> Certainly a good first step would be to eliminate any existing rules that require companies to collect this type of information on people. Yeah. That's one p

> Certainly a good first step would be to eliminate any existing rules that require companies to collect this type of information on people. Yeah. That's one place we here in .au are fucking ourselves over. As well our mandatory breach reporting laws, we _also_ have mandatory meta-data retention laws. It you're an ISP (which thankfully I'm not), you are _required_ to retail all you user's metadata...