Right, there have to be stringent stipulations that they can only hold the data for a set period of time, it must be deleted and zeroed out in the right way, an

Right, there have to be stringent stipulations that they can only hold the data for a set period of time, it must be deleted and zeroed out in the right way, and they have to make a new request when their license time on it expires. Overall, it's completely feasible, but still a totally new area of consumer protection.