“Legislative response to surveillance concerns is framed with measured, regulatory language rather than alarm.”