Fable
A roster kept only for bridge repairs
When the river town built the bridge, it registered residents' names, addresses, and crossing needs. Everyone was willing to fill it in because the purpose was clear: arranging temporary ferries and construction notices. Years later, when the town held a market, the chamber of commerce wanted to use this roster to push stall advertisements. The clerk assistant said the data was complete and organizing the list would take only a cup of tea. The residents were furious when they found out. They were not opposed to the market; they had submitted their information to build the bridge, not to have hawking follow them to their doorsteps.
The mayor first added a line at the end of the notice: "Information may be used for other matters." This did not solve the problem; instead, it made all later registrations untrustworthy.
The town re-established the rule: when collecting material, state the specific purpose, and subsequent use must be checked for compatibility; if incompatible, new grounds, new consent, or new collection is required.
The document register was also given purpose labels. Bridge repair materials could only serve construction notices, traffic arrangements and legally required retention, and could not be casually sent to marketing, profiling or training newcomers.
Later, when the chamber of commerce needed to contact residents, they switched to a voluntary sign-up form. Fewer people signed up, but trust was preserved.
The chamber of commerce was not reconciled and proposed running the advertisement only once. The mayor still did not agree. He had the chamber re-post a notice recruiting people willing to receive market news, keeping only bridge repair follow-up on the old roster. Later, fewer people signed up, but no one doubted anymore that the ferry notices carried hidden sales pitches.
Later, when the town built another canal, the first line of the registration form stated the purpose and duration. Seeing that the old roster had not been taken away and sold, residents were more willing to fill in the new form. Trust is not won by a broad notice, but by honoring the agreed boundary every time data is used. The mayor also had the clerk regularly purge expired rosters. Once the bridge was finished and the aftermath settled, whatever could be deleted was deleted, and whatever had to be kept came with a stated reason. Only when residents saw that their data had a destination and an endpoint were they willing to keep cooperating with public affairs. This boundary later became the first rule of registration affairs in River Town.
The mayor understood: once you get the material, it doesn't belong to you forever. The boundary of use must follow the material; being able to use it does not mean you should.