Surveillance anxiety in the AI privacy conversation has shifted from 'who has my data' to 'who can see me, in what resolution, and who controls the threshold for acting on it.' The James Scott framing — that digital records make society legible to machines [10] — has become the conceptual anchor for a set of concerns that compliance frameworks cannot address. Privacy policies govern data collection; they do not govern what can be inferred from behavioral patterns that were never collected as data. The [AI systems that derive private facts…