Quoting this here as a reminder about ways to consider learner analytics
The card’s basic function is to pay for transport. That can be done without centralising that data, so the transport system would have to stop doing so. When it accepts digital payments, it should do so through an anonymous payment system.
Frills on the system, such as the feature of letting a passenger review the list of past journeys, are not part of the basic function, so they can’t justify incorporating any additional surveillance.
These additional services could be offered separately to users who request them. Even better, users could use their own personal systems to privately track their own journeys.
dctr.pro/2ba - Richard Stallman
With a decentralised system you could turn on those functions for you only 😊