> But the point here is that there's data that shouldn't be collected in the first place
I just don't think that's feasible. The cat cannot be put back in the box (so to speak).
I think the solution goes more in line with open transparency. Yet individual privacy is really important.
The only way through, I think, is to guarantee individual privacy but enforce institutional transparency.