I think we may be agreeing?

I'm in favor of pushing for police departments (and really any governmental body with access to any kind of data) to have regulations around access to that data, access controls to restrict illegitimate access, and monitoring to detect improper access by people who do have legitimate access but don't follow the proper regulations.

I think you're correct that we don't tend to see the instances where improper usage occurs, tautologically because those entities aren't doing their homework on the above.