Totally agree; we can't leverage good stuff because we are mess.
There are some sorts of protocols and conventions that might help with this.
For example, not-for profit medical systems can hold certain records , then problems are regionally isolated and have extra layers of protection.
Biosignatures, similarly, we may want to only enabling 'matching, and with a warrant' - so that gov may not procure individuals biometrics, but only require a 3rd party lab to do matching, with oversight, process etc.
That would radically limit concentration of of actual power, likelhihood of problems.
If biometric matching companies were liable for failure to implement protocol (aka delete after test) etc - then that's powerful.
Regulations are never perfect, but they work.
Companies can skirt the law - but 99% of the time it's just normal compliance.
The trick is to make regs that don't encourage breaking compliance, and when it happens, the blast radius is limited.
Comments
Totally agree; we can't leverage good stuff because we are mess.
There are some sorts of protocols and conventions that might help with this.
For example, not-for profit medical systems can hold certain records , then problems are regionally isolated and have extra layers of protection.
Biosignatures, similarly, we may want to only enabling 'matching, and with a warrant' - so that gov may not procure individuals biometrics, but only require a 3rd party lab to do matching, with oversight, process etc.
That would radically limit concentration of of actual power, likelhihood of problems.
If biometric matching companies were liable for failure to implement protocol (aka delete after test) etc - then that's powerful.
Regulations are never perfect, but they work.
Companies can skirt the law - but 99% of the time it's just normal compliance.
The trick is to make regs that don't encourage breaking compliance, and when it happens, the blast radius is limited.