Well done. Here's hoping the state is once again a trend-setter.
The core principle here is that collection of data about people needs controls over it: who can do it, under what circumstances, for what reasons, who can then access the data, and how long the data is kept. That all makes sense to me.