I really believe that we don't have to make a trade-off between security and privacy. I think technology gives us the ability to have both.

It would be ideal if we could have an uncontrolled flow of information. But we realized you can't do that.

I knew from the beginning that privacy was going to be a huge issue, especially with regard to applying Total Information Awareness in counterterrorism. Because if the technology development was successful, a logical place to apply it was inside the United States.

I think if I had to do it over again, I'd do it the same way. I would just put more resources into getting the public diplomacy part much stronger than we were able to.

Uncontrolled access to data, with no audit trail of activity and no oversight would be going too far. This applies to both commercial and government use of data about people.

TIA was being used by real users, working on real data - foreign data. Data where privacy is not an issue.

The problem we were struggling with within the closed market was what the incentive would be. You probably wouldn't use dollars. But those are all questions that need to be explored.