measure seeks information relevant to a particular person, event, or threat. Consider the time-limited interception of certain communications in a defined investigation. Being focused does not make it automatically legitimate: justification, scope, duration, and subsequent review still matter.

Mass or indiscriminate surveillance follows a different logic. Rather than selecting information because of its prior connection to a specific threat, it gathers data from broad populations “just in case.” General retention of metadata, for example, may reveal patterns of contact, routines, or relationships even without exposing the content of a conversation.

The difference is not merely quantitative. Without individualized selection, it is harder to show that the interference imposed on each person was necessary to achieve the stated aim.

This distinction calls for care: “mass” does not have an identical meaning or the same legal consequences in every system. Here it serves to pose a basic institutional question: does the authority obtain relevant data for a defined purpose, or does it collect general information using overly broad criteria?

The liberty at stake goes beyond privacy

Surveillance can affect several rights at once. Recording a conversation affects the privacy of those involved. If they fear that their words will be misunderstood or used out of context, their freedom of expression may also be affected. If the contacts of a lawful association are monitored, the measure may discourage membership, assembly, or cooperation among its members.

Anonymity can also serve a legitimate function: it allows people to seek information, ask for help, or explore ideas without immediately tying each step to their civil identity. It need not be absolute for its erosion to deserve consideration.

From a classical liberal perspective, a protected private sphere makes more possible than the keeping of secrets. It enables people to think, associate, and dissent without constantly anticipating the response of public power. That distance between the individual and authority is a practical condition of autonomy.

The chilling effect: when observation changes conduct

The mere perception of surveillance may create a chilling effect: someone preemptively changes lawful conduct because they believe they are being watched. It does not occur uniformly, nor does it make every surveillance measure a violation. It is nevertheless a documented risk that should form part of the analysis.

Imagine someone who avoids contacting a controversial but lawful organization; a journalist who abandons a sensitive conversation; or a citizen who declines to voice a sharp but lawful criticism. No one has forbidden them to act. Even so, uncertainty about who is watching, what is retained, and how information will be interpreted narrows the real space for exercising liberty.

That effect can reach third parties. Monitoring one individual can reconstruct networks of relationships and expose people outside the initial target. The question is not only, “What does the state know about me?” but also, “What can it infer about those connected to me?”

Key idea: Liberty is not lost only through a prohibition. It can also narrow when uncertainty about being watched induces self-censorship or withdrawal from lawful activities.

The risk continues after data is collected

Debate often focuses on obtaining information, but the cycle does not end there. It is useful to distinguish at least five stages: collection, access, analysis, sharing, and deletion. An initially limited acquisition can create different risks if too many officials can consult the data, if it is combined to infer new profiles, if it is transferred to other bodies, or if it is retained indefinitely.

A serious assessment should therefore ask who gathers the information, who may see it, what uses are authorized, with whom it may be shared, and when it must be deleted. It should also consider how inaccurate data is corrected and what happens if information was used beyond its original purpose.

A general promise of “responsible use” is not enough. The good intentions of an administration do not replace durable rules. Institutions are needed that can reduce state discretion, record decisions, and hold officials accountable.

How to assess whether a measure is justified

The existence of a law is necessary, but it does not by itself make an interference legitimate. General Comment No. 16 of the Human Rights Committee explains that interference may be arbitrary even when it is provided for by law. It must be reasonable in the circumstances and compatible with protected rights.

A useful framework for examining a measure includes these questions:

• Legality: Is the authority defined in an accessible and sufficiently precise rule, or does it depend on vague terms that permit almost any intervention?
• Legitimate aim: Does it pursue a permitted objective, such as responding to a specific threat, or is it used in practice to monitor lawful political dissent?
• Necessity: Does the measure answer a real need, and is there a less intrusive alternative capable of achieving the same objective?
• Proportionality: Are the scope, duration, and people affected commensurate with the importance of the aim pursued?
• Authorization and oversight: Can an independent body examine the justification, limit the measure, and verify its execution?
• Retention and access: Are there rules on who may consult the data, how long it is retained, and when it must be deleted?
• Accountability and remedy: Can abuses be detected and investigated, with effective correction or redress available?

These criteria, also set out in the OHCHR report on privacy in the digital age, do not impose an identical architecture on every country. They express a shared requirement: the greater the capacity for intrusion, the clearer and more effective the controls must be.

Key idea: “It is authorized by law” is the beginning of the inquiry, not its conclusion. A measure must also be necessary, proportionate, and subject to meaningful oversight.

Security and urgency do not remove the limits

Preventing crime and responding to threats may require surveillance. Precisely because these tools can be useful, authorities must use them within defined powers and under appropriate controls.

Genuine emergencies deserve a specific response. There may be situations in which prior authorization is impracticable. But a legitimate exception should be established by law, narrow, no longer than indispensable, and subject to prompt independent review. Urgency must not become a permanent doorway for evading oversight.

Operational secrecy does not require the whole system to be opaque. General rules can be public; overseers can access confidential information; and bodies can account for their activity with aggregate data without exposing sensitive methods.

The phrase “if you have nothing to hide, you have nothing to fear” does not resolve the conflict either. Rights protect lawful conduct, relationships, searches, and opinions—not only information about people suspected of wrongdoing. Nor should a free society depend on every individual placing unwavering trust in the judgment of those who administer the data.

Limits on power protect an open society

The tension between security and liberty is not resolved by declaring that one always prevails over the other. It is governed through the rule of law: powers defined in advance, reviewable decisions, independent checks, and remedies when public power exceeds its bounds.

Surveillance limited in purpose, scope, and duration can serve legitimate public purposes. A vague, secret, and unlimited power can turn an investigative exception into everyday observation and the aim of security into a tool of political control. The difference lies in the rules and in the real possibility of enforcing them.

Protecting individual liberty does not require making the state blind. It requires preventing its gaze from becoming permanent, indiscriminate, and unaccountable. Where surveillance is necessary, its limits must be knowable, verifiable, and enforceable.