One thing to consider is that regardless of original motivations, once data has been collected by any party, that data CAN come into another party’s possession.

One thing to consider is that regardless of original motivations, once data has been collected by any party, that data CAN come into another party’s possession. Maybe the company network is not secure and the data is just stolen. Maybe a disgruntled employee screws them over. Maybe the company is bought out by someone else with different goals. The point is that you can never assume that something will only be available to certain people for certain purposes. Even if you know this at one point in time, things change. Therefore, one must expect and demand the highest security throughout technology stacks, and implement laws to clean up whatever cannot be guaranteed by security technologies.