I agree public confidence is critical but an honest impact assessment of the actual situation would ham that. Putting together an honest and acceptable impact assessment would have required changes to policies (such as "we're going to keep this data for decades and not limit processing to what's required by track and trace"). That would have been high level, taken ages of infighting and the reason it hasn't happened is that the required policy changes wouldn't be forthcoming anyway.
Biting the hand that feeds IT
