by Michael Hollister
Exclusive published at Michael Hollister on July 12, 2026
4.622 words * 24 minutes readingtime
For a compact entry into the topic: the briefing accompanying this analysis summarizes the four central developments in ten minutes of reading time:
Five Good Purposes – and Three Documented Contradictions
Let us imagine an ordinary EU citizen. Let us not call him by name – he could be anyone. He drives a new car. He owns a mobile phone. He uses WhatsApp. He has a bank account. He reads news on the internet. Nothing extraordinary. Nothing suspicious. Everyday life in the European Union, in the summer of 2026.
What would an interested party know about this citizen if it consolidated all available systems?
It would know when he leaves the house in the morning and when he returns in the evening. It would know how long he drives, whether he becomes drowsy, where his gaze wanders – and who is sitting beside him in the passenger seat. It would know where his phone has been for the past six months, accurate to the cell tower, one data point every ten minutes. It would know who he communicates with and about what, because his messages may be scanned automatically by platform operators – as of today, July 09, 2026, once again officially and legally. It would know which accounts he holds, at which banks, and where his money sits. And it would know who he is – with official certainty, linked to his identity card through a digital identity infrastructure currently being rolled out.
None of this information comes from a surveillance program. None was ordered by a court. Every single piece arises as a byproduct of a measure with a good, comprehensible, indeed: unassailable purpose. Road safety. Crime prevention. Child protection. Counterterrorism. Tax fairness. Whoever argues against any of these measures appears to oppose the goal it serves. That is precisely what makes the constellation so effective – and so difficult to criticize.
The infrastructure that enables this profile exists. Not as a plan, not as a draft, not as a conspiracy theory. But as a regulation, as installed hardware, as enacted law. The individual systems were created independently of each other, for different purposes, by different institutions. Combined, they yield a profile that, in scope and depth, corresponds to what intelligence services compile on target individuals – with the crucial difference that it does not concern individual suspects but potentially every citizen of the European Union.
This article unrolls the profile in reverse. Layer by layer. Five measures, five dimensions, one overall picture. No assertions. Only regulatory texts, manufacturer statements, court rulings, and incidents that have already occurred.
Layer 1: The Car – The Interior Camera
Since July 07, 2026, every newly registered passenger car, van, truck, and bus in the European Union must be equipped with an infrared camera in the interior. The system is called Advanced Driver Distraction Warning – ADDW for short. It captures the driver’s eye area and head position, evaluates them in real time, and warns when distraction is detected. Above 31 mph, the system engages after 3.5 seconds; between 12 and 31 mph, after six seconds. The warning is visual, auditory, or haptic – such as a vibration in the steering wheel or seat. Deactivation is possible, but the system reactivates automatically after every engine start. Since July 2024, drowsiness detection, intelligent speed assistance, autonomous emergency braking, and lane-keeping assistance have already been mandatory in all new vehicles. ADDW is the final stage in this chain.
The legal basis is EU Regulation 2019/2144 on general vehicle safety, further specified by Delegated Regulation 2023/2590. The declared goal: to reduce the number of road fatalities to zero by 2050 – the EU Commission’s “Vision Zero.” Section 2.3.1 of the regulation explicitly stipulates that the system may not collect biometric data. No facial recognition for identification purposes. No storage of images. The data are to be processed locally within the vehicle and must not leave it. The type approval tests whether the warning system functions – whether it warns upon distraction, whether the warning comes in time, whether it reaches the driver. But it does not systematically test whether the camera stores data during operation, whether it recognizes faces, or whether the data actually remain within the vehicle.
That is the assurance. Here is the reality.
What the manufacturers say
The Belgian broadcaster VRT surveyed seven automobile manufacturers in June 2026 – representing the ten best-selling brands in Belgium – about their specific handling of ADDW data. The answers reveal a systematic contradiction with the regulation.
Volvo stated it processes the data in real time on “secured servers” within a “worldwide digital infrastructure” – explicitly outside the vehicle. Renault stated it uses personal data for the “improvement of products and services,” with the transfer to partners occurring in a “controlled” manner – what “controlled” means in this context was left open. Mercedes-Benz did not directly address the specific ADDW question but confirmed that since July 2025 it has been using image and sensor data from customer vehicles to train its driver-assistance systems. No response was available from the remaining manufacturers surveyed at the time of VRT’s reporting.
The regulation says: data stay local. Volvo says: data go to external servers. Mercedes says: we use image data from customer vehicles for training purposes. Renault says: we share data with partners. This is not a matter of interpretation. It is a documented contradiction between assurance and practice – confirmed by the manufacturers themselves, in response to a direct inquiry from a public broadcaster.
Sofie Royer, professor of IT law at VUB Brussels and KU Leuven, names the structural problem: the data protection authorities that should be overseeing compliance are chronically overloaded and understaffed. A legal prohibition alone does not prevent misuse – it requires functioning oversight. And that is lacking. The regulations moreover do not clearly define how judicial requests for ADDW data are to be handled. A Belgian court already used data from an on-board computer – not from a camera, but from the vehicle system – as evidence in a fatal accident case in 2017. The precedent exists.
That the data are not secure has been proven
In December 2024, the Chaos Computer Club, in cooperation with Der Spiegel, uncovered a massive data leak at VW’s software subsidiary Cariad. 807,357 vehicles of the Volkswagen, Audi, Skoda, and Seat brands were affected. 9.5 terabytes of data sat on an Amazon cloud storage – largely unprotected. Among them nearly 900 million geocoordinates from the period December 2022 to September 2024. For 460,000 vehicles, location data accurate to within four inches were retrievable – the complete movement profiles of the vehicle owners, over nearly two years. Identifiable among them were 35 electric patrol cars of the Hamburg police, vehicles belonging to members of the Bundestag, and cars regularly parked in the vicinity of the Federal Intelligence Service (BND) in Pullach. CCC spokesman Linus Neumann commented that such a dataset “should not exist at all.”
VW stated the data served the improvement of battery and charging software. The company emphasized that it did not internally merge the data in a way that would create movement profiles of individual persons. The CCC proved the opposite: linking the geodata with the stored contact data – name, email, in some cases mobile number and date of birth – was possible. Nadja Weippert, the Greens’ data protection spokesperson in the Lower Saxony state parliament, had her data analyzed and said she was “deeply shaken” – the location data showed her visits to the state parliament, to her physiotherapist, to local facilities in her community. A complete movement profile of her everyday life.
The look ahead shows where the development is heading.
The EU Commission has announced it will develop requirements by July 2027 that “follow the technological progress of ADDW systems.” This includes the detection of cognitive distraction – that is, mental states that cannot be measured through gaze direction alone. What this means for the camera’s functional scope is obvious: the hardware that would enable such an expansion is already installed. Full-HD camera, integrated AI, infrared capability – facial recognition, biometric evaluation, identification would technically be one software update away. The regulation says: “May not.” But it does not say: “Cannot.”
Layer 2: The Phone – 35,831 Data Points in Six Months
In the summer of 2009, Malte Spitz, then a member of the federal executive board of Alliance 90/The Greens, sued Deutsche Telekom for the release of his data retention records. After a half-year legal battle – including a lawsuit before the local court and an intervention by the Federal Constitutional Court, which halted data retention in March 2010 – he received a CD with 35,831 rows. Each was a report from his mobile phone to Telekom. Location, time, duration of connections, data volume, cell tower ID. Six months of his life, August 2009 to February 2010, in a spreadsheet.
ZEIT Online and the data team OpenDataCity turned it into an interactive map that became the project “Telltale Mobile Phone” and won the 2011 Online Journalism Award – the first German project in the award’s history. The visualization made visible what the abstract debate over data retention had never managed: you could play back Spitz’s life. Where he set off in the morning, where he spent the day, when he came home, which cities he visited, how long he stayed. The phone checked in with a cell tower every ten minutes to look for new emails. At that interval, it sent and received data. Since the device was rarely switched off, 78 percent of his movements were captured. Spitz had the numbers of his contacts removed for privacy reasons – but they were contained in the raw data and would have been fully accessible to law enforcement. The result, in Spitz’s own words, was a “crystal-clear protocol of my daily routine, including habits and preferences.”
That was 2009. With 2009 technology. Seventeen years have passed since then. Mobile phones no longer check in with a cell tower every ten minutes – they are permanently connected, via cellular and Wi-Fi simultaneously, often additionally via Bluetooth and near-field communication. The accuracy of location determination has multiplied. GPS, Bluetooth beacons, Wi-Fi fingerprinting, ultra-wideband – a modern smartphone can be located to within a few feet, indoors included. What in 2009 was a dataset with a resolution of ten minutes would today be a real-time stream with a resolution of seconds. The contacts that Spitz had filtered out would today be vastly more revealing – not just the phone numbers but the entire digital communication of a permanently connected device. And the question of data retention in the EU is not resolved but in limbo.
The European Court of Justice declared the EU Data Retention Directive invalid on April 08, 2014 – because the blanket retention of all communication data of all citizens violates the EU Charter of Fundamental Rights, in particular the right to privacy and the protection of personal data. The retention of all data of all citizens, the court ruled, was disproportionate. Since then, the legal landscape across member states has been a patchwork. Some continue to retain, others have abolished the retention obligation, still others have implemented restricted rules. The EU Commission is again planning a harmonization act. The independent Meijers Committee, an association of legal scholars, warned in a January 2026 opinion against a relapse into the mass collection practice the ECJ had already declared incompatible with fundamental rights. The committee also warned against discrimination and profiling, against the introduction of rules for decrypting communications, and against the uncontrolled use of AI for filtering and correlating evidence.
What was readable from 35,831 data points in six months about a single person – with a device that checked in every ten minutes – is today, from a technical standpoint, possible in vastly greater detail. The question is who gains access to this data. The answer is currently being negotiated in Brussels.
Layer 3: Communication – Rejected Twice, Then Pushed Through
On July 09, 2026 – today – the European Parliament passed the so-called chat control in an expedited procedure. The chronology of this process is in itself a finding. It shows how a measure that has already been rejected can nonetheless be pushed through via procedural tricks, scheduling, and reversal of the burden of proof.
The backstory: Since 2021, a temporary derogation regulation – Regulation (EU) 2021/1232 – permitted operators of messengers, email services, and cloud storage to voluntarily and automatically scan private messages for depictions of child sexual abuse. The regulation was expressly designed as a temporary transitional measure. It expired on April 03 or 04, 2026.
In March 2026, the European Parliament rejected an extension of this transitional regulation – by a clear majority of 311 to 228 votes with 92 abstentions. The SPD rapporteur spoke against it, the Justice Committee had already voted against a compromise proposal, civil society welcomed the result. The matter appeared democratically decided.
Then came the emergency motion. On July 06, 2026, MEP Martin Sonneborn attempted in the plenary in Strasbourg to point out to Parliament President Roberta Metsola that the planned expedited procedure violated Parliament’s rules of procedure. Metsola had previously told the press that everything was in order. When Sonneborn tried to explain it to her in the plenary, she cut his microphone after exactly 60 seconds. On July 07, Parliament voted 331 to 304 with 11 abstentions to initiate the expedited procedure.
The procedure itself was constructed to reverse the burden of proof. Not a majority of MEPs had to vote for chat control – instead, 361 MEPs had to actively vote against it to stop it. A qualified majority as a blocking minority. The vote fell on July 09 – the last plenary day before the summer recess. Numerous MEPs were already on their way to vacation at that point. Independent MEP Friedrich Pürner commented: “Just before the summer break – while everyone is packing their swimsuits and eyeing the World Cup – the Parliament President sneaks the topic back onto the agenda.”
The result: 314 MEPs voted against chat control. 276 in favor. 30 abstained. The required blocking minority of 361 opposing votes was not reached. Chat control thus applies until April 2028 – two full years. An amendment by the Renew Europe group intended to exempt end-to-end encryption was adopted – how this is to be technically implemented remains unclear. Technically, such a separation is, in the view of numerous experts, not cleanly feasible. The major U.S. platforms – Google, Meta, Microsoft – continue scanning regardless, by their own account, independent of the EU legal situation.
In the background, the CSA Regulation – often referred to as Chat Control 2.0 – is proceeding and could go significantly further. In the fifth trilogue round on June 29, mandatory client-side scanning was removed from the current draft, but negotiations continue. The next trilogue is scheduled for September 29. The permanent regulation could compel providers to scan against their will – including encrypted communication. Even Italy, while voting for the current text, filed a formal warning about the risks of mass surveillance. The EU Council’s Legal Service had previously expressed concerns that voluntary scanning measures could conflict with the EU Charter of Fundamental Rights.
What chat control adds to the profile is the most intimate of all dimensions – private communication. The interior camera knows where someone physically is. The retention data know where his phone was. Chat control knows what he says – and to whom he says it.
Layer 4: Identity – An App That Ties It All Together
In May 2026, the author analyzed in the article “The Protection App That Protects Nothing” the EU Commission’s age verification app – a system that officially aims to protect minors from age-inappropriate content on the internet. The app is supposed to operate on the “zero-knowledge proof” method: age is verified without passing personal data to the platforms. The user scans their ID card, receives a token – the platform learns only whether they are of legal age or not. That is the promise. The results of the independent review are of central importance for the context examined here, because they show the same pattern as ADDW: assurance and reality diverge – and the rollout continues regardless.
IT security consultant Paul Moore publicly and verifiably demonstrated: the app’s PIN protection could be bypassed by simply editing a local configuration file in two minutes. No hack, no special tools, no brute-force attack. The component that issues and signs the age certificate cannot cryptographically verify whether the ID check on the device actually took place – it signs based on a claim, not on evidence. The only clean way to close this gap would be to transmit the ID data to the server – precisely the information the system supposedly never sees. The fix destroys the privacy promise. Moore called the subsequent patches “security theater” and judged the problem was not fixable through code – it was a design flaw. A design flaw in an app that was developed over more than a year, by T-Systems and Scytales, under a two-year contract with the EU Commission.
The EU Commission was informed of the flaws. The response: the rollout continued. On April 29, 2026, a recommendation was issued to all 27 member states to introduce the app by the end of 2026. Seven frontrunner states – France, Denmark, Greece, Italy, Spain, Cyprus, Ireland – stand ready. On May 12, 2026, Commission President von der Leyen elevated the topic in Copenhagen to the next level: an EU-wide minimum age for social media, a possible legislative proposal as early as summer 2026. France already intends in September to force platforms like Instagram and TikTok to block users under 15 and suspend existing accounts. More than 400 security and privacy researchers from roughly 30 countries are calling in an open letter for a moratorium until a scientific consensus on feasibility and the benefit-harm balance exists. Their central objection: no procedure exists that reliably verifies age without violating privacy.
What the app adds to the profile is the key that ties everything else together: official identity. The age verification is built on the same specifications as the coming EUDI Wallet – the European digital identity wallet intended to bundle ID card, driver’s license, health data, bank details, and government communications in a single system, with full deployment planned by the end of 2026. Von der Leyen chose her reference model herself: the COVID certificate app. You download the app, set it up with your ID, present your certificate – and you may go back to the concert, the airplane, life. The comparison is more honest than it was intended: the COVID app was the first successful mass test of a population-wide digital access control system in the EU.
Jurist and former MEP Patrick Breyer has pointed to a mechanism that undermines the zero-knowledge promise not through a hack but through the design itself: if a platform issues a certificate during verification, it receives a number. If the same person uses multiple platforms with the same system, the same certificate number ends up at all of them. Platform operators could then merge user behavior across platforms – without a name, without an address, but with a unique identifier that is the same everywhere. Zero-knowledge in this model means: you don’t know who I am. But you know that it’s me.
The Intelligence Picture: The Combination Is What Matters
In the military, there is a procedure called Intelligence Preparation of the Operational Environment – the intelligence-based preparation of the operational space. It serves to form an overall picture from individual data across different dimensions. No single source delivers the complete picture. But the fusion of different dimensions – position, movement, communication, identity, resources – yields an intelligence picture from which patterns, habits, and predictions can be derived. Who is this person? What do they usually do? What deviates from the pattern? What is to be expected next?
Precisely this intelligence picture is emerging – not for military targets in an operational theater, but for every EU citizen who drives a new car, owns a mobile phone, and uses the internet.
The ADDW camera delivers the biometric dimension – who is sitting in the vehicle, when, for how long, in what physical and cognitive state, and who is sitting beside them. Data retention and cellular data deliver the movement dimension – where was this phone in recent months, what patterns are recognizable, what deviations are conspicuous. Chat control delivers the communication dimension – what is written, to whom, how often, on what topics, in what tone. The EUid and age verification deliver the identity dimension – the key that assigns all other datasets to a real, officially verified person.
Each layer in isolation has a good purpose and is defensible when viewed on its own. No single measure is in itself a surveillance instrument. But that is the essence of the mosaic principle: the individual pieces are harmless. The combination is not. Combined, they yield what intelligence services call a full-spectrum profile – a profile encompassing movement, communication, finances, identity, and behavior. A profile from which one can read not only what someone has done but – through pattern analysis and predictive algorithms – also what they will likely do next.
That technical fusion is possible was proven by the Facebook corporation a decade ago – with the difference that Facebook received the data voluntarily and used them for advertising. That the data in state and private systems are not secure has been proven by two incidents within one year.
In December 2024, the VW data leak: 807,357 vehicles, 9.5 terabytes, nearly 900 million geocoordinates, location data accurate to within four inches – sitting for months, unprotected, on an Amazon cloud storage. Patrol cars, politicians’ vehicles, vehicles in the vicinity of the BND. An Amazon cloud storage, largely without password protection.
In January 2026, the FICOBA incident in France: an attacker gained access to the central bank data register through the compromised login of a single government official. No server was hacked, no firewall breached. One compromised password sufficed. Affected were 1.2 million accounts – bank details, identity of the account holder, address, in some cases tax ID. The fraud potential is considerable: with this data, fraudsters can establish companies, debit small premiums, misuse identities. Michel Guillaud, president of France Conso Banque, called the incident “extremely concerning, because this is the first time that tax files have been accessed.”
What the intelligence picture still lacks to be complete is the health dimension. That comes with the electronic patient record and the EUDI Wallet – both are on the EU Commission’s documented roadmap, with full deployment planned by the end of 2026. Then the profile would be complete: where someone was, who they spoke with, what they wrote, how much money they have, what diseases they have, what medications they take – and who they are, with official certainty. Such a profile would have required months of intelligence work against a single individual twenty years ago – with surveillance, wiretapping, bank inquiries, informant management. Today it arises as a byproduct of measures no one calls surveillance. That is not dystopia. That is the roadmap.
Finding
This article has no thesis the reader is expected to adopt. It has cited regulatory texts, documented manufacturer statements, named court rulings, and described incidents that have occurred. The open questions arise from the findings.
EU Regulation 2019/2144 prescribes that ADDW data must not leave the vehicle. Volvo processes them on external servers. Mercedes uses image and sensor data from customer vehicles for training purposes. Renault shares data with partners. The EU’s age verification app fails at both declared purposes – as an age filter and as a privacy system – and is nonetheless recommended for rollout. Chat control was rejected twice by the European Parliament by clear majorities and pushed through on the last session day before the summer recess via an expedited procedure with reversed burden of proof. The VW data leak showed that 807,357 vehicles sat for months, unprotected, on a cloud storage – accurate to within four inches. The FICOBA incident showed that a single compromised login suffices to expose 1.2 million bank accounts.
Each of these measures has a good purpose. The ADDW camera saves lives – that is undisputed. Chat control is meant to protect children. Age verification is meant to shield young people from harmful content. This article does not argue against any of these.
What it documents is the discrepancy between assurance and reality. Between what the regulations state and what the manufacturers do. Between what Parliament decides and the procedure by which it is decided. Between the promise of “local, anonymous, secure” and the incidents that prove the opposite. Between the good purpose and the infrastructure it leaves behind.
The infrastructure stands. What runs on it is not decided by the technology. It is decided by whoever writes the laws. And laws change faster than hardware is uninstalled.
The technical backstory of the age verification app is covered in the article “The Friendly Bouncer” on the author’s channels. The comprehensive analysis will appear as “The Protection App That Protects Nothing” at www.michael-hollister.com soon.
Support my Work – become a Member
About the Author
Michael Hollister
is a geopolitical analyst and investigative journalist. He served six years in the German military, including peacekeeping deployments in the Balkans (SFOR, KFOR), followed by 14 years in IT security management. His analysis draws on primary sources to examine European militarization, Western intervention policy, and shifting power dynamics across Asia. A particular focus of his work lies in Southeast Asia, where he investigates strategic dependencies, spheres of influence, and security architectures. Hollister combines operational insider perspective with uncompromising systemic critique – beyond opinion journalism. His work appears on his bilingual website (German/English) www.michael-hollister.com and in investigative outlets across the German-speaking world and the Anglosphere.
Sources
Layer 1: ADDW – The In-Vehicle Camera
- EU Regulation 2019/2144 – Regulation of the European Parliament and of the Council of November 27, 2019 on the type-approval of motor vehicles with respect to their general safety: https://eur-lex.europa.eu/eli/reg/2019/2144/oj
- Delegated Regulation (EU) 2023/2590 – Technical requirements for the ADDW system: https://eur-lex.europa.eu/eli/reg_del/2023/2590/oj
- VRT Investigation / Manufacturer responses – “New EU rule: camera monitors driver in the car” (Volvo, Renault, Mercedes-Benz), All About Security, July 2026: https://www.all-about-security.de/neue-eu-regel-kamera-ueberwacht-fahrer-im-auto/
- ADDW since July 07, 2026 – “Driver camera mandate in the EU: What changes in 2026?”, Dr. Web, July 2026: https://www.drweb.de/jeder-neuwagen-in-der-eu-braucht-jetzt-eine-kamera-die-den-fahrer-beobachtet/
- VW/Cariad data leak – “Massive data breach at VW: 800,000 movement data sets unprotected online,” auto motor und sport / CCC / Spiegel, December 2024: https://www.auto-motor-und-sport.de/verkehr/massives-datenleck-volkwagen-meb-nutzerdaten-chaos-computer-club/
- VW data leak – ADAC – “Data leak at VW: 800,000 cars affected,” ADAC, December 2024: https://www.adac.de/news/vw-datenleck/
Layer 2: Data Retention
- Malte Spitz / ZEIT Online – “Data retention: Six months in the life of Malte Spitz,” heise online, February 2011: https://www.heise.de/newsticker/meldung/Vorratsdaten-Sechs-Monate-im-Leben-des-Malte-Spitz-1197178.html
- ZEIT Online – Telltale Mobile Phone – Interactive visualization of the 35,831 data retention points: https://www.zeit.de/datenschutz/malte-spitz-vorratsdaten
- ECJ ruling – Judgment of the Court of April 08, 2014, Cases C-293/12 and C-594/12: https://curia.europa.eu/juris/document/document.jsf?docid=150642
- Meijers Committee – Opinion on harmonization of data retention, January 2026: https://www.meijerscomite.nl/
Layer 3: Chat Control
- Vote of July 09, 2026 – “EU Parliament waves through chat control in expedited procedure,” Junge Freiheit, July 09, 2026: https://jungefreiheit.de/politik/ausland/2026/eu-parlament-winkt-chatkontrolle-im-eilverfahren-durch-nachdem-sie-zweimal-abgelehnt-wurde/
- Expedited procedure / reversal of burden of proof – “Chat control: Parliament paves way for expedited procedure,” Blogspan, July 08, 2026: https://www.blogspan.net/chatkontrolle-parlament-eilverfahren-beweislastumkehr/
- TKP.at – “Chat control and the end of the secrecy of correspondence,” July 07, 2026: https://tkp.at/2026/07/07/chatkontrolle-und-das-ende-des-briefgeheimnisses-eu-killt-grundrecht-der-aufklaerung-im-eilverfahren/
- Netzpolitik.org – “Surprise: Committee votes against voluntary chat control,” March 2026: https://netzpolitik.org/2026/ueberraschung-ausschuss-stimmt-gegen-freiwillige-chatkontrolle/
- Patrick Breyer – Chat control: negotiation status and timeline: https://www.patrick-breyer.de/beitraege/chatkontrolle/
Layer 4: Age Verification / EUid
- Michael Hollister – “The Protection App That Protects Nothing,” May 2026: https://www.michael-hollister.com
- Michael Hollister – “How an App Ends the Anonymous Internet” (Flitzer), May 2026: https://michaelhollister.substack.com
- EUid Regulation (EU) 2024/1183 – Regulation on European digital identity: https://eur-lex.europa.eu/eli/reg/2024/1183/oj
- Patrick Breyer / Europesays – Mechanism of cross-platform certificate numbers: https://www.europesays.com/de/951601/
FICOBA
- FICOBA incident – “FICOBA: les données de 1,2 million de comptes bancaires consultées par un pirate,” Le Monde, February 2026: https://www.lemonde.fr/pixels/article/2026/02/10/ficoba-les-donnees-de-1-2-million-de-comptes-bancaires-ont-ete-consultees-par-un-pirate_6404181_4408996.html
© Michael Hollister – All rights reserved. Redistribution, publication or reuse of this text requires express written permission from the author. For licensing inquiries, please contact the author via www.michael-hollister.com.
