Who makes the rules about how long these records can be stored and so on? Do citizens have a say? I feel I’d be ok with this as long as the data was used once for a quick criminal check or whatever and then discarded. Of course, we need strong verification that the data is really deleted.
Absolutely. This is the real problem. It's not bad that they came up with such a system. It's that they haven't thought it through so it's ripe for abuse. There definitely need to be safeguards in place before it's actually implemented that spell out what can and can't be done with the data, who has access, how long it will be retained, etc.