So there's lots of talk about how we're going to regulate/manage data protection going forward but what are we going to do about the stuff that is already out t

So there's lots of talk about how we're going to regulate/manage data protection going forward but what are we going to do about the stuff that is already out there? I mean HIV status is a pretty toxic thing to just be floating around. It doesn't seem that we can even be sure who has this data and who doesn't.