banning a technology until governance is in place (as several cities have done with facial recognition) - **The default-deny approach** — requiring affirmative approval before a data-intensive technology may be deployed