Where can surveillance agents actually be stopped: provider, local application or data owner?
Posts here