IMO the rule should be: release everything unless there are strong arguments, to not release specific data sets. These arguments should be transparent and publicly discussed. Just saying "it affects public security" is not a strong argument. It should be at least said, why exactly it affects the security. However, there are good reasons, to not publish some data sets.

Make all the information accessible but restrict access based on User privileges. If some piece of information like endangered species location is to be known, user must identify himself/herself and then proceed to use the data. Anything happens to the endangered species, you know who all got access to that information. Similarly for other data.

India currently has the so called "right to information" bill. That Bill outlines what information can be withheld. Now using the same bill government should ideally come up with "Duty to report" bill.