|
|
|
|
|
by minor_nitwit
4706 days ago
|
|
Not really, as part of making the law - congress needs to go through all possible interpretations and rule out the ones not in the spirit of the law one by one. Then the law is defined by its tests. Is it okay to collect all XYZ data? Is it okay to collect anonymous XYZ data? Is it okay to collect XYZ data and hold it for X days? Is it okay to store and index but not search a collection of XYZ data? The law would end up saying something like - The NSA is permitted to store and index anonymous data for a period of 10 days. Attempts to make anonymous data personal are forbidden. Data may only be accessed with a court issued warrant subject to the following conditions:... |
|
- What lower level of anonymity is acceptable? Is 1 in 30 acceptable?
- What about edge cases where it becomes much lower? Say only one person in a small county has an account to a web service because it is largely targeted at people elsewhere?
- What about academic improvements that keep decreasing anonymity by improving understanding of collected data? What time limit would NSA get to update its systems in case of such improvements? What happens if the speed of academic improvements is larger than the speed of updates in NSA systems? Is the system scrapped right away?
I agree that formal definitions seem lucrative. But these aren't simplified mathematical static models that we are talking about.