I've referred frequently during the last few minutes to court oversight. Court oversight, ex post facto oversight, whether by the courts or the OPC, is necessary, but it is far preferable for privacy to be baked into processes that lead to the use of particularly intrusive technology. The benefit of privacy by design or privacy impact assessment is essentially to ensure that the population can be assured that it's not only after the fact that a violation will be found, but that violations will be reduced greatly in number because the right processes have been put in place.
On August 9th, 2022. See this statement in context.