Absolutely. This is the real problem. It's not bad that they came up with such a system. It's that they haven't thought it through so it's ripe for abuse. There definitely need to be safeguards in place before it's actually implemented that spell out what can and can't be done with the data, who has access, how long it will be retained, etc.