The US should first implement an equivalent to the GDPR that puts a stop to the ongoing abuses of the current identification systems. After we see that is working, then we can talk about increasing the technical strength of identification systems.
Uh, okay? I wasn't talking about "good guys" but rather a way to reign in the abuses that are already occurring even with our rudimentary identification systems.
