“Its design actually creates a very large and very dangerous surveillance network,” said Nina Patel of the American Civil Liberties Union, a blunt assessment that frames the clash now unfolding over a bipartisan bill aimed at organized retail theft.
Organized Retail and Supply Chain Crime Coordination Center inside ICE HSI
At the heart of the Combating Organized Retail Crime Act (CORCA) is the creation of an Organized Retail and Supply Chain Crime Coordination Center within Immigration and Customs Enforcement’s Homeland Security Investigations (HSI) division. Supporters say the center would build on HSI’s existing role in addressing transnational and organized criminal activity; a Senate Judiciary Committee spokesperson told reporters the bill “doesn’t give DHS any additional enforcement authorities” and is intended to align existing resources.
Key provisions: criminal penalties, a $5,000 threshold, and data sharing
CORCA would also create criminal penalties for money laundering tied to proceeds from selling stolen goods, and set a $5,000 threshold for the combined total value of stolen property over a year for charging purposes. Critics and backers alike point to the bill’s provisions enabling expanded information sharing between industry and law enforcement. Opponents warn the measure’s language is broad and vague on core terms — including “organized retail crime,” “retailers,” and the kinds of data that can be shared — and that the mechanisms it establishes could be used to transfer retail surveillance data into government hands.
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scrambleCivil liberties and civil rights objections — ACLU and NAACP Legal Defense and Education Fund
Those objections are being led by a coalition of civil liberties and civil rights groups. Nina Patel, senior policy counsel at the justice division of the ACLU, warned that the bill’s “apparatus is concentrated within the Department of Homeland Security.” Jina John, senior policy counsel for AI, privacy and technology at the ACLU, said the text allows data sharing “for any threats related to retail and supply chain crime,” a framing she described as alarmingly open-ended and likely to give DHS access to retail surveillance such as mall cameras, Flock cameras and automated license plate readers.
Spencer Reynolds, senior counsel at the Justice in Public Safety Project at the NAACP Legal Defense and Education Fund, added that ICE’s fusion center has already collated “cell phone location, health and other information,” and that adding retail data could let ICE “hunt down people, find their families and associates, and pull them from their communities.” Reynolds said the agency’s practices in recent years have included racial profiling and that “poor Black and Brown people are likely to feel the impact of this the most.” Kristina Roth, the NAACP LDF’s senior policy associate on criminal legal system policy, noted lawmakers who sponsored CORCA later voted against it on the House floor — evidence, she said, that “lawmakers [are] becoming more educated on the bill.”
Backers’ case — Chuck Grassley, American Trucking Associations, and the National Retail Federation
Supporters characterize CORCA as a targeted tool against large-scale, multi-jurisdictional theft that they say threatens lives, the economy and national security. “My Combating Organized Retail Crime Act is a targeted, bipartisan bill that would crack down on large-scale retail theft by coordinating federal, state and local law enforcement efforts, while aligning existing resources,” said Senate Judiciary Chairman Chuck Grassley, R-Iowa, in a statement.
Industry groups see operational benefits. Alex Rosen, legislative director at the American Trucking Associations, called claims the bill would increase surveillance “nutty,” describing CORCA as creating “a kind of central reporting repository for industry to report high-level crimes” rather than expanding government surveillance authorities. David Johnston, vice president of asset protection and retail operations for the National Retail Federation, pointed to rising cyber-enabled fraud — from gift-card schemes to account takeover and cargo theft involving false personas — and said CORCA could help address the convergence of cyber and physical retail crime. Johnston also emphasized the distinction between HSI and ICE’s Enforcement and Removal Operations division, which focuses on immigration enforcement.
What this means for retailers, HSI, and impacted communities
- Retailers and trade groups (National Retail Federation, American Trucking Associations): Expect to push for a central reporting mechanism to coordinate responses to what they describe as organized, multi-jurisdictional theft and cyber-enabled fraud; they are disputing surveillance-related objections and emphasizing operational coordination.
- Homeland Security Investigations (ICE HSI): Would host the new coordination center and expand information-sharing roles, while a Senate spokesperson says the bill does not confer new enforcement powers beyond HSI’s current purview.
- Impacted communities and civil-rights advocates (ACLU, NAACP LDF): Are watching for broad data-sharing authorities, imprecise definitions and the possible expansion of ICE’s data holdings — outcomes they argue would disproportionately affect poor Black and Brown communities and enable intrusive surveillance.
Legislative trajectory and the choice before Congress
CORCA passed the House in June by a vote of 348-60. Supporters are pressing to include it in the annual National Defense Authorization Act, legislation that lawmakers typically consider “must-pass.” Rosen and other proponents point to bipartisan committee support and the broad House margin as reasons for optimism. Opponents, including Patel and other civil-rights and privacy lawyers, say more work is needed to define terms, limit data sharing, and add safeguards and accountability before Congress hands ICE expanded coordination authorities tied to Main Street retail data.
The decision now is congressional: whether to adopt CORCA as written into defense legislation and, if so, whether to narrow its definitions and data authorities in response to the civil-rights chorus that has formed around the bill. That is where the debate — and the bill’s fate — will be decided.
