Yes, and also on things like standards. Explore other mechanisms that aren't just the law. I don't think we can pull this all off within law, particularly not privacy law. There are too many other things going on.
I also think just because you ask specifics, I know in this city case I'm looking at, identifying the data that is critical to public service delivery and planning, that should be hived off as something that we pay attention to and understand how that works.