I really don't think the proposal goes far enough. Not only should the agency collect and monitor all "leaked data," but it should set clear an detailed regula

I really don't think the proposal goes far enough. Not only should the agency collect and monitor all "leaked data," but it should set clear an detailed regulations on what can be collected, how it must be revealed to the people who it is relevant to ("relevancy TBD"), how it must be removed at the request of those same people, and how it must be amended when (claimed to be) incorrect. Many of these things are already done by other organizations for subsets of data (e.g., the regulations on credit reports). It just needs to be expanded to all kinds of data. Europe is way ahead of the USA on this one. As someone managing the implementation of a lot of the GDPR regulations on data access (e.g., "Subject Access Requests") for a small company, I absolutely wish I as a US citizen had the rights to do this stuff to US companies. But, I don't. Sucks to be an American again. Maybe this can fall under MAGA? LOL