That "just" is holding an enormous weight there, friend. Have you seen the query responses themselves to know whether they're not not getting back bulk info? And have you seen the giant private-public systems they'll want to funnel this info into?
Just from my own research on surveillance, I got back a bunch of records in a FOIA lawsuit that included the the query results of a bunch of license plate scans. Large XML blobs. For whatever reason, they didn't redact a few thousand pages of those query results.
A lot more info was in those query responses than you'd imagine. For example, SSNs of people whose license plates matched the first three digits of a "person of interest"'s car.
Mind you, this was after them arguing for months, with affidavits, that they don't have audit logs. So, yeah.
Just from my own research on surveillance, I got back a bunch of records in a FOIA lawsuit that included the the query results of a bunch of license plate scans. Large XML blobs. For whatever reason, they didn't redact a few thousand pages of those query results.
A lot more info was in those query responses than you'd imagine. For example, SSNs of people whose license plates matched the first three digits of a "person of interest"'s car.
Mind you, this was after them arguing for months, with affidavits, that they don't have audit logs. So, yeah.