> This bullshit stops only when laws are on the books Absolutely. Handling personal data[1] absolutely must carry liability. If you move customer data as a bla

> This bullshit stops only when laws are on the books Absolutely. Handling personal data[1] absolutely must carry liability. If you move customer data as a black box, common carrier style, then your liability can be limited to a refund. If, on the other hand, you inspect the data in any way, then you're liable for that happens to and everything derived from that This idea that companies can gather all the data they want without any consequences for mishandling that data is patently unethical. [1] all personal data, not just "personally identifying information". 2nd and 3rd parties do not get to make the decision about what data is important.