In Appearance Before Congress, Bruce Schneier Raises Concerns About DOGE Data Handling Practices

In his testimony, Schneir outlined what he called a “DOGE approach” to data handling, with four distinct features:

• Data consolidation: Exfiltrating and connecting massive U.S. databases to create a single pool of data covering all citizens.
• Reduced security protocols: Removing access controls and audit logs, creating unmonitored copies of data, exposing highly sensitive data to cloud-based tools, seeking maximally permissive data access waivers, and eliminating previously required security protocols for vetting staff.
• AI training and processing: Using AI tools to process data outside of carefully monitored environments.
• Outsourcing: Transferring control over data access to private companies.

Taken together, Schneier argued, these steps have already caused significant damage to the data security of the federal government.