To quote from my other comment:
> In my view, data can only be protected by its rightful owner. And for that, we need education, not regulation.