I think this is the right framing. Treat user data like pollution. If you leak it or accidentally share with others, put a big enough fine. Have strict rules ar

I think this is the right framing. Treat user data like pollution. If you leak it or accidentally share with others, put a big enough fine. Have strict rules around safe procedures and handling of the data, and sanction companies for violating them. Make the cost of keeping data high enough that they would stop frivolous collections.