Comment by uoaei

Yes, it is their responsibility as stewards of their citizens' data. What point are you making with the word "should"?