Beginning in 2011, as the emerging market for digital surveillance technology began to attract more attention, it became clear that the relevant export controls, a potential regulatory tool, had become outdated and did not cover these technologies