Here's an idea: - Move all documents to a simple doc server like idk Alfresco - Any any all single read requests to this server are authorized after biometric

Here's an idea: - Move all documents to a simple doc server like idk Alfresco - Any any all single read requests to this server are authorized after biometric confirmation of any parties involved, which are then added to the users' "file". - Any one use of this data that can be construed as malicious carries 4 to 8 years of jail for anyone involved in the chain of custody of the specific bits of misused data. You don't need superstars on the project, you need the right balance of incentives around mucking with it.