So far, at least in the West, it's mostly private companies that form the "surveillance state" and that use collected data to fuck with people.