Historically as one of the safest countries in the world and a dictatorship its recent past, it's surprising how in Portugal, in a matter of 15 years had narrative around surveillance shift from skepticism to full endorsement across all large political parties. We'll cover how the GDPR screwed up privacy in Portugal and how the law effectively gags the data protection authority, among other outrageous examples. We'll share some of our initial efforts in a data analysis project to correlate public contracts with deployed surveillance systems and we welcome ideas / lessons from others who've engaged in similar initiatives.