A federal class action lawsuit filed in February 2026 by Protect Democracy and the law firms Dunn Isaacson Rhee and Drummond Woodsum alleges that the Department of Homeland Security conducted extensive social media monitoring and surveillance without completing legally required Privacy Impact Assessments—a violation of both the E-Government Act of 2002 and the First Amendment rights of immigration observers and critics. The suit specifically targets DHS for threatening immigration enforcement observers in Maine with placement on a “watchlist” and labeling them “domestic terrorists” for the lawful act of recording ICE operations.
Table of Contents
- What Does the Class Action Allege About DHS Social Media Monitoring Without Privacy Impact Assessment?
- The Masked Engagement Program and How DHS Surveillance Capabilities Expanded
- The DHS Subpoena Campaign Targeting Immigration Critics
- Legal Requirements DHS Allegedly Failed to Meet and Why Privacy Impact Assessments Matter
- The Difference Between “Monitoring” and Active “Masked Engagement”—A Critical Distinction
- What This Means for Immigration Observers, Activists, and Online Communities
- The Broader Pattern and What Comes Next
What Does the Class Action Allege About DHS Social Media Monitoring Without Privacy Impact Assessment?
The class action alleges that DHS violated federal law by monitoring and investigating social media users without first completing Privacy Impact Assessments as required by the E-Government Act of 2002. This legal requirement exists specifically to ensure federal agencies conduct privacy reviews before implementing new surveillance or data collection programs. The plaintiffs charge that DHS not only skipped this required assessment but actively retaliated against First Amendment-protected activity—namely, the lawful documentation of ICE enforcement operations.
The complaint centers on immigration observers in Maine who were peacefully recording federal agents conducting immigration enforcement. Rather than ignoring their presence, DHS agents explicitly threatened these observers, telling them they would be added to a “database” and labeled them “domestic terrorists” to discourage future documentation. However, DHS responded to these allegations by stating: “There is NO database of ‘domestic terrorists’ run by DHS,” though the agency did acknowledge conducting monitoring and investigations into threats against its officers. This contradiction sits at the heart of the legal dispute—DHS denies maintaining a specific watchlist while admitting to tracking and monitoring social media.
The Masked Engagement Program and How DHS Surveillance Capabilities Expanded
On February 13, 2026, documents leaked to journalist Ken Klippenstein revealed the scope of a DHS/ICE program called “Masked Engagement,” with authorization extending to over 6,500 field agents and intelligence operatives across both agencies. The program’s significance lies not in its existence but in its dramatic expansion of what agents are permitted to do. Under the previous masked monitoring policy, agents could only passively observe—viewing public posts and public information. Critically, the old policy explicitly prohibited agents from asking group administrators for entry into closed groups or directly “friending” targets using false identities.
The leaked documents show that these restrictions have been removed. Agents operating under the Masked Engagement program can now actively interact with social media users under false identities, send friend requests, join closed groups, and access private posts, photographs, and friend lists. This transformation from passive observation to active infiltration substantially changes the nature and risk profile of the surveillance. A person posting about immigration concerns in what they believed was a private group may not realize they are communicating with a federal agent operating under a false account—a capability that the previous policy explicitly prohibited.
The DHS Subpoena Campaign Targeting Immigration Critics
Beyond the Masked Engagement program’s direct infiltration tactics, documents and reporting from 2026 reveal that DHS issued “hundreds of administrative subpoenas” requesting personal data about social media users critical of ICE. These subpoenas target names, email addresses, phone numbers, account identifiers, and other identifying information. Tech companies including Google, Meta (which operates Facebook and Instagram), Reddit, and Discord have all received these subpoenas.
This subpoena campaign reveals a pattern of surveillance directed at a specific category of speech: criticism of immigration enforcement. The fact that these requests are issued by an agency that also runs an infiltration program creates compounding privacy concerns. An individual critical of ICE policies may not only risk having their social media activity monitored and investigated through Masked Engagement but also face administrative action to identify them. For those who value anonymity when discussing politically sensitive topics, learning that DHS is systematically requesting identifying information from tech platforms adds another layer of legal jeopardy.
Legal Requirements DHS Allegedly Failed to Meet and Why Privacy Impact Assessments Matter
Federal law, specifically the E-Government Act of 2002, requires agencies to complete Privacy Impact Assessments before implementing systems that collect, maintain, or disseminate personal information. These assessments are designed to ensure that agencies evaluate privacy risks, consider less intrusive alternatives, and document their reasoning before deploying surveillance systems. They are not bureaucratic red tape—they are a legal safeguard intended to prevent exactly the kind of broad, undefined surveillance that the class action alleges DHS deployed. The precedent for this requirement comes from the 2019 EPIC v.
DHS settlement, in which DHS suspended its Media Monitoring Services program after legal action. That program, solicited in April 2018, sought to build an “media influencer database” collecting journalists’, bloggers’, and social media influencers’ locations, contact information, employer affiliations, and coverage history. When challenged, DHS was forced to cease the program and acknowledge the legal requirement to conduct Privacy Impact Assessments. The class action argues that DHS has repeated this same pattern—deploying surveillance capabilities and then retroactively claiming the program was authorized—rather than completing required legal reviews beforehand.
The Difference Between “Monitoring” and Active “Masked Engagement”—A Critical Distinction
DHS’s public position that there is “NO database of ‘domestic terrorists'” and its acknowledgment that it does conduct monitoring appear contradictory only if you assume both statements refer to the same activity. The agency may technically be correct that it does not maintain a single master watchlist called “the domestic terrorist database,” while simultaneously maintaining dozens of smaller monitoring and investigation files organized by topic, location, or social media platform. This distinction matters legally because it allows an agency to claim compliance while describing a fragmented but equally comprehensive surveillance apparatus.
The Masked Engagement program exemplifies this fragmentation. It is not a single database but rather authorization for 6,500+ agents to create fake accounts, monitor users, and file reports individually. From the user’s perspective, however, the practical effect is indistinguishable from a centralized watchlist: their activity is monitored, recorded, and investigated without their knowledge or consent. The class action challenges this distinction, arguing that the legal definition of “surveillance program” should turn on what the agency does and its impact on individuals, not on how neatly the agency files its paperwork.
What This Means for Immigration Observers, Activists, and Online Communities
The practical implications extend beyond abstract legal principles. Immigration observers who document ICE enforcement have become a target of explicit retaliation—DHS agents directly threatened the Maine observers with surveillance and false terrorist labels. Activists discussing immigration policy in online forums may have their communications monitored by federal agents operating under false pretenses. Individuals critical of ICE on social media may become subjects of DHS administrative subpoenas.
The combination of these three activities—direct intimidation, infiltration of online spaces, and systematic data requests—creates an environment in which First Amendment expression becomes riskier. Communities organizing around immigration issues face an additional layer of exposure. If a closed Facebook group or private Discord server discussing immigration policy contains even one infiltrator using a Masked Engagement account, conversations that participants believed were confidential are accessible to DHS. Members may be identified through subpoenas and contacted by investigators. This environment of surveillance and potential retaliation has a chilling effect on speech—people self-censor not because a law forbids their expression but because they fear consequences of monitoring and targeting.
The Broader Pattern and What Comes Next
The DHS social media monitoring dispute reflects a broader pattern in which federal agencies implement surveillance capabilities, face legal challenges, suspend programs, and then deploy similar capabilities under new names or through different organizational structures. The EPIC lawsuit forced DHS to suspend the Media Monitoring Services program in 2019, but the Masked Engagement program—authorized to 6,500 agents just years later—accomplishes many of the same objectives with expanded technical capabilities.
This class action may force DHS to undergo the Privacy Impact Assessments it should have conducted before deploying Masked Engagement, or it may establish that such assessments are required before active infiltration of social media spaces. Either way, the outcome will shape what DHS and other federal agencies can legally do with social media monitoring going forward. In the near term, if you are engaged in First Amendment-protected activity involving immigration enforcement—documenting ICE operations, discussing immigration policy online, or participating in activist communities—understanding that you may be monitored by federal agents using false identities is essential context for assessing your own risk.