> I think it's obvious that the data would not be public domain but stored strongly secured somewhere with very limited access.

That may be an obvious intent, but I do not believe it is obvious the implementation will succeed in achieving those goals. From past experience, it rarely has.