I have worked in IT for decades, much of it covered by laws and regulations that govern how sensitive data is handled - Personally Identifiable Information - PII, and Protected Health Information - PHI. This mass shoveling of all government (and much of the corporate) personal information into the craws of the AI and other data consumers (marketing, crooks, etc.) is abominable. I'll believe that neither this current government (sic) or the corporate consumers are following procedures for handling our information.

Most of my career was as a tech writer with lots being enterprise platforms. It was a big deal to pass government certification. Tons of additional testing and security.

I'm guessing that now it's pretty much "If it's good enough for the private sector, it's good enough for us."

.