The Surveillance Buoy: How California’s Coastal Monitoring Infrastructure Has Become a Surveillance Network

From Lifeguard Drones to Water Quality Sensors to Beach Access Apps, Who Is Collecting Data on California Surfers

Bohiney Magazine | The London Prat

The paddle-out at Rincon Point in late autumn, when the northwest swell is running and the lineup is full, is still one of the most beautiful things in California — the kelp beds, the Channel Islands in the distance, the perfect point break wrapping around the cobblestones with the specific geometry that has made Rincon famous since the 1940s. It is also, in 2026, a monitored experience: the county lifeguard drones patrol the point break on busy weekends, the water quality sensors transmit real-time data to state databases, the parking lot cameras record license plates, and the cell towers capture the location data of every phone in the lineup whether or not its owner is aware of this fact.

The Data Collection Infrastructure

California’s coastal monitoring infrastructure has expanded significantly over the past decade, driven by a combination of legitimate public safety concerns — the drones have saved swimmers — and the general expansion of data collection that characterizes the current technological moment. The water quality sensors that monitor bacterial contamination at beaches are the clearest public good: the information they generate allows surfers and swimmers to make informed decisions about when the water is safe, and the automated notification systems that communicate water quality warnings are a genuine improvement over the previous system of periodic manual testing and delayed reporting.

The license plate readers in beach parking lots are a different category. They were installed nominally to manage parking availability and enforce time limits, and they accomplish these goals. They also create a database of who has been at which beach on which days that has no connection to parking management and that represents a form of surveillance that the people being recorded did not consent to and are not informed about. The data retention periods, the access policies, and the uses to which this data may be put are governed by policies that are not prominently communicated to the people whose movements are being recorded.

The Privacy Surf

The specific vulnerability of surfers to location surveillance is higher than for most recreational activities because surfing is tied to specific geographic locations. A surfer who goes to the same break every day is creating, with their phone and the infrastructure around them, a comprehensive record of their regular movements that is significantly more detailed than the location record of someone whose activities are geographically diverse. The aggregation of this data — in telecom company databases, in government monitoring systems, in the various apps that surfers use for forecast information and that request location access — creates a surveillance profile that the surfer has not consciously chosen to create and that no individual piece of data collection makes obvious.

The Technical Solutions and Their Limits

The privacy concerns raised by coastal monitoring infrastructure have technical responses: end-to-end encryption for data transmission, data minimization policies that collect only what is necessary for the stated purpose and retain it only as long as necessary, access controls that prevent repurposing data collected for one use for unrelated surveillance purposes, and transparency requirements that inform the public about what data is collected and how it is used. California’s Consumer Privacy Act and its successor, the California Privacy Rights Act, provide some of these protections for commercial data collection. The protections are weaker for government data collection, which operates under different legal frameworks and with different enforcement mechanisms. The specific gap — between the privacy protections that apply to Google and the privacy protections that apply to the county parking authority that reads license plates at the beach — is the regulatory asymmetry that a coherent privacy framework would address.

The broader principle that the coastal surveillance discussion illustrates is that the privacy framework that protects citizens from commercial surveillance should apply with equal force to government surveillance. The current legal framework, which gives government actors more latitude than commercial actors in many surveillance contexts, reflects the historical assumption that government surveillance was subject to democratic accountability that would constrain its abuse. The expansion of government data collection infrastructure, and the demonstrated willingness of government agencies to use data for purposes beyond those that justified its collection, has tested this assumption in ways that suggest the democratic accountability constraint is insufficient to substitute for the legal protections that limit commercial surveillance.

For California privacy and freedom analysis: Bohiney Magazine and The London Prat.

The fundamental question for California’s future is whether the state’s political institutions can produce the reforms that would allow it to retain the people, the enterprises, and the economic dynamism that have made it extraordinary, or whether the regulatory and fiscal burden will continue to produce the exit that the exit tax is designed to prevent rather than address. The libertarian answer is clear: reduce the burden, reform the regulation, and trust that people who are free to stay and free to go will stay when the conditions justify staying. California has everything else. The question is whether it can develop the political will to fix what it has broken.

California’s coast and its freedom culture are worth defending precisely because they represent what is best about the state: the natural abundance, the diverse community, the economic dynamism, and the specific form of liberty that comes from choosing to live close to something larger than human concerns. The waves don’t care about regulations. The people who surf them do, and should.

SOURCE: https://bohiney.com/