Pervasive Surveillance Without Judicial Oversight

This provision requires logging of every data access, transmission, or modification through the platform with 5-year retention—creating comprehensive surveillance infrastructure without proportionality safeguards. The Authority may access logs and "require submission" to "support investigations" (11) without apparent judicial authorization or independent review. The uniform retention period applies regardless of data sensitivity, exceeding international norms (GDPR/OECD typically recommend 1-2 years for routine monitoring). Combined with the bill's provision that this Act prevails over data protection laws in conflicts (34), this potentially overrides privacy protections that would normally require independent authorization for government access to personal information logs. No data subject rights exist to know who accessed their information or challenge improper access.