These scenarios come from the paper Data Lakes Are a Choice, Not a Necessity. In each, the usual approach builds a database about everyone; the alternative answers the specific question with specific authority.
Emergency medical care
- The need
- Paramedics treating an unconscious patient need allergies, medications and critical conditions in minutes.
- The usual approach
- A health information exchange gives emergency services the patient's complete medical history, and anyone with access can look up anyone. Hospital staff have been caught browsing celebrities' records.
- The alternative
- You carry an emergency credential on your phone or a medical alert device, listing what you and your doctor decide is emergency-critical. Responders scan it, even offline. Wider access goes through a quick authorization or a "break glass" procedure that is logged and reviewed within hours.
Benefits fraud
- The need
- States must stop people from collecting the same benefit twice or under false identities.
- The usual approach
- Merge enrollment, income, household and employment records across every program and match them.
- The alternative
- Each program keeps its own records. When you apply, cryptographic proofs confirm you are not already enrolled under another identity, without revealing your other benefits and without a central registry of everyone who receives help.
Coordinating services
- The need
- People receiving housing, health and job services benefit when agencies coordinate.
- The usual approach
- A shared case-management system compiles every service a person receives, creating a detailed file on the most vulnerable residents.
- The alternative
- You present credentials from one agency to another when coordination helps you. An agency can ask a narrow question, such as "does this person need a housing accommodation?", and get a yes or no rather than a medical history.
Guardianship and parents
- The need
- Guardians must prove they can act for an incapacitated adult. Parents must consent for young children online.
- The usual approach
- Central guardianship registries, often holding sensitive medical findings, and age-verification services that collect data about children across platforms.
- The alternative
- A court issues the guardian a credential stating the scope of authority; services check the court's signature without a registry. Parents hold a credential proving the relationship. Children can prove "over 13" without revealing a birth date or name.
Child welfare investigations
- The need
- Investigators must assess a child's safety using school, medical and prior case information.
- The usual approach
- Integrated systems give caseworkers instant access to entire family histories, including families never accused of anything.
- The alternative
- When a report comes in, a caseworker documents the need and asks specific questions ("any reported injuries for this child in the past year?"). Broader access requires a family court order. Emergencies use logged, immediate access reviewed by a judge within 24 hours.
Criminal investigations
- The need
- Police investigating crimes need records from many sources.
- The usual approach
- Officers query merged records on anyone, without a warrant or a stated reason. This is the general warrant in its purest modern form.
- The alternative
- Investigators develop probable cause and a judge issues a warrant, encoded so that systems release only the records it names, for the person and period it names. Emergencies allow immediate access with review within 48 hours. Every query is logged, and defense lawyers can see the log.
The pattern is the same each time: answer the specific question, with specific authority, and keep a record. That is what the Fourth Amendment already expects.