Privacy and progress can go hand in hand

For years the conversation about data has been framed as a trade. More sharing means more progress and less privacy. More privacy means safer customers and slower institutions. Pick a point on the line and defend it.

The trade is real only if sharing means copying. It does not have to.

The cost of a copy

Every time a record moves, someone new becomes responsible for it. It has to be stored, secured, retained, deleted, and explained to a regulator. It can be breached, misused, or quietly repurposed for something the customer never imagined. Institutions know this, which is why so many useful collaborations die in a legal review. The answer is “no” not because the purpose is wrong, but because the mechanism is.

Minimise at the source

Permissioned answer exchange starts from the opposite end. The question is fixed in advance. The custodian computes the answer inside its own environment and releases only that: a yes, a no, a bounded value, or an honest “unknown”. A full bill, a statement or a history never leaves.

It is worth being precise about what this is. A yes or no about an identifiable person is still personal information, and nobody should pretend otherwise. This is data minimisation, not anonymisation. But it is minimisation of a very practical kind: the smallest possible fact, for one stated purpose, to one named recipient.

Consent people can actually understand

Minimisation also makes consent meaningful. It is hard to explain “we will share your records with a third party”. It is easy to explain this:

Your utility will tell your bank whether your service is active at this address. Your bills will not be shared.

Good consent happens in a channel the person already trusts, names who is asking and why, authorises one use rather than open-ended monitoring, and can be withdrawn without installing anything. Just as important are the things it must never do: no pre-ticked boxes, no timeouts that count as agreement, and no treating a refusal as a red flag.

Progress that survives scrutiny

When the mechanism is sound, the conversation with risk and legal teams changes. They are no longer asked to approve a data transfer. They are asked to approve a question. That is a decision people can make with confidence, and it is how privacy and progress end up on the same side.