I agree, and unless someone in a very large city can tell me otherwise, this seems to be how local government works. Everyone is living off the basis that they

I agree, and unless someone in a very large city can tell me otherwise, this seems to be how local government works. Everyone is living off the basis that they "did they best they knew how", and that seems to remove them from liability. I have seen lots of crazy things over the years, and I believe that erasing any kind of liability based on someone's account of how security works is at best willful ignorance. If we want local government to hold personal data, then we need local government to be responsible with that data. Saying, "I didn't know any better," is not acceptable in 2024 (and really hasn't been for at least a decade or more).