Comment by analog31

I'd go further, with a ban on possession of the data, with a provision for statutory damages.