When properly designed and combined with process, policy, and oversight, technology can provide a reasonable balance between security and privacy. The greatest policy challenge is finding themost effective uses of the specific data protection technology-bothfor liberty and security-not in labeling the collection ofinformation as evil.