The harms nobody has priced¶

The Patrician has observed that the Guild of Tanners prices hides with great accuracy and the river not at all. The hides are sold, invoiced and taxed. The river is downstream, and the people who drink from it were never party to the transaction, so their share of the cost appears in no ledger the Guild keeps and no ledger the city keeps either. He has found this arrangement to be the normal shape of a successful trade rather than a scandal peculiar to tanners.

The trade in movement data prices its goods with similar precision. Around 14,000 dollars for a continuous stream of locations. 1.85 million euros for a two-year licence extension at a national interior ministry. Ninety-three million euros for the takings of everyone in the market, according to the market. Each of those figures counts money moving inside the trade. None counts what it costs outside, and the outside is the part of the file nobody has totalled.

The harms that already have names¶

Some of it has been counted, because some of it looks like crime. Intelligence staff and soldiers located at their own installations. A man in Norway traced to his front door, not by the dating app he had installed carefully and briefly, but by a messaging app carrying the same identifier. Police forces buying data by a route that goes around a safeguard written for compelled access. Identifiers that show up at both a barracks and a brothel, the sort of pairing an intelligence service once had to put a person on the ground to notice.

These harms attract attention because they have victims, dates and something resembling a perpetrator. That is also why they are the cheap ones to put on a ledger. A harm with a face can be investigated, denied, litigated and eventually priced. The rest sit in a column with no claimant, and a column with no claimant rarely fills.

The meetings that do not happen¶

Attendance at a demonstration, a union meeting, a mosque, a clinic or a lawyer’s office can now leave a record with a long shelf life and a market price. The people most likely to weigh that are the ones for whom attendance already carried a cost, and the ones who decide to stay at home file no report about it. Nothing need appear in any statistic except a slightly thinner crowd.

The mechanism needs no purchase to work. Deterrence runs on the belief that a record could be bought rather than on evidence that one was, so it arrives before any transaction and can outlast a promise to stop trading. A market can retire, as one broker announced it had; the belief it created stays behind, unpriced and largely unmeasurable.

Sensitive inference in a marketing costume¶

The trade deals in coordinates, but it also deals in the categories the advertising industry attaches to people: demographics, interests, segments. Sensitive conclusions travel comfortably in that luggage. A pregnancy inference could move as an interest in nursery furniture, a health condition as a segment, a religious observance as a set of Friday afternoons in a particular building, a course of treatment as a weekly visit to a particular address.

European law gives special categories of data special protection. The market can meet the same facts through proxies carrying no such label, so an inference crosses it without the category that made it sensitive. The proxies are not, formally, the thing they stand for, and the difference between a religion and a repeated Friday afternoon exists mostly in the paperwork. Whether a supervisor would agree is a question that has not often been put, since putting it requires a supervisor with a party to ask.

Cover that was never a policy¶

Some groups were safer in this environment for being unremarkable in bulk: people in shelters, people in asylum accommodation, sex workers, patients, sources talking to journalists. That safety was a by-product of the cost of looking rather than a protection anyone granted, and it lasted only until a second dataset arrived.

The cost of looking has fallen a long way. Nobody announced the change, because announcing it was nobody’s job, and the people who relied on the old arithmetic were never told it had been revised. This is the sort of effect that shows up years later, in an individual case, as a piece of luck that ran out.

Archives that improve with age¶

Location files do not decay, and their capacity to identify someone is likely to grow rather than fade. Each additional dataset that becomes available makes the earlier ones more legible, and re-identification methods have improved rather than the reverse. An archive bought today is a claim on tomorrow’s ability to read it. The encrypted traffic recorded now against a future quantum computer behaves the same way.

A seller’s exit does not remove the capability either. Records already sold sit with their buyers, outliving the contract, the company and the press release announcing that the trade has ceased, since the goods are substitutable and the exports are not recallable.

The state’s stake in continuity¶

Once ministries buy, a government acquires an interest in the market continuing and, where the purchases are classified, an interest in keeping the arrangement out of public view. Regulation then competes with procurement inside the same building, which is an unequal contest at the best of times and worse when one side is classified.

There is a second bill attached, and nobody has costed it. If purchases are later held unlawful, what happens to the investigations, prosecutions and deportations that relied on the data becomes a live and retrospective question. The longer such purchases continue, the larger that problem could grow, and the more a restriction would cost the government writing it.

Hostile attention gets cheaper¶

Following somebody at this scale used to require a service, a budget and a reason. It now requires an account and an invoice, and in August 2026 the capability was offered to a luxury goods conglomerate for investigating theft. Nothing about the mechanism restricts it to states, and nothing except price has ever restricted it to the patient.

The change is distributional rather than technical. That offer is the boundary moving outward with a date on it, and nothing in the mechanism confines the next one to a conglomerate with a legal department to advise it. Insurers and employers would be a small step further. No evidence of that has appeared yet.

The Patrician’s assessment¶

The Patrician notes that this market prices its goods and not its consequences, which is unremarkable, and that the consequences fall on people who hold no contract with anybody in the chain, which is the part no ledger records. The harms that get counted are the ones that resemble crimes. The rest are diffuse, delayed, hard to attribute and borne by people who never learn which transaction produced their afternoon.

He observes that none of this is a forecast. The exposure, the joining, the commercial capability and the government purchases are present now, in a file assembled from free samples by journalists asking politely. The chilling effect, the laundered inference and the archive that improves with age follow from the same machinery. What stays uncertain is not whether the costs are being run up, but whether anybody will ever be in a position to present the bill.