Embed Notice

@emilygorcenski
We're not talking about malfeasance like corrupt employees. You can only strive to have audit logging for any access privacy-related.
But if your law framework literally says "This is how we will have you hand over data without any let alone proper oversight", you cannot make the same assertions that you can do if you have a law framework with pretty detailed outlines for permissible causes and how oversight is performed.