Good points, well made. Especially about the hacking. My only other thought is that a government/organization interested in using/misusing such a database woul

Good points, well made. Especially about the hacking. My only other thought is that a government/organization interested in using/misusing such a database would be willing to invent a pretense. I'm not sure how heavily to weigh the precedent of government surveillance skirting these kinds of protections. I assume that Portland doesn't have a FISA court rubber-stamp equivalent, but I can't know for sure. Either way, I think you're right that adding speedbumps to the process is a good thing, especially for data security. I just hope that people don't consider this too much of a victory, although it is definitely a victory.