The Ratchet

There is a chain people draw from the census outward: compelled count → named individuals → population legibility → centralized datasets → analytic power → commercial demand → institutional appetite → lobbying → ever-wider collection → more state and corporate power. The chain is worth taking seriously, because most of its links are real. It is also where this series turns its discipline on a worry it shares — because the chain, drawn as an arrow that only points one way, is a slippery slope: a sequence of plausible steps offered as a single proven one. The census is the legitimacy template for legibility, not the surveillance pipe — but the protection is thinner than it looks (“anonymized” statistical data re-identifies), and the one brake on record is eight years old. The honest reading refuses the false inevitability and the false reassurance: not a destiny, but not defended.

§01 — The chain, stated fairly

State the argument at its strongest, because it deserves it. A modern state must make its population legible — countable, addressable, sortable — before it can tax, serve, or police it. The census is the founding instrument of that legibility. Once a population is legible, datasets centralize; once they centralize, analytic capability grows; once analysis is valuable, a commercial market forms around data; once there is a market, institutions face standing incentives to collect more and retain it longer, and those incentives are lobbied into policy. Each link, taken alone, is observable in the world. The worry is not paranoia. It is a description of a gradient that genuinely exists.

What the chain does next is the move worth examining: it draws an arrow from the first link to the last and calls the whole thing inevitable.

§02 — The legibility template

The census’s role here is best named precisely. In Seeing Like a State, the anthropologist James C. Scott argues that the modern state must simplify a complex society into standardized, countable units to act on it at all — and that this drive to legibility underwrites both the welfare cheque and the surveillance file. The census is the canonical legibility instrument: it normalizes the proposition that compelled disclosure of who and where you are is ordinary, necessary, and benign. That normalization is its real contribution to the chain — not as a conduit of data downstream, but as the cultural and legal precedent that makes population-scale collection feel like a civic good rather than a claim of power. The template is the product; the wider apparatus borrows its legitimacy.

Counter: a precedent is not a pipeline. That the census makes legibility feel normal is an argument about legitimacy, not about where any particular byte of your data goes.

§03 — The wall, and its open windows

The straight-line version skips a real wall — and an honest correction has to skip less of the rest. Your individual census response is confidential by statute: under the Statistics Act, Statistics Canada may not disclose identifiable information, and personally identifiable records are sealed 92 years. Your filled-in form is not handed to the police, the CRA, or any company. That much is true, and the chain ignores it.

But the wall has open windows, and an earlier draft of this case oversold it. The agency still publishes aggregate tables and public-use microdata and performs record linkage — and “anonymized” is not “anonymous.” The foundational result was built on census data itself: Latanya Sweeney showed that 87% of a population can be uniquely identified by date of birth, sex, and postal code alone. A 2019 study put it starker — 99.98% of people can be re-identified in any dataset from just fifteen attributes. The auxiliary data needed to do it is exactly the §04 data economy. So “your data is protected” is itself a brand: the existence of an anonymization procedure offered as proof of safety, when the procedure demonstrably fails. The raw form is locked; the person stays findable — and that is the integration stamp wearing a privacy badge.

Counter: do not credit “anonymized” as a wall. Ask whether the outputs can be re-identified by linkage — and in 2026, for very nearly anyone, they can.

§04 — Where the ratchet actually operates

The ratchet is real; it simply does not run through the census. It runs through the channels with no 92-year seal: administrative records linked across departments; the commercial data-broker economy, which the scholar Shoshana Zuboff named surveillance capitalism — the conversion of human behaviour into predictive product; platform telemetry; and the standing institutional appetite for more. These are where collection expands by default, justified each time by a benign standard — evidence-based policy, better services, fraud prevention — which is the definitional dodge doing quiet work: the sympathetic word licenses the next increment. The chain’s middle is sound. Its endpoints are where it slips: it starts at the wrong instrument (the census) and ends at the wrong modality (inevitability).

Counter: “better services” is a standard, not a limit. For each new collection, ask what it forecloses, who profits, and what would have to be true to stop it.

§05 — The brake that engaged once

There is a brake, and it has engaged — once, visibly, eight years ago. In 2018 Statistics Canada moved to acquire, from nine banks, the financial-transaction records of a sample of 500,000 Canadians. It was the ratchet in the open, where the public could see it. The Office of the Privacy Commissioner opened an investigation; a Senate committee took it up; the public reacted.

This line-by-line collection of information relating to individuals’ banking activities by a government institution could be considered akin to total state surveillance.Office of the Privacy Commissioner of Canada · on the StatsCan banking-data plan · 2018–19

The plan was put on hold and not implemented as designed. That is a real brake — and a narrow one, and it is the only one on the books. It shows the system can stop a flagrant, visible grab. It says nothing about the failure mode that matters more, because that one has no villain to investigate: the quiet re-identification of data already released, advancing every year while the oversight that stopped 2018 sits idle, waiting for a scandal that re-identification never supplies. The brakes run on outrage; re-identification produces none. So the honest reading is not “the brakes work.” It is that a brake engaged, once, against the kind of threat that announces itself — and does not run in the race it is quietly losing.

§06 — The slope, named

Now the move itself, scored. A slippery slope laments a real gradient and then smuggles in an inevitability the gradient does not establish — a series of plausible steps presented as a demonstrated one. It is the same form the series catches the state using in reverse: where the state launders expansion as “better service,” the slope launders a tendency as a destiny. Sympathy for the worry is not a reason to grant the form. Score the chain link by link:

Counter: keep every sourced link; delete the word “inevitably.” What remains is a strong, true, defensible argument — and a to-do list of brakes to hold, every one of them currently being outrun.

§07 — What this does and does not claim

It does not claim the ratchet is imaginary, that surveillance capitalism is benign, that the census can never be abused, or that the firewall is guaranteed forever — walls are repealed, and the 2018 reach shows the pressure is constant. It does not dismiss the chain; §01, §04 and §05 grant most of it.

It does claim this: the gradient toward more collection is real and documented; the census is the legitimacy template for it; the protections are real but partial and lagging — the firewall guards the raw form while “anonymized” outputs re-identify, and the one brake on record (2018) policed a visible grab, not the quiet capability now outrunning it; and an argument that converts the gradient into an inevitability is still a laundered sentence, because inevitability remains unproven. The honest version is not the reassuring one. It is: not a destiny, but not defended — the brakes are losing, which is the reason to hold them, not to trust them.

§08 — Where this sits in the volume

This is the escalation Case 22 deliberately declined to make — picked up here, with the discipline kept. It is the measurement thesis of Vol. I · Case 10 · The Index followed downstream, and it borrows the integration stamp of Case 16 in a new guise: “your data is protected” — “anonymized” — offered as proof of safety, when re-identification quietly voids the protection it advertises. Most of all it is the series auditing its own instincts — applying to a critique it is sympathetic to the same standard it applies to power, which is the only thing that earns the standard. Read through the sentence-level grammar in The Grammar of the Con; the de-nominalization counter here is simple — name who collects, name who profits, and name where the brake is.

The slope is real. The fall is not inevitable — but it is not braked. One brake, in 2018; the wall has open windows; the capability does not sleep.