Not really sure how - just posing that as an ideal for not punishing those who do not have that business model. I suppose the regulation could be on the subseq

Not really sure how - just posing that as an ideal for not punishing those who do not have that business model. I suppose the regulation could be on the subsequent sharing/sale of user data upon capturing it, rather than the initial data collection?