Uncontrolled access to data, with no audit trail of activity and no oversight would be going too far. This applies to both commercial and government use of data about people.
I think if I had to do it over again, I'd do it the same way. I would just put more resources into getting the public diplomacy part much stronger than we were able to.
Nobody - myself included - believes that we could ever achieve total information awareness. But the government needs to set goals and long-range objectives. Total information awareness is a good goal.