Slimmy has here published her proposal for checkuser accountability.
QUOTE
Users are entitled to be told upon request whether their user name or IP address (if it is static or semi-static) have been checked within the previous six months; they are entitled to be told on what date and by whom the check was performed, and for what reason.
Requests for this information should be made by e-mail to any admin with checkuser access; users must use the e-mail address they have entered in their Wikipedia preferences. If in doubt about the authenticity of the request, checkusers should reply via the "e-mail this user" function. If the request concerns an IP address, checkusers may check to ensure that the editor making the request has indeed been using that IP.
This provision will apply only from the date on which it becomes policy. Earlier requests for information are governed by the previous wording of this section, namely, "Notification to the account that is checked is permitted but is not mandatory."
Notification of the check to the community is not mandatory, but may be done subject to the provisions of the privacy policy.
Requests for this information should be made by e-mail to any admin with checkuser access; users must use the e-mail address they have entered in their Wikipedia preferences. If in doubt about the authenticity of the request, checkusers should reply via the "e-mail this user" function. If the request concerns an IP address, checkusers may check to ensure that the editor making the request has indeed been using that IP.
This provision will apply only from the date on which it becomes policy. Earlier requests for information are governed by the previous wording of this section, namely, "Notification to the account that is checked is permitted but is not mandatory."
Notification of the check to the community is not mandatory, but may be done subject to the provisions of the privacy policy.
Now, there is an amusing D-DOS attack on this: request this information weekly -- or even daily -- and the CUs will spend all their time delivering it. Until, of course, 15 minutes later, when they either ignore you or change the policy. And I suspect that requesting the data is grounds for being checkuser'd!
What do you want to bet that this is one of those rules that exists primarily as a tool for the already powerful, not to protect the innocent?