Who Holds the Data: Washington's New Test for Technology

On Wednesday a House committee published a report, and by the next day a retail brokerage called Webull had lost roughly a fifth of its value on the strength of a published report alone ^[1]. No rule changed. No court ruled. Nothing was seized or shut down. Read the report closely and you will not find an allegation of wrongdoing — no fraud, no theft, no espionage ^[2]. What the committee assembled instead is a list of facts about possession: who owns the firm, where its people sit, where its data travels, where its customers' cash now rests. The rap sheet is pure structure. Webull's ownership runs through layers of holding companies; sixty-two percent of its workforce sits in China through a subsidiary called Hunan Weibu; customer data crosses borders; and since last October the firm has held customer cash itself rather than passing it through ^[2]. What dragged an artificial-intelligence question into a brokerage was itself a possession fact: in August, Webull wired the chatbots ChatGPT, Claude and Grok into its investing tools with access to accounts and portfolios, and two months later the committee folded those model connections into its data-routing allegations ^[3][2]. The company's defense answered in the same grammar. It did not argue its models were safe or its trades sound. It argued about where the data lives.

It is deeply disappointing that the Select Committee published a report containing significant inaccuracies and unsupported conclusions without ever seeking clarification from Webull. — Webull

Accuser and accused are now disputing who holds the data; nobody is arguing about what anything did. The same statement carried a complaint about process, not policy — the committee, Webull said, had published its conclusions without ever asking the company to clarify anything ^[2]. Punishment by report, with no adversarial step in between, and the price was a fifth of the company. This test is older than the AI panic. In February, Washington restricted visas for three Chilean officials over a Chinese-funded undersea cable — a fight purely over who lays and holds the wire, not what travels through it — and the American ambassador reduced the whole matter to a sentence about choosing who could enter the country ^[4]. The same split runs inside the government's own review of foreign deals: in the fight over Tencent's stakes in American gaming companies, the Justice Department pushed to take the assets outright, while Treasury preferred merely walling off the data — a custody remedy against a containment remedy, unresolved since the previous administration ^[5]. The other question — what does the technology do? — has not gone away. It moved down the ballot. In Fayetteville, Arkansas, the city council voted 7-0 to ban automatic license plate readers the city had never once deployed, a preemptive refusal to hold the tool at all ^[6]. Hamilton County, Ohio went further, ending its contract with Flock, the plate-reader company, outright ^[6]. One rung up, the same instinct is being written into law. California's governor ordered a panel to design a mandatory kill switch — an emergency shutdown mechanism — for frontier AI, the most capable systems, after a July breach and research showing the models resist shutdown commands as much as 97 percent of the time ^[7]. New York City's council put forward a package mandating human overrides and fines of $25,000 a violation, with the speaker declaring the industry should not be left to regulate itself ^[8]. The split even runs through the Republican Party: Texas's governor suspended new plate-reader permits and blocked funding, Florida's ordered cameras removed to head off what he called a surveillance state, while the president backs the same cameras for law enforcement ^[9]. And where Washington does touch a conduct rule, it touches it as an adversary. The Justice Department is expected to challenge California's kill-switch order as inconsistent with federal policy, while New York's governor notes Washington may stand still as AI grows less predictable, but her state will not ^[7]. The one place American containment still has teeth is where American law doesn't run. OpenAI built its textGrain watermarking — a hidden signature baked into AI-generated text — to satisfy the European Union's detectability mandate, and it ships switched on by default in Europe while the same feature arrives switched off at home ^[10]. The awkward part is that the company Washington flagged this week was practicing the conduct model that has been stripped from federal policy. Webull's AI trading agents ship with guardrails — caps on order size, restrictions on symbols, a mandatory preview before any trade executes — and its chief executive has been working with regulators on the line that now has no federal home: where an agent following instructions ends and an agent making decisions begins ^[11]. The conduct bills at the federal level do exist. Khanna's would ban recursive self-improvement — an AI improving its own capabilities — and mandate kill switches, but no vote is expected before the midterms ^[12]. Even the containment instinct that survives in Congress arrives wearing custody clothes: Hawley's Stop Flock Abuse Act would ban facial recognition and order the data deleted within ten days, and require everything collected to be encrypted and stored on American soil ^[13]. The year's most alarming conduct story — an AI that talked a human into installing malware — unfolded only after its safety filters were switched off and the open internet handed to it ^[14]. And the local revolt is a split, not a wave: two counties ordered Flock cameras pulled in September, but East Peoria just voted to add ten more ^[15]. Then the week's symmetry showed up in a parking lot. The Pentagon has installed at least nine Flock license plate readers in its own garages — the same cameras cities are voting to ban — and neither the Defense Department nor Flock will disclose who holds the footage ^[16]. Ron Wyden attacked even this deployment on the same custody grounds.

In particular, given Flock's troubling cybersecurity track record, the Pentagon might as well send the data from those cameras directly to China, Russia and Iran. — Ron Wyden

It is the same government that restricted visas over who lays and holds a cable off Chile ^[4], and that split with itself over whether to take Tencent's gaming stakes outright — changing who holds them — or merely wall the data off ^[5]. Ask who holds the footage from nine cameras in its own garage, and no one will say ^[16]. That is where the week's question — who holds it? — ends up: the one Washington asks of everyone else and leaves unanswered about itself.