retention rules, access rules, and verification of both, are what secure us from abuse. violations should be defined as criminal violation subject to prosecution.

except that where we have this three strikes for civilian criminal activities we should have a one strike and your out for public officials