You need a framework for sensitive data collection/usage. Auto-fix does not seem like a comprehensive approach.